$ rpki-client -vvf repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft File: CD93E5B741D83CA78E83C5AD92156B086BC05233.mft (raw, json) Hash identifier: TbilQtafCGpPd85rEvNQDykKXQKQgkojJ8wnP4gnRGs= Subject key identifier: DF:92:FF:8F:D3:9B:44:BF:19:8A:6B:49:53:54:CE:99:57:BC:46:D9 Authority key identifier: CD:93:E5:B7:41:D8:3C:A7:8E:83:C5:AD:92:15:6B:08:6B:C0:52:33 Certificate issuer: /CN=CD93E5B741D83CA78E83C5AD92156B086BC05233 Certificate serial: 5A2FDB05CE2F76D5276151709BC24ACCF381E01C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD93E5B741D83CA78E83C5AD92156B086BC05233.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft Manifest number: 0281 Signing time: Sun 29 Jun 2025 19:42:20 +0000 Manifest this update: Sun 29 Jun 2025 19:37:20 +0000 Manifest next update: Wed 02 Jul 2025 23:40:20 +0000 Files and hashes: 1: 3130332e3135382e3139362e302f32342d3234203d3e20313431313333.roa (hash: iJSB4Tl2dCbFuiTRh7IWs9g86a1v/pjGccwQNvmJqM4=) 2: CD93E5B741D83CA78E83C5AD92156B086BC05233.crl (hash: A5tSnZRw5N4eaGmrMtIN3l6i14ARO+tnToDggwZ+1Q4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.crl rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD93E5B741D83CA78E83C5AD92156B086BC05233.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 23:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:2f:db:05:ce:2f:76:d5:27:61:51:70:9b:c2:4a:cc:f3:81:e0:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD93E5B741D83CA78E83C5AD92156B086BC05233 Validity Not Before: Jun 29 19:37:20 2025 GMT Not After : Jul 2 23:40:20 2025 GMT Subject: CN=DF92FF8FD39B44BF198A6B495354CE9957BC46D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:26:c7:72:aa:6d:f9:e8:dd:5c:9d:70:9c:d5: be:d7:bc:6c:00:fe:bd:f6:85:71:0b:68:12:a0:9a: ea:10:97:96:74:0d:30:14:95:b0:f8:57:32:dd:94: 8c:ca:94:e5:5b:a3:c0:52:8b:8e:96:15:d7:79:4f: 36:02:c9:ec:be:87:2d:0f:31:81:29:e1:24:03:65: c5:44:6d:34:81:7c:23:5f:05:82:4f:df:f5:ac:5c: 47:32:21:20:71:9d:62:ec:90:46:1a:72:16:13:7c: b0:70:ef:7e:01:f7:9d:00:9b:b6:ec:c2:24:c9:15: a5:03:87:25:74:bd:e3:7a:d6:34:52:6f:62:49:02: 62:8b:0a:d7:b1:51:b7:68:41:9d:9a:02:d2:59:68: 6d:6a:24:2a:d9:87:81:f0:68:44:ab:2e:f3:50:08: c2:bf:b7:0b:ae:47:1c:62:b2:aa:31:ac:d6:7b:05: 23:55:61:9e:06:3a:ad:1b:03:3e:33:94:5e:d6:e9: 64:ce:3c:cb:4d:38:7b:da:2d:d6:75:d8:74:a6:3d: ca:ab:95:99:48:ba:79:de:85:17:cd:5d:b9:13:94: 64:e7:0e:a0:4c:50:c6:9f:4a:bd:61:c7:49:65:58: d5:3c:62:1d:d0:0f:c5:ad:c3:32:ff:4f:43:bc:f8: 6f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:92:FF:8F:D3:9B:44:BF:19:8A:6B:49:53:54:CE:99:57:BC:46:D9 X509v3 Authority Key Identifier: keyid:CD:93:E5:B7:41:D8:3C:A7:8E:83:C5:AD:92:15:6B:08:6B:C0:52:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD93E5B741D83CA78E83C5AD92156B086BC05233.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:1e:a6:62:fc:fe:aa:b5:74:51:d8:3e:ef:df:76:16:c6:d9: 64:32:63:ba:3d:42:2c:52:9a:e2:89:70:b6:95:ab:7e:e1:a6: 80:ec:24:30:c3:5b:42:80:58:06:ec:b3:25:35:1c:af:a0:c1: e2:26:42:6e:a2:51:70:e0:ec:b3:8b:52:2d:31:8f:0e:5c:b9: 91:dc:ff:93:dd:70:f2:50:56:1d:4f:6a:ec:7f:e4:86:f9:4f: 4a:46:fb:16:88:43:e4:30:88:a9:73:f1:e4:2b:af:9d:a1:23: 0c:f4:55:d6:5d:5b:88:b1:92:b1:e9:ad:9f:2b:28:61:53:06: ab:c3:9c:c8:7f:30:4d:85:6d:0d:a1:05:e1:47:14:54:61:f4: 6e:8f:2c:8b:8b:d5:19:cc:88:e4:2e:59:b2:a2:dd:3a:ca:55: e1:b5:3f:d3:2d:99:eb:9d:ef:bc:bc:7d:5c:76:9c:a1:ce:a2: 45:c9:34:87:57:f3:aa:9b:fa:25:a4:44:c8:30:cd:02:b4:3f: 15:9b:0f:50:d1:95:10:80:be:b6:63:25:76:dd:57:93:02:ae: bb:f9:2e:d0:22:c4:4d:18:58:68:3c:82:b4:9e:1b:5e:af:15: 40:c6:7b:1a:b1:b8:11:5c:5c:59:9f:4a:3d:88:54:ba:dd:7a: 42:08:cd:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWi/bBc4vdtUnYVFwm8JKzPOB4BwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q5M0U1Qjc0MUQ4M0NBNzhFODNDNUFEOTIxNTZCMDg2 QkMwNTIzMzAeFw0yNTA2MjkxOTM3MjBaFw0yNTA3MDIyMzQwMjBaMDMxMTAvBgNV BAMTKERGOTJGRjhGRDM5QjQ0QkYxOThBNkI0OTUzNTRDRTk5NTdCQzQ2RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcJsdyqm356N1cnXCc1b7XvGwA /r32hXELaBKgmuoQl5Z0DTAUlbD4VzLdlIzKlOVbo8BSi46WFdd5TzYCyey+hy0P MYEp4SQDZcVEbTSBfCNfBYJP3/WsXEcyISBxnWLskEYachYTfLBw734B950Am7bs wiTJFaUDhyV0veN61jRSb2JJAmKLCtexUbdoQZ2aAtJZaG1qJCrZh4HwaESrLvNQ CMK/twuuRxxisqoxrNZ7BSNVYZ4GOq0bAz4zlF7W6WTOPMtNOHvaLdZ12HSmPcqr lZlIunnehRfNXbkTlGTnDqBMUMafSr1hx0llWNU8Yh3QD8WtwzL/T0O8+G//AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU35L/j9ObRL8ZimtJU1TOmVe8RtkwHwYDVR0j BBgwFoAUzZPlt0HYPKeOg8WtkhVrCGvAUjMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmRkY2I0Yi02ZDhlLTQ1OWItOGFhMi05OWE2MDg4NjI1NmEvMC9DRDkzRTVCNzQx RDgzQ0E3OEU4M0M1QUQ5MjE1NkIwODZCQzA1MjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q5M0U1Qjc0MUQ4M0NBNzhFODNDNUFEOTIxNTZCMDg2QkMw NTIzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZkZGNiNGItNmQ4ZS00NTliLThh YTItOTlhNjA4ODYyNTZhLzAvQ0Q5M0U1Qjc0MUQ4M0NBNzhFODNDNUFEOTIxNTZC MDg2QkMwNTIzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALEepmL8/qq1dFHYPu/fdhbG2WQyY7o9QixS muKJcLaVq37hpoDsJDDDW0KAWAbssyU1HK+gweImQm6iUXDg7LOLUi0xjw5cuZHc /5PdcPJQVh1Paux/5Ib5T0pG+xaIQ+QwiKlz8eQrr52hIwz0VdZdW4ixkrHprZ8r KGFTBqvDnMh/ME2FbQ2hBeFHFFRh9G6PLIuL1RnMiOQuWbKi3TrKVeG1P9Mtmeud 77y8fVx2nKHOokXJNIdX86qb+iWkRMgwzQK0PxWbD1DRlRCAvrZjJXbdV5MCrrv5 LtAixE0YWGg8grSeG16vFUDGexqxuBFcXFmfSj2IVLrdekIIzds= -----END CERTIFICATE-----Generated at Mon Jun 30 08:14:07 2025 by rpki-client