$ rpki-client -vvf repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft File: CD93E5B741D83CA78E83C5AD92156B086BC05233.mft (raw, json) Hash identifier: BveAGNUi2ycwNxxB5DixMNz7gfFeiCACZ6fWYxYmQ8I= Subject key identifier: 13:D0:43:E4:0A:10:06:DC:D7:A5:E5:A1:67:BA:03:42:EB:66:7C:35 Authority key identifier: CD:93:E5:B7:41:D8:3C:A7:8E:83:C5:AD:92:15:6B:08:6B:C0:52:33 Certificate issuer: /CN=CD93E5B741D83CA78E83C5AD92156B086BC05233 Certificate serial: 6AD871B65F9CCCBFACA3759395A1C067A8B47B0B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD93E5B741D83CA78E83C5AD92156B086BC05233.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft Manifest number: 0298 Signing time: Thu 21 Aug 2025 08:12:13 +0000 Manifest this update: Thu 21 Aug 2025 08:07:13 +0000 Manifest next update: Sun 24 Aug 2025 18:13:13 +0000 Files and hashes: 1: CD93E5B741D83CA78E83C5AD92156B086BC05233.crl (hash: B36tYtbvEqgXYUnO9B5d3xB9Dzezv0ITDbwaHgtYaQs=) 2: 3130332e3135382e3139362e302f32342d3234203d3e20313431313333.roa (hash: iJSB4Tl2dCbFuiTRh7IWs9g86a1v/pjGccwQNvmJqM4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.crl rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD93E5B741D83CA78E83C5AD92156B086BC05233.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 18:13:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:d8:71:b6:5f:9c:cc:bf:ac:a3:75:93:95:a1:c0:67:a8:b4:7b:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD93E5B741D83CA78E83C5AD92156B086BC05233 Validity Not Before: Aug 21 08:07:13 2025 GMT Not After : Aug 24 18:13:13 2025 GMT Subject: CN=13D043E40A1006DCD7A5E5A167BA0342EB667C35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:51:10:3c:14:5a:22:e2:7e:aa:5d:c4:21:55: a0:6d:d1:a3:10:71:ce:22:e7:3b:c0:2d:54:03:67: 6e:b0:41:e8:82:79:21:a6:2c:56:4d:fd:35:b8:0b: db:56:e1:c9:05:28:c5:44:ea:e5:1c:64:40:75:11: de:07:88:1b:7b:48:3d:f7:41:00:42:86:4a:7a:bb: 8f:2f:af:19:1b:26:f8:63:df:81:25:90:ed:00:ca: 51:05:5b:f1:59:6c:47:c7:39:74:95:33:26:c9:80: 6f:f2:96:05:8c:21:fe:f3:65:fe:a8:97:ce:dc:dc: a6:c5:9c:47:24:d9:26:cf:0e:d2:63:05:c0:7c:c6: 80:96:65:98:ce:91:87:62:a7:6d:be:f4:44:96:72: 7e:44:07:e1:b9:d1:ab:23:53:42:18:56:27:eb:7b: 3b:ca:c4:7d:04:98:62:da:3d:70:49:f2:88:6b:db: b6:4f:56:a1:f9:7d:c3:67:3d:fe:a1:52:66:38:00: a4:d1:9c:21:c6:b5:28:f4:f0:a3:16:cf:43:f4:51: a4:e8:6c:bb:04:9f:60:e1:c5:b3:b6:2d:83:fe:d5: 28:1b:f0:61:2b:86:37:e4:91:a1:27:f4:a2:3b:a0: f1:25:27:67:d7:b9:cd:35:18:b4:9e:98:9a:95:f2: 4c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D0:43:E4:0A:10:06:DC:D7:A5:E5:A1:67:BA:03:42:EB:66:7C:35 X509v3 Authority Key Identifier: keyid:CD:93:E5:B7:41:D8:3C:A7:8E:83:C5:AD:92:15:6B:08:6B:C0:52:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD93E5B741D83CA78E83C5AD92156B086BC05233.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:b6:bc:16:1a:49:59:db:f5:84:0d:88:f9:17:93:1a:cc:79: 2f:1c:a4:ab:4e:ec:ab:eb:7f:c4:fe:18:03:90:3a:9f:ac:ce: 67:fe:e5:0b:da:f9:15:8c:ee:50:76:5a:6a:39:d3:e3:10:ba: 39:e6:c3:f4:9a:e2:33:31:33:e0:78:30:20:41:b8:da:f3:9d: 20:9b:39:58:ea:aa:20:a7:43:7f:91:5a:ee:b2:55:82:da:44: 8d:83:8e:2a:bf:f7:5b:10:d7:93:7c:e3:32:e8:0e:ea:dd:a4: d5:56:28:24:fe:9f:0e:ff:62:f2:9e:00:36:aa:fe:d7:45:6a: 3e:b0:c7:40:8b:e8:a0:48:bd:2d:6a:b4:a1:0c:1e:38:79:80: 34:f9:1c:da:ae:24:47:a8:bb:ba:30:78:ec:9b:b2:58:64:a0: 80:43:d8:16:28:51:bf:9f:44:5b:fb:9b:52:e6:1f:2e:e1:1e: 2f:9b:27:a8:14:fe:fa:2f:60:21:8b:d9:05:31:e8:20:c7:e2: a1:c9:ca:a7:78:5f:2c:0f:a1:4d:0a:aa:d3:d2:68:1e:45:1c: d3:54:eb:25:bf:d2:fc:8c:37:fe:69:ed:c3:ec:8d:b9:a5:09: c9:11:ba:07:44:53:03:37:f3:62:ee:4e:c2:8f:b0:f3:3d:85: b3:61:da:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUathxtl+czL+so3WTlaHAZ6i0ewswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q5M0U1Qjc0MUQ4M0NBNzhFODNDNUFEOTIxNTZCMDg2 QkMwNTIzMzAeFw0yNTA4MjEwODA3MTNaFw0yNTA4MjQxODEzMTNaMDMxMTAvBgNV BAMTKDEzRDA0M0U0MEExMDA2RENEN0E1RTVBMTY3QkEwMzQyRUI2NjdDMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0URA8FFoi4n6qXcQhVaBt0aMQ cc4i5zvALVQDZ26wQeiCeSGmLFZN/TW4C9tW4ckFKMVE6uUcZEB1Ed4HiBt7SD33 QQBChkp6u48vrxkbJvhj34ElkO0AylEFW/FZbEfHOXSVMybJgG/ylgWMIf7zZf6o l87c3KbFnEck2SbPDtJjBcB8xoCWZZjOkYdip22+9ESWcn5EB+G50asjU0IYVifr ezvKxH0EmGLaPXBJ8ohr27ZPVqH5fcNnPf6hUmY4AKTRnCHGtSj08KMWz0P0UaTo bLsEn2DhxbO2LYP+1Sgb8GErhjfkkaEn9KI7oPElJ2fXuc01GLSemJqV8kzpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE9BD5AoQBtzXpeWhZ7oDQutmfDUwHwYDVR0j BBgwFoAUzZPlt0HYPKeOg8WtkhVrCGvAUjMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmRkY2I0Yi02ZDhlLTQ1OWItOGFhMi05OWE2MDg4NjI1NmEvMC9DRDkzRTVCNzQx RDgzQ0E3OEU4M0M1QUQ5MjE1NkIwODZCQzA1MjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q5M0U1Qjc0MUQ4M0NBNzhFODNDNUFEOTIxNTZCMDg2QkMw NTIzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZkZGNiNGItNmQ4ZS00NTliLThh YTItOTlhNjA4ODYyNTZhLzAvQ0Q5M0U1Qjc0MUQ4M0NBNzhFODNDNUFEOTIxNTZC MDg2QkMwNTIzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEO2vBYaSVnb9YQNiPkXkxrMeS8cpKtO7Kvr f8T+GAOQOp+szmf+5Qva+RWM7lB2Wmo50+MQujnmw/Sa4jMxM+B4MCBBuNrznSCb OVjqqiCnQ3+RWu6yVYLaRI2Djiq/91sQ15N84zLoDurdpNVWKCT+nw7/YvKeADaq /tdFaj6wx0CL6KBIvS1qtKEMHjh5gDT5HNquJEeou7oweOybslhkoIBD2BYoUb+f RFv7m1LmHy7hHi+bJ6gU/vovYCGL2QUx6CDH4qHJyqd4XywPoU0KqtPSaB5FHNNU 6yW/0vyMN/5p7cPsjbmlCckRugdEUwM382LuTsKPsPM9hbNh2vo= -----END CERTIFICATE-----Generated at Sat Aug 23 14:48:22 2025 by rpki-client