$ rpki-client -vvf repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft File: C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft (raw, json) Hash identifier: z5kTKRrLP0aL1LOZHMB9tQEjnQIzUJbaEv//+3cSdG4= Subject key identifier: 23:23:56:C0:74:02:C8:3F:3F:83:68:E5:B3:BB:38:80:BB:7A:B0:E7 Authority key identifier: C0:CB:50:8F:7D:1A:9E:F9:04:9C:CF:9E:BD:05:96:E7:69:3C:2F:C6 Certificate issuer: /CN=C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6 Certificate serial: 60AD1E844E4FE7F49F582689549F11D9AD5DD288 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft Manifest number: 9A Signing time: Fri 22 Aug 2025 03:42:30 +0000 Manifest this update: Fri 22 Aug 2025 03:37:30 +0000 Manifest next update: Mon 25 Aug 2025 11:28:30 +0000 Files and hashes: 1: 3130332e3231372e3137322e302f32342d3234203d3e20313333333534.roa (hash: 1nHw01smVx1ZOqDKUmuMmLHS8nfmS5SZFRiTVrT39OY=) 2: 3130332e3231372e3137322e302f32332d3233203d3e20313333333534.roa (hash: bcKNAldjHqBfsv/Q+Ly6D1o3ohbtzg70IudkGUDipiI=) 3: 3130332e3233322e33322e302f32332d3233203d3e20313333333534.roa (hash: 4cVYZh3C8hXn171P/RUENb8aKuR+2otEfieTHKUhFd4=) 4: 3130332e3233322e33332e302f32342d3234203d3e20313333333534.roa (hash: IoXihcWrLe60DlpQzVRAOXX3umofZd3ManAso30bXVY=) 5: 3130332e3231372e3137332e302f32342d3234203d3e20313333333534.roa (hash: nUQ2kayi0Rj4NqtUCpruCitWDh+npuC9WG+E5F+Bv9o=) 6: C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl (hash: 7j1hRqZoTBwxgDY+xa2+Vs4x67NJXwswtAN+I6co6I8=) 7: 3130332e3233322e33322e302f32342d3234203d3e20313333333534.roa (hash: rvmmuygSDQqp3VTFfTdTUgUhuWy6VU7o/YE+GwA04qY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 11:28:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:ad:1e:84:4e:4f:e7:f4:9f:58:26:89:54:9f:11:d9:ad:5d:d2:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6 Validity Not Before: Aug 22 03:37:30 2025 GMT Not After : Aug 25 11:28:30 2025 GMT Subject: CN=232356C07402C83F3F8368E5B3BB3880BB7AB0E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:54:a8:b1:2e:30:97:a0:6b:82:14:79:82:a4: 71:57:30:62:89:e4:1b:86:46:a1:1d:40:5e:a0:23: d2:0f:66:41:c6:b4:1a:01:b9:2b:e1:26:fc:6e:2f: 32:a8:6a:62:8c:be:d6:e2:63:4c:3b:dc:06:96:c0: 65:99:bc:23:f5:7f:be:25:e5:b1:92:d5:0d:00:15: d2:58:88:bc:22:d2:4c:df:2b:04:61:14:6b:34:9c: e5:3d:12:34:a8:82:60:e3:01:c9:f9:ee:77:44:31: e5:52:84:64:70:db:31:66:5e:98:28:69:0a:be:3b: 2a:29:0f:a3:91:13:ad:62:10:15:46:7d:8d:c2:b4: 2f:d7:99:da:de:a6:ba:07:14:0d:a6:cd:91:16:1b: d0:2e:10:c3:00:b0:bf:31:55:af:89:1a:5a:08:e2: 7e:7c:29:7f:12:c8:5d:92:a2:00:9d:4e:29:b5:7b: 56:a7:60:57:e7:82:07:f5:60:0f:b2:ce:75:a4:1d: 38:88:19:8d:96:1c:23:6f:d0:6f:64:6e:5b:aa:d6: 70:e0:4e:24:cd:25:91:10:f4:bd:23:86:17:12:17: 78:72:8a:6a:e6:99:f7:ca:ca:82:ff:62:fe:15:7f: 02:e0:4d:70:11:58:d4:52:54:20:e0:51:bf:c0:16: 4f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:23:56:C0:74:02:C8:3F:3F:83:68:E5:B3:BB:38:80:BB:7A:B0:E7 X509v3 Authority Key Identifier: keyid:C0:CB:50:8F:7D:1A:9E:F9:04:9C:CF:9E:BD:05:96:E7:69:3C:2F:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:03:1a:8c:21:34:36:ee:5f:9a:d2:48:8b:70:0f:81:db:68: 67:39:48:9c:22:59:d7:36:e1:e7:55:a2:23:59:b8:df:3b:ad: a4:df:bc:50:de:44:b4:66:48:06:01:9f:d6:05:df:da:fe:30: fb:48:07:6b:37:5b:5a:6e:3b:65:ee:53:0c:0e:0c:c9:ac:a2: c4:9e:23:53:0b:da:36:5d:71:f9:c6:4f:78:86:9b:47:f3:35: ed:c0:05:92:e5:94:2e:a1:30:52:b9:fe:8f:39:87:2f:ad:94: ad:21:9d:2c:bd:8c:92:cd:bd:cc:68:dd:d4:65:41:7b:51:d5: 12:fe:0f:35:e7:71:02:67:ad:9d:6a:f7:bf:db:15:59:76:72: ab:8a:c4:71:74:3e:48:d6:48:1f:db:09:f7:86:6e:32:5d:2e: 32:3b:9c:bf:e7:aa:fd:a3:40:1e:25:ab:15:a1:1a:f2:76:fa: f5:3b:52:d9:4c:7c:50:1c:17:81:1d:de:56:6a:ed:7c:73:13: 71:f4:6e:94:e3:a3:f7:33:2a:6c:cd:4b:52:bf:58:3d:fa:5b: 8e:6c:27:05:a6:0b:d0:c5:d1:07:85:87:22:3f:f0:a0:f3:57: a9:45:85:fa:a1:0d:c5:09:0e:04:45:79:b8:06:44:ff:0d:fc: 91:fa:04:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYK0ehE5P5/SfWCaJVJ8R2a1d0ogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDQjUwOEY3RDFBOUVGOTA0OUNDRjlFQkQwNTk2RTc2 OTNDMkZDNjAeFw0yNTA4MjIwMzM3MzBaFw0yNTA4MjUxMTI4MzBaMDMxMTAvBgNV BAMTKDIzMjM1NkMwNzQwMkM4M0YzRjgzNjhFNUIzQkIzODgwQkI3QUIwRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzVKixLjCXoGuCFHmCpHFXMGKJ 5BuGRqEdQF6gI9IPZkHGtBoBuSvhJvxuLzKoamKMvtbiY0w73AaWwGWZvCP1f74l 5bGS1Q0AFdJYiLwi0kzfKwRhFGs0nOU9EjSogmDjAcn57ndEMeVShGRw2zFmXpgo aQq+OyopD6ORE61iEBVGfY3CtC/XmdreproHFA2mzZEWG9AuEMMAsL8xVa+JGloI 4n58KX8SyF2SogCdTim1e1anYFfnggf1YA+yznWkHTiIGY2WHCNv0G9kbluq1nDg TiTNJZEQ9L0jhhcSF3hyimrmmffKyoL/Yv4VfwLgTXARWNRSVCDgUb/AFk+bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIyNWwHQCyD8/g2jls7s4gLt6sOcwHwYDVR0j BBgwFoAUwMtQj30anvkEnM+evQWW52k8L8YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2U0NTAzOS02ZWQwLTQ4M2QtYTFiOS1jNGY0ODU0YzVjZjUvMC9DMENCNTA4RjdE MUE5RUY5MDQ5Q0NGOUVCRDA1OTZFNzY5M0MyRkM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzBDQjUwOEY3RDFBOUVGOTA0OUNDRjlFQkQwNTk2RTc2OTND MkZDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNlNDUwMzktNmVkMC00ODNkLWEx YjktYzRmNDg1NGM1Y2Y1LzAvQzBDQjUwOEY3RDFBOUVGOTA0OUNDRjlFQkQwNTk2 RTc2OTNDMkZDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMgDGowhNDbuX5rSSItwD4HbaGc5SJwiWdc2 4edVoiNZuN87raTfvFDeRLRmSAYBn9YF39r+MPtIB2s3W1puO2XuUwwODMmsosSe I1ML2jZdcfnGT3iGm0fzNe3ABZLllC6hMFK5/o85hy+tlK0hnSy9jJLNvcxo3dRl QXtR1RL+DzXncQJnrZ1q97/bFVl2cquKxHF0PkjWSB/bCfeGbjJdLjI7nL/nqv2j QB4lqxWhGvJ2+vU7UtlMfFAcF4Ed3lZq7XxzE3H0bpTjo/czKmzNS1K/WD36W45s JwWmC9DF0QeFhyI/8KDzV6lFhfqhDcUJDgRFebgGRP8N/JH6BLk= -----END CERTIFICATE-----Generated at Sat Aug 23 20:01:29 2025 by rpki-client