$ rpki-client -vvf repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft File: C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft (raw, json) Hash identifier: +u+oFxvanJnq4paa5eIrR3wMMm2pr9rN7mte7QNa90Y= Subject key identifier: 2D:72:B4:A9:48:6F:61:C8:E1:C2:69:29:B6:FF:6C:BB:F7:7E:29:2B Authority key identifier: C0:CB:50:8F:7D:1A:9E:F9:04:9C:CF:9E:BD:05:96:E7:69:3C:2F:C6 Certificate issuer: /CN=C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6 Certificate serial: 69A1CCB191ADDB7C43F5A798FB0AD7CF5D5A4AC3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft Manifest number: 82 Signing time: Sun 29 Jun 2025 01:21:25 +0000 Manifest this update: Sun 29 Jun 2025 01:16:25 +0000 Manifest next update: Wed 02 Jul 2025 04:20:25 +0000 Files and hashes: 1: C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl (hash: 5aZDI/xl71OSuY1mTeltUHTY5SktzxLqxhTwKNq9JLA=) 2: 3130332e3233322e33322e302f32342d3234203d3e20313333333534.roa (hash: rvmmuygSDQqp3VTFfTdTUgUhuWy6VU7o/YE+GwA04qY=) 3: 3130332e3231372e3137322e302f32342d3234203d3e20313333333534.roa (hash: 1nHw01smVx1ZOqDKUmuMmLHS8nfmS5SZFRiTVrT39OY=) 4: 3130332e3233322e33332e302f32342d3234203d3e20313333333534.roa (hash: IoXihcWrLe60DlpQzVRAOXX3umofZd3ManAso30bXVY=) 5: 3130332e3231372e3137322e302f32332d3233203d3e20313333333534.roa (hash: bcKNAldjHqBfsv/Q+Ly6D1o3ohbtzg70IudkGUDipiI=) 6: 3130332e3231372e3137332e302f32342d3234203d3e20313333333534.roa (hash: nUQ2kayi0Rj4NqtUCpruCitWDh+npuC9WG+E5F+Bv9o=) 7: 3130332e3233322e33322e302f32332d3233203d3e20313333333534.roa (hash: 4cVYZh3C8hXn171P/RUENb8aKuR+2otEfieTHKUhFd4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 04:20:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:a1:cc:b1:91:ad:db:7c:43:f5:a7:98:fb:0a:d7:cf:5d:5a:4a:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6 Validity Not Before: Jun 29 01:16:25 2025 GMT Not After : Jul 2 04:20:25 2025 GMT Subject: CN=2D72B4A9486F61C8E1C26929B6FF6CBBF77E292B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7f:6f:ad:22:38:8c:a9:93:54:e8:e4:ca:80: 08:6a:4c:da:d1:70:f5:2d:6f:24:43:1d:12:54:db: 64:e9:44:33:12:4f:31:ca:4f:b8:99:7c:9e:34:fc: e8:d6:4c:f9:fb:31:b9:3d:9d:52:47:65:54:d6:54: 86:1a:d8:e3:e2:62:fa:32:cd:d7:7f:1c:c6:fc:9b: e4:24:5e:78:fb:93:76:9c:9e:b9:37:4e:2f:9c:fe: 64:71:8b:e4:b1:14:b7:02:fc:06:22:36:a6:60:9c: 10:34:32:26:c8:3d:9d:aa:a6:28:17:70:b8:7c:0b: 1d:f7:20:b2:ef:8a:43:c8:0f:ff:f4:7e:fa:4d:34: 30:92:95:32:9e:93:d5:cd:a2:9f:5e:e7:d7:f3:f7: 09:04:dd:c6:a9:b5:24:4d:48:8a:6b:42:8e:b3:8c: 15:69:97:65:78:a9:fa:c8:11:d7:94:0b:cc:77:be: f7:0e:73:71:ff:b1:9d:29:9b:f5:75:3b:35:ed:3a: ed:2b:a1:19:2b:aa:34:d4:6f:54:f8:da:3a:c0:a4: 20:a4:e1:94:a3:4b:d4:cb:94:09:bb:ed:39:80:8f: a5:82:64:8a:01:41:42:11:4c:6f:b4:da:8e:f1:50: 94:4a:7a:ba:3f:8e:ba:15:96:9b:97:3f:f5:0a:d0: d5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:72:B4:A9:48:6F:61:C8:E1:C2:69:29:B6:FF:6C:BB:F7:7E:29:2B X509v3 Authority Key Identifier: keyid:C0:CB:50:8F:7D:1A:9E:F9:04:9C:CF:9E:BD:05:96:E7:69:3C:2F:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:ca:c9:74:7d:f9:ac:c9:92:2e:87:02:61:ae:06:5a:02:10: 2d:7b:89:e7:c5:38:64:00:21:fc:9a:89:bb:2a:e1:bc:0e:e2: 5c:bf:c1:5d:bc:a5:7d:57:75:ea:aa:a3:97:54:54:04:c0:9a: 17:66:7b:87:94:11:d4:46:53:68:14:a3:a2:62:36:e3:ef:bd: e9:4a:07:88:3a:31:cc:cb:34:ae:e1:55:cf:47:ca:53:32:26: c1:30:73:e4:c3:52:11:11:28:8a:bc:a9:75:b5:fe:6b:8c:0a: 37:a5:fc:5d:be:de:c0:90:59:6e:22:41:6f:67:4b:4a:07:8f: 67:61:1a:c9:1d:b4:d3:4e:7e:76:f4:71:93:61:5c:31:28:c6: e8:3d:fb:e6:68:1e:e1:0a:8f:66:45:ee:45:f8:85:1a:0d:3a: 1a:10:95:d2:94:81:a3:6d:6a:2e:23:6f:fc:84:7e:6f:d0:35: f7:a7:62:8b:3b:53:88:a5:04:69:86:6c:26:bc:3e:f8:11:2f: cd:09:4e:06:1e:bd:f0:b7:cc:af:bc:18:2d:c2:46:87:33:f9: 63:c3:2c:91:24:a5:c0:bf:b9:1c:ee:2a:1d:26:b7:a7:ec:e3: 2c:12:2c:4e:93:9f:cc:62:03:ad:14:45:ea:10:71:2a:d0:4a: 56:ea:c0:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaaHMsZGt23xD9aeY+wrXz11aSsMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDQjUwOEY3RDFBOUVGOTA0OUNDRjlFQkQwNTk2RTc2 OTNDMkZDNjAeFw0yNTA2MjkwMTE2MjVaFw0yNTA3MDIwNDIwMjVaMDMxMTAvBgNV BAMTKDJENzJCNEE5NDg2RjYxQzhFMUMyNjkyOUI2RkY2Q0JCRjc3RTI5MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbf2+tIjiMqZNU6OTKgAhqTNrR cPUtbyRDHRJU22TpRDMSTzHKT7iZfJ40/OjWTPn7Mbk9nVJHZVTWVIYa2OPiYvoy zdd/HMb8m+QkXnj7k3acnrk3Ti+c/mRxi+SxFLcC/AYiNqZgnBA0MibIPZ2qpigX cLh8Cx33ILLvikPID//0fvpNNDCSlTKek9XNop9e59fz9wkE3captSRNSIprQo6z jBVpl2V4qfrIEdeUC8x3vvcOc3H/sZ0pm/V1OzXtOu0roRkrqjTUb1T42jrApCCk 4ZSjS9TLlAm77TmAj6WCZIoBQUIRTG+02o7xUJRKero/jroVlpuXP/UK0NXlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULXK0qUhvYcjhwmkptv9su/d+KSswHwYDVR0j BBgwFoAUwMtQj30anvkEnM+evQWW52k8L8YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2U0NTAzOS02ZWQwLTQ4M2QtYTFiOS1jNGY0ODU0YzVjZjUvMC9DMENCNTA4RjdE MUE5RUY5MDQ5Q0NGOUVCRDA1OTZFNzY5M0MyRkM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzBDQjUwOEY3RDFBOUVGOTA0OUNDRjlFQkQwNTk2RTc2OTND MkZDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNlNDUwMzktNmVkMC00ODNkLWEx YjktYzRmNDg1NGM1Y2Y1LzAvQzBDQjUwOEY3RDFBOUVGOTA0OUNDRjlFQkQwNTk2 RTc2OTNDMkZDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHvKyXR9+azJki6HAmGuBloCEC17iefFOGQA Ifyaibsq4bwO4ly/wV28pX1Xdeqqo5dUVATAmhdme4eUEdRGU2gUo6JiNuPvvelK B4g6MczLNK7hVc9HylMyJsEwc+TDUhERKIq8qXW1/muMCjel/F2+3sCQWW4iQW9n S0oHj2dhGskdtNNOfnb0cZNhXDEoxug9++ZoHuEKj2ZF7kX4hRoNOhoQldKUgaNt ai4jb/yEfm/QNfenYos7U4ilBGmGbCa8PvgRL80JTgYevfC3zK+8GC3CRocz+WPD LJEkpcC/uRzuKh0mt6fs4ywSLE6Tn8xiA60UReoQcSrQSlbqwBM= -----END CERTIFICATE-----Generated at Sun Jun 29 18:10:16 2025 by rpki-client