$ rpki-client -vvf repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft File: C0CDF72A73FE200131853E0EE6A9B33708242F09.mft (raw, json) Hash identifier: cCulOazNyaWIsBWiShKN8IrKzLsP1lUotaLGfOxzd9w= Subject key identifier: 72:EF:61:F6:B5:73:51:9E:46:0B:F6:F4:E2:97:04:14:94:D8:CC:E5 Authority key identifier: C0:CD:F7:2A:73:FE:20:01:31:85:3E:0E:E6:A9:B3:37:08:24:2F:09 Certificate issuer: /CN=C0CDF72A73FE200131853E0EE6A9B33708242F09 Certificate serial: 11803CDF2416DCC972A0B5FA11525B0B9279A369 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft Manifest number: 46 Signing time: Tue 01 Jul 2025 14:21:10 +0000 Manifest this update: Tue 01 Jul 2025 14:16:10 +0000 Manifest next update: Fri 04 Jul 2025 16:18:10 +0000 Files and hashes: 1: 3130332e39302e36322e302f32342d3234203d3e203633353038.roa (hash: MeO0TR42bgLm6thq+jwgdjWKMy27/0uvvv2g1npnqFo=) 2: 3130332e39302e36332e302f32342d3234203d3e203633353038.roa (hash: MULEUEHSyZpY9qn3SDe7sQnJLs4h5Mi7a94B5iOdQb8=) 3: C0CDF72A73FE200131853E0EE6A9B33708242F09.crl (hash: h6B+pI0i/awx1xLI4R87nSMZx1qnnopeUf+X7yb5br8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.crl rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 15:45:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:80:3c:df:24:16:dc:c9:72:a0:b5:fa:11:52:5b:0b:92:79:a3:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0CDF72A73FE200131853E0EE6A9B33708242F09 Validity Not Before: Jul 1 14:16:10 2025 GMT Not After : Jul 4 16:18:10 2025 GMT Subject: CN=72EF61F6B573519E460BF6F4E297041494D8CCE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fe:86:ee:e6:28:c6:da:42:42:e7:54:8e:1d: 0b:ca:9f:2f:bd:5c:26:93:b1:f9:9f:2b:8b:05:52: 3d:8e:f4:2b:23:26:0b:b0:08:42:ea:d9:f0:1f:18: 55:b5:0f:da:01:5e:8e:a6:4a:fd:32:da:81:21:29: d8:6b:00:53:d7:97:0f:fc:be:d7:19:97:12:ff:78: cc:ad:f6:eb:7d:f7:d6:2c:ee:e4:75:c7:1d:b0:c1: 0d:ce:55:8d:6a:cb:87:c3:4c:d8:dc:53:bb:5d:92: 78:ee:eb:db:d1:72:09:b4:31:39:73:e4:51:03:8c: 3e:03:da:21:88:f8:e2:5a:be:d3:8a:d0:13:20:6e: 53:5c:b5:a6:c2:e4:f8:65:63:a3:b8:eb:fe:29:75: 4f:1b:d3:0e:c1:7b:c2:46:70:c9:2e:ad:88:c8:c8: 02:83:dd:4a:19:dd:e9:41:16:fc:fb:51:a5:30:86: f1:f4:17:cf:7c:0d:91:1c:3f:5f:9d:6a:1e:6c:5d: d1:71:0f:57:b7:32:a4:58:fe:b2:2b:fd:03:ef:49: 8b:bb:cf:40:2b:ce:8d:c0:2e:2d:b1:24:9d:88:99: 1e:b3:40:e4:0e:ef:bc:87:f8:87:66:71:d3:80:85: ef:88:eb:42:c3:f9:85:e3:1d:00:dc:72:1d:c0:dc: 76:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:EF:61:F6:B5:73:51:9E:46:0B:F6:F4:E2:97:04:14:94:D8:CC:E5 X509v3 Authority Key Identifier: keyid:C0:CD:F7:2A:73:FE:20:01:31:85:3E:0E:E6:A9:B3:37:08:24:2F:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ff:09:68:66:9e:6d:4a:0b:7a:88:0c:d1:37:45:df:1c:d8: a3:a8:bd:30:10:29:42:40:a7:15:bc:ea:cf:ac:dc:ec:72:b4: e1:6f:da:3a:6a:e2:cf:b3:58:87:89:42:2e:ef:10:ba:25:20: 4f:21:2b:77:65:b5:4d:93:79:ae:6d:99:54:5f:03:6c:96:69: 5a:18:e7:c2:e3:62:c5:a9:9d:8a:16:02:51:af:a0:ab:8d:d0: 29:49:8e:db:66:38:80:04:d6:d4:e5:e1:d7:77:65:84:66:f4: 7a:84:fd:20:e6:e8:ef:df:6b:91:bb:97:82:b8:02:3a:10:b1: 00:1c:dd:a9:f8:b3:a4:b1:e2:d2:05:88:76:05:53:a6:20:82: 04:fc:18:ba:80:ae:a7:40:fb:9f:34:45:0c:d9:dd:4f:e4:b9: e8:74:81:8e:a5:d2:a0:f7:4d:97:c0:59:36:db:8f:5d:ab:bd: c5:e0:e8:00:83:cb:e9:27:20:0b:72:ba:11:82:f0:47:01:fb: 2e:b9:58:21:a8:e0:b2:09:e8:5f:dc:98:70:5a:27:cd:42:37: e4:db:9c:95:a5:d0:86:57:2f:7f:7e:d2:c2:99:54:a8:f2:3e: 03:0b:ab:40:20:65:9f:31:86:4d:9c:fb:63:c7:6a:2c:c7:e2: 14:eb:12:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEYA83yQW3MlyoLX6EVJbC5J5o2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIzMzcw ODI0MkYwOTAeFw0yNTA3MDExNDE2MTBaFw0yNTA3MDQxNjE4MTBaMDMxMTAvBgNV BAMTKDcyRUY2MUY2QjU3MzUxOUU0NjBCRjZGNEUyOTcwNDE0OTREOENDRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs/obu5ijG2kJC51SOHQvKny+9 XCaTsfmfK4sFUj2O9CsjJguwCELq2fAfGFW1D9oBXo6mSv0y2oEhKdhrAFPXlw/8 vtcZlxL/eMyt9ut999Ys7uR1xx2wwQ3OVY1qy4fDTNjcU7tdknju69vRcgm0MTlz 5FEDjD4D2iGI+OJavtOK0BMgblNctabC5PhlY6O46/4pdU8b0w7Be8JGcMkurYjI yAKD3UoZ3elBFvz7UaUwhvH0F898DZEcP1+dah5sXdFxD1e3MqRY/rIr/QPvSYu7 z0Arzo3ALi2xJJ2ImR6zQOQO77yH+IdmcdOAhe+I60LD+YXjHQDcch3A3HYfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcu9h9rVzUZ5GC/b04pcEFJTYzOUwHwYDVR0j BBgwFoAUwM33KnP+IAExhT4O5qmzNwgkLwkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Yzc1NDdmYy00OGQ0LTQxNjktYWUzMy1jYjQ1NGQ2ZDhiOTIvMC9DMENERjcyQTcz RkUyMDAxMzE4NTNFMEVFNkE5QjMzNzA4MjQyRjA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIzMzcwODI0 MkYwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM3NTQ3ZmMtNDhkNC00MTY5LWFl MzMtY2I0NTRkNmQ4YjkyLzAvQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIz MzcwODI0MkYwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEv/CWhmnm1KC3qIDNE3Rd8c2KOovTAQKUJA pxW86s+s3OxytOFv2jpq4s+zWIeJQi7vELolIE8hK3dltU2Tea5tmVRfA2yWaVoY 58LjYsWpnYoWAlGvoKuN0ClJjttmOIAE1tTl4dd3ZYRm9HqE/SDm6O/fa5G7l4K4 AjoQsQAc3an4s6Sx4tIFiHYFU6YgggT8GLqArqdA+580RQzZ3U/kueh0gY6l0qD3 TZfAWTbbj12rvcXg6ACDy+knIAtyuhGC8EcB+y65WCGo4LIJ6F/cmHBaJ81CN+Tb nJWl0IZXL39+0sKZVKjyPgMLq0AgZZ8xhk2c+2PHaizH4hTrEic= -----END CERTIFICATE-----Generated at Tue Jul 1 20:44:23 2025 by rpki-client