$ rpki-client -vvf repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft File: C0CDF72A73FE200131853E0EE6A9B33708242F09.mft (raw, json) Hash identifier: d7HvNOsTAeAJRokTLitQddLUHJFPUBFZny6Apxn1TAA= Subject key identifier: 38:E7:DC:E9:A1:AF:23:3E:D3:12:8D:4F:68:C5:41:B4:3B:7B:51:C3 Authority key identifier: C0:CD:F7:2A:73:FE:20:01:31:85:3E:0E:E6:A9:B3:37:08:24:2F:09 Certificate issuer: /CN=C0CDF72A73FE200131853E0EE6A9B33708242F09 Certificate serial: 493FC41E1323870DD4D9D4ABE5AF9AF469A85C16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft Manifest number: 5D Signing time: Sat 23 Aug 2025 04:51:12 +0000 Manifest this update: Sat 23 Aug 2025 04:46:12 +0000 Manifest next update: Tue 26 Aug 2025 15:51:12 +0000 Files and hashes: 1: 3130332e39302e36322e302f32342d3234203d3e203633353038.roa (hash: MeO0TR42bgLm6thq+jwgdjWKMy27/0uvvv2g1npnqFo=) 2: C0CDF72A73FE200131853E0EE6A9B33708242F09.crl (hash: LHrQ58D65mgZCh5GL0AGG28uFSjLRLS4kGrxetw3/II=) 3: 3130332e39302e36332e302f32342d3234203d3e203633353038.roa (hash: MULEUEHSyZpY9qn3SDe7sQnJLs4h5Mi7a94B5iOdQb8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.crl rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 15:51:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:3f:c4:1e:13:23:87:0d:d4:d9:d4:ab:e5:af:9a:f4:69:a8:5c:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0CDF72A73FE200131853E0EE6A9B33708242F09 Validity Not Before: Aug 23 04:46:12 2025 GMT Not After : Aug 26 15:51:12 2025 GMT Subject: CN=38E7DCE9A1AF233ED3128D4F68C541B43B7B51C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4c:ff:16:5b:4f:c5:d7:cf:76:f4:c9:a2:0f: df:68:66:77:c4:65:1a:bd:ef:94:f1:d8:11:8e:3b: f8:27:11:0a:d7:ba:dc:4c:34:17:c4:7f:65:7b:c8: f8:48:46:06:0a:0b:df:7a:32:32:3d:41:bb:46:29: 7c:61:87:01:a3:e0:04:99:ce:df:e2:20:48:70:52: cf:75:6f:aa:15:a2:c9:cf:61:09:ca:89:ba:13:1e: 2f:9b:1e:42:7f:ef:dd:2c:ac:4a:8c:35:cd:08:18: 9a:08:f4:96:51:65:9b:a1:ca:4f:78:77:fe:b9:8f: 9f:20:a3:2f:aa:79:97:f0:c6:e8:f9:fc:32:c7:ec: 86:1c:1c:e4:8a:dd:b8:69:09:1e:d8:57:7e:c8:47: 9e:aa:d6:41:0e:e2:cf:c5:e0:41:c5:0f:8f:59:2e: f5:62:8c:9b:3e:e5:5b:ae:b9:b0:fb:4f:37:f9:92: 6d:82:5a:99:17:fc:73:b7:03:4d:56:28:db:47:70: da:db:ab:a5:a2:98:07:79:08:fb:cd:58:f6:66:33: 94:78:c9:48:99:af:51:08:0a:9a:16:cf:0c:6b:f9: f7:8c:29:e6:9c:a2:04:8e:0f:8a:5c:42:e2:ee:4f: c7:95:50:18:ca:34:fa:36:2f:cc:93:22:66:92:30: b4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E7:DC:E9:A1:AF:23:3E:D3:12:8D:4F:68:C5:41:B4:3B:7B:51:C3 X509v3 Authority Key Identifier: keyid:C0:CD:F7:2A:73:FE:20:01:31:85:3E:0E:E6:A9:B3:37:08:24:2F:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:7c:7a:89:6a:9b:c6:93:77:76:29:04:ae:bc:a4:17:c3:eb: 9a:0f:3d:74:1a:f7:d5:32:2c:68:18:46:66:1e:28:60:00:93: 72:dc:f2:01:07:59:c0:67:60:45:dc:c0:b5:cd:56:47:f9:7f: 67:9b:b2:3b:cf:8c:78:8c:4e:1e:38:53:cc:08:4a:4a:85:06: 00:99:f0:13:f4:17:94:3e:0d:ba:65:47:85:02:9c:ff:6b:23: 47:8f:5f:b2:87:b3:e8:fa:af:bf:95:45:ca:ed:c6:88:48:98: 98:62:21:b2:d2:84:9f:67:81:70:81:3e:f5:66:29:04:9b:a7: 6f:03:5d:f1:55:84:d5:fc:25:4e:5a:bf:b0:2c:5e:5f:15:e6: 4b:79:73:55:cf:56:2a:2e:f8:19:3d:2c:2f:04:2d:0c:d6:a2: b7:1a:cc:d5:35:e5:9d:7d:1e:26:fb:5d:f8:a6:23:54:eb:a4: a8:76:a9:cd:91:c3:c6:b6:b3:ed:6a:60:75:0a:0a:a5:95:1d: de:97:47:96:d6:9c:b3:29:f4:b4:e9:3e:e7:69:9c:0b:a3:25: 1a:58:99:46:9b:09:33:cb:c4:00:cb:0f:34:39:c5:95:92:3d: f6:b9:0a:e6:fe:da:12:a7:b2:7d:6d:37:a6:1a:3f:58:fa:14: fd:54:dc:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUST/EHhMjhw3U2dSr5a+a9GmoXBYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIzMzcw ODI0MkYwOTAeFw0yNTA4MjMwNDQ2MTJaFw0yNTA4MjYxNTUxMTJaMDMxMTAvBgNV BAMTKDM4RTdEQ0U5QTFBRjIzM0VEMzEyOEQ0RjY4QzU0MUI0M0I3QjUxQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuTP8WW0/F18929MmiD99oZnfE ZRq975Tx2BGOO/gnEQrXutxMNBfEf2V7yPhIRgYKC996MjI9QbtGKXxhhwGj4ASZ zt/iIEhwUs91b6oVosnPYQnKiboTHi+bHkJ/790srEqMNc0IGJoI9JZRZZuhyk94 d/65j58goy+qeZfwxuj5/DLH7IYcHOSK3bhpCR7YV37IR56q1kEO4s/F4EHFD49Z LvVijJs+5VuuubD7Tzf5km2CWpkX/HO3A01WKNtHcNrbq6WimAd5CPvNWPZmM5R4 yUiZr1EICpoWzwxr+feMKeacogSOD4pcQuLuT8eVUBjKNPo2L8yTImaSMLTPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOOfc6aGvIz7TEo1PaMVBtDt7UcMwHwYDVR0j BBgwFoAUwM33KnP+IAExhT4O5qmzNwgkLwkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Yzc1NDdmYy00OGQ0LTQxNjktYWUzMy1jYjQ1NGQ2ZDhiOTIvMC9DMENERjcyQTcz RkUyMDAxMzE4NTNFMEVFNkE5QjMzNzA4MjQyRjA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIzMzcwODI0 MkYwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM3NTQ3ZmMtNDhkNC00MTY5LWFl MzMtY2I0NTRkNmQ4YjkyLzAvQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIz MzcwODI0MkYwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAJ8eolqm8aTd3YpBK68pBfD65oPPXQa99Uy LGgYRmYeKGAAk3Lc8gEHWcBnYEXcwLXNVkf5f2ebsjvPjHiMTh44U8wISkqFBgCZ 8BP0F5Q+DbplR4UCnP9rI0ePX7KHs+j6r7+VRcrtxohImJhiIbLShJ9ngXCBPvVm KQSbp28DXfFVhNX8JU5av7AsXl8V5kt5c1XPViou+Bk9LC8ELQzWorcazNU15Z19 Hib7XfimI1TrpKh2qc2Rw8a2s+1qYHUKCqWVHd6XR5bWnLMp9LTpPudpnAujJRpY mUabCTPLxADLDzQ5xZWSPfa5Cub+2hKnsn1tN6YaP1j6FP1U3Mg= -----END CERTIFICATE-----Generated at Sun Aug 24 02:30:13 2025 by rpki-client