$ rpki-client -vvf repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft File: CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft (raw, json) Hash identifier: kdD15RqP9m643BnyZUKP37PO0uF5NIMx5S9EqbPP5Rg= Subject key identifier: FC:20:27:0D:B2:C1:96:56:D7:D7:40:3B:D7:BE:42:38:72:F9:1C:07 Authority key identifier: CD:C0:85:E3:D4:D7:54:39:AE:1B:B6:CB:68:F1:80:E8:1A:AD:24:50 Certificate issuer: /CN=CDC085E3D4D75439AE1BB6CB68F180E81AAD2450 Certificate serial: 1F3570DF5891E62903D38C63B4A49DEDF9A20CAF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft Manifest number: 036E Signing time: Sun 29 Jun 2025 13:12:14 +0000 Manifest this update: Sun 29 Jun 2025 13:07:14 +0000 Manifest next update: Wed 02 Jul 2025 13:57:14 +0000 Files and hashes: 1: 3130332e382e37382e302f32332d3234203d3e203538353531.roa (hash: 3rFUXtbuW4eWsGnAQRXWPa2T5G8tLKctM7LWy4Bhpvk=) 2: 3130332e32302e3136362e302f32332d3234203d3e203538353531.roa (hash: CKy2gQtIBacjD8C67dYMJdlND8CS/j+yiiHq3SKDq4Q=) 3: CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl (hash: e2pxhCRMDeu4Apbx8GxhUn9YwHyl+/78r/Du1B0rIOQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:35:70:df:58:91:e6:29:03:d3:8c:63:b4:a4:9d:ed:f9:a2:0c:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDC085E3D4D75439AE1BB6CB68F180E81AAD2450 Validity Not Before: Jun 29 13:07:14 2025 GMT Not After : Jul 2 13:57:14 2025 GMT Subject: CN=FC20270DB2C19656D7D7403BD7BE423872F91C07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:82:55:41:b0:7c:b6:6d:55:4d:eb:d6:99:f7: ed:98:6c:48:8c:5e:fc:1a:db:e9:6c:de:49:3f:bf: 0f:81:a7:ec:7d:a2:30:f0:54:12:4b:16:b6:ae:85: 0f:ed:d0:a3:3c:1a:cd:b0:2e:95:a5:40:b6:ca:b9: f5:12:12:05:85:d2:bc:59:08:b7:57:e1:c8:35:dc: 8d:f4:46:79:03:44:d5:21:fe:fa:16:ad:1d:58:e6: 34:41:a5:8a:75:ad:2a:35:3a:1a:96:52:4c:e1:0e: 13:23:7d:47:f9:a3:1d:84:fa:f7:7d:b3:1a:41:66: 02:16:3a:b3:2f:dd:92:eb:43:01:8e:5c:94:db:ef: 9e:d9:50:41:ab:b9:f6:1f:09:da:ee:06:46:cd:c3: 38:d9:46:9d:ca:90:87:d9:7c:34:bd:53:f0:9e:58: a9:9f:b8:5e:8c:15:4b:e7:99:f8:4b:cc:77:3a:e1: c8:f0:a8:b0:3b:4a:c8:9b:8d:db:02:68:a4:37:cc: 9b:f1:59:ba:af:af:db:d7:1e:00:95:58:c0:51:7d: 6f:4a:bd:87:05:69:02:7e:dd:6b:2f:94:fc:a5:e4: 22:7b:e6:e4:35:80:ad:56:5a:af:99:fe:b5:b4:f7: ef:88:d4:02:da:66:ec:f8:88:16:52:6f:4b:e4:85: 9c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:20:27:0D:B2:C1:96:56:D7:D7:40:3B:D7:BE:42:38:72:F9:1C:07 X509v3 Authority Key Identifier: keyid:CD:C0:85:E3:D4:D7:54:39:AE:1B:B6:CB:68:F1:80:E8:1A:AD:24:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:0a:26:e0:48:3a:34:1d:ea:ca:9a:19:4a:19:ae:18:07:09: 98:5d:79:a2:7c:b9:c9:46:4d:47:da:8b:92:6e:0e:de:f3:7c: 14:cf:ac:4d:72:ab:a6:50:00:cf:df:7d:bf:0c:5f:cd:13:7e: 57:0a:db:3a:41:21:71:f2:4b:2d:ba:e7:88:1a:2d:f7:1e:77: 19:21:c6:17:4f:64:e7:2f:46:b6:6d:18:d0:64:b2:30:a0:88: ed:93:26:cb:96:ed:a0:39:aa:84:2d:f6:9d:9b:60:1c:a8:cf: f6:e6:41:90:28:e7:df:df:0a:a7:fb:d4:41:14:09:3f:4f:85: 01:73:76:8d:d3:86:00:0a:07:28:4e:ba:9b:0a:ea:b7:10:c5: 0c:67:75:11:69:57:a6:c4:dd:b2:00:e0:19:b0:66:81:63:e1: 87:cb:51:60:ba:92:59:23:62:a2:29:fb:61:63:39:01:f8:39: 1d:74:1f:ce:3b:cb:4d:ac:01:b7:bd:d1:97:73:b6:c3:b9:53: 69:9c:a9:75:fd:d2:83:d1:d6:cc:80:cb:e4:36:81:ee:cc:c0: 00:e8:ed:cb:84:d8:42:44:30:6e:bb:9a:a2:b7:ce:ef:c9:17: f3:32:d1:01:49:18:d8:6a:0e:aa:d4:e3:9a:8e:2c:6a:d8:ca: 8e:32:4e:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHzVw31iR5ikD04xjtKSd7fmiDK8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RDMDg1RTNENEQ3NTQzOUFFMUJCNkNCNjhGMTgwRTgx QUFEMjQ1MDAeFw0yNTA2MjkxMzA3MTRaFw0yNTA3MDIxMzU3MTRaMDMxMTAvBgNV BAMTKEZDMjAyNzBEQjJDMTk2NTZEN0Q3NDAzQkQ3QkU0MjM4NzJGOTFDMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWglVBsHy2bVVN69aZ9+2YbEiM Xvwa2+ls3kk/vw+Bp+x9ojDwVBJLFrauhQ/t0KM8Gs2wLpWlQLbKufUSEgWF0rxZ CLdX4cg13I30RnkDRNUh/voWrR1Y5jRBpYp1rSo1OhqWUkzhDhMjfUf5ox2E+vd9 sxpBZgIWOrMv3ZLrQwGOXJTb757ZUEGrufYfCdruBkbNwzjZRp3KkIfZfDS9U/Ce WKmfuF6MFUvnmfhLzHc64cjwqLA7SsibjdsCaKQ3zJvxWbqvr9vXHgCVWMBRfW9K vYcFaQJ+3WsvlPyl5CJ75uQ1gK1WWq+Z/rW09++I1ALaZuz4iBZSb0vkhZwRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/CAnDbLBllbX10A7175COHL5HAcwHwYDVR0j BBgwFoAUzcCF49TXVDmuG7bLaPGA6BqtJFAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDBlMGRlYS01ZjliLTQyNWMtODJjZS0zMGE4NjUwMDdjMzUvMC9DREMwODVFM0Q0 RDc1NDM5QUUxQkI2Q0I2OEYxODBFODFBQUQyNDUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0RDMDg1RTNENEQ3NTQzOUFFMUJCNkNCNjhGMTgwRTgxQUFE MjQ1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQwZTBkZWEtNWY5Yi00MjVjLTgy Y2UtMzBhODY1MDA3YzM1LzAvQ0RDMDg1RTNENEQ3NTQzOUFFMUJCNkNCNjhGMTgw RTgxQUFEMjQ1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALQKJuBIOjQd6sqaGUoZrhgHCZhdeaJ8uclG TUfai5JuDt7zfBTPrE1yq6ZQAM/ffb8MX80TflcK2zpBIXHySy2654gaLfcedxkh xhdPZOcvRrZtGNBksjCgiO2TJsuW7aA5qoQt9p2bYByoz/bmQZAo59/fCqf71EEU CT9PhQFzdo3ThgAKByhOupsK6rcQxQxndRFpV6bE3bIA4BmwZoFj4YfLUWC6klkj YqIp+2FjOQH4OR10H847y02sAbe90ZdztsO5U2mcqXX90oPR1syAy+Q2ge7MwADo 7cuE2EJEMG67mqK3zu/JF/My0QFJGNhqDqrU45qOLGrYyo4yTtc= -----END CERTIFICATE-----Generated at Sun Jun 29 18:23:29 2025 by rpki-client