$ rpki-client -vvf repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft File: CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft (raw, json) Hash identifier: C8xRmM5yLDACuUZFJJxT4/7PmI1l8XcbsOU5ID/7PsI= Subject key identifier: 2B:20:CF:39:90:9D:38:F5:62:D1:A8:18:E8:56:36:D1:8E:B6:F8:96 Authority key identifier: CD:C0:85:E3:D4:D7:54:39:AE:1B:B6:CB:68:F1:80:E8:1A:AD:24:50 Certificate issuer: /CN=CDC085E3D4D75439AE1BB6CB68F180E81AAD2450 Certificate serial: 3427D7E86782EDDC6CF118420D4A312DBA69E8EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft Manifest number: 0387 Signing time: Sat 23 Aug 2025 11:42:20 +0000 Manifest this update: Sat 23 Aug 2025 11:37:20 +0000 Manifest next update: Tue 26 Aug 2025 16:58:20 +0000 Files and hashes: 1: CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl (hash: 66W0Fs5jJ2TONWf3m/857t4u4nC5w2IIkw/1CZnGY6E=) 2: 3130332e32302e3136362e302f32332d3234203d3e203538353531.roa (hash: CKy2gQtIBacjD8C67dYMJdlND8CS/j+yiiHq3SKDq4Q=) 3: 3130332e382e37382e302f32332d3234203d3e203538353531.roa (hash: 3rFUXtbuW4eWsGnAQRXWPa2T5G8tLKctM7LWy4Bhpvk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 16:58:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:27:d7:e8:67:82:ed:dc:6c:f1:18:42:0d:4a:31:2d:ba:69:e8:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDC085E3D4D75439AE1BB6CB68F180E81AAD2450 Validity Not Before: Aug 23 11:37:20 2025 GMT Not After : Aug 26 16:58:20 2025 GMT Subject: CN=2B20CF39909D38F562D1A818E85636D18EB6F896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:dc:73:36:37:0e:fb:e6:36:bb:ee:47:cf:9c: d2:79:63:17:63:39:3c:ea:e2:fc:37:fa:9d:77:3c: aa:92:a9:87:5a:a8:ff:03:df:a3:3a:46:ea:1f:52: 50:3b:f0:a9:7e:ef:98:a3:0e:04:4c:d2:b5:30:4d: e6:db:c8:5e:3a:5e:8d:8c:10:ec:af:1d:ac:b4:e8: 3f:02:29:12:b5:e9:40:a4:37:2d:82:c5:27:29:a9: e2:17:5a:89:f1:6f:48:c3:ca:7a:75:43:3a:8d:67: 20:3f:fe:92:f6:b6:48:fe:f8:b7:47:f9:96:f0:0e: 2a:7e:40:c9:d1:86:d8:34:be:f2:3c:6f:c7:84:54: 49:51:9a:b9:b9:de:7a:e1:a6:e6:e9:bd:3d:c5:f6: 28:a4:81:b4:ac:7e:04:61:96:14:27:94:27:62:2d: f5:5c:8b:c6:04:57:9f:d4:bf:63:cc:4d:29:2a:a0: 3c:9c:c4:e9:f2:73:9a:42:25:22:89:f0:95:e6:75: 7a:e3:ec:f7:36:70:f1:56:a3:27:90:6a:1a:9f:e2: b5:b4:d6:1b:8b:d7:68:2a:c5:ce:b7:00:04:af:73: f3:12:10:3e:ce:bc:53:38:4c:dc:cb:cb:28:d6:d0: dd:58:83:e0:80:8c:6f:ef:1d:fb:f1:8c:ce:be:0c: 8d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:20:CF:39:90:9D:38:F5:62:D1:A8:18:E8:56:36:D1:8E:B6:F8:96 X509v3 Authority Key Identifier: keyid:CD:C0:85:E3:D4:D7:54:39:AE:1B:B6:CB:68:F1:80:E8:1A:AD:24:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:5e:62:97:5a:fa:d0:8b:3d:2d:e4:b8:47:cb:c6:3a:8a:da: 5e:1a:80:35:3d:23:f1:cf:c4:d5:4a:37:6f:5a:36:3a:22:a6: a9:18:bc:03:79:1b:a8:9c:3a:a5:86:f4:53:49:9b:a0:40:04: 5b:73:b0:0c:b9:5a:00:17:86:e4:4c:be:e9:98:5c:53:b4:aa: ae:b0:ff:b9:7c:b6:b0:d7:78:fc:ad:39:50:ee:08:59:79:f2: e8:fc:28:30:0a:da:6d:3b:5d:2c:70:b0:d5:9a:d4:3e:84:31: 44:60:63:d3:45:c6:fa:02:7d:f8:e1:68:01:76:ba:34:a7:17: e9:48:a9:1c:28:46:d2:02:d6:12:8d:bb:fd:6b:02:13:72:20: c1:0d:93:aa:cf:b3:3c:ae:9c:c4:bf:99:d3:1a:00:77:34:d3: 5f:f6:55:b9:19:6f:31:38:3f:91:84:0c:b2:cf:eb:fc:85:83: 44:be:10:55:e1:6a:bd:20:b4:80:74:6f:3d:66:96:bc:56:4c: e1:82:19:65:41:e8:7e:cb:88:cd:c1:ef:94:7d:17:c8:ac:fc: 65:8d:43:28:fb:e3:ad:fe:5c:70:a7:c9:a5:5b:63:e7:58:a7: d2:8f:3f:aa:25:67:52:ea:0d:99:31:3a:1e:27:be:0f:58:0b: 0b:31:b3:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNCfX6GeC7dxs8RhCDUoxLbpp6O4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RDMDg1RTNENEQ3NTQzOUFFMUJCNkNCNjhGMTgwRTgx QUFEMjQ1MDAeFw0yNTA4MjMxMTM3MjBaFw0yNTA4MjYxNjU4MjBaMDMxMTAvBgNV BAMTKDJCMjBDRjM5OTA5RDM4RjU2MkQxQTgxOEU4NTYzNkQxOEVCNkY4OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf3HM2Nw775ja77kfPnNJ5Yxdj OTzq4vw3+p13PKqSqYdaqP8D36M6RuofUlA78Kl+75ijDgRM0rUwTebbyF46Xo2M EOyvHay06D8CKRK16UCkNy2CxScpqeIXWonxb0jDynp1QzqNZyA//pL2tkj++LdH +ZbwDip+QMnRhtg0vvI8b8eEVElRmrm53nrhpubpvT3F9iikgbSsfgRhlhQnlCdi LfVci8YEV5/Uv2PMTSkqoDycxOnyc5pCJSKJ8JXmdXrj7Pc2cPFWoyeQahqf4rW0 1huL12gqxc63AASvc/MSED7OvFM4TNzLyyjW0N1Yg+CAjG/vHfvxjM6+DI2fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKyDPOZCdOPVi0agY6FY20Y62+JYwHwYDVR0j BBgwFoAUzcCF49TXVDmuG7bLaPGA6BqtJFAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDBlMGRlYS01ZjliLTQyNWMtODJjZS0zMGE4NjUwMDdjMzUvMC9DREMwODVFM0Q0 RDc1NDM5QUUxQkI2Q0I2OEYxODBFODFBQUQyNDUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0RDMDg1RTNENEQ3NTQzOUFFMUJCNkNCNjhGMTgwRTgxQUFE MjQ1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQwZTBkZWEtNWY5Yi00MjVjLTgy Y2UtMzBhODY1MDA3YzM1LzAvQ0RDMDg1RTNENEQ3NTQzOUFFMUJCNkNCNjhGMTgw RTgxQUFEMjQ1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADteYpda+tCLPS3kuEfLxjqK2l4agDU9I/HP xNVKN29aNjoipqkYvAN5G6icOqWG9FNJm6BABFtzsAy5WgAXhuRMvumYXFO0qq6w /7l8trDXePytOVDuCFl58uj8KDAK2m07XSxwsNWa1D6EMURgY9NFxvoCffjhaAF2 ujSnF+lIqRwoRtIC1hKNu/1rAhNyIMENk6rPszyunMS/mdMaAHc001/2VbkZbzE4 P5GEDLLP6/yFg0S+EFXhar0gtIB0bz1mlrxWTOGCGWVB6H7LiM3B75R9F8is/GWN Qyj7463+XHCnyaVbY+dYp9KPP6olZ1LqDZkxOh4nvg9YCwsxs54= -----END CERTIFICATE-----Generated at Sat Aug 23 18:31:09 2025 by rpki-client