$ rpki-client -vvf repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft File: CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft (raw, json) Hash identifier: 8i2k6UJ4TP8ZAD7yh/wXXcSPaK6VaGWp1WjZLMaLN2k= Subject key identifier: A1:11:CA:6D:22:37:19:26:92:35:50:07:19:8E:22:DE:41:F4:A2:09 Authority key identifier: CD:C0:85:E3:D4:D7:54:39:AE:1B:B6:CB:68:F1:80:E8:1A:AD:24:50 Certificate issuer: /CN=CDC085E3D4D75439AE1BB6CB68F180E81AAD2450 Certificate serial: 43D52A5E697A8E6B8D81290AB35187E70BA1D453 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft Manifest number: 03A0 Signing time: Sat 18 Oct 2025 20:02:27 +0000 Manifest this update: Sat 18 Oct 2025 19:57:27 +0000 Manifest next update: Wed 22 Oct 2025 03:34:27 +0000 Files and hashes: 1: CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl (hash: a0um3xAQdE5d/0soT7lWKIPpjCLDzcgk4ZQ4YjFkrCU=) 2: 3130332e382e37382e302f32332d3234203d3e203538353531.roa (hash: 3rFUXtbuW4eWsGnAQRXWPa2T5G8tLKctM7LWy4Bhpvk=) 3: 3130332e32302e3136362e302f32332d3234203d3e203538353531.roa (hash: CKy2gQtIBacjD8C67dYMJdlND8CS/j+yiiHq3SKDq4Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 03:34:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:d5:2a:5e:69:7a:8e:6b:8d:81:29:0a:b3:51:87:e7:0b:a1:d4:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDC085E3D4D75439AE1BB6CB68F180E81AAD2450 Validity Not Before: Oct 18 19:57:27 2025 GMT Not After : Oct 22 03:34:27 2025 GMT Subject: CN=A111CA6D2237192692355007198E22DE41F4A209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cf:7b:14:d8:78:9d:88:a8:2a:06:b5:7c:c2: ca:b0:11:5d:69:e5:4f:b9:c4:2c:84:ac:d2:6c:9c: 5d:ad:94:56:ac:1d:ba:2d:6a:7f:91:7c:ef:9c:4b: 6c:05:78:6c:61:2c:da:c1:65:f0:4e:bd:d6:ba:9e: 70:82:6f:ef:ac:b0:3c:9d:a1:dd:73:bc:a5:ee:af: 97:c9:f8:69:e6:43:ad:10:32:e2:15:f5:78:bf:78: ba:df:a0:58:51:01:fe:78:e3:79:3a:25:87:21:78: 64:68:f5:e3:e4:f4:89:74:7e:d7:6e:51:4d:3d:6c: ba:0e:a2:91:14:01:19:70:5a:39:32:36:6f:88:d0: 34:ed:68:b8:0f:e7:9a:6e:34:a6:b1:d2:8e:0f:42: 5c:3b:d6:b9:f5:cb:b1:69:91:f1:3f:07:2e:94:3b: 12:f9:b4:64:e8:2b:4e:0d:13:f4:51:c6:d8:09:85: cb:0c:0c:c4:4b:d3:3a:44:13:34:b0:91:cc:95:85: 27:86:a5:64:45:6a:e9:fd:12:cc:23:c9:4c:2a:6f: 55:02:98:5c:9f:fd:74:99:0a:7b:40:ca:77:a5:e2: 5a:c4:d6:6e:e9:cc:f5:f9:04:0f:1d:0d:f8:c6:6e: 60:a8:86:7e:a0:42:4d:01:c7:75:e2:3a:15:cf:e5: d0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:11:CA:6D:22:37:19:26:92:35:50:07:19:8E:22:DE:41:F4:A2:09 X509v3 Authority Key Identifier: keyid:CD:C0:85:E3:D4:D7:54:39:AE:1B:B6:CB:68:F1:80:E8:1A:AD:24:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:5a:33:95:53:ac:3a:bd:ee:95:72:95:dc:33:fc:6d:09:62: d3:cd:eb:94:15:c0:05:f1:9b:25:0f:a1:e9:e9:89:a6:91:af: 57:e4:92:69:75:c8:44:c0:ce:42:74:c8:d6:52:70:8c:a6:5e: 8f:be:62:ff:80:09:76:eb:77:aa:1f:f2:46:e0:bc:d9:a6:71: b1:be:fe:f1:00:5b:6f:7f:2d:c7:aa:50:b2:c6:9e:fe:e2:9a: 50:e6:5b:2b:24:7d:11:d8:96:94:66:96:ba:18:e7:de:7f:36: 03:4f:85:ee:19:66:24:98:44:6b:2c:12:bd:54:50:cd:6e:a9: b3:6a:4c:57:19:d4:c5:3e:ea:0a:30:10:61:70:da:1c:90:39: 98:e2:4b:c3:8d:9d:d1:c5:8e:f5:41:4b:e8:a4:15:a0:69:45: c5:73:76:58:03:2e:2e:d5:94:09:23:bc:d4:21:c9:8f:75:e6: 31:e5:28:74:2b:bd:27:ed:6c:7c:c0:a8:ae:24:9b:9b:58:08: 50:b3:02:34:0e:d5:9e:bc:b0:17:f3:c9:d2:57:6f:d0:3e:59: 63:7c:ee:a2:4b:11:c1:f0:e6:5d:c0:b1:a0:41:3b:ae:30:b4: a3:3a:f7:10:6c:a9:6f:fe:87:29:a7:e0:7c:b8:09:f7:87:f3: 32:57:46:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ9UqXml6jmuNgSkKs1GH5wuh1FMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RDMDg1RTNENEQ3NTQzOUFFMUJCNkNCNjhGMTgwRTgx QUFEMjQ1MDAeFw0yNTEwMTgxOTU3MjdaFw0yNTEwMjIwMzM0MjdaMDMxMTAvBgNV BAMTKEExMTFDQTZEMjIzNzE5MjY5MjM1NTAwNzE5OEUyMkRFNDFGNEEyMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9z3sU2HidiKgqBrV8wsqwEV1p 5U+5xCyErNJsnF2tlFasHbotan+RfO+cS2wFeGxhLNrBZfBOvda6nnCCb++ssDyd od1zvKXur5fJ+GnmQ60QMuIV9Xi/eLrfoFhRAf5443k6JYcheGRo9ePk9Il0ftdu UU09bLoOopEUARlwWjkyNm+I0DTtaLgP55puNKax0o4PQlw71rn1y7FpkfE/By6U OxL5tGToK04NE/RRxtgJhcsMDMRL0zpEEzSwkcyVhSeGpWRFaun9EswjyUwqb1UC mFyf/XSZCntAynel4lrE1m7pzPX5BA8dDfjGbmCohn6gQk0Bx3XiOhXP5dDVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoRHKbSI3GSaSNVAHGY4i3kH0ogkwHwYDVR0j BBgwFoAUzcCF49TXVDmuG7bLaPGA6BqtJFAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDBlMGRlYS01ZjliLTQyNWMtODJjZS0zMGE4NjUwMDdjMzUvMC9DREMwODVFM0Q0 RDc1NDM5QUUxQkI2Q0I2OEYxODBFODFBQUQyNDUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0RDMDg1RTNENEQ3NTQzOUFFMUJCNkNCNjhGMTgwRTgxQUFE MjQ1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQwZTBkZWEtNWY5Yi00MjVjLTgy Y2UtMzBhODY1MDA3YzM1LzAvQ0RDMDg1RTNENEQ3NTQzOUFFMUJCNkNCNjhGMTgw RTgxQUFEMjQ1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAItaM5VTrDq97pVyldwz/G0JYtPN65QVwAXx myUPoenpiaaRr1fkkml1yETAzkJ0yNZScIymXo++Yv+ACXbrd6of8kbgvNmmcbG+ /vEAW29/LceqULLGnv7imlDmWyskfRHYlpRmlroY595/NgNPhe4ZZiSYRGssEr1U UM1uqbNqTFcZ1MU+6gowEGFw2hyQOZjiS8ONndHFjvVBS+ikFaBpRcVzdlgDLi7V lAkjvNQhyY915jHlKHQrvSftbHzAqK4km5tYCFCzAjQO1Z68sBfzydJXb9A+WWN8 7qJLEcHw5l3AsaBBO64wtKM69xBsqW/+hymn4Hy4CfeH8zJXRpk= -----END CERTIFICATE-----Generated at Mon Oct 20 09:29:08 2025 by rpki-client