$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft File: C2E1998AC1681A41F68250BFABD05A982E00EA44.mft (raw, json) Hash identifier: YBl3EfG8fvdXaGYHm2748oMcYbSlEOluUPNDL57rkKQ= Subject key identifier: D4:C7:90:CD:4E:3D:4B:C5:67:73:C5:BD:44:4F:FF:4B:E7:A7:48:67 Authority key identifier: C2:E1:99:8A:C1:68:1A:41:F6:82:50:BF:AB:D0:5A:98:2E:00:EA:44 Certificate issuer: /CN=C2E1998AC1681A41F68250BFABD05A982E00EA44 Certificate serial: 5A6E1FC2E62530EB96BDEAB1224352865A5F431A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E1998AC1681A41F68250BFABD05A982E00EA44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft Manifest number: B7 Signing time: Sun 20 Jul 2025 01:52:00 +0000 Manifest this update: Sun 20 Jul 2025 01:47:00 +0000 Manifest next update: Wed 23 Jul 2025 13:46:00 +0000 Files and hashes: 1: 323030313a6466333a653034303a3a2f34382d3438203d3e20313532383036.roa (hash: 7Sjy07nIz40VYuiQAAUvMHjSS6WBBJpcxOEZMkh16GE=) 2: C2E1998AC1681A41F68250BFABD05A982E00EA44.crl (hash: 2kFcajl8X+V7jj8JPBTZTmNwAeLZFLeoNcZU3RCJNDo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.crl rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E1998AC1681A41F68250BFABD05A982E00EA44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 13:46:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:6e:1f:c2:e6:25:30:eb:96:bd:ea:b1:22:43:52:86:5a:5f:43:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2E1998AC1681A41F68250BFABD05A982E00EA44 Validity Not Before: Jul 20 01:47:00 2025 GMT Not After : Jul 23 13:46:00 2025 GMT Subject: CN=D4C790CD4E3D4BC56773C5BD444FFF4BE7A74867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3a:37:b6:67:59:c2:23:63:18:51:86:d1:97: bc:db:e8:93:fe:29:99:00:75:e0:93:36:89:34:83: 1e:f9:3d:08:8a:35:da:d7:a2:8f:04:ac:92:9b:8b: b7:d0:0b:02:30:6a:c8:69:01:24:1b:47:b5:e6:e7: eb:cc:8b:96:ad:f0:a4:12:5f:da:11:d3:59:aa:4b: 4e:68:db:2c:f2:84:c6:95:47:d1:c8:2d:42:45:29: 66:51:d9:62:8b:5b:fa:4a:36:d8:bf:1a:5b:f9:1f: 5a:ed:cc:db:b3:39:2e:aa:f4:58:f5:55:7c:71:55: 11:60:24:5e:7f:df:97:6e:ac:97:85:12:6a:f8:15: 13:fb:f9:d6:32:5a:20:b3:ec:05:f3:a1:46:4c:99: ca:80:a0:ff:a4:77:85:27:91:e1:69:98:88:c0:86: 09:e5:d3:f0:81:28:02:cd:a6:c7:8b:eb:56:00:91: ab:b7:ba:16:27:6c:e9:c3:4a:0f:3b:83:46:66:7a: 05:95:04:22:46:cc:ae:29:47:23:58:e1:4d:36:99: 06:e1:ce:ab:4a:04:16:61:bc:22:31:fb:36:ea:b5: a2:d6:b8:e3:fe:e9:ae:80:59:98:a2:5b:67:09:41: d3:56:aa:ec:75:53:c0:51:6a:ca:98:d8:34:69:bc: 51:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C7:90:CD:4E:3D:4B:C5:67:73:C5:BD:44:4F:FF:4B:E7:A7:48:67 X509v3 Authority Key Identifier: keyid:C2:E1:99:8A:C1:68:1A:41:F6:82:50:BF:AB:D0:5A:98:2E:00:EA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E1998AC1681A41F68250BFABD05A982E00EA44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:ab:e9:4a:a9:6f:23:64:d7:1d:70:a2:17:18:f5:74:c2:bc: e5:06:f8:8b:07:d0:68:19:4f:23:c7:ad:d9:f6:07:40:c4:a8: b9:5d:a6:a8:c8:de:02:c5:e5:ce:83:4b:56:82:d3:17:ce:14: 20:6c:2d:a7:a5:c7:ff:63:d5:0f:1b:44:8c:58:2a:71:97:7f: d1:c1:a0:99:e4:b7:49:bc:2e:ee:a4:f2:b8:d3:67:31:c2:b8: 22:a2:ec:54:34:a3:57:5d:da:4f:8e:dd:69:28:59:e0:f3:62: 55:05:ad:09:fe:4c:69:67:83:2e:f3:3c:70:2b:4d:07:7a:f6: aa:a3:e6:aa:a2:b7:ab:7d:cb:53:3c:2a:11:cd:14:20:84:8d: 4f:7b:04:12:0b:ae:66:e4:0d:2a:c0:eb:3c:08:9a:7b:9e:8a: a8:8f:6c:bc:50:54:1c:4a:b9:ea:bb:c8:29:9e:9d:7c:5c:21: 1c:27:b6:ab:e1:67:b2:61:07:dc:26:ae:a8:e2:bb:04:3c:16: ae:00:27:b8:41:3b:d2:ba:39:48:03:2f:cd:b5:be:11:3c:b3: 99:58:52:51:97:56:f0:fc:df:06:19:39:ee:34:f7:71:d9:39: f1:30:4a:8f:07:bb:b4:df:f3:7a:cd:b2:93:cd:40:5c:59:10: b2:38:86:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWm4fwuYlMOuWveqxIkNShlpfQxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJFMTk5OEFDMTY4MUE0MUY2ODI1MEJGQUJEMDVBOTgy RTAwRUE0NDAeFw0yNTA3MjAwMTQ3MDBaFw0yNTA3MjMxMzQ2MDBaMDMxMTAvBgNV BAMTKEQ0Qzc5MENENEUzRDRCQzU2NzczQzVCRDQ0NEZGRjRCRTdBNzQ4NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDOje2Z1nCI2MYUYbRl7zb6JP+ KZkAdeCTNok0gx75PQiKNdrXoo8ErJKbi7fQCwIwashpASQbR7Xm5+vMi5at8KQS X9oR01mqS05o2yzyhMaVR9HILUJFKWZR2WKLW/pKNti/Glv5H1rtzNuzOS6q9Fj1 VXxxVRFgJF5/35durJeFEmr4FRP7+dYyWiCz7AXzoUZMmcqAoP+kd4UnkeFpmIjA hgnl0/CBKALNpseL61YAkau3uhYnbOnDSg87g0ZmegWVBCJGzK4pRyNY4U02mQbh zqtKBBZhvCIx+zbqtaLWuOP+6a6AWZiiW2cJQdNWqux1U8BRasqY2DRpvFFXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1MeQzU49S8Vnc8W9RE//S+enSGcwHwYDVR0j BBgwFoAUwuGZisFoGkH2glC/q9BamC4A6kQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRjZTM5MS1hNWQzLTQxMWItYTk3Yi1lODYyZmJmNTYzMWMvMS9DMkUxOTk4QUMx NjgxQTQxRjY4MjUwQkZBQkQwNUE5ODJFMDBFQTQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJFMTk5OEFDMTY4MUE0MUY2ODI1MEJGQUJEMDVBOTgyRTAw RUE0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkY2UzOTEtYTVkMy00MTFiLWE5 N2ItZTg2MmZiZjU2MzFjLzEvQzJFMTk5OEFDMTY4MUE0MUY2ODI1MEJGQUJEMDVB OTgyRTAwRUE0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJKr6UqpbyNk1x1wohcY9XTCvOUG+IsH0GgZ TyPHrdn2B0DEqLldpqjI3gLF5c6DS1aC0xfOFCBsLaelx/9j1Q8bRIxYKnGXf9HB oJnkt0m8Lu6k8rjTZzHCuCKi7FQ0o1dd2k+O3WkoWeDzYlUFrQn+TGlngy7zPHAr TQd69qqj5qqit6t9y1M8KhHNFCCEjU97BBILrmbkDSrA6zwImnueiqiPbLxQVBxK ueq7yCmenXxcIRwntqvhZ7JhB9wmrqjiuwQ8Fq4AJ7hBO9K6OUgDL821vhE8s5lY UlGXVvD83wYZOe4093HZOfEwSo8Hu7Tf83rNspPNQFxZELI4hqs= -----END CERTIFICATE-----Generated at Mon Jul 21 21:18:58 2025 by rpki-client