$ rpki-client -vvf repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.mft File: C2E929DFB05F81B91880BC808154365AECAC27D2.mft (raw, json) Hash identifier: 3Ssne+7C6NChXTUnNER8/VHSV7LYNJEtNFnIKrShOdY= Subject key identifier: 50:6E:54:F7:B3:C3:13:3B:7C:43:73:54:A6:A5:A5:28:5C:7C:FC:1E Authority key identifier: C2:E9:29:DF:B0:5F:81:B9:18:80:BC:80:81:54:36:5A:EC:AC:27:D2 Certificate issuer: /CN=C2E929DFB05F81B91880BC808154365AECAC27D2 Certificate serial: 6DB593C6991231592F115B7F0527C7F4B9FF007D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E929DFB05F81B91880BC808154365AECAC27D2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.mft Manifest number: 0110 Signing time: Sun 20 Jul 2025 04:01:39 +0000 Manifest this update: Sun 20 Jul 2025 03:56:39 +0000 Manifest next update: Wed 23 Jul 2025 08:04:39 +0000 Files and hashes: 1: C2E929DFB05F81B91880BC808154365AECAC27D2.crl (hash: xB8XB6HtkRuJajwaqu/pZ7bqNvN0nAlfKs1nmWDehVk=) 2: 3230322e34372e3138362e302f32342d3234203d3e20313532303234.roa (hash: dATjFz2GgCuZI7do22WaaBEM9mGMyqKI+2l7xnlR/rA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.crl rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E929DFB05F81B91880BC808154365AECAC27D2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 08:04:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:b5:93:c6:99:12:31:59:2f:11:5b:7f:05:27:c7:f4:b9:ff:00:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2E929DFB05F81B91880BC808154365AECAC27D2 Validity Not Before: Jul 20 03:56:39 2025 GMT Not After : Jul 23 08:04:39 2025 GMT Subject: CN=506E54F7B3C3133B7C437354A6A5A5285C7CFC1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bf:bb:ef:8d:41:cc:cb:a6:f5:f1:5e:c4:d9: ce:4b:30:2d:35:44:4c:8b:4d:39:15:11:69:d3:d0: 46:2e:d0:b0:3e:de:87:73:28:3c:f5:9c:3a:7d:06: 3c:72:d0:af:aa:08:af:d2:25:0a:8b:b4:22:fa:98: 89:c7:60:04:af:5c:6e:a7:0e:84:d2:5a:d6:4d:61: 4c:1c:0c:90:ed:ea:6c:ad:c1:63:91:13:f8:1b:a2: 73:56:da:ae:bc:ae:bd:d1:98:bd:ef:1f:3e:69:b5: 25:37:fc:db:5b:8f:31:28:ed:c8:8f:c7:29:e0:26: 80:d4:28:41:62:db:31:10:36:1f:7e:5a:d5:9f:0f: 22:dd:37:54:56:b8:e8:43:86:dc:9d:c8:47:6d:bf: cf:ce:02:82:46:04:d9:ed:e0:01:cd:5a:c4:0e:aa: d6:66:34:df:9c:f9:f8:34:1d:29:db:d6:f5:b5:87: e6:4d:b1:7c:7f:62:c1:7f:7a:ec:a2:27:3f:74:e0: da:d8:28:be:77:4d:ee:3d:44:20:2a:8e:76:8c:22: 52:1b:62:1b:91:e9:9c:48:58:e1:83:43:38:98:f5: 16:d6:f5:27:fb:e3:5a:93:bb:ff:e4:cb:04:11:6e: 40:9d:37:9a:c1:b1:e3:94:1a:f9:fa:e0:c4:ab:bb: 5a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:6E:54:F7:B3:C3:13:3B:7C:43:73:54:A6:A5:A5:28:5C:7C:FC:1E X509v3 Authority Key Identifier: keyid:C2:E9:29:DF:B0:5F:81:B9:18:80:BC:80:81:54:36:5A:EC:AC:27:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E929DFB05F81B91880BC808154365AECAC27D2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:d2:5f:3b:1d:45:d7:1b:bf:7c:bf:db:53:81:2a:5b:b5:84: 8c:02:f6:27:89:92:f6:48:6a:25:6c:fe:f6:e1:69:86:e2:0a: 10:d9:81:b6:28:60:15:cf:1a:ec:8d:5f:d0:c5:a4:d1:ac:a9: 0f:d9:ea:09:d4:6f:62:af:1b:bd:13:28:58:aa:47:cc:fe:d0: c3:a2:63:a1:b0:b5:4a:6d:59:cf:8b:68:0a:9a:5e:7b:0f:b7: d7:2b:93:b2:81:13:5c:14:96:3e:4d:00:0e:b4:d4:79:bf:e9: 4e:2a:2b:0f:57:8b:d6:20:92:9c:89:e2:19:38:cd:b0:74:f1: 55:7d:5e:54:98:ed:39:2f:79:34:2b:d5:13:30:3b:ee:06:f4: 69:b2:9b:84:a6:ad:98:3c:06:8f:84:ed:6d:fd:7e:d4:79:4b: 7a:86:d0:f7:d6:3f:da:5c:e4:68:8f:df:0a:17:5f:c1:1e:e2: 35:17:4f:1d:ac:e2:cb:4f:fa:88:3d:d9:02:6f:b2:63:24:ab: 47:12:c7:1c:24:1e:6f:3b:4c:3b:1e:45:d5:75:d2:68:e7:4f: bd:29:88:77:1a:00:b4:b7:0f:85:ef:6f:ea:bf:48:c0:5a:27: af:bf:c8:23:37:c2:22:e1:dc:03:a1:7c:d7:3f:3e:37:79:47: 67:bf:65:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbbWTxpkSMVkvEVt/BSfH9Ln/AH0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJFOTI5REZCMDVGODFCOTE4ODBCQzgwODE1NDM2NUFF Q0FDMjdEMjAeFw0yNTA3MjAwMzU2MzlaFw0yNTA3MjMwODA0MzlaMDMxMTAvBgNV BAMTKDUwNkU1NEY3QjNDMzEzM0I3QzQzNzM1NEE2QTVBNTI4NUM3Q0ZDMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+v7vvjUHMy6b18V7E2c5LMC01 REyLTTkVEWnT0EYu0LA+3odzKDz1nDp9Bjxy0K+qCK/SJQqLtCL6mInHYASvXG6n DoTSWtZNYUwcDJDt6mytwWORE/gbonNW2q68rr3RmL3vHz5ptSU3/NtbjzEo7ciP xyngJoDUKEFi2zEQNh9+WtWfDyLdN1RWuOhDhtydyEdtv8/OAoJGBNnt4AHNWsQO qtZmNN+c+fg0HSnb1vW1h+ZNsXx/YsF/euyiJz904NrYKL53Te49RCAqjnaMIlIb YhuR6ZxIWOGDQziY9RbW9Sf741qTu//kywQRbkCdN5rBseOUGvn64MSru1q7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUG5U97PDEzt8Q3NUpqWlKFx8/B4wHwYDVR0j BBgwFoAUwukp37BfgbkYgLyAgVQ2WuysJ9IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDZmZmFkMi0yMGJjLTQyNDYtODI5My00NDY2NmNlMWNmZTAvMC9DMkU5MjlERkIw NUY4MUI5MTg4MEJDODA4MTU0MzY1QUVDQUMyN0QyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJFOTI5REZCMDVGODFCOTE4ODBCQzgwODE1NDM2NUFFQ0FD MjdEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ2ZmZhZDItMjBiYy00MjQ2LTgy OTMtNDQ2NjZjZTFjZmUwLzAvQzJFOTI5REZCMDVGODFCOTE4ODBCQzgwODE1NDM2 NUFFQ0FDMjdEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHLSXzsdRdcbv3y/21OBKlu1hIwC9ieJkvZI aiVs/vbhaYbiChDZgbYoYBXPGuyNX9DFpNGsqQ/Z6gnUb2KvG70TKFiqR8z+0MOi Y6GwtUptWc+LaAqaXnsPt9crk7KBE1wUlj5NAA601Hm/6U4qKw9Xi9YgkpyJ4hk4 zbB08VV9XlSY7TkveTQr1RMwO+4G9Gmym4SmrZg8Bo+E7W39ftR5S3qG0PfWP9pc 5GiP3woXX8Ee4jUXTx2s4stP+og92QJvsmMkq0cSxxwkHm87TDseRdV10mjnT70p iHcaALS3D4Xvb+q/SMBaJ6+/yCM3wiLh3AOhfNc/Pjd5R2e/ZRs= -----END CERTIFICATE-----Generated at Mon Jul 21 09:03:05 2025 by rpki-client