$ rpki-client -vvf repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft File: 2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft (raw, json) Hash identifier: pNeLhMGGNSv0Bfqqy1bx7NxamUrKH1vcWpj8JA8Y4dg= Subject key identifier: DB:73:C0:E0:25:E9:ED:78:79:5D:F4:05:BB:14:E3:15:74:A4:FB:6C Authority key identifier: 2C:B2:1E:F3:36:B6:AB:46:40:E4:61:96:01:E0:F6:48:8C:B8:FD:52 Certificate issuer: /CN=2CB21EF336B6AB4640E4619601E0F6488CB8FD52 Certificate serial: 51A8BB8D065967DBAD8A6CCCF4331E14BECAF451 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft Manifest number: 031F Signing time: Sat 19 Jul 2025 23:31:57 +0000 Manifest this update: Sat 19 Jul 2025 23:26:57 +0000 Manifest next update: Wed 23 Jul 2025 00:49:57 +0000 Files and hashes: 1: 3130332e3136302e31322e302f32332d3234203d3e20313331313131.roa (hash: 2TjUbAwclmvFhuQfA5b8APF/xfL7qfTm8NzkksHu4ng=) 2: 2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl (hash: JIQLRymvfqCvOEbiiB/bW0wwWX3VoB7NrQJ8EsHSMUw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 00:49:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:a8:bb:8d:06:59:67:db:ad:8a:6c:cc:f4:33:1e:14:be:ca:f4:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CB21EF336B6AB4640E4619601E0F6488CB8FD52 Validity Not Before: Jul 19 23:26:57 2025 GMT Not After : Jul 23 00:49:57 2025 GMT Subject: CN=DB73C0E025E9ED78795DF405BB14E31574A4FB6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:97:9c:88:47:73:da:ad:8c:9a:e2:a5:3d:80: 85:1f:7c:c3:8b:a6:6d:12:45:bb:ce:67:79:17:be: b0:87:22:07:2e:cf:ae:c0:b2:01:fe:6b:a3:8d:ed: 03:23:55:98:e0:cf:00:05:d4:e4:9f:55:3d:84:7d: 14:58:65:66:ab:75:58:d6:a2:a9:e7:5e:a1:74:3e: 5f:18:aa:d9:13:3e:96:a2:3f:3b:5a:cb:2d:3f:fa: cf:61:a9:4e:fd:1f:d4:2f:b3:be:06:19:45:0a:9c: 48:2c:a0:ec:df:2d:6e:25:d5:bf:8f:a9:63:29:ef: 9c:ac:44:d0:10:8d:e7:49:89:18:aa:13:75:22:6f: c2:ab:05:a7:f5:74:43:67:3a:9c:38:b1:5e:83:85: 21:d4:64:cd:af:f2:f9:07:dd:7f:af:1e:69:9c:ef: 9d:57:73:9c:8d:42:24:d0:23:d9:69:50:d6:3f:a4: 0e:a6:da:18:16:30:9e:6e:5f:38:e0:3c:85:48:77: 11:77:2b:be:f9:b8:4d:ff:26:41:7b:ae:11:3f:9f: ff:13:85:ee:c2:3e:91:81:d0:af:88:79:42:d9:af: 57:41:31:66:7f:52:09:a2:28:bb:67:d3:58:03:ee: 68:83:2d:97:ad:73:31:2a:7b:05:83:e4:0b:6a:29: a5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:73:C0:E0:25:E9:ED:78:79:5D:F4:05:BB:14:E3:15:74:A4:FB:6C X509v3 Authority Key Identifier: keyid:2C:B2:1E:F3:36:B6:AB:46:40:E4:61:96:01:E0:F6:48:8C:B8:FD:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:d5:aa:47:f9:47:f9:0c:c2:ec:42:32:d1:5b:08:19:94:00: 97:86:42:ed:25:93:e1:51:a0:f5:c7:38:c0:e7:12:be:c7:dc: 90:d4:0f:b9:cd:93:c6:a0:ef:5e:f1:1c:66:8d:2b:25:e5:52: 1c:80:90:23:bb:47:ae:b0:ed:12:15:93:9f:b2:b2:d4:13:da: 10:40:93:8c:ae:1e:fd:07:46:e6:02:b0:6a:6f:40:ee:d5:f4: 48:6a:d3:a6:14:2a:aa:88:d1:10:a3:79:af:3f:ad:05:95:25: cb:41:1f:4b:db:49:5d:b2:ee:26:55:65:4b:e9:b6:e6:be:7c: 81:d8:56:0c:34:08:e1:98:39:50:1a:78:80:98:18:05:58:a2: 8b:ad:a6:cf:01:33:24:4e:dc:ae:52:c0:29:46:57:44:a0:71: 5b:bc:63:14:c5:88:55:8d:cc:fc:54:dd:00:ba:ff:1c:66:b5: a7:f7:55:c5:18:1c:e1:54:b2:5d:71:51:2f:fb:3f:18:7e:04: 20:fa:21:38:2c:0a:49:63:8e:1c:57:86:83:70:04:65:2d:d5: e5:d9:cd:87:d6:c0:eb:06:b2:1f:eb:b1:db:4c:62:f4:b7:0b: 1a:42:b4:b3:f8:35:81:1d:04:b1:67:55:3f:f3:ff:fc:91:45: 68:40:bc:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUai7jQZZZ9utimzM9DMeFL7K9FEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2NDg4 Q0I4RkQ1MjAeFw0yNTA3MTkyMzI2NTdaFw0yNTA3MjMwMDQ5NTdaMDMxMTAvBgNV BAMTKERCNzNDMEUwMjVFOUVENzg3OTVERjQwNUJCMTRFMzE1NzRBNEZCNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/l5yIR3ParYya4qU9gIUffMOL pm0SRbvOZ3kXvrCHIgcuz67AsgH+a6ON7QMjVZjgzwAF1OSfVT2EfRRYZWardVjW oqnnXqF0Pl8YqtkTPpaiPztayy0/+s9hqU79H9Qvs74GGUUKnEgsoOzfLW4l1b+P qWMp75ysRNAQjedJiRiqE3Uib8KrBaf1dENnOpw4sV6DhSHUZM2v8vkH3X+vHmmc 751Xc5yNQiTQI9lpUNY/pA6m2hgWMJ5uXzjgPIVIdxF3K775uE3/JkF7rhE/n/8T he7CPpGB0K+IeULZr1dBMWZ/UgmiKLtn01gD7miDLZetczEqewWD5AtqKaVxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU23PA4CXp7Xh5XfQFuxTjFXSk+2wwHwYDVR0j BBgwFoAULLIe8za2q0ZA5GGWAeD2SIy4/VIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGM2Zjc3MC02ODZhLTQ1ZWYtOGRmYi0wYzNhODdkM2Q4ZGEvMC8yQ0IyMUVGMzM2 QjZBQjQ2NDBFNDYxOTYwMUUwRjY0ODhDQjhGRDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2NDg4Q0I4 RkQ1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRjNmY3NzAtNjg2YS00NWVmLThk ZmItMGMzYTg3ZDNkOGRhLzAvMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2 NDg4Q0I4RkQ1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHjVqkf5R/kMwuxCMtFbCBmUAJeGQu0lk+FR oPXHOMDnEr7H3JDUD7nNk8ag717xHGaNKyXlUhyAkCO7R66w7RIVk5+ystQT2hBA k4yuHv0HRuYCsGpvQO7V9Ehq06YUKqqI0RCjea8/rQWVJctBH0vbSV2y7iZVZUvp tua+fIHYVgw0COGYOVAaeICYGAVYooutps8BMyRO3K5SwClGV0SgcVu8YxTFiFWN zPxU3QC6/xxmtaf3VcUYHOFUsl1xUS/7Pxh+BCD6ITgsCkljjhxXhoNwBGUt1eXZ zYfWwOsGsh/rsdtMYvS3CxpCtLP4NYEdBLFnVT/z//yRRWhAvFc= -----END CERTIFICATE-----Generated at Mon Jul 21 18:10:14 2025 by rpki-client