$ rpki-client -vvf repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft File: 2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft (raw, json) Hash identifier: QRZaDJakWd+eL79LIvcVtd8shjTQ4WkGPsquWQ0KLR4= Subject key identifier: BF:2C:37:A9:2A:07:A6:F5:A4:B9:5E:87:69:6D:E4:11:A9:A7:6B:21 Authority key identifier: 2C:83:67:04:27:BB:EA:5D:CC:6E:4F:5F:7E:E2:34:2D:B5:DC:2B:2E Certificate issuer: /CN=2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E Certificate serial: 2AD779A21AC40975571DF492AD9937A48FD6E124 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft Manifest number: E6 Signing time: Sat 19 Jul 2025 16:21:14 +0000 Manifest this update: Sat 19 Jul 2025 16:16:14 +0000 Manifest next update: Tue 22 Jul 2025 23:16:14 +0000 Files and hashes: 1: 2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.crl (hash: gp7P9297Cyy8pLW0M4evNTSAnqx9U+6Yv7PaytERUGk=) 2: 3130332e3133312e35312e302f32342d3234203d3e20313331373735.roa (hash: T56TwNuf3EVVKNZ4lQ8Ldgdic1XY2tNrYbscCPFk9Pg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.crl rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 23:16:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:d7:79:a2:1a:c4:09:75:57:1d:f4:92:ad:99:37:a4:8f:d6:e1:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E Validity Not Before: Jul 19 16:16:14 2025 GMT Not After : Jul 22 23:16:14 2025 GMT Subject: CN=BF2C37A92A07A6F5A4B95E87696DE411A9A76B21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6b:8f:8c:ef:be:d9:84:3b:35:c1:44:21:59: 5b:f8:37:a6:ab:89:b4:73:4f:9d:99:f0:72:99:8e: 2e:10:c7:bc:8d:28:db:8f:a0:7f:13:f2:60:13:4a: ac:4e:79:f3:92:ba:af:ad:5d:15:bb:fd:2a:b0:b6: 66:ca:68:83:87:c2:0d:38:f2:72:e0:f6:f7:1d:ff: e9:6a:24:6a:8b:fb:13:ea:73:5a:06:0d:df:dd:2f: 94:74:49:1c:29:61:31:bc:94:00:06:7e:e8:ba:8e: c7:de:e4:a8:7c:4f:73:68:86:a5:37:18:5d:df:50: 18:8c:aa:47:0e:a9:79:99:99:77:46:51:11:39:5f: 6d:e5:12:e2:5d:bc:2f:61:96:66:52:f1:2c:40:10: 89:09:79:e2:41:d6:da:4a:ac:9d:5e:05:f2:f7:ce: 93:1e:b7:69:5e:45:fa:49:40:d6:b5:5f:36:01:fc: 90:cb:d4:4a:ba:78:ed:65:71:45:fc:8c:af:32:cf: 32:28:85:97:1d:5d:d9:f1:a7:5d:25:d6:f8:47:0d: 8e:54:da:0d:1a:41:ed:e5:b7:68:31:83:07:76:ea: 20:94:47:74:cb:74:f0:93:27:a3:27:7a:1f:0b:4e: fb:41:91:22:d2:2b:bc:e5:60:84:42:ce:f3:58:ca: 67:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:2C:37:A9:2A:07:A6:F5:A4:B9:5E:87:69:6D:E4:11:A9:A7:6B:21 X509v3 Authority Key Identifier: keyid:2C:83:67:04:27:BB:EA:5D:CC:6E:4F:5F:7E:E2:34:2D:B5:DC:2B:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:65:1d:4b:f9:a2:af:d6:02:69:a3:f6:c5:d7:8c:3a:af:b3: 0a:da:6e:48:fe:a8:99:d0:37:dc:42:31:63:41:16:4b:ba:e7: d5:76:8b:31:d7:2f:fe:be:04:c9:0c:85:82:af:04:e0:14:f0: 98:50:b6:92:82:08:c3:99:7b:d2:df:82:08:88:11:36:69:dd: cd:9d:59:f6:d3:d0:dc:97:d0:bd:09:56:bf:02:a2:5e:b8:04: a4:d1:30:4b:ea:1d:69:e4:0d:36:b0:70:90:1d:8d:42:6d:ec: d8:7c:3e:4a:75:2f:76:08:ee:55:d6:d4:6c:6f:95:b0:73:f0: 94:9a:3a:c3:06:87:26:80:9e:42:db:5b:3b:2e:ba:30:15:6c: 72:b6:fd:d5:e5:d8:c2:75:64:9b:a9:6b:42:40:d9:8c:8c:be: 63:52:89:ca:2a:78:4f:79:a5:9d:4f:26:d4:15:53:59:66:c3: dc:65:1c:1e:fa:13:bb:3c:be:0e:21:2d:10:3d:9b:b5:f8:c9: fd:80:c8:64:d3:78:6d:66:ed:78:8b:50:57:11:77:4d:37:9a: 73:31:98:04:2c:c5:dd:0c:be:78:96:6b:db:29:0f:20:0d:4e: 6e:57:52:07:b7:ed:1b:80:0b:ee:30:a3:ef:57:33:a4:01:fd: 3b:e0:23:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKtd5ohrECXVXHfSSrZk3pI/W4SQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM4MzY3MDQyN0JCRUE1RENDNkU0RjVGN0VFMjM0MkRC NURDMkIyRTAeFw0yNTA3MTkxNjE2MTRaFw0yNTA3MjIyMzE2MTRaMDMxMTAvBgNV BAMTKEJGMkMzN0E5MkEwN0E2RjVBNEI5NUU4NzY5NkRFNDExQTlBNzZCMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQa4+M777ZhDs1wUQhWVv4N6ar ibRzT52Z8HKZji4Qx7yNKNuPoH8T8mATSqxOefOSuq+tXRW7/SqwtmbKaIOHwg04 8nLg9vcd/+lqJGqL+xPqc1oGDd/dL5R0SRwpYTG8lAAGfui6jsfe5Kh8T3NohqU3 GF3fUBiMqkcOqXmZmXdGURE5X23lEuJdvC9hlmZS8SxAEIkJeeJB1tpKrJ1eBfL3 zpMet2leRfpJQNa1XzYB/JDL1Eq6eO1lcUX8jK8yzzIohZcdXdnxp10l1vhHDY5U 2g0aQe3lt2gxgwd26iCUR3TLdPCTJ6Mneh8LTvtBkSLSK7zlYIRCzvNYymdxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvyw3qSoHpvWkuV6HaW3kEamnayEwHwYDVR0j BBgwFoAULINnBCe76l3Mbk9ffuI0LbXcKy4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NGI0ZWM5OC00ZDFmLTRlNmYtYTc2OC0wMjY4OTQyMDIyMjMvMC8yQzgzNjcwNDI3 QkJFQTVEQ0M2RTRGNUY3RUUyMzQyREI1REMyQjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkM4MzY3MDQyN0JCRUE1RENDNkU0RjVGN0VFMjM0MkRCNURD MkIyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjRiNGVjOTgtNGQxZi00ZTZmLWE3 NjgtMDI2ODk0MjAyMjIzLzAvMkM4MzY3MDQyN0JCRUE1RENDNkU0RjVGN0VFMjM0 MkRCNURDMkIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL1lHUv5oq/WAmmj9sXXjDqvswrabkj+qJnQ N9xCMWNBFku659V2izHXL/6+BMkMhYKvBOAU8JhQtpKCCMOZe9LfggiIETZp3c2d WfbT0NyX0L0JVr8Col64BKTRMEvqHWnkDTawcJAdjUJt7Nh8Pkp1L3YI7lXW1Gxv lbBz8JSaOsMGhyaAnkLbWzsuujAVbHK2/dXl2MJ1ZJupa0JA2YyMvmNSicoqeE95 pZ1PJtQVU1lmw9xlHB76E7s8vg4hLRA9m7X4yf2AyGTTeG1m7XiLUFcRd003mnMx mAQsxd0MvniWa9spDyANTm5XUge37RuAC+4wo+9XM6QB/TvgI48= -----END CERTIFICATE-----Generated at Mon Jul 21 18:08:05 2025 by rpki-client