$ rpki-client -vvf repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft File: C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft (raw, json) Hash identifier: BROlCGLEzo0YTIAuAlWKWdmh+sn7IEzRS2Pi+wKpL3Q= Subject key identifier: 22:5B:2A:4D:EF:3A:FF:B1:2C:46:1E:C3:9D:7E:B9:E8:BC:C4:62:36 Authority key identifier: C2:CA:98:CA:4D:D8:8D:73:DB:67:A2:41:73:E2:9F:FA:5D:11:64:02 Certificate issuer: /CN=C2CA98CA4DD88D73DB67A24173E29FFA5D116402 Certificate serial: 699C3CD52E2C15C68346DF2FA126429DE080B675 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer Subject info access: rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft Manifest number: 0200 Signing time: Fri 06 Jun 2025 04:01:09 +0000 Manifest this update: Fri 06 Jun 2025 03:56:09 +0000 Manifest next update: Mon 09 Jun 2025 15:34:09 +0000 Files and hashes: 1: C2CA98CA4DD88D73DB67A24173E29FFA5D116402.crl (hash: 1QfCUbMYCjSuOwEbMohWd5cdeLMtry541uvu7GY+3xY=) 2: 3130332e38312e36302e302f32322d3234203d3e20313336303630.roa (hash: fSyZW5UURSSq8c97wxQl2sx5mMYsc0LA9hnaSF/iy/A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.crl rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 15:34:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:9c:3c:d5:2e:2c:15:c6:83:46:df:2f:a1:26:42:9d:e0:80:b6:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2CA98CA4DD88D73DB67A24173E29FFA5D116402 Validity Not Before: Jun 6 03:56:09 2025 GMT Not After : Jun 9 15:34:09 2025 GMT Subject: CN=225B2A4DEF3AFFB12C461EC39D7EB9E8BCC46236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0a:ec:c7:03:96:93:1f:68:50:c7:57:bc:b8: 96:3c:6d:26:db:26:d6:ae:5d:38:d9:4e:e9:63:55: 8b:c1:43:a1:a4:48:4e:c0:34:8d:ab:e9:36:95:aa: 38:97:6b:36:3f:cd:22:01:d5:f0:08:d9:a9:01:04: 1c:c9:7e:57:e3:d6:03:b0:5a:d7:96:48:88:f3:e0: c4:24:f0:f8:e1:bb:c1:5c:0d:f6:dc:81:0d:23:e6: 69:3b:6a:a6:b8:a4:de:51:39:26:a9:4c:6a:df:3d: 15:fd:a6:d1:8e:9f:55:45:34:c1:ef:fe:96:c1:9a: 91:4a:42:b1:42:5e:3e:80:af:b6:0b:76:50:e6:cc: 8e:ce:50:16:5b:a8:83:e7:4a:de:49:1d:65:a8:87: 7c:8c:9d:24:26:4f:b6:a3:e7:6c:36:c1:80:63:96: e5:d1:41:aa:ed:0c:aa:21:1f:0f:bb:df:59:e9:52: 0c:b8:51:3c:65:04:e0:8d:76:48:7e:99:ae:f9:96: 7b:50:43:d4:9e:a9:0c:53:ae:e8:45:38:67:54:86: e1:3e:0e:3e:b5:a8:71:9f:7c:8f:32:fe:d1:6d:ca: 8f:6a:19:1e:b4:ea:db:c5:fa:84:34:d6:e4:db:d2: 3e:c8:e0:b0:6d:68:4c:f9:15:3c:93:5b:7a:57:fd: 83:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:5B:2A:4D:EF:3A:FF:B1:2C:46:1E:C3:9D:7E:B9:E8:BC:C4:62:36 X509v3 Authority Key Identifier: keyid:C2:CA:98:CA:4D:D8:8D:73:DB:67:A2:41:73:E2:9F:FA:5D:11:64:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:81:e8:11:20:d0:77:aa:90:7b:dd:e5:95:f0:5e:3f:51:35: 9f:c4:06:d3:c5:e7:62:55:4b:17:2a:3e:58:0e:db:5a:e5:cc: ef:44:27:4d:62:7e:12:67:d9:bf:15:ca:42:7b:48:a1:35:a6: 78:07:8a:6f:6f:d9:cb:24:ec:dd:72:ac:05:e6:46:b5:e9:dd: 7f:64:77:07:e8:1c:81:d3:5d:83:65:5d:81:70:e3:7c:59:52: 0c:bf:fe:0e:24:4c:8b:0b:b3:74:ca:cf:04:91:6d:28:34:12: 39:39:59:d0:0f:e3:7e:11:9f:4e:66:9d:7c:a2:55:eb:3e:d1: 02:d8:cf:67:65:d8:3c:82:14:b6:29:57:ca:f6:d0:b3:8f:02: aa:78:ed:61:05:c5:fc:60:93:03:71:01:4e:04:b2:77:00:45: c5:35:ec:2e:0a:f3:a5:e0:73:b5:cd:6e:cc:95:fb:5c:2f:be: b1:f6:10:f7:f4:3d:5c:17:b9:fb:a4:e0:7f:9d:41:f7:df:ad: 42:ef:6e:fe:ee:5e:cf:d0:16:87:73:0e:34:49:8d:c6:bf:44: b3:62:e9:fa:bd:5e:01:94:aa:f3:64:82:bb:1c:4a:2d:2d:33: f2:d1:fd:03:aa:c5:ae:b0:09:54:e7:b7:86:68:8b:99:4f:9d: 0f:6b:c8:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaZw81S4sFcaDRt8voSZCneCAtnUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJDQTk4Q0E0REQ4OEQ3M0RCNjdBMjQxNzNFMjlGRkE1 RDExNjQwMjAeFw0yNTA2MDYwMzU2MDlaFw0yNTA2MDkxNTM0MDlaMDMxMTAvBgNV BAMTKDIyNUIyQTRERUYzQUZGQjEyQzQ2MUVDMzlEN0VCOUU4QkNDNDYyMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgCuzHA5aTH2hQx1e8uJY8bSbb JtauXTjZTuljVYvBQ6GkSE7ANI2r6TaVqjiXazY/zSIB1fAI2akBBBzJflfj1gOw WteWSIjz4MQk8Pjhu8FcDfbcgQ0j5mk7aqa4pN5ROSapTGrfPRX9ptGOn1VFNMHv /pbBmpFKQrFCXj6Ar7YLdlDmzI7OUBZbqIPnSt5JHWWoh3yMnSQmT7aj52w2wYBj luXRQartDKohHw+731npUgy4UTxlBOCNdkh+ma75lntQQ9SeqQxTruhFOGdUhuE+ Dj61qHGffI8y/tFtyo9qGR606tvF+oQ01uTb0j7I4LBtaEz5FTyTW3pX/YNBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIlsqTe86/7EsRh7DnX656LzEYjYwHwYDVR0j BBgwFoAUwsqYyk3YjXPbZ6JBc+Kf+l0RZAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTU3NmQ0Yy0xNzQ1LTRhMTYtOGVlZi1jZWMwODFjODIwNDMvMC9DMkNBOThDQTRE RDg4RDczREI2N0EyNDE3M0UyOUZGQTVEMTE2NDAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJDQTk4Q0E0REQ4OEQ3M0RCNjdBMjQxNzNFMjlGRkE1RDEx NjQwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE1NzZkNGMtMTc0NS00YTE2LThl ZWYtY2VjMDgxYzgyMDQzLzAvQzJDQTk4Q0E0REQ4OEQ3M0RCNjdBMjQxNzNFMjlG RkE1RDExNjQwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHSB6BEg0HeqkHvd5ZXwXj9RNZ/EBtPF52JV SxcqPlgO21rlzO9EJ01ifhJn2b8VykJ7SKE1pngHim9v2csk7N1yrAXmRrXp3X9k dwfoHIHTXYNlXYFw43xZUgy//g4kTIsLs3TKzwSRbSg0Ejk5WdAP434Rn05mnXyi Ves+0QLYz2dl2DyCFLYpV8r20LOPAqp47WEFxfxgkwNxAU4EsncARcU17C4K86Xg c7XNbsyV+1wvvrH2EPf0PVwXufuk4H+dQfffrULvbv7uXs/QFodzDjRJjca/RLNi 6fq9XgGUqvNkgrscSi0tM/LR/QOqxa6wCVTnt4Zoi5lPnQ9ryDs= -----END CERTIFICATE-----Generated at Sun Jun 8 15:04:24 2025 by rpki-client