$ rpki-client -vvf repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft File: 2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft (raw, json) Hash identifier: 7pwxzPYrp6JWbulvN1VIO005PdavGxYEmC8ouGEzl+Y= Subject key identifier: 67:A6:B6:06:60:F9:1E:B0:08:95:22:C3:BF:C6:6C:11:90:BD:E8:E8 Authority key identifier: 2C:FD:5B:DD:D1:DB:A6:D9:40:28:74:D6:22:3A:BD:7E:EE:E0:16:05 Certificate issuer: /CN=2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605 Certificate serial: 3379B8C0F31B1BD3FEFF5DE535C6BFED5711598E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft Manifest number: D8 Signing time: Sat 06 Sep 2025 13:20:36 +0000 Manifest this update: Sat 06 Sep 2025 13:15:36 +0000 Manifest next update: Tue 09 Sep 2025 16:19:36 +0000 Files and hashes: 1: 32372e3132342e36362e302f32342d3234203d3e20313532303339.roa (hash: Qk1aebZH6HpsmbRtyw6Zbd7LsZDQbi5L/mrlB31+AsU=) 2: 2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.crl (hash: zj6Dl2ujlQmAEOIlKTFt+5t9x8y41dV/EC+Hhv9VMnQ=) 3: 32372e3132342e36372e302f32342d3234203d3e20313532303339.roa (hash: PIB1m7UZc9kcov7LjZoIh/Ol3lgnFrAZfbEkkmZBCd0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.crl rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 16:19:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:79:b8:c0:f3:1b:1b:d3:fe:ff:5d:e5:35:c6:bf:ed:57:11:59:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605 Validity Not Before: Sep 6 13:15:36 2025 GMT Not After : Sep 9 16:19:36 2025 GMT Subject: CN=67A6B60660F91EB0089522C3BFC66C1190BDE8E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5b:6a:3e:25:46:bc:41:fe:82:9a:8c:12:32: 68:ee:3f:85:8f:03:73:55:47:3b:2e:72:8d:05:0f: ff:28:fa:c9:c7:63:01:ed:b3:2d:11:59:33:97:7e: fb:f5:ba:0f:0f:3b:70:14:9e:5e:25:77:a5:f7:28: 29:49:eb:61:2f:7b:bb:7d:7d:57:f6:f2:19:b9:46: e5:70:51:e6:fe:f1:c5:27:5f:be:17:ec:01:85:9f: 0f:36:5e:c8:a8:72:a3:5c:e1:4c:55:44:37:22:89: 7a:23:9e:91:b5:63:44:81:5e:b1:57:8e:10:c3:6d: 58:1b:87:3a:9a:c7:85:5c:0b:50:9e:19:24:22:fe: fe:52:7d:03:82:05:37:53:3a:6c:86:be:4e:c9:f2: 77:11:9f:01:aa:1f:b1:a3:68:bc:69:57:ac:c4:f0: 80:8c:a5:15:87:d1:7d:89:81:8c:08:67:bf:5c:ce: 58:44:99:a8:2c:07:a6:87:37:74:4c:2e:df:23:ab: 2e:b8:56:38:7f:a1:e1:9f:17:e0:37:07:99:ab:6f: 0a:4a:d2:23:8e:47:7a:28:d0:5d:14:8c:12:cf:d1: 44:a4:2d:24:54:c6:11:07:6c:df:0d:32:b4:0b:e2: ec:55:e6:39:50:13:12:83:32:e5:41:09:85:a9:a9: a3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:A6:B6:06:60:F9:1E:B0:08:95:22:C3:BF:C6:6C:11:90:BD:E8:E8 X509v3 Authority Key Identifier: keyid:2C:FD:5B:DD:D1:DB:A6:D9:40:28:74:D6:22:3A:BD:7E:EE:E0:16:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:d0:d4:4b:8e:dd:6f:6e:e0:e7:f2:b4:c8:72:d3:c3:a3:d7: a9:62:a2:b7:0d:ec:30:9d:00:d9:d5:6d:2f:12:f4:61:0d:05: 2b:f1:72:d1:0c:fa:c5:dc:05:44:71:b3:7a:8c:d3:57:17:d5: da:65:1b:1d:94:cf:bd:35:eb:84:9b:80:19:fe:1b:f0:a3:5f: ff:7e:69:5d:3b:ba:db:75:d7:da:f5:ad:2c:81:b3:18:54:40: 4c:60:ab:0e:dc:40:b6:f6:4b:05:9c:01:2d:a5:ab:66:71:73: 3a:6c:88:47:e6:73:ff:a0:da:b8:aa:6c:2c:cd:46:ff:5e:e0: e8:4d:73:be:6c:0d:1a:e6:7f:8c:cd:d0:c0:6f:f6:9d:a9:a7: 7e:25:6d:ad:ba:d6:a0:b9:dd:d1:f1:31:a0:1a:a7:c2:91:b1: e0:99:3b:1a:49:44:51:b3:40:63:f7:15:b0:cf:94:95:3f:a0: f7:2a:a3:ec:68:71:61:bb:f5:0b:d4:84:b5:5e:55:2a:6c:c6: 41:63:50:9c:66:de:d7:65:81:58:18:b7:e1:a8:18:74:f2:ad: a5:8e:d0:6d:ef:72:5f:5b:0b:b4:7e:f8:5c:ce:2f:56:a4:71: 22:bf:c4:70:ee:cf:4e:61:7d:b4:cc:5e:9e:dc:4c:a1:94:b0: e3:88:df:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM3m4wPMbG9P+/13lNca/7VcRWY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNGRDVCREREMURCQTZEOTQwMjg3NEQ2MjIzQUJEN0VF RUUwMTYwNTAeFw0yNTA5MDYxMzE1MzZaFw0yNTA5MDkxNjE5MzZaMDMxMTAvBgNV BAMTKDY3QTZCNjA2NjBGOTFFQjAwODk1MjJDM0JGQzY2QzExOTBCREU4RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7W2o+JUa8Qf6CmowSMmjuP4WP A3NVRzsuco0FD/8o+snHYwHtsy0RWTOXfvv1ug8PO3AUnl4ld6X3KClJ62Eve7t9 fVf28hm5RuVwUeb+8cUnX74X7AGFnw82XsiocqNc4UxVRDciiXojnpG1Y0SBXrFX jhDDbVgbhzqax4VcC1CeGSQi/v5SfQOCBTdTOmyGvk7J8ncRnwGqH7GjaLxpV6zE 8ICMpRWH0X2JgYwIZ79czlhEmagsB6aHN3RMLt8jqy64Vjh/oeGfF+A3B5mrbwpK 0iOOR3oo0F0UjBLP0USkLSRUxhEHbN8NMrQL4uxV5jlQExKDMuVBCYWpqaMVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ6a2BmD5HrAIlSLDv8ZsEZC96OgwHwYDVR0j BBgwFoAULP1b3dHbptlAKHTWIjq9fu7gFgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjdlMGJjMC03NjFiLTRlYzMtOGY0Mi04Mjk4MWI5MWE5N2EvMC8yQ0ZENUJEREQx REJBNkQ5NDAyODc0RDYyMjNBQkQ3RUVFRTAxNjA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkNGRDVCREREMURCQTZEOTQwMjg3NEQ2MjIzQUJEN0VFRUUw MTYwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI3ZTBiYzAtNzYxYi00ZWMzLThm NDItODI5ODFiOTFhOTdhLzAvMkNGRDVCREREMURCQTZEOTQwMjg3NEQ2MjIzQUJE N0VFRUUwMTYwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABDQ1EuO3W9u4OfytMhy08Oj16liorcN7DCd ANnVbS8S9GENBSvxctEM+sXcBURxs3qM01cX1dplGx2Uz70164SbgBn+G/CjX/9+ aV07utt119r1rSyBsxhUQExgqw7cQLb2SwWcAS2lq2ZxczpsiEfmc/+g2riqbCzN Rv9e4OhNc75sDRrmf4zN0MBv9p2pp34lba261qC53dHxMaAap8KRseCZOxpJRFGz QGP3FbDPlJU/oPcqo+xocWG79QvUhLVeVSpsxkFjUJxm3tdlgVgYt+GoGHTyraWO 0G3vcl9bC7R++FzOL1akcSK/xHDuz05hfbTMXp7cTKGUsOOI37k= -----END CERTIFICATE-----Generated at Sun Sep 7 14:02:08 2025 by rpki-client