$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft File: C2E1998AC1681A41F68250BFABD05A982E00EA44.mft (raw, json) Hash identifier: ubyOkMgAYhjWNzkWl3uMeY8qNAalg/5Rct3uQtRl8sM= Subject key identifier: 9B:67:6B:CA:CB:A2:36:CA:CF:4D:CD:18:39:6E:13:0B:02:6E:61:C0 Authority key identifier: C2:E1:99:8A:C1:68:1A:41:F6:82:50:BF:AB:D0:5A:98:2E:00:EA:44 Certificate issuer: /CN=C2E1998AC1681A41F68250BFABD05A982E00EA44 Certificate serial: 7BAB8C72EAC93F423208A958BB187C2F9C0BAF89 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E1998AC1681A41F68250BFABD05A982E00EA44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft Manifest number: CC Signing time: Fri 05 Sep 2025 11:02:03 +0000 Manifest this update: Fri 05 Sep 2025 10:57:03 +0000 Manifest next update: Mon 08 Sep 2025 20:44:03 +0000 Files and hashes: 1: 323030313a6466333a653034303a3a2f34382d3438203d3e20313532383036.roa (hash: 7Sjy07nIz40VYuiQAAUvMHjSS6WBBJpcxOEZMkh16GE=) 2: C2E1998AC1681A41F68250BFABD05A982E00EA44.crl (hash: gFDBcQrPqlE43NRkAC72/VJgP4XhRx4+FiCXLwQodfQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.crl rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E1998AC1681A41F68250BFABD05A982E00EA44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 20:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:ab:8c:72:ea:c9:3f:42:32:08:a9:58:bb:18:7c:2f:9c:0b:af:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2E1998AC1681A41F68250BFABD05A982E00EA44 Validity Not Before: Sep 5 10:57:03 2025 GMT Not After : Sep 8 20:44:03 2025 GMT Subject: CN=9B676BCACBA236CACF4DCD18396E130B026E61C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:37:c1:99:d6:9b:e7:85:6d:9f:b7:b7:6a:03: 98:5e:a7:ed:66:37:73:6f:b6:22:31:af:59:00:cd: bd:4b:11:04:fe:a3:ab:b8:72:76:93:e9:d2:d2:a0: 62:46:e7:af:e0:85:7d:69:af:a3:e7:fc:fe:95:ba: 2a:76:a6:d6:58:2e:fd:4a:e3:f0:9f:fe:de:62:78: 4e:c8:ce:0f:b5:c8:12:09:5f:44:48:1f:bc:f4:b8: b1:21:e6:c2:5b:2b:e9:16:65:11:da:7a:f4:1d:1b: b1:f2:80:4f:0c:be:34:be:fb:79:1e:4d:f0:83:00: 88:ca:e6:ea:58:02:ea:88:a4:cc:b9:f2:ec:03:41: 1c:66:82:37:ce:5d:79:26:1d:f4:7f:4d:b4:c4:4b: ec:f2:96:a8:7f:59:1d:9e:0c:96:80:86:07:66:ca: 0d:a9:3d:91:8c:04:62:08:5c:c0:0e:31:70:4f:98: 17:1f:3a:59:31:48:3d:fb:c0:fb:01:45:68:c0:9a: ba:bb:33:dc:de:4d:05:b8:03:77:2d:13:e1:3f:a3: bb:00:af:c9:a0:4b:37:51:d9:c0:2d:7b:75:f7:1d: 9d:e6:c0:17:00:bb:5f:dc:b3:9f:a1:85:d1:af:a0: 86:5d:1a:ad:1d:11:bf:3f:e1:62:5a:08:ba:2a:ec: 19:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:67:6B:CA:CB:A2:36:CA:CF:4D:CD:18:39:6E:13:0B:02:6E:61:C0 X509v3 Authority Key Identifier: keyid:C2:E1:99:8A:C1:68:1A:41:F6:82:50:BF:AB:D0:5A:98:2E:00:EA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E1998AC1681A41F68250BFABD05A982E00EA44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:b9:9b:10:1e:26:1b:ce:38:da:1c:3b:8b:25:2d:09:11:f9: 8e:4d:37:c3:f3:d8:04:23:a9:c7:f0:3b:80:70:b9:d9:40:54: 65:2f:70:c1:ad:32:6c:c1:6a:b0:b3:21:08:07:f7:4c:62:c2: 76:5c:25:49:09:93:c2:a9:bd:ac:94:da:06:59:79:10:be:8c: 18:e7:94:d5:5c:e0:65:8b:de:86:b9:83:11:be:83:c9:69:5e: 08:d0:ab:2f:f8:b2:a8:42:a5:61:3e:33:52:15:f0:b1:12:b0: a5:59:f5:72:07:80:02:fc:85:be:6f:5c:6f:59:ee:74:b9:82: ed:2a:62:ea:37:65:8b:b4:ac:48:25:65:c3:d8:2f:6b:13:be: 70:20:73:92:ca:29:07:6f:69:0d:f5:20:bc:57:87:7a:15:68: d4:ba:4d:9a:06:b4:ee:a2:07:cf:18:6b:97:9d:5b:0d:c2:c8: bc:36:33:45:b1:97:4e:78:4b:fc:73:ff:85:1d:ea:2f:72:47: 07:0e:3b:1d:2b:b2:31:4e:9c:64:21:b2:0f:cc:80:2d:e7:df: ec:6c:c7:d7:a8:e2:ed:23:ed:84:1a:d3:54:91:4f:ad:2f:c7: c3:65:7c:2f:29:3e:0e:28:b7:11:c8:88:de:95:3e:26:13:67: 12:e2:fd:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe6uMcurJP0IyCKlYuxh8L5wLr4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJFMTk5OEFDMTY4MUE0MUY2ODI1MEJGQUJEMDVBOTgy RTAwRUE0NDAeFw0yNTA5MDUxMDU3MDNaFw0yNTA5MDgyMDQ0MDNaMDMxMTAvBgNV BAMTKDlCNjc2QkNBQ0JBMjM2Q0FDRjREQ0QxODM5NkUxMzBCMDI2RTYxQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcN8GZ1pvnhW2ft7dqA5hep+1m N3NvtiIxr1kAzb1LEQT+o6u4cnaT6dLSoGJG56/ghX1pr6Pn/P6Vuip2ptZYLv1K 4/Cf/t5ieE7Izg+1yBIJX0RIH7z0uLEh5sJbK+kWZRHaevQdG7HygE8MvjS++3ke TfCDAIjK5upYAuqIpMy58uwDQRxmgjfOXXkmHfR/TbTES+zylqh/WR2eDJaAhgdm yg2pPZGMBGIIXMAOMXBPmBcfOlkxSD37wPsBRWjAmrq7M9zeTQW4A3ctE+E/o7sA r8mgSzdR2cAte3X3HZ3mwBcAu1/cs5+hhdGvoIZdGq0dEb8/4WJaCLoq7Bn7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm2drysuiNsrPTc0YOW4TCwJuYcAwHwYDVR0j BBgwFoAUwuGZisFoGkH2glC/q9BamC4A6kQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRjZTM5MS1hNWQzLTQxMWItYTk3Yi1lODYyZmJmNTYzMWMvMS9DMkUxOTk4QUMx NjgxQTQxRjY4MjUwQkZBQkQwNUE5ODJFMDBFQTQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJFMTk5OEFDMTY4MUE0MUY2ODI1MEJGQUJEMDVBOTgyRTAw RUE0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkY2UzOTEtYTVkMy00MTFiLWE5 N2ItZTg2MmZiZjU2MzFjLzEvQzJFMTk5OEFDMTY4MUE0MUY2ODI1MEJGQUJEMDVB OTgyRTAwRUE0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACC5mxAeJhvOONocO4slLQkR+Y5NN8Pz2AQj qcfwO4BwudlAVGUvcMGtMmzBarCzIQgH90xiwnZcJUkJk8KpvayU2gZZeRC+jBjn lNVc4GWL3oa5gxG+g8lpXgjQqy/4sqhCpWE+M1IV8LESsKVZ9XIHgAL8hb5vXG9Z 7nS5gu0qYuo3ZYu0rEglZcPYL2sTvnAgc5LKKQdvaQ31ILxXh3oVaNS6TZoGtO6i B88Ya5edWw3CyLw2M0Wxl054S/xz/4Ud6i9yRwcOOx0rsjFOnGQhsg/MgC3n3+xs x9eo4u0j7YQa01SRT60vx8NlfC8pPg4otxHIiN6VPiYTZxLi/dc= -----END CERTIFICATE-----Generated at Sun Sep 7 14:05:24 2025 by rpki-client