$ rpki-client -vvf repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft File: C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft (raw, json) Hash identifier: fZjKnD4QDQtJCLP3VOlnbLU7Giey5+VXF/Fhedh2jMQ= Subject key identifier: 0D:85:48:12:54:28:D5:0C:A0:F2:7F:68:A4:20:CB:F2:20:97:E2:6D Authority key identifier: C2:F9:56:B1:26:88:4B:5E:FD:8D:DA:DC:EB:0E:33:E1:B5:30:63:36 Certificate issuer: /CN=C2F956B126884B5EFD8DDADCEB0E33E1B5306336 Certificate serial: 1852795E0CE93CCC9CBC95989DD552A31A23AF2B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft Manifest number: FB Signing time: Sat 06 Sep 2025 18:40:49 +0000 Manifest this update: Sat 06 Sep 2025 18:35:49 +0000 Manifest next update: Wed 10 Sep 2025 03:44:49 +0000 Files and hashes: 1: 3230332e3134352e35382e302f32342d3234203d3e20313432333735.roa (hash: bBnfqhprKZxO7GNHi6JFSi7ubIWOVMTy7/ydlUAr+qE=) 2: 3230332e3134352e35382e302f32332d3234203d3e20313432333735.roa (hash: lPAaUMCnmORN0lcIkL1SdTQ//TRobbXWIgBrv9ai9Yc=) 3: 3230332e3134352e35392e302f32342d3234203d3e20313432333735.roa (hash: XQ5YOO3QMAmUiXXyDyAvfXAeHqliwoa7oF/Rg8qefuw=) 4: C2F956B126884B5EFD8DDADCEB0E33E1B5306336.crl (hash: uDpjFJH//QeF3RRk4Gtmno5IkH98IDuOB4R1FFxyOTY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.crl rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 03:44:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:52:79:5e:0c:e9:3c:cc:9c:bc:95:98:9d:d5:52:a3:1a:23:af:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2F956B126884B5EFD8DDADCEB0E33E1B5306336 Validity Not Before: Sep 6 18:35:49 2025 GMT Not After : Sep 10 03:44:49 2025 GMT Subject: CN=0D8548125428D50CA0F27F68A420CBF22097E26D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:24:76:2f:85:b8:0d:d2:4b:51:a8:fb:55:32: 17:fb:58:31:55:da:db:cb:e9:8f:22:5f:a0:49:48: 4f:e4:b3:81:ae:d7:fb:57:f6:20:c1:27:0c:69:06: 80:8c:36:d8:63:e3:0f:83:86:30:b8:17:41:74:41: 1b:f3:0a:14:1f:74:1a:31:b2:ea:b0:b1:1a:13:17: 3b:e4:27:21:ec:27:10:3e:19:01:94:8f:12:e5:e6: 62:9d:19:d0:6e:5f:ae:db:1c:83:fb:77:c3:ea:36: 48:0c:2e:48:b4:c4:a8:17:c3:44:0b:12:4f:3f:22: 93:9d:c4:a7:70:5c:f3:bd:2f:58:d9:7d:6c:dd:48: 29:ad:fe:da:80:ad:cf:46:dc:d6:7c:d3:f9:87:c0: 7e:d8:ca:1b:59:36:a1:a0:5b:74:3d:36:e8:8a:83: 62:b2:1e:21:fc:f0:8c:40:f0:85:5f:b7:8b:a1:74: 72:ab:4b:54:2a:a5:f2:0a:fa:42:00:ad:cb:93:0a: 23:ef:65:55:57:3f:20:85:60:ae:7b:a9:bd:22:db: ee:11:1b:4e:09:24:df:e5:8e:6e:e1:cb:8c:7a:56: d7:3f:72:31:0e:89:68:7e:b5:ef:59:e2:e7:8c:98: 56:37:22:22:34:a6:60:00:18:58:70:e4:ac:22:68: 6b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:85:48:12:54:28:D5:0C:A0:F2:7F:68:A4:20:CB:F2:20:97:E2:6D X509v3 Authority Key Identifier: keyid:C2:F9:56:B1:26:88:4B:5E:FD:8D:DA:DC:EB:0E:33:E1:B5:30:63:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:d8:ce:88:34:a7:2d:5a:a0:26:be:02:f3:dc:e1:4d:a1:f3: 95:62:c9:8a:e9:24:9b:7b:13:51:36:28:94:e3:22:c3:09:e4: aa:1d:ef:ce:9b:58:48:a6:02:43:1a:dc:cd:fb:a2:53:ca:3a: cc:a0:dd:6e:37:0b:d9:89:ef:2c:48:b7:e9:e6:91:fc:3d:b5: 51:df:7b:58:e8:f5:6b:63:35:62:5d:1c:fc:86:51:27:13:21: 37:b4:88:f4:d5:9e:a1:4d:da:f1:d8:4e:84:4c:e3:bf:f3:02: 9f:f0:ba:2d:0c:31:2b:55:ce:e4:c9:2a:39:70:6f:24:56:df: 1b:9a:14:92:88:7b:d2:e2:76:8d:fd:51:2e:e5:6b:7b:ef:53: 83:c4:3e:e1:6d:54:16:56:90:77:98:0a:cd:59:6b:55:a6:0e: 60:3e:78:ec:2e:58:f6:e1:51:17:0b:8d:dc:98:2b:81:da:f7: e2:88:45:ce:b1:8b:d2:87:51:c7:83:54:54:6f:1e:51:00:56: eb:d8:d0:60:6a:23:28:ff:d2:52:f4:60:ac:53:33:9e:89:ac: d0:29:df:6f:8d:20:84:23:bd:d2:8e:7d:e4:9c:1b:ca:f1:9c: f4:9a:8c:5d:f5:9b:c2:c1:13:62:43:22:4a:13:52:82:3d:68: e0:b9:aa:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGFJ5XgzpPMycvJWYndVSoxojryswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJGOTU2QjEyNjg4NEI1RUZEOEREQURDRUIwRTMzRTFC NTMwNjMzNjAeFw0yNTA5MDYxODM1NDlaFw0yNTA5MTAwMzQ0NDlaMDMxMTAvBgNV BAMTKDBEODU0ODEyNTQyOEQ1MENBMEYyN0Y2OEE0MjBDQkYyMjA5N0UyNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1JHYvhbgN0ktRqPtVMhf7WDFV 2tvL6Y8iX6BJSE/ks4Gu1/tX9iDBJwxpBoCMNthj4w+DhjC4F0F0QRvzChQfdBox suqwsRoTFzvkJyHsJxA+GQGUjxLl5mKdGdBuX67bHIP7d8PqNkgMLki0xKgXw0QL Ek8/IpOdxKdwXPO9L1jZfWzdSCmt/tqArc9G3NZ80/mHwH7YyhtZNqGgW3Q9NuiK g2KyHiH88IxA8IVft4uhdHKrS1QqpfIK+kIArcuTCiPvZVVXPyCFYK57qb0i2+4R G04JJN/ljm7hy4x6Vtc/cjEOiWh+te9Z4ueMmFY3IiI0pmAAGFhw5KwiaGuTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDYVIElQo1Qyg8n9opCDL8iCX4m0wHwYDVR0j BBgwFoAUwvlWsSaIS179jdrc6w4z4bUwYzYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmFhM2JlYi01NzYxLTRjMzQtODhkMy0wMTVjY2M2NDAwMmYvMC9DMkY5NTZCMTI2 ODg0QjVFRkQ4RERBRENFQjBFMzNFMUI1MzA2MzM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJGOTU2QjEyNjg4NEI1RUZEOEREQURDRUIwRTMzRTFCNTMw NjMzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZhYTNiZWItNTc2MS00YzM0LTg4 ZDMtMDE1Y2NjNjQwMDJmLzAvQzJGOTU2QjEyNjg4NEI1RUZEOEREQURDRUIwRTMz RTFCNTMwNjMzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFHYzog0py1aoCa+AvPc4U2h85ViyYrpJJt7 E1E2KJTjIsMJ5Kod786bWEimAkMa3M37olPKOsyg3W43C9mJ7yxIt+nmkfw9tVHf e1jo9WtjNWJdHPyGUScTITe0iPTVnqFN2vHYToRM47/zAp/wui0MMStVzuTJKjlw byRW3xuaFJKIe9Lido39US7la3vvU4PEPuFtVBZWkHeYCs1Za1WmDmA+eOwuWPbh URcLjdyYK4Ha9+KIRc6xi9KHUceDVFRvHlEAVuvY0GBqIyj/0lL0YKxTM56JrNAp 32+NIIQjvdKOfeScG8rxnPSajF31m8LBE2JDIkoTUoI9aOC5quU= -----END CERTIFICATE-----Generated at Sun Sep 7 14:00:45 2025 by rpki-client