$ rpki-client -vvf repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft File: C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft (raw, json) Hash identifier: EG5/g8fzcBX09woSVPcNSEExXZA+2TjsMkaun4hKod4= Subject key identifier: 54:92:FD:29:FC:EC:B8:54:C1:68:31:E5:88:4B:F5:4C:40:84:F7:D7 Authority key identifier: C2:F9:56:B1:26:88:4B:5E:FD:8D:DA:DC:EB:0E:33:E1:B5:30:63:36 Certificate issuer: /CN=C2F956B126884B5EFD8DDADCEB0E33E1B5306336 Certificate serial: 42D18CA5079D1B5103CD4C5F8B863A8C1B1C8862 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft Manifest number: D2 Signing time: Fri 06 Jun 2025 17:50:49 +0000 Manifest this update: Fri 06 Jun 2025 17:45:49 +0000 Manifest next update: Tue 10 Jun 2025 02:33:49 +0000 Files and hashes: 1: 3230332e3134352e35382e302f32332d3234203d3e20313432333735.roa (hash: lPAaUMCnmORN0lcIkL1SdTQ//TRobbXWIgBrv9ai9Yc=) 2: C2F956B126884B5EFD8DDADCEB0E33E1B5306336.crl (hash: +AtqwctHtgyUfuvbjWVLFmEIizgKfzYxTdkYR38a8n0=) 3: 3230332e3134352e35392e302f32342d3234203d3e20313432333735.roa (hash: XQ5YOO3QMAmUiXXyDyAvfXAeHqliwoa7oF/Rg8qefuw=) 4: 3230332e3134352e35382e302f32342d3234203d3e20313432333735.roa (hash: bBnfqhprKZxO7GNHi6JFSi7ubIWOVMTy7/ydlUAr+qE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.crl rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 02:33:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:d1:8c:a5:07:9d:1b:51:03:cd:4c:5f:8b:86:3a:8c:1b:1c:88:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2F956B126884B5EFD8DDADCEB0E33E1B5306336 Validity Not Before: Jun 6 17:45:49 2025 GMT Not After : Jun 10 02:33:49 2025 GMT Subject: CN=5492FD29FCECB854C16831E5884BF54C4084F7D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:0e:26:e3:7e:9f:ca:49:42:b5:57:48:b3:e8: 16:43:8b:55:f5:a0:82:0c:1a:71:42:fd:d0:b4:ab: 06:84:8a:d2:db:06:b3:21:dd:5a:5f:db:67:83:ea: e6:e5:b2:35:bd:de:5e:37:94:d3:30:e2:6e:38:a2: e3:8f:ac:cf:48:96:23:e2:f8:26:c2:da:9d:74:da: 7c:ec:7b:76:d5:5a:0e:2d:09:56:a5:1a:f1:e9:33: ac:6b:20:54:bc:5b:c6:df:02:ef:65:d9:c1:35:7d: b3:bb:49:fb:51:6f:dc:a8:db:fe:c8:0c:68:90:32: f2:c8:a3:4b:92:13:fc:05:c9:2b:87:e4:af:32:fe: 9c:2b:92:5e:74:f0:50:bf:a5:9c:4a:ff:0d:3e:53: 20:e7:c7:79:ab:fc:3b:0c:85:b8:10:29:3e:21:68: df:5a:01:18:67:3d:0d:3f:94:68:d9:60:46:44:82: 88:70:99:57:e7:23:9d:9b:da:cd:70:88:f7:69:7b: 13:15:a3:56:f9:48:b7:ea:ac:eb:0e:78:fe:50:fc: c4:d5:b8:bd:36:bf:b1:93:bf:4c:9a:c1:56:5e:ee: 3c:73:44:50:93:67:4c:3e:8e:12:8e:23:93:54:3c: 54:be:3f:4d:7f:db:75:65:78:86:80:f1:2a:f6:45: d6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:92:FD:29:FC:EC:B8:54:C1:68:31:E5:88:4B:F5:4C:40:84:F7:D7 X509v3 Authority Key Identifier: keyid:C2:F9:56:B1:26:88:4B:5E:FD:8D:DA:DC:EB:0E:33:E1:B5:30:63:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f7:7f:6a:bb:db:be:fa:a7:cb:30:c1:a3:26:cc:e5:51:a8: 53:c4:8e:c6:47:8c:81:c7:1a:b8:31:3b:5c:47:4f:9e:b1:dd: 3c:d5:d9:5b:2a:9e:a7:61:00:df:6b:71:41:ea:78:a4:1a:79: 57:48:df:e0:6f:0f:62:59:36:38:8d:2b:76:9d:c2:8e:54:a0: d2:e8:e1:b9:62:ce:fd:8b:00:23:cb:f2:e3:1f:6a:26:37:c9: 21:ff:06:db:5c:e8:a9:da:90:86:eb:14:7d:c4:07:93:9e:3a: d9:59:3b:c8:5e:09:61:1c:e2:0b:cc:da:e9:b9:81:7b:d4:3f: 83:eb:45:40:3d:57:fc:8c:88:8c:65:9c:87:3f:cc:9f:bf:f4: d7:5d:51:c5:df:88:b7:f2:44:4b:aa:e2:c1:44:21:e4:e3:1b: d5:1e:62:c4:28:c0:61:cf:aa:00:9e:21:51:12:e6:56:59:3b: a1:b5:9c:3b:33:58:6a:4d:55:d4:ba:08:e5:78:79:4f:8f:ed: 2d:23:5f:9b:1e:80:72:a9:26:fd:11:b3:74:48:67:21:f3:e2: 95:03:42:09:ef:be:2b:50:59:f0:63:d5:b9:1a:e2:7c:b1:1d: 0a:0f:95:9b:63:37:2e:44:58:aa:b0:68:0c:f6:78:34:ce:7a: 55:21:cc:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQtGMpQedG1EDzUxfi4Y6jBsciGIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJGOTU2QjEyNjg4NEI1RUZEOEREQURDRUIwRTMzRTFC NTMwNjMzNjAeFw0yNTA2MDYxNzQ1NDlaFw0yNTA2MTAwMjMzNDlaMDMxMTAvBgNV BAMTKDU0OTJGRDI5RkNFQ0I4NTRDMTY4MzFFNTg4NEJGNTRDNDA4NEY3RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqDibjfp/KSUK1V0iz6BZDi1X1 oIIMGnFC/dC0qwaEitLbBrMh3Vpf22eD6ublsjW93l43lNMw4m44ouOPrM9IliPi +CbC2p102nzse3bVWg4tCValGvHpM6xrIFS8W8bfAu9l2cE1fbO7SftRb9yo2/7I DGiQMvLIo0uSE/wFySuH5K8y/pwrkl508FC/pZxK/w0+UyDnx3mr/DsMhbgQKT4h aN9aARhnPQ0/lGjZYEZEgohwmVfnI52b2s1wiPdpexMVo1b5SLfqrOsOeP5Q/MTV uL02v7GTv0yawVZe7jxzRFCTZ0w+jhKOI5NUPFS+P01/23VleIaA8Sr2RdYJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVJL9KfzsuFTBaDHliEv1TECE99cwHwYDVR0j BBgwFoAUwvlWsSaIS179jdrc6w4z4bUwYzYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmFhM2JlYi01NzYxLTRjMzQtODhkMy0wMTVjY2M2NDAwMmYvMC9DMkY5NTZCMTI2 ODg0QjVFRkQ4RERBRENFQjBFMzNFMUI1MzA2MzM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJGOTU2QjEyNjg4NEI1RUZEOEREQURDRUIwRTMzRTFCNTMw NjMzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZhYTNiZWItNTc2MS00YzM0LTg4 ZDMtMDE1Y2NjNjQwMDJmLzAvQzJGOTU2QjEyNjg4NEI1RUZEOEREQURDRUIwRTMz RTFCNTMwNjMzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA73f2q72776p8swwaMmzOVRqFPEjsZHjIHH GrgxO1xHT56x3TzV2VsqnqdhAN9rcUHqeKQaeVdI3+BvD2JZNjiNK3adwo5UoNLo 4blizv2LACPL8uMfaiY3ySH/Bttc6KnakIbrFH3EB5OeOtlZO8heCWEc4gvM2um5 gXvUP4PrRUA9V/yMiIxlnIc/zJ+/9NddUcXfiLfyREuq4sFEIeTjG9UeYsQowGHP qgCeIVES5lZZO6G1nDszWGpNVdS6COV4eU+P7S0jX5segHKpJv0Rs3RIZyHz4pUD QgnvvitQWfBj1bka4nyxHQoPlZtjNy5EWKqwaAz2eDTOelUhzAA= -----END CERTIFICATE-----Generated at Sun Jun 8 04:14:20 2025 by rpki-client