$ rpki-client -vvf repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft File: C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft (raw, json) Hash identifier: zGx2AJ6OFNoUbQvU8/VHRILeUxBlJdFtuxLslsud77k= Subject key identifier: C1:BF:59:01:B8:6E:20:19:0D:F1:7E:E3:CB:0D:AE:33:AE:FF:E7:B5 Authority key identifier: C1:C0:23:3D:C0:73:02:E8:6D:11:4A:B7:72:AB:65:66:ED:7F:5F:BB Certificate issuer: /CN=C1C0233DC07302E86D114AB772AB6566ED7F5FBB Certificate serial: 7030DF346022B8C6EED0A54B7C590CF4BC7BA115 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft Manifest number: 01EA Signing time: Thu 04 Sep 2025 12:11:57 +0000 Manifest this update: Thu 04 Sep 2025 12:06:57 +0000 Manifest next update: Sun 07 Sep 2025 15:41:57 +0000 Files and hashes: 1: C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl (hash: i1C2PmrsQRQDW5yyrC0df4TxRRvEzLSn4VyVJm2J9Oo=) 2: 3130332e3135322e39322e302f32332d3234203d3e20313338383630.roa (hash: bltZi0XDvzmwgyzEl66AozT5pKIvx60Z1RNoNEbNdrk=) 3: 323430373a373263303a3a2f33322d3438203d3e203538383230.roa (hash: t1SEps+PxNqj4zacSf/7DBl+MO9xjw/dSKyX8w5YIzQ=) 4: 323430373a373263303a3a2f33322d3332203d3e203538383230.roa (hash: DEQ6i2fIqhrPJGH2IFEMi8YnzTrgKlP6WPrpjEcp18o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 15:41:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:30:df:34:60:22:b8:c6:ee:d0:a5:4b:7c:59:0c:f4:bc:7b:a1:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1C0233DC07302E86D114AB772AB6566ED7F5FBB Validity Not Before: Sep 4 12:06:57 2025 GMT Not After : Sep 7 15:41:57 2025 GMT Subject: CN=C1BF5901B86E20190DF17EE3CB0DAE33AEFFE7B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4f:00:98:1d:63:b3:1e:2b:93:1a:66:4b:e9: 48:36:7e:93:38:87:51:25:80:a9:54:f0:c4:b2:11: 5a:f6:08:6b:fd:c0:3e:50:b3:f0:40:b9:af:d1:78: 59:c7:a7:f8:13:58:43:8c:fc:df:a3:0b:f1:d4:34: f8:b3:94:a3:ca:a9:f0:cd:fd:3d:b1:4d:c1:9f:4d: 44:1b:3a:89:4b:bf:ca:15:d6:6e:c6:be:f1:d2:53: 03:bc:42:f5:ce:f1:7e:c5:a8:a8:1f:9a:96:c7:2e: 7b:8c:5c:0f:f9:d7:6f:ac:ce:aa:06:97:9a:cd:b0: c2:01:9c:62:3f:5d:0d:0b:77:99:75:7c:ff:d2:44: 8d:59:7b:5d:4f:97:1a:4e:a1:65:cc:79:04:ea:34: db:59:d4:a6:0f:c9:22:7f:a5:74:b0:38:c7:c5:c1: 1f:68:7c:7a:f9:bc:66:24:bb:c5:b0:0a:fa:af:2e: 21:6a:46:05:72:aa:f3:57:83:4b:18:df:f7:91:7f: 2e:a1:11:64:6a:58:1b:b0:f9:24:0f:3d:41:64:e3: 60:b9:07:b7:c3:06:b6:98:3b:8e:ba:08:7c:e7:b0: d8:0f:13:3c:40:1d:4c:8e:fa:35:f7:2a:f3:0f:49: e0:00:46:57:15:66:c5:af:02:c2:23:1b:ad:6f:7a: ce:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:BF:59:01:B8:6E:20:19:0D:F1:7E:E3:CB:0D:AE:33:AE:FF:E7:B5 X509v3 Authority Key Identifier: keyid:C1:C0:23:3D:C0:73:02:E8:6D:11:4A:B7:72:AB:65:66:ED:7F:5F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:42:1c:60:a0:3e:00:43:99:97:79:6e:5d:0c:76:ba:e6:08: a9:5b:e2:12:e0:27:6e:26:cf:c8:9e:ee:7d:bf:24:4d:11:a0: 7f:a4:3d:7b:c3:25:89:57:bf:ab:64:48:39:e5:5e:18:d5:e3: 7e:44:7d:2e:97:90:6c:44:91:23:b8:e1:da:fe:ec:27:12:c3: 8b:1e:54:ae:83:04:5c:95:9b:9a:f2:d0:37:56:86:f8:d7:4b: 09:5f:6e:45:d6:6f:b2:14:78:63:07:38:ac:b7:66:2f:66:77: 89:81:40:8d:a2:41:d3:65:db:84:14:fb:b8:20:30:35:5b:7d: ad:0f:3d:ff:86:9e:9d:a1:f4:c0:c5:c7:99:d0:58:6a:eb:18: f3:43:ef:64:ae:10:17:e4:ee:a8:9f:e4:f8:f3:31:31:fd:fb: e6:d5:fc:90:2f:48:5b:91:c7:17:55:12:13:d0:ec:3b:6f:d7: 82:7d:b9:9d:a4:cd:16:62:66:79:3c:3a:3a:e4:fe:2a:5a:38: 3e:23:92:66:1f:b2:1e:4f:67:4a:db:9b:04:0c:dd:f8:25:c0: f3:f0:15:6b:a8:91:1c:c4:5f:4d:16:86:da:dc:41:b1:f1:32: c3:10:a6:e7:27:02:76:69:ce:7e:28:a3:c8:ae:e1:90:d3:8f: 7d:40:da:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcDDfNGAiuMbu0KVLfFkM9Lx7oRUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1NjZF RDdGNUZCQjAeFw0yNTA5MDQxMjA2NTdaFw0yNTA5MDcxNTQxNTdaMDMxMTAvBgNV BAMTKEMxQkY1OTAxQjg2RTIwMTkwREYxN0VFM0NCMERBRTMzQUVGRkU3QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWTwCYHWOzHiuTGmZL6Ug2fpM4 h1ElgKlU8MSyEVr2CGv9wD5Qs/BAua/ReFnHp/gTWEOM/N+jC/HUNPizlKPKqfDN /T2xTcGfTUQbOolLv8oV1m7GvvHSUwO8QvXO8X7FqKgfmpbHLnuMXA/512+szqoG l5rNsMIBnGI/XQ0Ld5l1fP/SRI1Ze11PlxpOoWXMeQTqNNtZ1KYPySJ/pXSwOMfF wR9ofHr5vGYku8WwCvqvLiFqRgVyqvNXg0sY3/eRfy6hEWRqWBuw+SQPPUFk42C5 B7fDBraYO466CHznsNgPEzxAHUyO+jX3KvMPSeAARlcVZsWvAsIjG61ves7lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwb9ZAbhuIBkN8X7jyw2uM67/57UwHwYDVR0j BBgwFoAUwcAjPcBzAuhtEUq3cqtlZu1/X7swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGM5YzI1Mi1mN2NhLTRkZDUtODhmNi0yMmFkZGM4OTM0YjMvMC9DMUMwMjMzREMw NzMwMkU4NkQxMTRBQjc3MkFCNjU2NkVEN0Y1RkJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1NjZFRDdG NUZCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzhjOWMyNTItZjdjYS00ZGQ1LTg4 ZjYtMjJhZGRjODkzNGIzLzAvQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1 NjZFRDdGNUZCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGBCHGCgPgBDmZd5bl0MdrrmCKlb4hLgJ24m z8ie7n2/JE0RoH+kPXvDJYlXv6tkSDnlXhjV435EfS6XkGxEkSO44dr+7CcSw4se VK6DBFyVm5ry0DdWhvjXSwlfbkXWb7IUeGMHOKy3Zi9md4mBQI2iQdNl24QU+7gg MDVbfa0PPf+Gnp2h9MDFx5nQWGrrGPND72SuEBfk7qif5PjzMTH9++bV/JAvSFuR xxdVEhPQ7Dtv14J9uZ2kzRZiZnk8Ojrk/ipaOD4jkmYfsh5PZ0rbmwQM3fglwPPw FWuokRzEX00WhtrcQbHxMsMQpucnAnZpzn4oo8iu4ZDTj31A2rM= -----END CERTIFICATE-----Generated at Fri Sep 5 10:16:12 2025 by rpki-client