$ rpki-client -vvf repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft File: 2CCC85BF6CCD365701EFA75EE416D234F861385B.mft (raw, json) Hash identifier: r8vCN8BRrarnWD/uHKZ9/fWH3gQQYtvHXmSzoWwTYrI= Subject key identifier: 2C:81:95:94:91:EA:5D:20:FA:5E:1F:3D:20:EB:A5:F1:D4:22:2D:36 Authority key identifier: 2C:CC:85:BF:6C:CD:36:57:01:EF:A7:5E:E4:16:D2:34:F8:61:38:5B Certificate issuer: /CN=2CCC85BF6CCD365701EFA75EE416D234F861385B Certificate serial: 42BDD013B4BEF4C49E3DC32B212E821CDAA166EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft Manifest number: B9 Signing time: Sun 07 Sep 2025 21:22:12 +0000 Manifest this update: Sun 07 Sep 2025 21:17:12 +0000 Manifest next update: Thu 11 Sep 2025 01:12:12 +0000 Files and hashes: 1: 2CCC85BF6CCD365701EFA75EE416D234F861385B.crl (hash: gHwmG5NDLA7/eeIqU4EVmwWvX55I1bSKDlaBsbxHMNY=) 2: 3136302e32352e3231392e302f32342d3234203d3e20313533303836.roa (hash: uxK7UAyx9SPI/sYZC+vqWCKSgnZeXgqAqFmQ+2Jnazc=) 3: 3136302e32352e3231382e302f32342d3234203d3e20313533303836.roa (hash: 8n7ggoSZj8jJnFz6/yug05Kf9QPxel8FaCv3JxdKJhk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.crl rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 01:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:bd:d0:13:b4:be:f4:c4:9e:3d:c3:2b:21:2e:82:1c:da:a1:66:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CCC85BF6CCD365701EFA75EE416D234F861385B Validity Not Before: Sep 7 21:17:12 2025 GMT Not After : Sep 11 01:12:12 2025 GMT Subject: CN=2C81959491EA5D20FA5E1F3D20EBA5F1D4222D36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:09:1d:a8:d1:c4:58:c8:fa:bf:89:88:8a:24: f3:a6:3f:ed:3d:f9:3b:34:33:32:6a:9c:57:59:4d: f8:88:4b:39:ee:92:e7:40:dc:0e:60:18:71:a2:4e: 64:14:34:cb:13:01:e4:67:81:df:44:f5:90:a3:89: ea:bb:e0:04:b4:88:0a:d1:65:a2:28:99:f1:e3:d5: b8:b9:cb:9d:6e:b6:36:bc:15:b0:a9:b3:36:ca:37: df:42:25:a7:5f:05:bd:84:73:e2:f8:7f:02:d3:70: 6f:09:b9:97:ea:1d:e6:06:c3:34:5c:82:d2:0a:44: 4a:16:e1:8c:e2:43:2b:d1:c3:ee:40:e2:f4:97:d0: 96:fe:04:bc:ec:25:72:1f:60:3e:fd:8e:ce:4d:ec: 4f:0e:24:7c:46:49:be:a1:29:2b:5d:30:21:bf:88: 30:c7:c7:6a:2e:46:93:6e:33:8c:9f:b8:78:6c:17: 4c:6b:28:f3:5f:ba:f5:66:1b:16:1f:a6:ca:0a:00: bb:1a:39:01:a1:8b:62:25:9b:bc:4c:38:be:bd:56: 31:7e:66:1d:58:70:c7:ca:53:4a:7e:67:79:5c:cd: fc:43:e6:0d:c4:ad:83:5f:4e:18:8e:ef:83:94:24: bb:dc:fa:73:d9:c5:57:cc:90:ab:23:ae:85:2e:58: bc:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:81:95:94:91:EA:5D:20:FA:5E:1F:3D:20:EB:A5:F1:D4:22:2D:36 X509v3 Authority Key Identifier: keyid:2C:CC:85:BF:6C:CD:36:57:01:EF:A7:5E:E4:16:D2:34:F8:61:38:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:77:03:e5:72:bc:3a:fd:d9:c4:ef:13:63:a9:34:28:a3:9e: 2a:0e:94:ec:19:bd:b5:ca:9a:05:47:e7:d6:69:55:c0:de:c8: d4:7c:c0:4a:14:8e:93:bf:0e:7e:2a:9a:56:51:2c:3d:a5:83: 9b:9c:a2:ea:39:73:ee:fe:f8:74:f8:23:14:2d:50:78:0f:09: 22:4d:87:7d:d4:17:dd:61:3a:03:8f:57:a2:9a:5d:43:65:af: dd:88:12:4e:c5:a9:c5:a9:4a:49:5d:e0:5e:c9:a5:71:cd:f9: 8e:65:70:cb:ba:5d:05:c6:58:48:95:21:32:c8:e5:fd:0d:9d: 80:7a:97:d4:3a:b0:20:27:d2:cd:92:29:ae:51:6a:dd:ed:88: e3:5a:5c:8f:b9:af:93:92:68:f9:59:b8:ae:76:f3:ec:05:39: d7:79:8f:4c:6a:df:8e:0e:5c:6f:71:88:ed:2b:2d:6c:80:47: 56:36:c2:b3:c2:4c:41:be:06:5d:42:68:58:04:d4:90:f7:83: d7:0f:18:18:bf:ad:33:03:30:f0:46:ea:8f:5e:79:37:d9:a9: 88:f1:15:ac:2d:58:e3:03:06:86:fc:db:ba:3a:93:c5:8e:75: bb:49:1e:9c:c0:d3:40:06:70:f7:d5:bc:42:93:8c:c8:e6:22: b7:68:67:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQr3QE7S+9MSePcMrIS6CHNqhZuowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNDQzg1QkY2Q0NEMzY1NzAxRUZBNzVFRTQxNkQyMzRG ODYxMzg1QjAeFw0yNTA5MDcyMTE3MTJaFw0yNTA5MTEwMTEyMTJaMDMxMTAvBgNV BAMTKDJDODE5NTk0OTFFQTVEMjBGQTVFMUYzRDIwRUJBNUYxRDQyMjJEMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzCR2o0cRYyPq/iYiKJPOmP+09 +Ts0MzJqnFdZTfiISznukudA3A5gGHGiTmQUNMsTAeRngd9E9ZCjieq74AS0iArR ZaIomfHj1bi5y51utja8FbCpszbKN99CJadfBb2Ec+L4fwLTcG8JuZfqHeYGwzRc gtIKREoW4YziQyvRw+5A4vSX0Jb+BLzsJXIfYD79js5N7E8OJHxGSb6hKStdMCG/ iDDHx2ouRpNuM4yfuHhsF0xrKPNfuvVmGxYfpsoKALsaOQGhi2Ilm7xMOL69VjF+ Zh1YcMfKU0p+Z3lczfxD5g3ErYNfThiO74OUJLvc+nPZxVfMkKsjroUuWLxHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULIGVlJHqXSD6Xh89IOul8dQiLTYwHwYDVR0j BBgwFoAULMyFv2zNNlcB76de5BbSNPhhOFswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWYwN2YxOC01YzQ5LTQxMjktYWE1My03MDg1Y2NkNTdiNjMvMC8yQ0NDODVCRjZD Q0QzNjU3MDFFRkE3NUVFNDE2RDIzNEY4NjEzODVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkNDQzg1QkY2Q0NEMzY1NzAxRUZBNzVFRTQxNkQyMzRGODYx Mzg1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2FmMDdmMTgtNWM0OS00MTI5LWFh NTMtNzA4NWNjZDU3YjYzLzAvMkNDQzg1QkY2Q0NEMzY1NzAxRUZBNzVFRTQxNkQy MzRGODYxMzg1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHZ3A+VyvDr92cTvE2OpNCijnioOlOwZvbXK mgVH59ZpVcDeyNR8wEoUjpO/Dn4qmlZRLD2lg5ucouo5c+7++HT4IxQtUHgPCSJN h33UF91hOgOPV6KaXUNlr92IEk7FqcWpSkld4F7JpXHN+Y5lcMu6XQXGWEiVITLI 5f0NnYB6l9Q6sCAn0s2SKa5Rat3tiONaXI+5r5OSaPlZuK528+wFOdd5j0xq344O XG9xiO0rLWyAR1Y2wrPCTEG+Bl1CaFgE1JD3g9cPGBi/rTMDMPBG6o9eeTfZqYjx FawtWOMDBob827o6k8WOdbtJHpzA00AGcPfVvEKTjMjmIrdoZ0o= -----END CERTIFICATE-----Generated at Mon Sep 8 05:11:36 2025 by rpki-client