$ rpki-client -vvf repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.mft File: C2E929DFB05F81B91880BC808154365AECAC27D2.mft (raw, json) Hash identifier: D6QXk/XEv5RjFmslh55VvycjNBW28Oakb0msJ9Tt8nI= Subject key identifier: FA:10:B4:C6:39:88:44:C0:C0:0F:E7:D2:41:9B:68:95:94:C2:1B:AD Authority key identifier: C2:E9:29:DF:B0:5F:81:B9:18:80:BC:80:81:54:36:5A:EC:AC:27:D2 Certificate issuer: /CN=C2E929DFB05F81B91880BC808154365AECAC27D2 Certificate serial: 24C57CC3C441023752F3E94CC3BA44AE3F4D2E3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E929DFB05F81B91880BC808154365AECAC27D2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.mft Manifest number: 0125 Signing time: Fri 05 Sep 2025 11:01:40 +0000 Manifest this update: Fri 05 Sep 2025 10:56:40 +0000 Manifest next update: Mon 08 Sep 2025 16:18:40 +0000 Files and hashes: 1: C2E929DFB05F81B91880BC808154365AECAC27D2.crl (hash: bmDj+QJuPZbVD0sdgGd3MXRTqepUoukzbuHNyavcG8w=) 2: 3230322e34372e3138362e302f32342d3234203d3e20313532303234.roa (hash: dATjFz2GgCuZI7do22WaaBEM9mGMyqKI+2l7xnlR/rA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.crl rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E929DFB05F81B91880BC808154365AECAC27D2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 16:18:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:c5:7c:c3:c4:41:02:37:52:f3:e9:4c:c3:ba:44:ae:3f:4d:2e:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2E929DFB05F81B91880BC808154365AECAC27D2 Validity Not Before: Sep 5 10:56:40 2025 GMT Not After : Sep 8 16:18:40 2025 GMT Subject: CN=FA10B4C6398844C0C00FE7D2419B689594C21BAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:98:f8:62:ea:af:b6:6b:6c:dc:32:e0:33:56: 1f:6a:d9:45:03:81:24:72:bc:3e:0c:bb:3a:96:d6: 8f:18:e5:67:2d:24:6c:2d:bf:20:62:08:bd:5d:45: 1f:de:16:4b:e3:0c:98:f2:05:92:1f:2b:1a:4f:f1: c5:3b:14:27:35:42:c9:d9:38:24:0e:f2:5f:24:b8: bd:8b:87:a4:bd:ca:8b:ae:6f:0e:00:ab:f3:0e:67: 32:34:ae:a8:8e:88:40:cc:9f:30:83:53:7d:5b:2d: cb:14:2b:86:36:84:f6:a7:5b:1b:37:c0:fa:68:e2: 1e:ee:52:0e:fb:47:d8:3a:d9:94:46:23:bf:a1:07: fc:ed:62:52:b6:ab:d5:0f:cc:08:28:ca:d1:6a:0c: 4f:cf:08:73:2c:c0:6d:ef:17:a7:4e:ad:de:8a:c6: 2a:55:79:bb:20:c5:e6:01:be:93:4f:7d:1e:bb:26: 87:c3:b0:4d:b8:54:6e:12:66:38:6d:7d:d7:1f:34: 18:83:33:4e:1f:33:9a:02:2e:4c:cb:bb:f9:10:76: 2f:01:5a:a2:b6:a7:cc:50:d6:30:5a:f5:fa:26:de: e4:7b:fb:98:8e:ac:a8:e7:f1:fa:43:8a:be:55:ee: 7d:75:1b:04:8a:6f:54:44:08:9a:1a:dd:7c:a8:b0: 18:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:10:B4:C6:39:88:44:C0:C0:0F:E7:D2:41:9B:68:95:94:C2:1B:AD X509v3 Authority Key Identifier: keyid:C2:E9:29:DF:B0:5F:81:B9:18:80:BC:80:81:54:36:5A:EC:AC:27:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E929DFB05F81B91880BC808154365AECAC27D2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:04:ea:6f:98:72:2a:d3:56:c3:f2:aa:b2:39:55:c5:03:fd: 65:d0:fc:3e:85:19:02:ef:63:1f:ea:bd:1e:43:bf:06:0c:90: d2:d4:0e:1d:d5:82:86:e4:c3:0e:a6:49:9a:a9:2e:99:60:a7: e3:52:48:d6:02:83:52:25:2d:99:ef:8e:f9:ef:af:3e:4a:3a: 98:f0:da:17:1d:a8:b9:33:14:9e:f0:25:db:88:65:6f:ad:ec: b7:05:a0:e7:13:4b:0f:51:19:b1:ab:f5:1f:2b:e9:76:4e:a0: 9d:30:43:9d:1f:af:50:b0:4b:48:a4:c6:a9:1a:eb:d1:ae:da: e5:57:86:cc:d7:4c:3b:3d:30:94:b5:5e:ba:3e:bf:63:31:05: 0b:87:50:9d:65:1b:83:fd:19:e0:88:da:ce:8a:ae:eb:72:ab: 13:be:b0:48:6b:4c:dd:47:e1:0b:0d:ec:7e:10:56:04:bc:bd: ac:29:d6:25:ca:5b:2b:de:b3:51:ee:2c:a1:d2:68:be:be:57: a5:6d:b6:a7:50:57:cf:0b:ce:ab:f7:a8:54:7f:cb:72:90:4f: 82:d7:05:d7:29:9f:ad:09:32:35:39:d7:51:57:60:5c:92:7e: 54:6a:04:c5:c2:cc:bc:9d:ce:e4:b7:a8:4d:ce:9e:58:6b:d8: 0b:4e:16:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJMV8w8RBAjdS8+lMw7pErj9NLj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJFOTI5REZCMDVGODFCOTE4ODBCQzgwODE1NDM2NUFF Q0FDMjdEMjAeFw0yNTA5MDUxMDU2NDBaFw0yNTA5MDgxNjE4NDBaMDMxMTAvBgNV BAMTKEZBMTBCNEM2Mzk4ODQ0QzBDMDBGRTdEMjQxOUI2ODk1OTRDMjFCQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKmPhi6q+2a2zcMuAzVh9q2UUD gSRyvD4MuzqW1o8Y5WctJGwtvyBiCL1dRR/eFkvjDJjyBZIfKxpP8cU7FCc1QsnZ OCQO8l8kuL2Lh6S9youubw4Aq/MOZzI0rqiOiEDMnzCDU31bLcsUK4Y2hPanWxs3 wPpo4h7uUg77R9g62ZRGI7+hB/ztYlK2q9UPzAgoytFqDE/PCHMswG3vF6dOrd6K xipVebsgxeYBvpNPfR67JofDsE24VG4SZjhtfdcfNBiDM04fM5oCLkzLu/kQdi8B WqK2p8xQ1jBa9fom3uR7+5iOrKjn8fpDir5V7n11GwSKb1RECJoa3XyosBjNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+hC0xjmIRMDAD+fSQZtolZTCG60wHwYDVR0j BBgwFoAUwukp37BfgbkYgLyAgVQ2WuysJ9IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDZmZmFkMi0yMGJjLTQyNDYtODI5My00NDY2NmNlMWNmZTAvMC9DMkU5MjlERkIw NUY4MUI5MTg4MEJDODA4MTU0MzY1QUVDQUMyN0QyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJFOTI5REZCMDVGODFCOTE4ODBCQzgwODE1NDM2NUFFQ0FD MjdEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ2ZmZhZDItMjBiYy00MjQ2LTgy OTMtNDQ2NjZjZTFjZmUwLzAvQzJFOTI5REZCMDVGODFCOTE4ODBCQzgwODE1NDM2 NUFFQ0FDMjdEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEQE6m+YcirTVsPyqrI5VcUD/WXQ/D6FGQLv Yx/qvR5DvwYMkNLUDh3Vgobkww6mSZqpLplgp+NSSNYCg1IlLZnvjvnvrz5KOpjw 2hcdqLkzFJ7wJduIZW+t7LcFoOcTSw9RGbGr9R8r6XZOoJ0wQ50fr1CwS0ikxqka 69Gu2uVXhszXTDs9MJS1Xro+v2MxBQuHUJ1lG4P9GeCI2s6KrutyqxO+sEhrTN1H 4QsN7H4QVgS8vawp1iXKWyves1HuLKHSaL6+V6VttqdQV88Lzqv3qFR/y3KQT4LX Bdcpn60JMjU511FXYFySflRqBMXCzLydzuS3qE3Onlhr2AtOFj0= -----END CERTIFICATE-----Generated at Sun Sep 7 14:05:26 2025 by rpki-client