$ rpki-client -vvf repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft File: 2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft (raw, json) Hash identifier: ZGjsSSRWI+nLveTw86KppXCF+DM9Qjgk1ZBbLtLIhmY= Subject key identifier: 1B:DC:11:E4:9F:44:AC:D2:A7:44:96:91:81:16:D4:3B:C7:48:FB:04 Authority key identifier: 2C:B2:1E:F3:36:B6:AB:46:40:E4:61:96:01:E0:F6:48:8C:B8:FD:52 Certificate issuer: /CN=2CB21EF336B6AB4640E4619601E0F6488CB8FD52 Certificate serial: 266F5998A637DF08FD0F83662507C74FB75C6B62 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft Manifest number: 0334 Signing time: Thu 04 Sep 2025 14:51:57 +0000 Manifest this update: Thu 04 Sep 2025 14:46:57 +0000 Manifest next update: Mon 08 Sep 2025 02:48:57 +0000 Files and hashes: 1: 3130332e3136302e31322e302f32332d3234203d3e20313331313131.roa (hash: 2TjUbAwclmvFhuQfA5b8APF/xfL7qfTm8NzkksHu4ng=) 2: 2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl (hash: RwCwIELthtKYzAdKQ/TFGkZB3i1ZqlYihWOhlTul25o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 02:48:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:6f:59:98:a6:37:df:08:fd:0f:83:66:25:07:c7:4f:b7:5c:6b:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CB21EF336B6AB4640E4619601E0F6488CB8FD52 Validity Not Before: Sep 4 14:46:57 2025 GMT Not After : Sep 8 02:48:57 2025 GMT Subject: CN=1BDC11E49F44ACD2A74496918116D43BC748FB04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c2:f9:ca:ba:1e:18:22:53:aa:e7:b4:51:6f: c4:3d:2a:23:e8:26:92:ac:8d:c4:58:3c:3b:58:e5: da:d2:6b:df:82:dc:79:47:33:96:fd:66:31:3e:5b: f0:ee:dc:21:3f:1f:a2:be:68:77:e2:63:e2:5a:2c: e2:6d:be:16:e8:90:01:6c:8f:9c:94:04:56:48:fe: 51:a5:98:e2:0b:d8:36:97:8d:04:eb:74:b3:09:af: 2d:77:c6:e9:72:e7:ba:5a:81:bc:26:ae:3b:84:0c: e0:83:3b:92:8b:85:fc:2a:76:64:e5:76:db:81:d8: cd:56:c3:6c:60:2a:a5:9a:44:db:d8:7c:16:31:ff: dc:6f:9d:e5:8a:6d:8c:3b:9f:37:e7:bd:79:de:ca: c9:86:89:43:dd:89:35:c3:4f:5f:a0:73:2d:58:63: 47:8a:19:b1:69:69:e7:af:9a:67:b7:47:87:75:47: de:b7:49:a6:1f:1b:66:21:15:4e:2c:98:08:51:03: 31:dc:91:7b:f1:24:b5:5d:1c:d6:0b:10:a9:14:38: 0d:a4:2e:a5:d5:30:e8:17:5e:07:06:d6:8a:92:53: 67:6a:85:60:23:56:2c:61:08:8a:be:c4:59:db:a3: 95:ed:f6:0c:77:a0:93:0a:2f:cd:64:32:b4:fe:fa: da:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:DC:11:E4:9F:44:AC:D2:A7:44:96:91:81:16:D4:3B:C7:48:FB:04 X509v3 Authority Key Identifier: keyid:2C:B2:1E:F3:36:B6:AB:46:40:E4:61:96:01:E0:F6:48:8C:B8:FD:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:c2:43:6f:2c:1a:b4:e6:fb:13:ef:5b:2c:9f:5f:87:7b:f4: a6:29:e6:d2:d5:8e:5c:64:0d:45:fa:c6:a3:5e:8f:d1:5c:38: fc:09:ad:6c:fd:e0:d2:e1:1e:7d:31:6c:27:5e:a9:71:94:56: 8b:ea:a9:6d:ab:ef:9c:44:69:95:75:58:47:0f:c4:b1:9b:e6: 18:49:be:10:89:90:11:2a:16:6d:8d:60:f7:b8:10:d7:c5:78: e2:61:26:ba:df:79:52:51:81:70:ba:09:fc:76:95:11:e7:4a: 60:4b:91:01:42:a3:30:6a:40:3d:28:fb:0d:db:ed:94:f4:c8: 9e:31:2f:4f:d8:b8:b8:6b:11:fe:e1:a7:33:11:7e:8f:f4:97: 1e:cf:2a:31:5a:fd:99:5a:94:cf:8d:52:8b:6d:5c:67:4d:c9: 8f:75:74:ed:b2:1a:43:f8:d0:89:60:30:03:cf:3a:77:95:5f: a9:ef:f5:91:da:94:22:95:3f:eb:93:6a:33:21:81:53:a5:ee: 40:cb:3b:92:75:1c:d5:3b:87:ce:63:02:05:11:8b:97:87:87: d2:bb:08:78:b1:90:43:e2:05:bf:32:9b:b3:ae:78:8a:ae:be: 33:02:de:f0:93:42:9e:c2:a8:bb:b8:7e:e4:47:ac:11:21:bc: 88:c6:f9:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJm9ZmKY33wj9D4NmJQfHT7dca2IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2NDg4 Q0I4RkQ1MjAeFw0yNTA5MDQxNDQ2NTdaFw0yNTA5MDgwMjQ4NTdaMDMxMTAvBgNV BAMTKDFCREMxMUU0OUY0NEFDRDJBNzQ0OTY5MTgxMTZENDNCQzc0OEZCMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuwvnKuh4YIlOq57RRb8Q9KiPo JpKsjcRYPDtY5drSa9+C3HlHM5b9ZjE+W/Du3CE/H6K+aHfiY+JaLOJtvhbokAFs j5yUBFZI/lGlmOIL2DaXjQTrdLMJry13xuly57pagbwmrjuEDOCDO5KLhfwqdmTl dtuB2M1Ww2xgKqWaRNvYfBYx/9xvneWKbYw7nzfnvXneysmGiUPdiTXDT1+gcy1Y Y0eKGbFpaeevmme3R4d1R963SaYfG2YhFU4smAhRAzHckXvxJLVdHNYLEKkUOA2k LqXVMOgXXgcG1oqSU2dqhWAjVixhCIq+xFnbo5Xt9gx3oJMKL81kMrT++tplAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG9wR5J9ErNKnRJaRgRbUO8dI+wQwHwYDVR0j BBgwFoAULLIe8za2q0ZA5GGWAeD2SIy4/VIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGM2Zjc3MC02ODZhLTQ1ZWYtOGRmYi0wYzNhODdkM2Q4ZGEvMC8yQ0IyMUVGMzM2 QjZBQjQ2NDBFNDYxOTYwMUUwRjY0ODhDQjhGRDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2NDg4Q0I4 RkQ1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRjNmY3NzAtNjg2YS00NWVmLThk ZmItMGMzYTg3ZDNkOGRhLzAvMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2 NDg4Q0I4RkQ1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACTCQ28sGrTm+xPvWyyfX4d79KYp5tLVjlxk DUX6xqNej9FcOPwJrWz94NLhHn0xbCdeqXGUVovqqW2r75xEaZV1WEcPxLGb5hhJ vhCJkBEqFm2NYPe4ENfFeOJhJrrfeVJRgXC6Cfx2lRHnSmBLkQFCozBqQD0o+w3b 7ZT0yJ4xL0/YuLhrEf7hpzMRfo/0lx7PKjFa/ZlalM+NUottXGdNyY91dO2yGkP4 0IlgMAPPOneVX6nv9ZHalCKVP+uTajMhgVOl7kDLO5J1HNU7h85jAgURi5eHh9K7 CHixkEPiBb8ym7OueIquvjMC3vCTQp7CqLu4fuRHrBEhvIjG+dQ= -----END CERTIFICATE-----Generated at Fri Sep 5 10:31:54 2025 by rpki-client