$ rpki-client -vvf repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft File: 2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft (raw, json) Hash identifier: G3oR3AuAdY4SNInoSvH5iezG2vdVZGZ1TgnF0wY9cgM= Subject key identifier: 04:72:7F:E1:13:DC:F4:9A:4C:93:51:B3:7B:7E:AC:D6:B1:AC:E8:15 Authority key identifier: 2C:9C:8D:6A:DB:43:A7:5F:1D:FA:48:05:3B:0E:13:BF:E4:BD:35:0A Certificate issuer: /CN=2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A Certificate serial: 11B84EA21B359A2165AC61C9B0A3B770A98975B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft Manifest number: 6A Signing time: Wed 30 Jul 2025 12:52:00 +0000 Manifest this update: Wed 30 Jul 2025 12:47:00 +0000 Manifest next update: Sat 02 Aug 2025 14:32:00 +0000 Files and hashes: 1: 2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.crl (hash: UTt9Pt+3l7+eeCMNJZLWYhg+2M+YUfmFd/fvMIU4Vj0=) 2: 3136302e32322e39342e302f32342d3234203d3e20313533313130.roa (hash: ss2EJAnpKFiDc20LCUbPWRGzhNcuFuLtxPENwLK+/ro=) 3: 3136302e32322e39352e302f32342d3234203d3e20313533313130.roa (hash: twzSlBh0NN1lf3cw6Hfv5Bifh4nztMxRMAZ/HjKNRio=) 4: 3136302e32322e39342e302f32332d3233203d3e20313533313130.roa (hash: NjyYz1ga8Qpztk8z2OnelqpIaeIr9KbAHbFDRDS0sFY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.crl rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 02 Aug 2025 14:32:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:b8:4e:a2:1b:35:9a:21:65:ac:61:c9:b0:a3:b7:70:a9:89:75:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A Validity Not Before: Jul 30 12:47:00 2025 GMT Not After : Aug 2 14:32:00 2025 GMT Subject: CN=04727FE113DCF49A4C9351B37B7EACD6B1ACE815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:da:7d:63:d6:21:a6:fc:35:15:7e:2b:d7:e6: a9:ff:40:6d:04:1b:7c:ae:44:ac:a5:10:57:51:f2: 32:09:5a:2a:76:dd:fc:a1:47:bd:54:8e:a4:39:5e: 00:da:05:41:69:98:cd:2f:13:cb:24:56:2b:b8:a4: 4e:2a:d2:50:34:58:85:b0:1b:80:58:ba:14:41:6a: 31:55:6a:12:72:b4:4b:66:38:c6:26:d4:0f:b4:de: d2:7f:a4:9f:e2:d9:21:6a:a7:a8:0f:09:7a:15:03: a4:78:c7:6e:f5:7e:5b:ae:af:84:6f:4b:89:4d:0c: 78:ed:2c:47:e8:db:c0:8d:8f:b2:70:a8:90:61:9c: b2:33:56:76:21:30:32:e2:89:b8:b7:91:43:20:c5: 40:18:72:f1:2e:02:ac:2b:60:85:a6:0a:2e:bf:1e: 17:ac:77:11:9e:98:c9:06:ef:56:c9:1e:fa:50:a9: 0b:a4:65:84:47:00:fe:c2:35:39:3a:ec:03:e8:20: 9c:cd:75:9d:ec:4a:44:fe:05:3b:8a:a8:46:02:fe: 14:59:f0:6a:0a:31:d0:82:13:e7:8c:98:15:2f:5e: d1:2d:af:08:bc:b1:f5:07:26:37:bc:d0:99:79:e9: 0f:e5:b8:1b:16:7b:24:20:40:90:80:d0:95:3b:69: 40:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:72:7F:E1:13:DC:F4:9A:4C:93:51:B3:7B:7E:AC:D6:B1:AC:E8:15 X509v3 Authority Key Identifier: keyid:2C:9C:8D:6A:DB:43:A7:5F:1D:FA:48:05:3B:0E:13:BF:E4:BD:35:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ee:94:fd:86:79:f7:49:2e:48:c5:9d:2b:30:25:3c:e7:2f:45: 28:dc:8e:87:a3:fa:26:a7:1e:c3:ac:02:dd:0c:f0:17:a7:7d: fe:cd:63:4c:68:5d:3c:86:0f:d2:b0:85:b0:c8:4b:3c:ad:32: ff:ed:4d:76:c1:5f:d7:fe:21:27:40:e4:16:db:be:ba:fb:8d: c8:f4:2e:fa:dd:e8:e9:6c:76:a8:95:1f:c9:6d:6a:9b:f4:10: 73:30:ed:31:55:7c:ee:df:ca:d4:cf:b2:f7:c3:88:9c:80:ec: 64:68:11:25:49:36:b8:80:3c:d9:b6:01:64:b1:df:3e:cd:02: 64:02:fa:3f:85:4a:ec:00:27:95:57:e4:3b:c7:b5:a4:f2:38: 3b:c7:42:59:22:85:b4:cc:35:e3:c2:4e:21:0a:17:3b:ad:9f: 30:3e:a4:9e:db:6b:f8:d5:c7:11:c5:b4:3d:29:a7:bd:cf:94: 21:b2:b5:36:50:22:7d:75:1f:be:cc:16:0a:58:fa:8e:9f:14: 3e:af:1e:5f:aa:b1:71:d1:70:ff:4f:a6:4e:64:96:ff:16:17: ae:29:b9:20:2c:ee:06:7b:66:b0:7c:32:8c:77:89:a4:db:a5: 41:17:72:dd:aa:d9:64:fb:b2:aa:49:3d:b9:9a:48:55:71:a2: fc:c0:a3:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEbhOohs1miFlrGHJsKO3cKmJdbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM5QzhENkFEQjQzQTc1RjFERkE0ODA1M0IwRTEzQkZF NEJEMzUwQTAeFw0yNTA3MzAxMjQ3MDBaFw0yNTA4MDIxNDMyMDBaMDMxMTAvBgNV BAMTKDA0NzI3RkUxMTNEQ0Y0OUE0QzkzNTFCMzdCN0VBQ0Q2QjFBQ0U4MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR2n1j1iGm/DUVfivX5qn/QG0E G3yuRKylEFdR8jIJWip23fyhR71UjqQ5XgDaBUFpmM0vE8skViu4pE4q0lA0WIWw G4BYuhRBajFVahJytEtmOMYm1A+03tJ/pJ/i2SFqp6gPCXoVA6R4x271fluur4Rv S4lNDHjtLEfo28CNj7JwqJBhnLIzVnYhMDLiibi3kUMgxUAYcvEuAqwrYIWmCi6/ HhesdxGemMkG71bJHvpQqQukZYRHAP7CNTk67APoIJzNdZ3sSkT+BTuKqEYC/hRZ 8GoKMdCCE+eMmBUvXtEtrwi8sfUHJje80Jl56Q/luBsWeyQgQJCA0JU7aUAJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBHJ/4RPc9JpMk1Gze36s1rGs6BUwHwYDVR0j BBgwFoAULJyNattDp18d+kgFOw4Tv+S9NQowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTA3NzM4Ni0zMDFiLTRmZjEtODcxYi02MjMyYjVmM2JlMDkvMC8yQzlDOEQ2QURC NDNBNzVGMURGQTQ4MDUzQjBFMTNCRkU0QkQzNTBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkM5QzhENkFEQjQzQTc1RjFERkE0ODA1M0IwRTEzQkZFNEJE MzUwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWEwNzczODYtMzAxYi00ZmYxLTg3 MWItNjIzMmI1ZjNiZTA5LzAvMkM5QzhENkFEQjQzQTc1RjFERkE0ODA1M0IwRTEz QkZFNEJEMzUwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAO6U/YZ590kuSMWdKzAlPOcvRSjcjoej+ian HsOsAt0M8Benff7NY0xoXTyGD9KwhbDISzytMv/tTXbBX9f+ISdA5Bbbvrr7jcj0 Lvrd6OlsdqiVH8ltapv0EHMw7TFVfO7fytTPsvfDiJyA7GRoESVJNriAPNm2AWSx 3z7NAmQC+j+FSuwAJ5VX5DvHtaTyODvHQlkihbTMNePCTiEKFzutnzA+pJ7ba/jV xxHFtD0pp73PlCGytTZQIn11H77MFgpY+o6fFD6vHl+qsXHRcP9Ppk5klv8WF64p uSAs7gZ7ZrB8Mox3iaTbpUEXct2q2WT7sqpJPbmaSFVxovzAo4I= -----END CERTIFICATE-----Generated at Thu Jul 31 12:41:25 2025 by rpki-client