$ rpki-client -vvf repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft File: 2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft (raw, json) Hash identifier: GkJxsMyqM5drYRYqEmLIACpPu7Gtbd8hzG1puVCme/U= Subject key identifier: 42:EE:4C:B0:DC:52:07:A9:1A:AC:4C:45:3A:30:4A:0E:40:CC:50:7D Authority key identifier: 2C:83:67:04:27:BB:EA:5D:CC:6E:4F:5F:7E:E2:34:2D:B5:DC:2B:2E Certificate issuer: /CN=2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E Certificate serial: 14714ED88F56DE4719F59D92179A9965B7E1042F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft Manifest number: FC Signing time: Sat 06 Sep 2025 19:11:17 +0000 Manifest this update: Sat 06 Sep 2025 19:06:17 +0000 Manifest next update: Wed 10 Sep 2025 05:01:17 +0000 Files and hashes: 1: 3130332e3133312e35312e302f32342d3234203d3e20313331373735.roa (hash: T56TwNuf3EVVKNZ4lQ8Ldgdic1XY2tNrYbscCPFk9Pg=) 2: 2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.crl (hash: w6LVsXbhler0GJMEqPOHs49SXKi1JrlA79QSxdn92x8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.crl rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 05:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:71:4e:d8:8f:56:de:47:19:f5:9d:92:17:9a:99:65:b7:e1:04:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E Validity Not Before: Sep 6 19:06:17 2025 GMT Not After : Sep 10 05:01:17 2025 GMT Subject: CN=42EE4CB0DC5207A91AAC4C453A304A0E40CC507D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:06:2c:2b:b1:42:35:bb:f7:af:ef:5c:cc:2f: 22:41:5d:11:41:61:33:33:63:31:f1:44:63:00:ea: 49:c8:f9:00:2e:0e:c8:cb:2c:90:00:9a:16:ea:2c: 17:d0:bf:1d:be:81:58:81:d0:69:68:d8:19:6e:b6: 4d:f4:08:19:cb:03:91:f4:e1:44:f1:a9:12:dd:42: 09:3d:50:e5:b3:19:40:54:08:31:f4:bd:13:15:99: a5:35:54:5c:d7:36:f1:be:af:d2:0d:aa:21:ba:8c: 05:2a:85:c9:d1:ec:93:2f:de:2d:fd:d0:f4:a0:3c: 16:82:fd:49:20:0b:78:81:4a:77:96:9a:00:e7:b9: b6:58:5c:b7:69:00:ae:23:62:5f:0d:b1:2f:91:80: 2e:7c:09:29:63:48:0f:48:e3:31:15:28:88:2d:b9: 4e:9d:ba:79:75:c1:65:78:d7:ee:16:fb:4c:1e:b9: d4:80:f4:3b:b5:af:13:0d:dc:7f:5b:b9:09:ed:53: b5:84:04:de:08:f1:99:0d:a8:09:76:be:69:b8:94: 79:8d:f3:8b:6f:fb:52:b5:37:65:35:69:af:ba:79: 00:a3:7f:c3:ff:5b:e6:5c:87:32:95:f3:51:06:d1: 8c:35:78:42:9d:f8:45:d8:06:8d:84:4b:89:c0:6c: 17:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:EE:4C:B0:DC:52:07:A9:1A:AC:4C:45:3A:30:4A:0E:40:CC:50:7D X509v3 Authority Key Identifier: keyid:2C:83:67:04:27:BB:EA:5D:CC:6E:4F:5F:7E:E2:34:2D:B5:DC:2B:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:4f:70:27:9c:f8:e4:44:3f:4d:f0:98:ea:ff:84:47:36:6f: e0:67:76:84:b9:93:3f:25:65:93:4b:37:dc:27:99:09:c7:d4: 39:e6:6b:ed:43:a3:a9:80:05:df:e6:35:a4:eb:d0:0b:d5:c5: 49:7f:61:6a:c7:00:65:93:1c:d0:1f:cb:ae:07:5c:0b:e6:7d: a9:0f:5f:80:6b:af:4a:b9:8d:0c:f6:29:ab:3c:77:e0:35:94: 5b:2a:0e:d6:72:a8:93:e8:cc:fa:f3:cf:20:4f:d0:1e:4e:19: 2d:1b:e1:93:e0:33:d5:cb:7a:ef:b1:f8:8f:4a:c4:37:ac:81: 3e:d1:26:5b:0c:b2:0e:4c:5c:11:37:b4:16:88:dd:89:d0:d8: da:d8:9d:5c:e6:1f:b0:fc:65:2b:51:c0:48:dc:2d:08:ac:89: c8:30:dd:e1:33:34:1e:7b:ba:b4:69:ed:3e:95:7e:f6:20:be: 43:19:9a:58:2f:7f:ba:a3:1a:f0:29:a4:fb:05:c5:37:72:72: 65:ba:31:f2:80:aa:0d:a4:45:29:89:f8:e2:4d:e1:97:da:ad: ed:85:cb:12:61:8b:1b:8a:e6:f6:d2:ff:98:a4:e7:86:3d:44: 6d:ef:3c:0c:b9:f9:2d:b4:3d:49:61:a6:cc:db:7a:75:83:28: 9f:7f:5c:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFHFO2I9W3kcZ9Z2SF5qZZbfhBC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM4MzY3MDQyN0JCRUE1RENDNkU0RjVGN0VFMjM0MkRC NURDMkIyRTAeFw0yNTA5MDYxOTA2MTdaFw0yNTA5MTAwNTAxMTdaMDMxMTAvBgNV BAMTKDQyRUU0Q0IwREM1MjA3QTkxQUFDNEM0NTNBMzA0QTBFNDBDQzUwN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGBiwrsUI1u/ev71zMLyJBXRFB YTMzYzHxRGMA6knI+QAuDsjLLJAAmhbqLBfQvx2+gViB0Glo2Blutk30CBnLA5H0 4UTxqRLdQgk9UOWzGUBUCDH0vRMVmaU1VFzXNvG+r9INqiG6jAUqhcnR7JMv3i39 0PSgPBaC/UkgC3iBSneWmgDnubZYXLdpAK4jYl8NsS+RgC58CSljSA9I4zEVKIgt uU6dunl1wWV41+4W+0weudSA9Du1rxMN3H9buQntU7WEBN4I8ZkNqAl2vmm4lHmN 84tv+1K1N2U1aa+6eQCjf8P/W+ZchzKV81EG0Yw1eEKd+EXYBo2ES4nAbBfrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQu5MsNxSB6karExFOjBKDkDMUH0wHwYDVR0j BBgwFoAULINnBCe76l3Mbk9ffuI0LbXcKy4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NGI0ZWM5OC00ZDFmLTRlNmYtYTc2OC0wMjY4OTQyMDIyMjMvMC8yQzgzNjcwNDI3 QkJFQTVEQ0M2RTRGNUY3RUUyMzQyREI1REMyQjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkM4MzY3MDQyN0JCRUE1RENDNkU0RjVGN0VFMjM0MkRCNURD MkIyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjRiNGVjOTgtNGQxZi00ZTZmLWE3 NjgtMDI2ODk0MjAyMjIzLzAvMkM4MzY3MDQyN0JCRUE1RENDNkU0RjVGN0VFMjM0 MkRCNURDMkIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKpPcCec+OREP03wmOr/hEc2b+BndoS5kz8l ZZNLN9wnmQnH1Dnma+1Do6mABd/mNaTr0AvVxUl/YWrHAGWTHNAfy64HXAvmfakP X4Brr0q5jQz2Kas8d+A1lFsqDtZyqJPozPrzzyBP0B5OGS0b4ZPgM9XLeu+x+I9K xDesgT7RJlsMsg5MXBE3tBaI3YnQ2NrYnVzmH7D8ZStRwEjcLQisicgw3eEzNB57 urRp7T6VfvYgvkMZmlgvf7qjGvAppPsFxTdycmW6MfKAqg2kRSmJ+OJN4Zfare2F yxJhixuK5vbS/5ik54Y9RG3vPAy5+S20PUlhpszbenWDKJ9/XEI= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:49 2025 by rpki-client