$ rpki-client -vvf repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft File: 2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft (raw, json) Hash identifier: y6UkD4dUl1ciTLRNbgZlAaFg7ibGLjwAwaGysUKQUH4= Subject key identifier: AE:F1:F8:FD:AC:CF:F9:3C:5D:A8:4C:02:6A:A6:BA:86:6C:A9:6F:A5 Authority key identifier: 2C:83:67:04:27:BB:EA:5D:CC:6E:4F:5F:7E:E2:34:2D:B5:DC:2B:2E Certificate issuer: /CN=2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E Certificate serial: 23F4EC9395D046218105FEAED7906D25F3A225C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft Manifest number: D2 Signing time: Thu 05 Jun 2025 11:01:15 +0000 Manifest this update: Thu 05 Jun 2025 10:56:15 +0000 Manifest next update: Sun 08 Jun 2025 12:32:15 +0000 Files and hashes: 1: 2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.crl (hash: cGZvVLqRrG+iEDiGKmq60zSDwFM42cdBUmaW/GkQ08Q=) 2: 3130332e3133312e35312e302f32342d3234203d3e20313331373735.roa (hash: T56TwNuf3EVVKNZ4lQ8Ldgdic1XY2tNrYbscCPFk9Pg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.crl rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 12:32:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:f4:ec:93:95:d0:46:21:81:05:fe:ae:d7:90:6d:25:f3:a2:25:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E Validity Not Before: Jun 5 10:56:15 2025 GMT Not After : Jun 8 12:32:15 2025 GMT Subject: CN=AEF1F8FDACCFF93C5DA84C026AA6BA866CA96FA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ed:e6:d0:b4:36:25:6f:e8:ed:45:52:0c:b3: e3:32:22:26:76:9c:b3:5b:e5:18:ee:25:fe:09:81: 91:3e:97:c3:a4:21:d4:c5:7d:60:67:9d:62:56:14: c3:b1:1f:15:a2:58:d4:9e:aa:dd:7e:7e:15:00:38: 88:74:55:57:ae:1a:89:59:f7:94:be:a2:78:84:c4: 42:6e:e6:6a:ba:93:3d:bf:c7:fe:dd:5a:94:73:72: e6:da:f4:7f:dc:8d:e3:26:2e:23:d3:22:90:75:58: cb:69:a8:c9:b1:ae:14:ff:19:f8:55:dd:ca:49:10: e4:d4:45:68:9f:b2:27:62:45:41:99:5a:49:2b:c6: 2a:29:2b:23:fc:92:1d:1d:31:a6:f9:84:98:d7:38: d2:f6:67:45:76:74:28:b6:71:97:27:20:fe:52:74: dd:ac:c2:2a:6c:46:92:ac:2f:e3:1e:91:63:21:db: 39:e1:c2:53:3a:08:87:93:9c:91:7c:9f:40:a2:4d: 4d:d2:ad:cf:8e:d8:f6:1a:16:a0:3a:03:b8:ff:92: c4:02:99:4c:17:c6:aa:81:3d:91:b7:e4:15:c6:12: bd:f4:5d:c5:fe:da:68:80:f0:6e:fd:c8:c9:38:8b: 38:51:fe:4f:cf:3e:5c:f5:92:60:bc:8a:f8:66:0b: 6b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F1:F8:FD:AC:CF:F9:3C:5D:A8:4C:02:6A:A6:BA:86:6C:A9:6F:A5 X509v3 Authority Key Identifier: keyid:2C:83:67:04:27:BB:EA:5D:CC:6E:4F:5F:7E:E2:34:2D:B5:DC:2B:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:8d:a5:bd:41:dd:3c:62:62:6c:f9:70:ea:09:5f:b4:5b:92: 59:d2:a6:b2:1d:de:74:82:11:22:6c:fd:4b:6f:cd:d7:a8:eb: aa:2c:9a:b5:f7:a7:f3:71:ce:94:5d:52:84:5f:47:d0:6c:58: 44:5e:5c:a6:2b:6b:74:de:0a:9f:78:d0:cb:15:6a:fd:91:9f: 9c:b6:be:94:92:ab:eb:cf:26:86:7a:82:50:8a:91:ac:d4:11: d5:bc:38:f6:de:24:d6:08:1d:b4:99:86:3b:22:15:c3:f2:2a: 6d:8e:8f:a6:58:15:5a:cb:fa:07:60:f6:6f:1a:87:c3:1a:25: 07:a0:5b:a9:1e:e4:b0:cb:6a:e6:fa:b6:f0:f8:ed:45:92:60: ca:9c:79:c2:54:0c:00:95:fd:05:6f:69:89:28:12:31:c8:cb: ef:df:97:78:8a:1a:a4:09:75:4a:e6:6c:ea:44:8f:77:1c:3d: 2a:ef:80:6e:f5:1b:f1:89:dd:7c:71:5c:6c:3b:e4:e3:05:fb: e8:56:64:40:43:e1:04:10:b0:e0:ae:bb:50:8f:e0:38:0e:08: 53:ed:14:c5:34:0b:82:c3:87:68:06:ed:ac:a8:25:8c:a3:ea: c4:13:6f:0a:08:00:ea:0d:2a:15:77:bd:9e:2d:ad:ec:5f:e0: 0a:e5:68:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI/Tsk5XQRiGBBf6u15BtJfOiJckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM4MzY3MDQyN0JCRUE1RENDNkU0RjVGN0VFMjM0MkRC NURDMkIyRTAeFw0yNTA2MDUxMDU2MTVaFw0yNTA2MDgxMjMyMTVaMDMxMTAvBgNV BAMTKEFFRjFGOEZEQUNDRkY5M0M1REE4NEMwMjZBQTZCQTg2NkNBOTZGQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj7ebQtDYlb+jtRVIMs+MyIiZ2 nLNb5RjuJf4JgZE+l8OkIdTFfWBnnWJWFMOxHxWiWNSeqt1+fhUAOIh0VVeuGolZ 95S+oniExEJu5mq6kz2/x/7dWpRzcuba9H/cjeMmLiPTIpB1WMtpqMmxrhT/GfhV 3cpJEOTURWifsidiRUGZWkkrxiopKyP8kh0dMab5hJjXONL2Z0V2dCi2cZcnIP5S dN2swipsRpKsL+MekWMh2znhwlM6CIeTnJF8n0CiTU3Src+O2PYaFqA6A7j/ksQC mUwXxqqBPZG35BXGEr30XcX+2miA8G79yMk4izhR/k/PPlz1kmC8ivhmC2szAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrvH4/azP+TxdqEwCaqa6hmypb6UwHwYDVR0j BBgwFoAULINnBCe76l3Mbk9ffuI0LbXcKy4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NGI0ZWM5OC00ZDFmLTRlNmYtYTc2OC0wMjY4OTQyMDIyMjMvMC8yQzgzNjcwNDI3 QkJFQTVEQ0M2RTRGNUY3RUUyMzQyREI1REMyQjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkM4MzY3MDQyN0JCRUE1RENDNkU0RjVGN0VFMjM0MkRCNURD MkIyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjRiNGVjOTgtNGQxZi00ZTZmLWE3 NjgtMDI2ODk0MjAyMjIzLzAvMkM4MzY3MDQyN0JCRUE1RENDNkU0RjVGN0VFMjM0 MkRCNURDMkIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGWNpb1B3TxiYmz5cOoJX7RbklnSprId3nSC ESJs/Utvzdeo66osmrX3p/NxzpRdUoRfR9BsWEReXKYra3TeCp940MsVav2Rn5y2 vpSSq+vPJoZ6glCKkazUEdW8OPbeJNYIHbSZhjsiFcPyKm2Oj6ZYFVrL+gdg9m8a h8MaJQegW6ke5LDLaub6tvD47UWSYMqcecJUDACV/QVvaYkoEjHIy+/fl3iKGqQJ dUrmbOpEj3ccPSrvgG71G/GJ3XxxXGw75OMF++hWZEBD4QQQsOCuu1CP4DgOCFPt FMU0C4LDh2gG7ayoJYyj6sQTbwoIAOoNKhV3vZ4trexf4ArlaHc= -----END CERTIFICATE-----Generated at Thu Jun 5 18:23:51 2025 by rpki-client