$ rpki-client -vvf repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft File: C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft (raw, json) Hash identifier: naOSRLpZb4FTgJnm99Hd/UEouAseV3qacimgJuxNKF4= Subject key identifier: 21:72:C8:17:7F:23:BD:FD:E3:A3:C3:58:78:B0:24:78:8B:79:30:8E Authority key identifier: C2:D5:93:D1:C8:A7:F7:0D:45:12:5D:4B:DB:E5:77:49:27:C1:4E:55 Certificate issuer: /CN=C2D593D1C8A7F70D45125D4BDBE5774927C14E55 Certificate serial: 076B1582B940E48D87A1198082139D7399EFA53F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft Manifest number: 77 Signing time: Wed 04 Jun 2025 16:51:05 +0000 Manifest this update: Wed 04 Jun 2025 16:46:05 +0000 Manifest next update: Sun 08 Jun 2025 00:45:05 +0000 Files and hashes: 1: 3136302e31392e3137382e302f32342d3234203d3e20313532373837.roa (hash: M1UfgBl+o+VtOJt76FjRKdEJWLXVwypZfHtYeDLVMfk=) 2: C2D593D1C8A7F70D45125D4BDBE5774927C14E55.crl (hash: lXYYcbOXW3JEZi7BhG94j6Xc8HpE/8QWuPRDYVGY/Uc=) 3: 3136302e31392e3137392e302f32342d3234203d3e20313532373837.roa (hash: 0CvOPtspHIv++OpYpPeOAtYrJalD1E7T3Av1Tkd5zHo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.crl rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 00:45:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:6b:15:82:b9:40:e4:8d:87:a1:19:80:82:13:9d:73:99:ef:a5:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2D593D1C8A7F70D45125D4BDBE5774927C14E55 Validity Not Before: Jun 4 16:46:05 2025 GMT Not After : Jun 8 00:45:05 2025 GMT Subject: CN=2172C8177F23BDFDE3A3C35878B024788B79308E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:23:b4:b7:ee:72:11:85:eb:89:02:f1:f3:3f: 09:2a:6a:c6:a2:d9:9c:e3:6b:73:ca:9c:03:15:71: 2a:df:c4:54:3c:18:65:74:33:93:29:57:7a:30:2b: 55:5e:11:23:0c:34:b2:cf:9f:7b:fe:0e:7f:fe:d7: 72:e0:82:53:b7:60:d8:44:c2:93:2d:93:8d:93:07: e7:18:18:a2:cf:77:47:ab:cb:b1:b7:8d:ab:2d:8e: 39:c8:3a:92:6f:f5:76:5a:e4:ef:3e:9e:03:20:46: 2e:d5:ad:0d:97:bf:4e:ef:dc:2c:2d:8b:90:cb:b2: d9:45:71:31:aa:67:bd:89:bc:c7:31:d3:15:26:b7: 19:97:be:ef:8d:6a:51:c4:8d:07:39:d2:d3:e2:31: ea:61:b8:82:4c:92:51:a5:be:37:6d:b5:0d:c1:0e: 10:75:cc:7e:b2:03:39:84:04:ff:30:fc:60:d2:48: 40:b8:95:68:87:03:ec:ed:10:1f:33:19:7d:85:eb: dc:ce:aa:f2:bb:2d:34:4b:9f:71:f9:e3:f8:66:64: 38:08:70:cb:9e:4f:b9:73:7b:4c:27:c5:69:e5:95: ca:40:78:96:25:f5:8e:47:c8:f8:2d:d9:4c:76:66: b6:9f:b8:ae:1f:ea:3a:8c:59:06:e8:7a:6d:d2:86: 59:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:72:C8:17:7F:23:BD:FD:E3:A3:C3:58:78:B0:24:78:8B:79:30:8E X509v3 Authority Key Identifier: keyid:C2:D5:93:D1:C8:A7:F7:0D:45:12:5D:4B:DB:E5:77:49:27:C1:4E:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:0b:b0:ba:92:ba:de:a7:54:84:b1:4d:e0:c4:f7:61:db:00: c0:50:34:7c:66:a0:cb:79:02:d1:95:f7:f0:6c:40:8c:b5:a5: 73:b6:46:48:c0:4a:30:65:24:13:49:20:b4:23:12:32:a1:0e: df:d1:0d:a1:1e:9c:87:07:ad:31:fe:db:5f:7a:f1:61:b8:29: d8:81:3a:17:75:c7:0d:c4:46:e6:92:b0:e5:93:be:fb:f4:b4: ec:9b:00:93:c4:91:12:da:b3:c5:e2:b7:5b:c8:ff:99:0b:de: 85:1f:01:52:5d:b0:36:be:92:c2:fc:f3:c0:e7:aa:ac:14:1f: bb:50:db:88:96:1e:d9:46:a5:08:5f:b7:cf:f8:c9:d6:84:8f: e0:3d:32:2e:39:c7:64:08:b1:b7:95:e5:f2:9c:21:0a:35:ac: aa:95:5a:15:23:88:61:3d:24:43:08:43:9c:2a:6c:fe:3d:22: 8f:18:fa:9f:39:2a:dd:52:fc:b5:8c:66:d7:2e:31:81:a1:2c: 38:ef:3e:29:2a:d4:d6:79:76:42:9d:39:ee:80:27:82:be:9d: 9f:d9:dd:e1:d5:52:8b:95:a0:4e:80:2a:ec:b1:f3:88:fb:03: aa:15:f1:53:f0:f7:5d:61:f6:03:da:4a:29:8c:95:12:29:53: ab:5e:1c:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB2sVgrlA5I2HoRmAghOdc5nvpT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJENTkzRDFDOEE3RjcwRDQ1MTI1RDRCREJFNTc3NDky N0MxNEU1NTAeFw0yNTA2MDQxNjQ2MDVaFw0yNTA2MDgwMDQ1MDVaMDMxMTAvBgNV BAMTKDIxNzJDODE3N0YyM0JERkRFM0EzQzM1ODc4QjAyNDc4OEI3OTMwOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDI7S37nIRheuJAvHzPwkqasai 2Zzja3PKnAMVcSrfxFQ8GGV0M5MpV3owK1VeESMMNLLPn3v+Dn/+13LgglO3YNhE wpMtk42TB+cYGKLPd0ery7G3jastjjnIOpJv9XZa5O8+ngMgRi7VrQ2Xv07v3Cwt i5DLstlFcTGqZ72JvMcx0xUmtxmXvu+NalHEjQc50tPiMephuIJMklGlvjdttQ3B DhB1zH6yAzmEBP8w/GDSSEC4lWiHA+ztEB8zGX2F69zOqvK7LTRLn3H54/hmZDgI cMueT7lze0wnxWnllcpAeJYl9Y5HyPgt2Ux2ZrafuK4f6jqMWQboem3ShlnDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIXLIF38jvf3jo8NYeLAkeIt5MI4wHwYDVR0j BBgwFoAUwtWT0cin9w1FEl1L2+V3SSfBTlUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZGIwMTMwZC1jYWEzLTQ3NmYtYWY4MS1iYTcyMjMzMGJlMmMvMC9DMkQ1OTNEMUM4 QTdGNzBENDUxMjVENEJEQkU1Nzc0OTI3QzE0RTU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzJENTkzRDFDOEE3RjcwRDQ1MTI1RDRCREJFNTc3NDkyN0Mx NEU1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmRiMDEzMGQtY2FhMy00NzZmLWFm ODEtYmE3MjIzMzBiZTJjLzAvQzJENTkzRDFDOEE3RjcwRDQ1MTI1RDRCREJFNTc3 NDkyN0MxNEU1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACULsLqSut6nVISxTeDE92HbAMBQNHxmoMt5 AtGV9/BsQIy1pXO2RkjASjBlJBNJILQjEjKhDt/RDaEenIcHrTH+21968WG4KdiB Ohd1xw3ERuaSsOWTvvv0tOybAJPEkRLas8Xit1vI/5kL3oUfAVJdsDa+ksL888Dn qqwUH7tQ24iWHtlGpQhft8/4ydaEj+A9Mi45x2QIsbeV5fKcIQo1rKqVWhUjiGE9 JEMIQ5wqbP49Io8Y+p85Kt1S/LWMZtcuMYGhLDjvPikq1NZ5dkKdOe6AJ4K+nZ/Z 3eHVUouVoE6AKuyx84j7A6oV8VPw911h9gPaSimMlRIpU6teHD0= -----END CERTIFICATE-----Generated at Fri Jun 6 04:57:51 2025 by rpki-client