$ rpki-client -vvf repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft File: C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft (raw, json) Hash identifier: /KASf1zaiHA1wYaP5Bdz2d+lVtfko1o7wGqRPdcJqrU= Subject key identifier: EB:42:11:97:AA:5B:66:9B:FA:47:E2:25:BB:B5:3D:E6:3E:7D:0B:48 Authority key identifier: C2:D5:93:D1:C8:A7:F7:0D:45:12:5D:4B:DB:E5:77:49:27:C1:4E:55 Certificate issuer: /CN=C2D593D1C8A7F70D45125D4BDBE5774927C14E55 Certificate serial: 54D2AA923A66CC98AF27579C1AABEAFCA9A668D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft Manifest number: 9E Signing time: Sun 31 Aug 2025 07:11:06 +0000 Manifest this update: Sun 31 Aug 2025 07:06:06 +0000 Manifest next update: Wed 03 Sep 2025 10:08:06 +0000 Files and hashes: 1: 3136302e31392e3137392e302f32342d3234203d3e20313532373837.roa (hash: 0CvOPtspHIv++OpYpPeOAtYrJalD1E7T3Av1Tkd5zHo=) 2: 3136302e31392e3137382e302f32342d3234203d3e20313532373837.roa (hash: 7y8609J4YjMYC9wN+hYXRDhk/NJUcPM91RuRT+GB4pQ=) 3: C2D593D1C8A7F70D45125D4BDBE5774927C14E55.crl (hash: /L/HgZlEERZFcV0vJIe+9ZQO6Ynt7TepnRriCy96e5A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.crl rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Sep 2025 02:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:d2:aa:92:3a:66:cc:98:af:27:57:9c:1a:ab:ea:fc:a9:a6:68:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2D593D1C8A7F70D45125D4BDBE5774927C14E55 Validity Not Before: Aug 31 07:06:06 2025 GMT Not After : Sep 3 10:08:06 2025 GMT Subject: CN=EB421197AA5B669BFA47E225BBB53DE63E7D0B48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d6:6f:a8:68:ef:ef:e9:5b:42:9c:38:52:f4: 6a:b7:1f:1a:44:3f:34:a5:5d:92:fa:92:95:3c:9e: f8:35:18:11:98:80:1e:b4:a6:89:f6:6c:23:21:3d: 01:f0:8d:5d:50:94:3b:78:6f:7f:a2:ec:1d:61:b1: 07:f3:6a:8b:a3:4c:1e:be:eb:3e:42:97:bf:bb:6e: 55:ec:38:a5:cd:aa:e3:cb:b8:42:e9:3a:d2:2a:25: bb:fa:8b:ea:40:d1:21:76:8b:a5:93:2f:6b:3d:23: 73:98:33:54:1c:2c:ee:45:ae:99:77:14:ad:e8:85: 6e:68:87:e4:cd:2b:08:90:c3:59:e9:ca:46:8a:d7: f9:5b:db:bf:db:8a:d1:aa:84:02:3f:15:68:8f:8d: 17:90:57:b3:1f:11:1d:0d:61:ba:d7:21:64:b7:6a: 4b:c9:27:a2:9c:60:4f:9c:5a:fa:af:09:58:c8:c6: a3:5a:97:1d:b5:fe:a8:47:2e:b6:e3:55:29:23:88: c5:26:ca:ce:c8:14:de:4d:e2:61:92:70:aa:a6:74: dd:cb:ec:b4:02:ff:b1:fb:eb:f2:c3:93:2e:c2:82: 44:c3:1a:51:7c:96:ad:24:e4:d0:3e:ca:38:be:d5: fb:21:15:cb:00:8d:35:a6:5e:d8:c5:c1:5c:a0:46: 79:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:42:11:97:AA:5B:66:9B:FA:47:E2:25:BB:B5:3D:E6:3E:7D:0B:48 X509v3 Authority Key Identifier: keyid:C2:D5:93:D1:C8:A7:F7:0D:45:12:5D:4B:DB:E5:77:49:27:C1:4E:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:45:00:89:64:e3:33:fe:2f:42:6d:a2:62:a0:67:47:27:d5: 26:3d:4b:4a:96:61:25:9c:6e:7f:6a:47:af:d9:22:36:b2:fc: 47:48:20:ef:ff:5f:43:84:33:23:07:7e:0d:03:4c:5f:69:e6: b7:01:1f:0e:81:52:ee:26:1d:0d:26:54:c7:f1:28:81:df:24: a5:23:2b:53:ad:45:bb:2f:6c:b4:f2:95:60:a3:0e:3b:4f:ba: ea:b3:e5:0e:2a:db:2a:ee:ba:7c:fa:19:23:d0:bf:2f:18:a3: a3:df:c8:f1:a4:84:40:0b:1e:16:21:10:b7:7d:83:99:15:12: e2:fa:ff:08:63:5b:d8:26:29:56:52:e5:da:da:c0:a8:25:a8: 98:e3:0b:a2:1e:1c:62:e6:26:01:5c:5f:b4:f1:da:90:d6:31: b7:96:39:4a:66:54:fe:a0:2d:5b:58:9d:f5:7c:1e:82:60:54: 40:2f:98:37:c4:08:7f:b4:e8:67:d4:75:b6:5b:b4:09:d2:ab: 96:8f:0d:a8:f1:84:65:50:79:ee:93:93:9e:4c:67:19:e9:06: 5d:13:4e:54:46:2d:b4:45:21:fc:79:b7:14:ce:dc:70:65:c0: 45:8b:c3:13:a1:07:e7:ae:f7:38:69:20:06:d4:c6:71:6e:36: 9f:bc:aa:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVNKqkjpmzJivJ1ecGqvq/KmmaNYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJENTkzRDFDOEE3RjcwRDQ1MTI1RDRCREJFNTc3NDky N0MxNEU1NTAeFw0yNTA4MzEwNzA2MDZaFw0yNTA5MDMxMDA4MDZaMDMxMTAvBgNV BAMTKEVCNDIxMTk3QUE1QjY2OUJGQTQ3RTIyNUJCQjUzREU2M0U3RDBCNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR1m+oaO/v6VtCnDhS9Gq3HxpE PzSlXZL6kpU8nvg1GBGYgB60pon2bCMhPQHwjV1QlDt4b3+i7B1hsQfzaoujTB6+ 6z5Cl7+7blXsOKXNquPLuELpOtIqJbv6i+pA0SF2i6WTL2s9I3OYM1QcLO5Frpl3 FK3ohW5oh+TNKwiQw1npykaK1/lb27/bitGqhAI/FWiPjReQV7MfER0NYbrXIWS3 akvJJ6KcYE+cWvqvCVjIxqNalx21/qhHLrbjVSkjiMUmys7IFN5N4mGScKqmdN3L 7LQC/7H76/LDky7CgkTDGlF8lq0k5NA+yji+1fshFcsAjTWmXtjFwVygRnkJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU60IRl6pbZpv6R+Ilu7U95j59C0gwHwYDVR0j BBgwFoAUwtWT0cin9w1FEl1L2+V3SSfBTlUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZGIwMTMwZC1jYWEzLTQ3NmYtYWY4MS1iYTcyMjMzMGJlMmMvMC9DMkQ1OTNEMUM4 QTdGNzBENDUxMjVENEJEQkU1Nzc0OTI3QzE0RTU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzJENTkzRDFDOEE3RjcwRDQ1MTI1RDRCREJFNTc3NDkyN0Mx NEU1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmRiMDEzMGQtY2FhMy00NzZmLWFm ODEtYmE3MjIzMzBiZTJjLzAvQzJENTkzRDFDOEE3RjcwRDQ1MTI1RDRCREJFNTc3 NDkyN0MxNEU1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIFFAIlk4zP+L0JtomKgZ0cn1SY9S0qWYSWc bn9qR6/ZIjay/EdIIO//X0OEMyMHfg0DTF9p5rcBHw6BUu4mHQ0mVMfxKIHfJKUj K1OtRbsvbLTylWCjDjtPuuqz5Q4q2yruunz6GSPQvy8Yo6PfyPGkhEALHhYhELd9 g5kVEuL6/whjW9gmKVZS5drawKglqJjjC6IeHGLmJgFcX7Tx2pDWMbeWOUpmVP6g LVtYnfV8HoJgVEAvmDfECH+06GfUdbZbtAnSq5aPDajxhGVQee6Tk55MZxnpBl0T TlRGLbRFIfx5txTO3HBlwEWLwxOhB+eu9zhpIAbUxnFuNp+8qnA= -----END CERTIFICATE-----Generated at Sun Aug 31 22:05:03 2025 by rpki-client