$ rpki-client -vvf repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft File: C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft (raw, json) Hash identifier: FLLxI7+LxPFZptJbHgDjs75h9yH3CX9UQSBAxzmYgjM= Subject key identifier: ED:CE:30:CB:1C:D1:CA:5F:F5:FB:AA:08:CC:8E:63:4E:E0:5F:F8:D2 Authority key identifier: C2:CA:98:CA:4D:D8:8D:73:DB:67:A2:41:73:E2:9F:FA:5D:11:64:02 Certificate issuer: /CN=C2CA98CA4DD88D73DB67A24173E29FFA5D116402 Certificate serial: 19E9C7139B742ABA1529EBEF065BFBB587098B25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer Subject info access: rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft Manifest number: 0205 Signing time: Tue 17 Jun 2025 17:21:09 +0000 Manifest this update: Tue 17 Jun 2025 17:16:09 +0000 Manifest next update: Sat 21 Jun 2025 00:43:09 +0000 Files and hashes: 1: C2CA98CA4DD88D73DB67A24173E29FFA5D116402.crl (hash: CvY6kY5KwyuU+cEUCK6+X4ZeBzhbfQYyc7Hc8vzhEgo=) 2: 3130332e38312e36302e302f32322d3234203d3e20313336303630.roa (hash: fSyZW5UURSSq8c97wxQl2sx5mMYsc0LA9hnaSF/iy/A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.crl rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 00:43:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:e9:c7:13:9b:74:2a:ba:15:29:eb:ef:06:5b:fb:b5:87:09:8b:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2CA98CA4DD88D73DB67A24173E29FFA5D116402 Validity Not Before: Jun 17 17:16:09 2025 GMT Not After : Jun 21 00:43:09 2025 GMT Subject: CN=EDCE30CB1CD1CA5FF5FBAA08CC8E634EE05FF8D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:70:c0:20:ec:45:98:c7:de:d5:44:b7:69:0e: 8c:9b:db:66:e5:fb:f7:55:6c:68:cc:0b:bf:b2:f1: 8e:40:55:5a:ed:dd:92:8d:51:cc:bb:e9:c9:c4:7d: 1b:30:23:9f:97:c5:dd:4f:5f:85:40:28:ba:4c:b1: dc:8a:75:37:76:61:81:fe:95:71:40:03:85:fd:ed: 28:b4:1c:fc:db:99:d3:67:c8:68:a6:34:a9:ff:35: 15:d2:cc:95:94:8f:9e:ba:99:6a:b6:5d:e1:2c:c5: 61:3a:2d:37:8d:29:be:c3:46:fe:e0:7f:b4:5c:fc: 60:87:94:d4:45:e5:bd:47:28:dd:c0:57:26:f9:3f: c0:46:94:ae:ae:6e:2c:5f:a5:69:94:62:0d:31:a9: 84:1b:58:35:f4:34:bb:f4:6f:a0:3f:0d:a4:bf:ee: e3:3b:a8:78:b6:a3:7b:9f:e6:01:21:03:c2:3f:73: f1:b8:e8:b6:f9:99:c6:87:ff:27:d9:e4:cd:21:4f: a9:f5:65:de:4d:a3:08:bc:fe:99:02:f8:78:e9:b9: ff:cf:80:24:21:dd:00:91:83:4d:de:ee:fe:02:87: a2:be:46:7f:df:bc:dc:c4:39:dc:78:7d:b8:d6:28: 28:53:20:05:91:54:86:ca:62:2e:4b:ad:7a:ee:02: 2c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:CE:30:CB:1C:D1:CA:5F:F5:FB:AA:08:CC:8E:63:4E:E0:5F:F8:D2 X509v3 Authority Key Identifier: keyid:C2:CA:98:CA:4D:D8:8D:73:DB:67:A2:41:73:E2:9F:FA:5D:11:64:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:91:fa:8b:e2:fb:87:2c:7c:2a:d8:51:e5:18:26:7b:57:f2: bd:6f:ab:c2:37:fd:02:51:3e:f7:d2:a5:1b:a5:9d:27:bd:1e: 64:3c:28:32:d9:4e:92:11:f5:99:98:28:f6:30:03:56:60:55: bb:b4:7e:bf:56:c2:28:21:14:18:32:ee:ef:46:3b:89:15:e3: a0:19:e3:ea:69:9e:8b:36:08:73:e5:45:88:b2:f0:80:69:a6: 1f:5e:47:bb:5e:0b:2e:df:19:3b:ca:ea:7f:b3:69:89:94:7b: 89:05:6c:53:a7:67:c4:61:b3:04:a5:9c:f2:78:ed:81:a7:aa: 23:5f:ac:aa:c1:12:43:93:a8:f4:b4:ac:a7:e0:64:ea:66:11: 59:30:ef:a4:68:dc:3b:34:8b:89:36:d8:c9:56:09:fc:34:a2: 69:d4:b5:29:7e:43:7d:70:c7:a4:93:92:15:69:ca:12:ae:1d: a0:34:0a:0d:5f:1c:6c:9a:e7:5c:1b:85:93:92:0e:73:37:e6: 91:15:b6:a6:0b:5a:28:ef:04:1e:9f:36:cd:86:1b:fa:14:68: ad:df:92:a7:a6:91:9e:17:02:8e:e2:9c:84:17:41:de:6a:10: f6:cd:56:94:48:83:a2:cc:51:d9:3b:4b:32:54:2b:a5:48:33: c6:bf:2e:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGenHE5t0KroVKevvBlv7tYcJiyUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJDQTk4Q0E0REQ4OEQ3M0RCNjdBMjQxNzNFMjlGRkE1 RDExNjQwMjAeFw0yNTA2MTcxNzE2MDlaFw0yNTA2MjEwMDQzMDlaMDMxMTAvBgNV BAMTKEVEQ0UzMENCMUNEMUNBNUZGNUZCQUEwOENDOEU2MzRFRTA1RkY4RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEcMAg7EWYx97VRLdpDoyb22bl +/dVbGjMC7+y8Y5AVVrt3ZKNUcy76cnEfRswI5+Xxd1PX4VAKLpMsdyKdTd2YYH+ lXFAA4X97Si0HPzbmdNnyGimNKn/NRXSzJWUj566mWq2XeEsxWE6LTeNKb7DRv7g f7Rc/GCHlNRF5b1HKN3AVyb5P8BGlK6ubixfpWmUYg0xqYQbWDX0NLv0b6A/DaS/ 7uM7qHi2o3uf5gEhA8I/c/G46Lb5mcaH/yfZ5M0hT6n1Zd5Nowi8/pkC+Hjpuf/P gCQh3QCRg03e7v4Ch6K+Rn/fvNzEOdx4fbjWKChTIAWRVIbKYi5LrXruAix1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7c4wyxzRyl/1+6oIzI5jTuBf+NIwHwYDVR0j BBgwFoAUwsqYyk3YjXPbZ6JBc+Kf+l0RZAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTU3NmQ0Yy0xNzQ1LTRhMTYtOGVlZi1jZWMwODFjODIwNDMvMC9DMkNBOThDQTRE RDg4RDczREI2N0EyNDE3M0UyOUZGQTVEMTE2NDAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJDQTk4Q0E0REQ4OEQ3M0RCNjdBMjQxNzNFMjlGRkE1RDEx NjQwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE1NzZkNGMtMTc0NS00YTE2LThl ZWYtY2VjMDgxYzgyMDQzLzAvQzJDQTk4Q0E0REQ4OEQ3M0RCNjdBMjQxNzNFMjlG RkE1RDExNjQwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIKR+ovi+4csfCrYUeUYJntX8r1vq8I3/QJR PvfSpRulnSe9HmQ8KDLZTpIR9ZmYKPYwA1ZgVbu0fr9WwighFBgy7u9GO4kV46AZ 4+ppnos2CHPlRYiy8IBpph9eR7teCy7fGTvK6n+zaYmUe4kFbFOnZ8RhswSlnPJ4 7YGnqiNfrKrBEkOTqPS0rKfgZOpmEVkw76Ro3Ds0i4k22MlWCfw0omnUtSl+Q31w x6STkhVpyhKuHaA0Cg1fHGya51wbhZOSDnM35pEVtqYLWijvBB6fNs2GG/oUaK3f kqemkZ4XAo7inIQXQd5qEPbNVpRIg6LMUdk7SzJUK6VIM8a/Ljo= -----END CERTIFICATE-----Generated at Wed Jun 18 11:03:34 2025 by rpki-client