$ rpki-client -vvf repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft File: C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft (raw, json) Hash identifier: 9Yt7Oe1HQh3iLGa2jJb4BizU/ADgKrTJLvvM1XyXLGw= Subject key identifier: 32:0A:67:A5:C9:59:F0:AA:0E:0C:B6:82:78:E6:B3:2D:54:A9:66:C9 Authority key identifier: C2:CA:98:CA:4D:D8:8D:73:DB:67:A2:41:73:E2:9F:FA:5D:11:64:02 Certificate issuer: /CN=C2CA98CA4DD88D73DB67A24173E29FFA5D116402 Certificate serial: 02FC308AA14935D0967380EA7BC91C0EFE8ADA51 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer Subject info access: rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft Manifest number: 021C Signing time: Fri 08 Aug 2025 01:22:05 +0000 Manifest this update: Fri 08 Aug 2025 01:17:05 +0000 Manifest next update: Mon 11 Aug 2025 02:02:05 +0000 Files and hashes: 1: C2CA98CA4DD88D73DB67A24173E29FFA5D116402.crl (hash: PNBo0jYvW6xpHKPyKVqCkS/XsxKqmvE1Y2m8FhB+o+o=) 2: 3130332e38312e36302e302f32322d3234203d3e20313336303630.roa (hash: fSyZW5UURSSq8c97wxQl2sx5mMYsc0LA9hnaSF/iy/A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.crl rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 02:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:fc:30:8a:a1:49:35:d0:96:73:80:ea:7b:c9:1c:0e:fe:8a:da:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2CA98CA4DD88D73DB67A24173E29FFA5D116402 Validity Not Before: Aug 8 01:17:05 2025 GMT Not After : Aug 11 02:02:05 2025 GMT Subject: CN=320A67A5C959F0AA0E0CB68278E6B32D54A966C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:df:b6:7f:2e:03:02:25:a6:96:63:41:88:7f: 77:76:ad:fe:f7:7f:12:47:e0:13:7e:28:c2:f2:cc: 19:63:68:78:16:e5:90:fb:1c:c0:50:44:bb:68:38: e7:7d:a7:c9:2c:a0:92:76:41:27:27:58:0d:f8:c9: a2:74:91:54:24:4d:24:7c:b0:fa:d8:38:75:e6:5f: 19:0a:95:3b:ae:a9:76:41:5d:b2:e8:a6:7b:c7:ff: 03:f6:25:61:01:92:51:ee:95:2f:cd:7b:fe:c4:ab: 24:22:d5:2b:33:44:10:d0:a7:6f:4a:2c:74:2d:d8: 19:4b:bc:d2:3f:a3:ca:13:9e:12:2e:08:b9:12:4f: 4a:b7:c7:78:e7:b0:96:53:95:41:98:3c:ae:07:5b: e3:39:3d:25:ff:b4:03:7f:97:aa:f2:e7:b9:39:d3: 84:4b:39:3e:d8:a4:23:b1:be:44:5d:6c:64:3f:c7: 99:b8:7b:ea:a0:78:bf:92:0a:30:61:fe:62:23:3a: 59:bc:89:2d:67:b2:e2:db:31:c4:e7:03:4a:5b:60: 88:eb:ae:ec:43:7d:0e:00:77:19:85:e9:db:fd:8f: 64:9d:c6:8a:9f:f3:57:e5:37:1b:2a:66:96:38:46: 80:38:68:45:6c:08:b8:d7:1e:7a:7f:cb:d0:f5:65: 4c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:0A:67:A5:C9:59:F0:AA:0E:0C:B6:82:78:E6:B3:2D:54:A9:66:C9 X509v3 Authority Key Identifier: keyid:C2:CA:98:CA:4D:D8:8D:73:DB:67:A2:41:73:E2:9F:FA:5D:11:64:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:b8:0f:77:b3:a2:28:1e:a5:a6:e9:64:4a:b3:d3:a2:ff:1d: 4c:1e:13:41:cb:bf:5a:dc:0f:09:cd:35:43:29:12:3a:34:27: 51:e6:56:e1:25:27:6b:23:74:ee:f7:43:ca:ae:51:14:c6:8d: 7e:48:78:00:5b:3a:ec:cc:d2:48:aa:3d:88:d7:dc:81:c2:1e: b7:7f:5c:c3:bf:8d:7e:d3:76:bc:98:0f:a4:94:a5:9e:02:40: 10:61:f7:b6:76:21:36:11:9c:35:a8:b9:ab:bb:ff:86:aa:41: 0c:ab:16:de:e5:d0:36:a9:cb:6d:31:0f:1d:5a:eb:e0:5c:d4: 3c:c7:96:da:f7:87:8f:07:48:26:c9:2c:2b:f4:f2:27:20:9e: d8:bc:24:c8:93:3d:ec:21:de:da:1e:7e:e7:23:af:a9:c2:89: 98:51:fd:2e:90:09:1a:a3:dd:13:0f:2e:62:51:dd:e8:a7:27: 9c:b9:ed:95:c4:4e:98:20:46:66:39:2e:ef:f6:b7:5c:35:f6: 45:f6:3c:0a:6c:de:fb:f3:b7:61:88:59:4c:d8:b3:45:71:92: a2:c3:e5:31:6d:bd:7e:eb:ea:97:a7:2f:2f:cd:a1:17:70:44: 4a:55:8b:25:39:c3:61:79:aa:36:a7:0e:26:46:4e:1d:fd:af: 1f:f3:c3:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAvwwiqFJNdCWc4Dqe8kcDv6K2lEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJDQTk4Q0E0REQ4OEQ3M0RCNjdBMjQxNzNFMjlGRkE1 RDExNjQwMjAeFw0yNTA4MDgwMTE3MDVaFw0yNTA4MTEwMjAyMDVaMDMxMTAvBgNV BAMTKDMyMEE2N0E1Qzk1OUYwQUEwRTBDQjY4Mjc4RTZCMzJENTRBOTY2QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM37Z/LgMCJaaWY0GIf3d2rf73 fxJH4BN+KMLyzBljaHgW5ZD7HMBQRLtoOOd9p8ksoJJ2QScnWA34yaJ0kVQkTSR8 sPrYOHXmXxkKlTuuqXZBXbLopnvH/wP2JWEBklHulS/Ne/7EqyQi1SszRBDQp29K LHQt2BlLvNI/o8oTnhIuCLkST0q3x3jnsJZTlUGYPK4HW+M5PSX/tAN/l6ry57k5 04RLOT7YpCOxvkRdbGQ/x5m4e+qgeL+SCjBh/mIjOlm8iS1nsuLbMcTnA0pbYIjr ruxDfQ4AdxmF6dv9j2Sdxoqf81flNxsqZpY4RoA4aEVsCLjXHnp/y9D1ZUzdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMgpnpclZ8KoODLaCeOazLVSpZskwHwYDVR0j BBgwFoAUwsqYyk3YjXPbZ6JBc+Kf+l0RZAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTU3NmQ0Yy0xNzQ1LTRhMTYtOGVlZi1jZWMwODFjODIwNDMvMC9DMkNBOThDQTRE RDg4RDczREI2N0EyNDE3M0UyOUZGQTVEMTE2NDAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJDQTk4Q0E0REQ4OEQ3M0RCNjdBMjQxNzNFMjlGRkE1RDEx NjQwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE1NzZkNGMtMTc0NS00YTE2LThl ZWYtY2VjMDgxYzgyMDQzLzAvQzJDQTk4Q0E0REQ4OEQ3M0RCNjdBMjQxNzNFMjlG RkE1RDExNjQwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADu4D3ezoigepabpZEqz06L/HUweE0HLv1rc DwnNNUMpEjo0J1HmVuElJ2sjdO73Q8quURTGjX5IeABbOuzM0kiqPYjX3IHCHrd/ XMO/jX7TdryYD6SUpZ4CQBBh97Z2ITYRnDWouau7/4aqQQyrFt7l0Dapy20xDx1a 6+Bc1DzHltr3h48HSCbJLCv08icgnti8JMiTPewh3toefucjr6nCiZhR/S6QCRqj 3RMPLmJR3einJ5y57ZXETpggRmY5Lu/2t1w19kX2PAps3vvzt2GIWUzYs0VxkqLD 5TFtvX7r6penLy/NoRdwREpViyU5w2F5qjanDiZGTh39rx/zw1k= -----END CERTIFICATE-----Generated at Fri Aug 8 10:12:08 2025 by rpki-client