$ rpki-client -vvf repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft File: 2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft (raw, json) Hash identifier: KsXyiAvInXfEaOZ9fwYOZJvzt2tUD7R0VrF7yiUTUPw= Subject key identifier: 41:3F:79:FC:66:92:F5:07:A7:B1:83:06:82:16:22:CF:3F:44:3D:F2 Authority key identifier: 2C:FD:5B:DD:D1:DB:A6:D9:40:28:74:D6:22:3A:BD:7E:EE:E0:16:05 Certificate issuer: /CN=2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605 Certificate serial: 79BBE51265745E58ACA7762FC43325E3581A57E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft Manifest number: CB Signing time: Thu 07 Aug 2025 21:10:36 +0000 Manifest this update: Thu 07 Aug 2025 21:05:36 +0000 Manifest next update: Mon 11 Aug 2025 06:50:36 +0000 Files and hashes: 1: 32372e3132342e36362e302f32342d3234203d3e20313532303339.roa (hash: Qk1aebZH6HpsmbRtyw6Zbd7LsZDQbi5L/mrlB31+AsU=) 2: 2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.crl (hash: OcmZ+cnBTVQQ3/TQzMf9RCk2C5FHftoFdkVX+Tynp/Q=) 3: 32372e3132342e36372e302f32342d3234203d3e20313532303339.roa (hash: PIB1m7UZc9kcov7LjZoIh/Ol3lgnFrAZfbEkkmZBCd0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.crl rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 22:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:bb:e5:12:65:74:5e:58:ac:a7:76:2f:c4:33:25:e3:58:1a:57:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605 Validity Not Before: Aug 7 21:05:36 2025 GMT Not After : Aug 11 06:50:36 2025 GMT Subject: CN=413F79FC6692F507A7B18306821622CF3F443DF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:6b:a2:eb:ee:4c:ec:ad:6b:27:46:5e:df:3f: 2f:52:cb:71:2b:d6:9e:1d:cf:0f:c0:43:9e:4b:38: 02:eb:2e:41:4a:ba:6b:24:27:af:d5:f8:c7:36:be: 22:77:46:e4:d3:62:db:9d:1c:5f:07:0c:43:d3:9d: 3f:2c:0d:d1:9f:16:92:d2:84:1d:b9:6c:dc:f0:4f: 3c:16:89:37:dd:6e:29:0a:37:74:4e:b1:e5:7e:12: 71:0d:db:17:5f:3f:74:b6:a4:79:8b:d6:b9:08:59: c8:fa:45:3b:21:6d:fb:d7:b5:67:fa:4f:6f:ca:3e: 8d:fc:10:e9:e6:85:08:0e:24:d5:eb:07:f7:cf:9b: 6e:ec:c3:c0:48:48:13:1a:0e:74:11:67:00:6f:0c: 0a:20:d3:3c:84:cf:62:ba:b6:49:35:65:fb:20:e0: e2:24:ce:00:c7:2f:2e:7c:5b:6b:af:29:f1:5d:d7: e2:e0:a4:32:e4:da:a2:1d:02:e9:c9:36:07:ac:19: ae:5a:10:f5:48:d7:bb:9f:bf:bc:d9:5e:15:81:be: 8b:cf:a7:32:56:ee:f7:7e:d8:9c:1f:3b:54:7c:f6: 9d:66:9a:6f:51:1d:a7:f4:89:65:62:6a:ad:92:96: 86:5d:e1:44:42:07:66:a1:80:aa:fe:6f:3b:3b:7d: cf:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:3F:79:FC:66:92:F5:07:A7:B1:83:06:82:16:22:CF:3F:44:3D:F2 X509v3 Authority Key Identifier: keyid:2C:FD:5B:DD:D1:DB:A6:D9:40:28:74:D6:22:3A:BD:7E:EE:E0:16:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:9c:f4:76:29:7d:71:ee:27:13:92:cb:67:50:70:88:5b:d6: 81:2d:31:cf:d4:a6:cb:e8:25:50:e2:eb:3e:b8:b5:53:e9:39: 43:1e:0d:c0:30:32:01:35:80:8b:12:56:27:38:b9:d7:79:30: 58:77:d0:6d:74:28:42:8d:19:41:ac:d8:57:4d:e8:6e:7c:8a: c9:5a:ec:22:f8:66:15:e5:08:9c:14:9f:c3:69:d8:b5:77:00: 94:30:ec:97:45:82:ac:87:27:a5:5f:54:f5:b2:4d:44:70:16: 55:18:0b:e0:93:3f:50:da:70:dd:be:47:fd:0c:da:84:e7:28: 36:8c:c2:9c:65:53:5e:4b:65:c3:76:9b:00:f3:82:51:52:cb: 3c:a3:6e:3e:bd:19:74:52:27:cb:17:64:92:d8:68:78:29:d5: 1e:2a:24:6c:42:86:c7:ee:05:41:6d:13:7b:ba:a0:51:23:56: f8:46:ec:4b:bc:27:64:27:41:8e:16:f3:33:4e:b0:6d:fb:59: 0a:8e:4d:d2:13:d4:e8:8e:47:bc:97:c8:80:5a:eb:66:08:f4: e9:d3:ea:ca:39:34:9b:dd:1a:c2:00:de:92:18:48:d8:6a:0b: 8b:1d:b7:39:83:7a:2d:31:2d:04:06:99:2c:08:5f:e2:79:d5: c2:e7:e8:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUebvlEmV0Xlisp3YvxDMl41gaV+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNGRDVCREREMURCQTZEOTQwMjg3NEQ2MjIzQUJEN0VF RUUwMTYwNTAeFw0yNTA4MDcyMTA1MzZaFw0yNTA4MTEwNjUwMzZaMDMxMTAvBgNV BAMTKDQxM0Y3OUZDNjY5MkY1MDdBN0IxODMwNjgyMTYyMkNGM0Y0NDNERjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5a6Lr7kzsrWsnRl7fPy9Sy3Er 1p4dzw/AQ55LOALrLkFKumskJ6/V+Mc2viJ3RuTTYtudHF8HDEPTnT8sDdGfFpLS hB25bNzwTzwWiTfdbikKN3ROseV+EnEN2xdfP3S2pHmL1rkIWcj6RTshbfvXtWf6 T2/KPo38EOnmhQgOJNXrB/fPm27sw8BISBMaDnQRZwBvDAog0zyEz2K6tkk1Zfsg 4OIkzgDHLy58W2uvKfFd1+LgpDLk2qIdAunJNgesGa5aEPVI17ufv7zZXhWBvovP pzJW7vd+2JwfO1R89p1mmm9RHaf0iWViaq2SloZd4URCB2ahgKr+bzs7fc8xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQT95/GaS9QensYMGghYizz9EPfIwHwYDVR0j BBgwFoAULP1b3dHbptlAKHTWIjq9fu7gFgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjdlMGJjMC03NjFiLTRlYzMtOGY0Mi04Mjk4MWI5MWE5N2EvMC8yQ0ZENUJEREQx REJBNkQ5NDAyODc0RDYyMjNBQkQ3RUVFRTAxNjA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkNGRDVCREREMURCQTZEOTQwMjg3NEQ2MjIzQUJEN0VFRUUw MTYwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI3ZTBiYzAtNzYxYi00ZWMzLThm NDItODI5ODFiOTFhOTdhLzAvMkNGRDVCREREMURCQTZEOTQwMjg3NEQ2MjIzQUJE N0VFRUUwMTYwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALyc9HYpfXHuJxOSy2dQcIhb1oEtMc/Upsvo JVDi6z64tVPpOUMeDcAwMgE1gIsSVic4udd5MFh30G10KEKNGUGs2FdN6G58isla 7CL4ZhXlCJwUn8Np2LV3AJQw7JdFgqyHJ6VfVPWyTURwFlUYC+CTP1DacN2+R/0M 2oTnKDaMwpxlU15LZcN2mwDzglFSyzyjbj69GXRSJ8sXZJLYaHgp1R4qJGxChsfu BUFtE3u6oFEjVvhG7Eu8J2QnQY4W8zNOsG37WQqOTdIT1OiOR7yXyIBa62YI9OnT 6so5NJvdGsIA3pIYSNhqC4sdtzmDei0xLQQGmSwIX+J51cLn6Cg= -----END CERTIFICATE-----Generated at Thu Aug 7 23:59:32 2025 by rpki-client