$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft File: C2E1998AC1681A41F68250BFABD05A982E00EA44.mft (raw, json) Hash identifier: 6BqF4b5xja9JAWjNBzT+hG0Y+N+VKY/7YxBZDDqxzo8= Subject key identifier: 12:8F:F6:11:AC:2A:F6:C4:9D:0A:A8:3D:42:C4:D8:5B:78:1F:1A:31 Authority key identifier: C2:E1:99:8A:C1:68:1A:41:F6:82:50:BF:AB:D0:5A:98:2E:00:EA:44 Certificate issuer: /CN=C2E1998AC1681A41F68250BFABD05A982E00EA44 Certificate serial: 496229A5C850685ADB67A52EEF46335F503A35C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E1998AC1681A41F68250BFABD05A982E00EA44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft Manifest number: A8 Signing time: Mon 16 Jun 2025 07:12:02 +0000 Manifest this update: Mon 16 Jun 2025 07:07:02 +0000 Manifest next update: Thu 19 Jun 2025 12:49:02 +0000 Files and hashes: 1: 323030313a6466333a653034303a3a2f34382d3438203d3e20313532383036.roa (hash: 7Sjy07nIz40VYuiQAAUvMHjSS6WBBJpcxOEZMkh16GE=) 2: C2E1998AC1681A41F68250BFABD05A982E00EA44.crl (hash: HHG7hWyYEOVGVAzaCxvb/CubabQ3btAY4uXgsVnFw3s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.crl rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E1998AC1681A41F68250BFABD05A982E00EA44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 12:49:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:62:29:a5:c8:50:68:5a:db:67:a5:2e:ef:46:33:5f:50:3a:35:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2E1998AC1681A41F68250BFABD05A982E00EA44 Validity Not Before: Jun 16 07:07:02 2025 GMT Not After : Jun 19 12:49:02 2025 GMT Subject: CN=128FF611AC2AF6C49D0AA83D42C4D85B781F1A31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:81:15:d6:c0:4a:95:cb:27:54:e8:99:3f:45: d7:d7:23:2d:76:eb:0e:f5:16:c8:9d:7a:3f:f8:0c: 9e:f8:37:cf:fb:fb:9e:c5:76:c6:06:6d:79:72:22: 39:55:6f:b9:cc:de:ea:08:fd:bf:a9:29:50:70:4a: 8b:3c:b1:ad:e3:74:4a:83:08:92:08:66:bb:4c:39: 37:84:a4:c1:73:6c:cc:85:79:70:60:0e:92:d3:41: cd:47:40:59:12:0b:53:70:63:3f:2e:4f:32:a6:c8: e9:5e:69:2f:f3:7a:c9:2b:31:19:23:b2:e5:bf:b4: cb:ce:56:57:ab:17:bf:d5:75:04:3e:5f:df:75:89: 4c:67:5b:e1:0e:03:76:e9:68:5f:5f:45:16:f3:59: 26:dd:f5:ae:cc:8d:85:50:4f:a5:e1:0e:eb:a9:56: cc:32:70:2a:33:54:96:2c:13:48:6d:f3:70:b7:27: 2f:34:0e:8e:cf:c3:8d:33:89:7e:e6:a9:f3:8c:77: 4c:57:0a:0d:a1:aa:4f:2c:5f:82:fa:20:d1:71:c8: a1:c4:2e:c2:b2:6f:bb:d4:dd:6a:cb:97:a2:10:50: de:78:b8:77:ec:d5:11:11:ed:de:0a:63:b5:80:6a: af:8f:65:3f:a8:82:ad:9a:57:01:c6:ff:40:cb:78: 07:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:8F:F6:11:AC:2A:F6:C4:9D:0A:A8:3D:42:C4:D8:5B:78:1F:1A:31 X509v3 Authority Key Identifier: keyid:C2:E1:99:8A:C1:68:1A:41:F6:82:50:BF:AB:D0:5A:98:2E:00:EA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E1998AC1681A41F68250BFABD05A982E00EA44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:d4:55:65:0d:18:82:95:2b:17:75:e8:39:93:61:a4:6d:bc: d4:0f:2f:60:74:b1:f0:96:b7:7d:00:aa:9f:30:65:fb:30:aa: 05:3a:4a:40:ca:b6:02:9a:17:90:81:cf:a6:e0:02:00:a8:f4: 82:9e:3d:f9:6e:e4:ba:dc:6b:f8:f8:63:c9:a1:35:59:34:ba: 46:2d:0b:50:7b:ff:28:df:d4:3e:a0:2c:8d:77:35:ee:7a:db: 4f:2b:4d:d4:c1:0a:9a:ce:d1:e4:37:9c:98:62:fb:3a:f1:11: ca:24:8e:fd:80:d0:23:d9:eb:cc:8b:23:4a:d4:6b:c5:4a:61: 31:b2:55:2d:d8:d3:fa:9d:ef:15:1a:00:99:03:e9:5d:88:c7: 1c:67:40:62:9c:08:93:73:24:b7:97:3b:c4:e5:79:5a:9e:d9: e7:8b:72:25:a8:e8:bb:ea:06:10:7e:7c:9a:4b:5a:97:04:bc: 68:23:63:17:95:8e:12:f3:aa:77:94:ec:13:1d:f1:e5:93:b4: 30:b5:b3:01:19:0e:47:a0:d9:36:55:2f:43:6f:d2:8d:a0:4d: 4f:4d:82:f8:4a:98:b3:70:9b:25:40:e2:50:72:0b:5a:2e:3b: dc:98:0e:70:9d:a7:1b:0e:5e:2f:fb:08:aa:11:d2:44:83:19: 73:08:f8:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSWIppchQaFrbZ6Uu70YzX1A6NcQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJFMTk5OEFDMTY4MUE0MUY2ODI1MEJGQUJEMDVBOTgy RTAwRUE0NDAeFw0yNTA2MTYwNzA3MDJaFw0yNTA2MTkxMjQ5MDJaMDMxMTAvBgNV BAMTKDEyOEZGNjExQUMyQUY2QzQ5RDBBQTgzRDQyQzREODVCNzgxRjFBMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8gRXWwEqVyydU6Jk/RdfXIy12 6w71Fsidej/4DJ74N8/7+57FdsYGbXlyIjlVb7nM3uoI/b+pKVBwSos8sa3jdEqD CJIIZrtMOTeEpMFzbMyFeXBgDpLTQc1HQFkSC1NwYz8uTzKmyOleaS/zeskrMRkj suW/tMvOVlerF7/VdQQ+X991iUxnW+EOA3bpaF9fRRbzWSbd9a7MjYVQT6XhDuup VswycCozVJYsE0ht83C3Jy80Do7Pw40ziX7mqfOMd0xXCg2hqk8sX4L6INFxyKHE LsKyb7vU3WrLl6IQUN54uHfs1RER7d4KY7WAaq+PZT+ogq2aVwHG/0DLeAd7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEo/2Eawq9sSdCqg9QsTYW3gfGjEwHwYDVR0j BBgwFoAUwuGZisFoGkH2glC/q9BamC4A6kQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRjZTM5MS1hNWQzLTQxMWItYTk3Yi1lODYyZmJmNTYzMWMvMS9DMkUxOTk4QUMx NjgxQTQxRjY4MjUwQkZBQkQwNUE5ODJFMDBFQTQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJFMTk5OEFDMTY4MUE0MUY2ODI1MEJGQUJEMDVBOTgyRTAw RUE0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkY2UzOTEtYTVkMy00MTFiLWE5 N2ItZTg2MmZiZjU2MzFjLzEvQzJFMTk5OEFDMTY4MUE0MUY2ODI1MEJGQUJEMDVB OTgyRTAwRUE0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAPUVWUNGIKVKxd16DmTYaRtvNQPL2B0sfCW t30Aqp8wZfswqgU6SkDKtgKaF5CBz6bgAgCo9IKePflu5Lrca/j4Y8mhNVk0ukYt C1B7/yjf1D6gLI13Ne56208rTdTBCprO0eQ3nJhi+zrxEcokjv2A0CPZ68yLI0rU a8VKYTGyVS3Y0/qd7xUaAJkD6V2IxxxnQGKcCJNzJLeXO8TleVqe2eeLciWo6Lvq BhB+fJpLWpcEvGgjYxeVjhLzqneU7BMd8eWTtDC1swEZDkeg2TZVL0Nv0o2gTU9N gvhKmLNwmyVA4lByC1ouO9yYDnCdpxsOXi/7CKoR0kSDGXMI+GE= -----END CERTIFICATE-----Generated at Wed Jun 18 00:08:34 2025 by rpki-client