$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft File: C2E1998AC1681A41F68250BFABD05A982E00EA44.mft (raw, json) Hash identifier: 00n7CfRLzE6M5mQDg7WUcaUtaNiC1cxfwaUSCr4NW28= Subject key identifier: BF:FB:0D:F0:4A:94:57:5C:1E:A2:B7:34:A6:AD:96:B9:32:E5:9F:F5 Authority key identifier: C2:E1:99:8A:C1:68:1A:41:F6:82:50:BF:AB:D0:5A:98:2E:00:EA:44 Certificate issuer: /CN=C2E1998AC1681A41F68250BFABD05A982E00EA44 Certificate serial: 3AC71767369071D857059943F488084846817BF3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E1998AC1681A41F68250BFABD05A982E00EA44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft Manifest number: C0 Signing time: Sat 09 Aug 2025 01:02:01 +0000 Manifest this update: Sat 09 Aug 2025 00:57:01 +0000 Manifest next update: Tue 12 Aug 2025 04:35:01 +0000 Files and hashes: 1: 323030313a6466333a653034303a3a2f34382d3438203d3e20313532383036.roa (hash: 7Sjy07nIz40VYuiQAAUvMHjSS6WBBJpcxOEZMkh16GE=) 2: C2E1998AC1681A41F68250BFABD05A982E00EA44.crl (hash: kNajtJPKm36v8MSQZriBTtUxLpCiNOn4W6vUPxQPuD0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.crl rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E1998AC1681A41F68250BFABD05A982E00EA44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 04:35:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:c7:17:67:36:90:71:d8:57:05:99:43:f4:88:08:48:46:81:7b:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2E1998AC1681A41F68250BFABD05A982E00EA44 Validity Not Before: Aug 9 00:57:01 2025 GMT Not After : Aug 12 04:35:01 2025 GMT Subject: CN=BFFB0DF04A94575C1EA2B734A6AD96B932E59FF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:5e:2e:a4:b1:24:c7:fa:d6:8f:a8:5b:66:cb: 18:43:56:1e:c6:b3:9d:20:cd:29:5a:73:3f:a1:b8: 26:b8:7e:5f:0c:b7:19:30:d1:62:7b:3d:ad:a8:ad: c1:27:80:9b:0c:41:1a:66:a3:6e:77:42:e3:cb:e4: 04:51:37:9c:ca:5f:ed:89:ce:de:0f:10:41:59:32: 6f:03:ee:02:91:2a:87:29:db:d4:64:a3:c8:5c:8b: 58:f7:01:98:52:67:72:2e:8d:2d:84:da:8a:3e:63: 25:e1:59:6c:e4:d8:e8:d4:b7:e7:01:b9:4e:89:ed: 19:02:1e:49:1d:d5:31:04:81:6f:1f:4f:c4:5a:40: 16:e6:d7:31:2e:f2:4a:1a:02:83:87:e2:d9:2b:d4: 0c:8c:5a:79:d4:d7:65:04:b2:c6:a0:21:7e:d3:a7: db:6d:5e:a2:82:21:50:a3:d6:76:13:54:32:6c:82: c0:23:b5:40:62:6c:f6:6e:57:2b:09:17:ec:c5:a3: c3:fb:9e:21:0e:51:2e:a0:f5:84:26:1a:62:23:64: 34:7c:15:b0:e1:db:02:7f:cf:8d:60:f5:93:86:cc: 42:0a:6f:6a:63:30:c3:b6:1d:44:15:23:c7:b8:38: 48:08:c0:0a:86:c1:0a:d9:97:71:c0:f4:4d:c8:f4: d8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:FB:0D:F0:4A:94:57:5C:1E:A2:B7:34:A6:AD:96:B9:32:E5:9F:F5 X509v3 Authority Key Identifier: keyid:C2:E1:99:8A:C1:68:1A:41:F6:82:50:BF:AB:D0:5A:98:2E:00:EA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E1998AC1681A41F68250BFABD05A982E00EA44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:6c:a3:96:88:db:5b:8d:0c:21:ff:df:01:73:da:e8:bc:d8: 78:4e:14:ae:ca:78:8a:6c:ce:04:9b:7a:da:41:c0:3c:1b:7e: 26:74:f0:38:0d:02:e9:96:2d:36:3c:1f:35:5b:d9:26:de:ee: a6:51:6b:bf:d1:09:16:70:55:87:8e:00:6d:b9:6e:35:f0:ef: 15:f0:47:d3:95:3c:60:8b:13:e0:54:6e:3e:78:37:f3:ff:f9: 69:03:07:5a:16:02:38:8d:ea:ec:62:c4:00:4e:44:15:1c:60: 15:86:6c:73:cd:7e:7a:82:07:91:21:c3:ca:6b:a7:12:1f:22: 28:8f:10:ef:61:70:34:d2:d5:f0:3e:12:0b:a0:86:ad:62:e2: d5:57:10:1c:39:88:dc:bb:76:88:87:9a:c9:36:63:94:ef:7d: ef:84:5c:14:3c:8a:5b:9d:01:f1:ad:20:f3:1d:6d:98:7b:5d: 93:40:c1:c9:80:b1:a5:75:53:5b:fe:83:41:e7:75:b7:3e:30: be:78:5a:7f:f9:ac:9a:09:38:2b:31:d3:ea:ce:1c:61:18:3c: 90:65:e8:bf:90:d5:31:fb:62:d6:46:cb:5a:fa:e1:44:a7:07: 3d:7c:bc:ee:a7:e1:f9:78:a8:90:66:71:7c:88:54:75:01:93: eb:f6:04:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOscXZzaQcdhXBZlD9IgISEaBe/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJFMTk5OEFDMTY4MUE0MUY2ODI1MEJGQUJEMDVBOTgy RTAwRUE0NDAeFw0yNTA4MDkwMDU3MDFaFw0yNTA4MTIwNDM1MDFaMDMxMTAvBgNV BAMTKEJGRkIwREYwNEE5NDU3NUMxRUEyQjczNEE2QUQ5NkI5MzJFNTlGRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsXi6ksSTH+taPqFtmyxhDVh7G s50gzSlacz+huCa4fl8Mtxkw0WJ7Pa2orcEngJsMQRpmo253QuPL5ARRN5zKX+2J zt4PEEFZMm8D7gKRKocp29Rko8hci1j3AZhSZ3IujS2E2oo+YyXhWWzk2OjUt+cB uU6J7RkCHkkd1TEEgW8fT8RaQBbm1zEu8koaAoOH4tkr1AyMWnnU12UEssagIX7T p9ttXqKCIVCj1nYTVDJsgsAjtUBibPZuVysJF+zFo8P7niEOUS6g9YQmGmIjZDR8 FbDh2wJ/z41g9ZOGzEIKb2pjMMO2HUQVI8e4OEgIwAqGwQrZl3HA9E3I9NjpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv/sN8EqUV1weorc0pq2WuTLln/UwHwYDVR0j BBgwFoAUwuGZisFoGkH2glC/q9BamC4A6kQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRjZTM5MS1hNWQzLTQxMWItYTk3Yi1lODYyZmJmNTYzMWMvMS9DMkUxOTk4QUMx NjgxQTQxRjY4MjUwQkZBQkQwNUE5ODJFMDBFQTQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJFMTk5OEFDMTY4MUE0MUY2ODI1MEJGQUJEMDVBOTgyRTAw RUE0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkY2UzOTEtYTVkMy00MTFiLWE5 N2ItZTg2MmZiZjU2MzFjLzEvQzJFMTk5OEFDMTY4MUE0MUY2ODI1MEJGQUJEMDVB OTgyRTAwRUE0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9so5aI21uNDCH/3wFz2ui82HhOFK7KeIps zgSbetpBwDwbfiZ08DgNAumWLTY8HzVb2Sbe7qZRa7/RCRZwVYeOAG25bjXw7xXw R9OVPGCLE+BUbj54N/P/+WkDB1oWAjiN6uxixABORBUcYBWGbHPNfnqCB5Ehw8pr pxIfIiiPEO9hcDTS1fA+Egughq1i4tVXEBw5iNy7doiHmsk2Y5Tvfe+EXBQ8ilud AfGtIPMdbZh7XZNAwcmAsaV1U1v+g0Hndbc+ML54Wn/5rJoJOCsx0+rOHGEYPJBl 6L+Q1TH7YtZGy1r64USnBz18vO6n4fl4qJBmcXyIVHUBk+v2BEA= -----END CERTIFICATE-----Generated at Sun Aug 10 13:41:25 2025 by rpki-client