$ rpki-client -vvf repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft File: 2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft (raw, json) Hash identifier: 6PVjdVlGvS7bacmuUgqEf1lUC9FRIRbDwGjCM7rNmqw= Subject key identifier: 69:4C:C3:43:B8:52:E9:F5:43:C6:79:29:9B:8B:0B:CD:EF:1B:AD:A1 Authority key identifier: 2C:9C:8D:6A:DB:43:A7:5F:1D:FA:48:05:3B:0E:13:BF:E4:BD:35:0A Certificate issuer: /CN=2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A Certificate serial: 26816FF53736112493F9E14652E2514A4B37C419 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft Manifest number: 6E Signing time: Fri 08 Aug 2025 07:42:00 +0000 Manifest this update: Fri 08 Aug 2025 07:37:00 +0000 Manifest next update: Mon 11 Aug 2025 15:49:00 +0000 Files and hashes: 1: 3136302e32322e39342e302f32332d3233203d3e20313533313130.roa (hash: NjyYz1ga8Qpztk8z2OnelqpIaeIr9KbAHbFDRDS0sFY=) 2: 2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.crl (hash: 335ZZya+NIJ/XevoXVsVqUzswni9aL4QP6A5WxLBRts=) 3: 3136302e32322e39342e302f32342d3234203d3e20313533313130.roa (hash: ss2EJAnpKFiDc20LCUbPWRGzhNcuFuLtxPENwLK+/ro=) 4: 3136302e32322e39352e302f32342d3234203d3e20313533313130.roa (hash: twzSlBh0NN1lf3cw6Hfv5Bifh4nztMxRMAZ/HjKNRio=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.crl rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 13:41:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:81:6f:f5:37:36:11:24:93:f9:e1:46:52:e2:51:4a:4b:37:c4:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A Validity Not Before: Aug 8 07:37:00 2025 GMT Not After : Aug 11 15:49:00 2025 GMT Subject: CN=694CC343B852E9F543C679299B8B0BCDEF1BADA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cf:ba:76:3c:cd:7f:07:0e:df:5d:6a:a1:b1: b0:31:b6:58:96:8e:a6:29:b8:f2:3e:d7:7a:da:9a: 96:c0:92:23:47:36:f4:54:52:ad:e3:37:df:fe:1b: a6:30:be:2c:cc:13:40:a6:bd:08:20:98:46:e9:7c: a4:78:7b:ac:25:d2:13:4f:c7:8f:ab:1c:42:9d:be: 18:05:7b:d1:80:7d:14:0e:16:ac:c0:f4:56:18:bb: 1d:9f:93:41:63:a6:f7:f3:f2:9c:b6:b5:8f:92:95: 29:81:e7:78:55:c7:8f:bf:24:38:7a:08:44:91:05: 7a:8e:2c:99:49:ea:83:53:b0:8c:f0:35:39:08:04: 8f:22:0d:66:c0:07:72:19:d3:3c:a9:91:85:86:03: 6f:d8:12:16:c5:c6:e1:fa:55:96:32:85:91:f2:46: e7:99:4b:28:f5:45:62:ad:36:dd:11:1a:e3:4f:85: 24:1a:4a:d6:88:4c:13:73:c2:a2:17:a6:84:4f:10: 2c:c7:ec:6a:00:89:dd:37:b3:ec:c3:54:23:67:f7: 72:29:cd:31:29:7d:91:f1:af:af:63:6a:f7:c3:26: 08:79:70:f7:19:a8:ad:ad:45:24:29:f6:ec:b8:d0: 79:b0:9d:3f:7f:6e:76:af:81:0d:15:7b:aa:2e:11: e4:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:4C:C3:43:B8:52:E9:F5:43:C6:79:29:9B:8B:0B:CD:EF:1B:AD:A1 X509v3 Authority Key Identifier: keyid:2C:9C:8D:6A:DB:43:A7:5F:1D:FA:48:05:3B:0E:13:BF:E4:BD:35:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:dd:7e:f4:ed:68:53:7a:c1:34:60:9c:02:40:fd:32:d1:03: 91:84:6a:76:25:5f:60:33:8a:e3:d7:ce:8c:47:e7:ed:4d:36: aa:c3:2b:1f:44:13:d1:37:22:66:6e:34:fa:40:3d:e0:9e:d6: ce:9a:01:99:18:40:46:5f:fd:dc:3e:29:24:e3:47:11:15:19: a5:7f:97:ce:ed:88:3a:ec:15:48:f7:3b:be:13:bc:ba:ed:04: dd:91:51:d9:08:26:80:6e:f6:a0:00:9e:94:00:97:60:c1:9a: df:d8:5a:40:4d:22:a5:f3:d1:1c:70:a3:64:6d:89:27:c7:15: d4:9b:ec:19:4b:86:87:88:18:18:45:c5:77:47:2f:85:1b:48: 9d:42:2b:07:01:b1:e7:32:37:35:26:ad:a9:73:79:fe:98:8b: 6c:0b:a3:3f:b4:88:9c:51:86:bc:9d:e5:a0:96:bf:6b:9f:3f: c5:5b:15:a3:ea:83:27:0b:d8:88:cb:e1:0d:f6:bb:56:49:89: 12:1d:f4:ae:64:c5:26:2a:3b:9a:e4:a1:44:b7:77:20:cd:33: 59:e7:f3:63:b7:07:4c:17:dc:4e:8d:51:5e:df:3f:0c:5a:b8: 77:82:fe:f6:8e:5f:93:d5:7f:ca:7d:92:30:a9:3d:e3:05:c5: 39:c5:a4:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJoFv9Tc2ESST+eFGUuJRSks3xBkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM5QzhENkFEQjQzQTc1RjFERkE0ODA1M0IwRTEzQkZF NEJEMzUwQTAeFw0yNTA4MDgwNzM3MDBaFw0yNTA4MTExNTQ5MDBaMDMxMTAvBgNV BAMTKDY5NENDMzQzQjg1MkU5RjU0M0M2NzkyOTlCOEIwQkNERUYxQkFEQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrz7p2PM1/Bw7fXWqhsbAxtliW jqYpuPI+13rampbAkiNHNvRUUq3jN9/+G6YwvizME0CmvQggmEbpfKR4e6wl0hNP x4+rHEKdvhgFe9GAfRQOFqzA9FYYux2fk0Fjpvfz8py2tY+SlSmB53hVx4+/JDh6 CESRBXqOLJlJ6oNTsIzwNTkIBI8iDWbAB3IZ0zypkYWGA2/YEhbFxuH6VZYyhZHy RueZSyj1RWKtNt0RGuNPhSQaStaITBNzwqIXpoRPECzH7GoAid03s+zDVCNn93Ip zTEpfZHxr69javfDJgh5cPcZqK2tRSQp9uy40HmwnT9/bnavgQ0Ve6ouEeTfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaUzDQ7hS6fVDxnkpm4sLze8braEwHwYDVR0j BBgwFoAULJyNattDp18d+kgFOw4Tv+S9NQowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTA3NzM4Ni0zMDFiLTRmZjEtODcxYi02MjMyYjVmM2JlMDkvMC8yQzlDOEQ2QURC NDNBNzVGMURGQTQ4MDUzQjBFMTNCRkU0QkQzNTBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkM5QzhENkFEQjQzQTc1RjFERkE0ODA1M0IwRTEzQkZFNEJE MzUwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWEwNzczODYtMzAxYi00ZmYxLTg3 MWItNjIzMmI1ZjNiZTA5LzAvMkM5QzhENkFEQjQzQTc1RjFERkE0ODA1M0IwRTEz QkZFNEJEMzUwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGfdfvTtaFN6wTRgnAJA/TLRA5GEanYlX2Az iuPXzoxH5+1NNqrDKx9EE9E3ImZuNPpAPeCe1s6aAZkYQEZf/dw+KSTjRxEVGaV/ l87tiDrsFUj3O74TvLrtBN2RUdkIJoBu9qAAnpQAl2DBmt/YWkBNIqXz0Rxwo2Rt iSfHFdSb7BlLhoeIGBhFxXdHL4UbSJ1CKwcBsecyNzUmralzef6Yi2wLoz+0iJxR hryd5aCWv2ufP8VbFaPqgycL2IjL4Q32u1ZJiRId9K5kxSYqO5rkoUS3dyDNM1nn 82O3B0wX3E6NUV7fPwxauHeC/vaOX5PVf8p9kjCpPeMFxTnFpIM= -----END CERTIFICATE-----Generated at Fri Aug 8 13:06:30 2025 by rpki-client