$ rpki-client -vvf repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft File: 2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft (raw, json) Hash identifier: Wt8celqJllcHHLttcYanWjRDHaP2Lyn3i7qrUsBzQOQ= Subject key identifier: C2:37:2A:91:74:BF:96:39:2F:F0:1F:02:DC:FE:99:80:C5:7F:D5:FF Authority key identifier: 2C:83:67:04:27:BB:EA:5D:CC:6E:4F:5F:7E:E2:34:2D:B5:DC:2B:2E Certificate issuer: /CN=2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E Certificate serial: 7DD5468BF043F162931C084B40025D0D4A529249 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft Manifest number: D7 Signing time: Mon 16 Jun 2025 10:01:15 +0000 Manifest this update: Mon 16 Jun 2025 09:56:15 +0000 Manifest next update: Thu 19 Jun 2025 19:06:15 +0000 Files and hashes: 1: 2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.crl (hash: a7SlIMmKVoZ/xeYqpsXPr3shyXZluTOCnAj0iT5edEg=) 2: 3130332e3133312e35312e302f32342d3234203d3e20313331373735.roa (hash: T56TwNuf3EVVKNZ4lQ8Ldgdic1XY2tNrYbscCPFk9Pg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.crl rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 11:04:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:d5:46:8b:f0:43:f1:62:93:1c:08:4b:40:02:5d:0d:4a:52:92:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E Validity Not Before: Jun 16 09:56:15 2025 GMT Not After : Jun 19 19:06:15 2025 GMT Subject: CN=C2372A9174BF96392FF01F02DCFE9980C57FD5FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:60:66:35:5b:dd:52:41:2c:4d:37:91:9a:ec: e0:2a:73:16:db:a0:5a:f2:d8:ca:cf:57:37:77:92: 66:60:af:9a:95:03:2b:f0:0f:0d:80:a3:d0:46:fe: 70:51:c4:63:70:af:36:98:54:2f:47:48:c1:03:88: e2:0a:41:e9:a9:2b:a0:10:b8:2a:65:e4:f6:d1:6b: 62:d5:9d:32:61:a2:3f:15:8c:e9:aa:90:f3:01:15: 85:4f:dc:9d:5e:51:7d:86:93:c4:ea:94:fb:7e:c9: 13:3e:af:de:89:33:87:ca:93:6f:b5:63:30:b2:ca: 01:40:ac:88:c1:c1:0f:15:8b:f3:d9:e3:10:04:46: c3:d5:4b:0b:f4:e6:bd:cc:6b:be:f4:9f:a1:fc:00: e2:8d:14:ed:73:46:74:a7:bc:cf:94:84:b8:c2:23: 2c:10:bf:0e:2c:b6:16:cf:61:fa:e1:fa:cd:f7:0e: ed:d5:f9:47:54:07:41:43:fa:4d:34:c5:f6:57:71: 2f:46:1c:fc:1c:84:f0:d0:89:aa:ad:4e:6c:f4:01: b5:ca:73:7a:3b:0e:0d:be:f4:ae:57:9d:ed:6f:40: af:71:b4:7e:46:a3:c5:e2:32:68:f6:1b:c9:16:0f: 1b:eb:fe:d5:be:e0:af:7d:08:f5:ce:44:69:32:e1: 1c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:37:2A:91:74:BF:96:39:2F:F0:1F:02:DC:FE:99:80:C5:7F:D5:FF X509v3 Authority Key Identifier: keyid:2C:83:67:04:27:BB:EA:5D:CC:6E:4F:5F:7E:E2:34:2D:B5:DC:2B:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:3c:5c:63:ea:27:56:5b:4d:e2:00:68:73:5d:5e:23:e5:12: b0:2d:69:10:4b:98:3e:36:22:85:61:5a:f6:e4:b5:7b:d1:48: 00:fd:7a:50:7f:87:45:64:02:74:e3:ca:55:34:e9:2f:da:68: 59:c7:86:89:7c:cb:12:b5:d8:cd:de:49:63:95:39:6b:12:e5: 0d:c5:1d:91:3f:81:a9:af:a3:db:1f:e1:57:25:bc:e5:82:2f: a6:5a:39:b1:e2:52:9e:fe:f5:0d:ea:06:d0:10:0a:28:4f:f6: a5:71:03:5a:ff:3b:0d:a4:84:18:48:9e:e1:d0:6d:a6:0d:06: d2:aa:f5:f9:0f:11:86:8e:2d:53:07:75:3d:33:06:45:bd:28: 34:14:cb:d3:ec:b4:7b:9d:45:e7:74:ee:5d:04:53:14:81:2c: 2f:fa:c1:47:bc:1b:c7:8b:2f:37:1b:35:79:7b:5a:88:23:4b: 8d:f1:d3:18:de:41:36:71:aa:45:fa:66:55:7c:b7:73:fe:c2: 23:b8:b6:cf:cf:9e:6d:df:8d:cf:fc:51:78:12:60:0d:e7:66: 11:30:ec:a8:c6:99:00:70:8f:d9:f5:98:24:84:f0:db:42:a4: 9b:6f:23:f6:80:5a:3e:44:6a:b5:c1:31:3b:b3:d0:37:10:7e: 66:49:ff:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfdVGi/BD8WKTHAhLQAJdDUpSkkkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM4MzY3MDQyN0JCRUE1RENDNkU0RjVGN0VFMjM0MkRC NURDMkIyRTAeFw0yNTA2MTYwOTU2MTVaFw0yNTA2MTkxOTA2MTVaMDMxMTAvBgNV BAMTKEMyMzcyQTkxNzRCRjk2MzkyRkYwMUYwMkRDRkU5OTgwQzU3RkQ1RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAYGY1W91SQSxNN5Ga7OAqcxbb oFry2MrPVzd3kmZgr5qVAyvwDw2Ao9BG/nBRxGNwrzaYVC9HSMEDiOIKQempK6AQ uCpl5PbRa2LVnTJhoj8VjOmqkPMBFYVP3J1eUX2Gk8TqlPt+yRM+r96JM4fKk2+1 YzCyygFArIjBwQ8Vi/PZ4xAERsPVSwv05r3Ma770n6H8AOKNFO1zRnSnvM+UhLjC IywQvw4sthbPYfrh+s33Du3V+UdUB0FD+k00xfZXcS9GHPwchPDQiaqtTmz0AbXK c3o7Dg2+9K5Xne1vQK9xtH5Go8XiMmj2G8kWDxvr/tW+4K99CPXORGky4Ry1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwjcqkXS/ljkv8B8C3P6ZgMV/1f8wHwYDVR0j BBgwFoAULINnBCe76l3Mbk9ffuI0LbXcKy4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NGI0ZWM5OC00ZDFmLTRlNmYtYTc2OC0wMjY4OTQyMDIyMjMvMC8yQzgzNjcwNDI3 QkJFQTVEQ0M2RTRGNUY3RUUyMzQyREI1REMyQjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkM4MzY3MDQyN0JCRUE1RENDNkU0RjVGN0VFMjM0MkRCNURD MkIyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjRiNGVjOTgtNGQxZi00ZTZmLWE3 NjgtMDI2ODk0MjAyMjIzLzAvMkM4MzY3MDQyN0JCRUE1RENDNkU0RjVGN0VFMjM0 MkRCNURDMkIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJw8XGPqJ1ZbTeIAaHNdXiPlErAtaRBLmD42 IoVhWvbktXvRSAD9elB/h0VkAnTjylU06S/aaFnHhol8yxK12M3eSWOVOWsS5Q3F HZE/gamvo9sf4VclvOWCL6ZaObHiUp7+9Q3qBtAQCihP9qVxA1r/Ow2khBhInuHQ baYNBtKq9fkPEYaOLVMHdT0zBkW9KDQUy9PstHudRed07l0EUxSBLC/6wUe8G8eL LzcbNXl7WogjS43x0xjeQTZxqkX6ZlV8t3P+wiO4ts/Pnm3fjc/8UXgSYA3nZhEw 7KjGmQBwj9n1mCSE8NtCpJtvI/aAWj5EarXBMTuz0DcQfmZJ/4k= -----END CERTIFICATE-----Generated at Mon Jun 16 12:30:12 2025 by rpki-client