$ rpki-client -vvf repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft File: C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft (raw, json) Hash identifier: zwjSE3W0Nbb5bPXevSaVA1N9IFrHEhCjbf4nZRinzT8= Subject key identifier: DF:AF:CE:30:61:C3:C7:24:4A:3D:63:2F:DE:BE:97:4F:ED:DE:DF:01 Authority key identifier: C2:CA:98:CA:4D:D8:8D:73:DB:67:A2:41:73:E2:9F:FA:5D:11:64:02 Certificate issuer: /CN=C2CA98CA4DD88D73DB67A24173E29FFA5D116402 Certificate serial: 56DD5EDC59FB5C51B9DA6143ADF42FD97BA0CA49 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer Subject info access: rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft Manifest number: 020B Signing time: Tue 01 Jul 2025 10:31:06 +0000 Manifest this update: Tue 01 Jul 2025 10:26:06 +0000 Manifest next update: Fri 04 Jul 2025 10:47:06 +0000 Files and hashes: 1: C2CA98CA4DD88D73DB67A24173E29FFA5D116402.crl (hash: BEpBuuAxzd16lrwjMjLOVJIT+jAqSg3NcFe4ku/1QJk=) 2: 3130332e38312e36302e302f32322d3234203d3e20313336303630.roa (hash: fSyZW5UURSSq8c97wxQl2sx5mMYsc0LA9hnaSF/iy/A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.crl rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 10:47:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:dd:5e:dc:59:fb:5c:51:b9:da:61:43:ad:f4:2f:d9:7b:a0:ca:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2CA98CA4DD88D73DB67A24173E29FFA5D116402 Validity Not Before: Jul 1 10:26:06 2025 GMT Not After : Jul 4 10:47:06 2025 GMT Subject: CN=DFAFCE3061C3C7244A3D632FDEBE974FEDDEDF01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d2:ac:28:12:ad:35:c9:f3:e2:63:84:3e:7c: 4b:24:8a:a0:91:4f:e3:69:e9:3a:4a:82:c4:2a:50: b1:af:6a:ad:4f:4b:08:4f:8f:9b:dc:49:f7:d0:77: 64:a6:32:ee:04:95:40:4d:40:a9:88:21:b2:31:f4: 61:54:b4:26:fe:2a:10:5d:c3:01:84:cd:dd:14:00: 0c:95:55:cf:8a:55:4b:bd:d4:1d:4a:0f:6d:7c:2a: c1:44:e8:e9:c0:70:2a:c9:22:c9:19:7c:e4:db:26: 95:42:ef:8d:86:41:e6:40:f6:67:94:79:a8:b7:4e: 90:4a:f7:7f:f0:cc:90:f0:c9:cf:1c:0a:97:94:8c: 23:45:c4:47:7d:20:19:a1:e9:1e:c2:11:0d:4d:3f: 3e:7a:ee:5a:f0:1f:dc:6f:b8:f2:8e:05:af:25:52: d5:5e:65:69:a1:b8:07:45:13:23:48:74:89:78:7e: 22:e6:d3:35:ea:12:0a:22:ce:06:20:4c:75:09:ae: 54:16:5f:01:74:65:e0:f9:04:e0:ef:e0:3f:21:5f: 79:46:35:c3:05:a4:ee:89:ec:d8:02:88:41:40:47: c0:e2:6c:fb:c8:a5:f8:d2:1d:d1:ce:8c:8e:da:81: f4:49:00:4e:82:9a:2a:32:75:a6:a7:5a:be:a8:67: 41:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:AF:CE:30:61:C3:C7:24:4A:3D:63:2F:DE:BE:97:4F:ED:DE:DF:01 X509v3 Authority Key Identifier: keyid:C2:CA:98:CA:4D:D8:8D:73:DB:67:A2:41:73:E2:9F:FA:5D:11:64:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:21:fb:52:de:da:b2:77:2a:18:cd:6d:cd:2b:c8:39:29:f1: 49:81:6c:73:46:d2:95:8a:49:2e:f7:92:59:8b:dc:72:91:a6: 26:5f:29:e6:6d:fe:22:a7:53:22:8b:ff:20:02:b1:8c:30:63: b1:d9:b9:a9:36:f7:58:e9:70:7a:c0:11:a9:0b:6a:7e:cf:36: d5:60:63:5f:36:9c:01:2f:fc:5b:e2:0c:0d:67:b7:a3:21:7c: 49:6a:c2:86:08:40:70:5c:af:24:3e:46:31:7b:b9:aa:3d:4b: cb:78:fa:7f:fd:91:4b:21:f8:70:da:a3:85:5c:ce:c8:c7:64: 67:47:a8:ac:f9:66:fa:3b:ee:ba:32:12:34:76:80:ff:93:40: a0:ee:63:d6:71:83:7d:50:26:f1:80:81:58:24:b3:47:97:dd: 37:5c:b6:f2:81:6b:81:a9:3f:da:db:23:a5:42:5c:5c:12:86: 37:84:b7:86:18:f9:a8:03:e6:28:8d:69:09:22:23:f0:9e:a4: 64:39:ca:2a:90:53:b6:6f:1d:cf:5c:4c:cf:be:53:df:06:a5: ae:44:e8:03:8c:8b:bc:b0:33:65:8c:61:56:93:46:17:3c:bb: ca:95:7e:25:5e:b8:9e:a2:cd:65:d0:98:a1:92:53:33:35:67: b2:3a:56:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVt1e3Fn7XFG52mFDrfQv2XugykkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJDQTk4Q0E0REQ4OEQ3M0RCNjdBMjQxNzNFMjlGRkE1 RDExNjQwMjAeFw0yNTA3MDExMDI2MDZaFw0yNTA3MDQxMDQ3MDZaMDMxMTAvBgNV BAMTKERGQUZDRTMwNjFDM0M3MjQ0QTNENjMyRkRFQkU5NzRGRURERURGMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ0qwoEq01yfPiY4Q+fEskiqCR T+Np6TpKgsQqULGvaq1PSwhPj5vcSffQd2SmMu4ElUBNQKmIIbIx9GFUtCb+KhBd wwGEzd0UAAyVVc+KVUu91B1KD218KsFE6OnAcCrJIskZfOTbJpVC742GQeZA9meU eai3TpBK93/wzJDwyc8cCpeUjCNFxEd9IBmh6R7CEQ1NPz567lrwH9xvuPKOBa8l UtVeZWmhuAdFEyNIdIl4fiLm0zXqEgoizgYgTHUJrlQWXwF0ZeD5BODv4D8hX3lG NcMFpO6J7NgCiEFAR8DibPvIpfjSHdHOjI7agfRJAE6CmioydaanWr6oZ0EjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU36/OMGHDxyRKPWMv3r6XT+3e3wEwHwYDVR0j BBgwFoAUwsqYyk3YjXPbZ6JBc+Kf+l0RZAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTU3NmQ0Yy0xNzQ1LTRhMTYtOGVlZi1jZWMwODFjODIwNDMvMC9DMkNBOThDQTRE RDg4RDczREI2N0EyNDE3M0UyOUZGQTVEMTE2NDAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJDQTk4Q0E0REQ4OEQ3M0RCNjdBMjQxNzNFMjlGRkE1RDEx NjQwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE1NzZkNGMtMTc0NS00YTE2LThl ZWYtY2VjMDgxYzgyMDQzLzAvQzJDQTk4Q0E0REQ4OEQ3M0RCNjdBMjQxNzNFMjlG RkE1RDExNjQwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJsh+1Le2rJ3KhjNbc0ryDkp8UmBbHNG0pWK SS73klmL3HKRpiZfKeZt/iKnUyKL/yACsYwwY7HZuak291jpcHrAEakLan7PNtVg Y182nAEv/FviDA1nt6MhfElqwoYIQHBcryQ+RjF7uao9S8t4+n/9kUsh+HDao4Vc zsjHZGdHqKz5Zvo77royEjR2gP+TQKDuY9Zxg31QJvGAgVgks0eX3TdctvKBa4Gp P9rbI6VCXFwShjeEt4YY+agD5iiNaQkiI/CepGQ5yiqQU7ZvHc9cTM++U98Gpa5E 6AOMi7ywM2WMYVaTRhc8u8qVfiVeuJ6izWXQmKGSUzM1Z7I6Vsk= -----END CERTIFICATE-----Generated at Tue Jul 1 20:25:31 2025 by rpki-client