$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft File: C2E1998AC1681A41F68250BFABD05A982E00EA44.mft (raw, json) Hash identifier: JlHTA3Qf6qPW6dAzXLW2Liy9erbcCHJBWimtd6z1pmw= Subject key identifier: 10:33:DB:93:0A:6F:72:3A:DB:73:ED:AB:72:8D:5D:11:FD:55:97:F1 Authority key identifier: C2:E1:99:8A:C1:68:1A:41:F6:82:50:BF:AB:D0:5A:98:2E:00:EA:44 Certificate issuer: /CN=C2E1998AC1681A41F68250BFABD05A982E00EA44 Certificate serial: 23A1E0E6225FC3A5702D12F90EF8692697A91C91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E1998AC1681A41F68250BFABD05A982E00EA44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft Manifest number: C6 Signing time: Sat 23 Aug 2025 02:52:04 +0000 Manifest this update: Sat 23 Aug 2025 02:47:04 +0000 Manifest next update: Tue 26 Aug 2025 03:24:04 +0000 Files and hashes: 1: C2E1998AC1681A41F68250BFABD05A982E00EA44.crl (hash: HU0bb+wotAAkrxsw/o5ThEzbvqRw6LQpPqoC3HD8Zu4=) 2: 323030313a6466333a653034303a3a2f34382d3438203d3e20313532383036.roa (hash: 7Sjy07nIz40VYuiQAAUvMHjSS6WBBJpcxOEZMkh16GE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.crl rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E1998AC1681A41F68250BFABD05A982E00EA44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 03:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:a1:e0:e6:22:5f:c3:a5:70:2d:12:f9:0e:f8:69:26:97:a9:1c:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2E1998AC1681A41F68250BFABD05A982E00EA44 Validity Not Before: Aug 23 02:47:04 2025 GMT Not After : Aug 26 03:24:04 2025 GMT Subject: CN=1033DB930A6F723ADB73EDAB728D5D11FD5597F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:15:ff:84:22:12:05:0d:c5:b7:af:e1:8a:57: 75:c4:ab:01:82:32:1a:a6:8a:cb:53:c9:a4:c6:40: f7:1e:f6:92:21:28:ed:4b:20:2c:20:02:76:f1:45: 5c:c1:fa:b5:12:69:c8:7b:ce:c8:d5:e2:03:3b:77: 28:af:5f:e6:e2:40:d9:cb:fe:9f:c7:11:b4:44:8e: f3:3b:38:70:71:49:bd:54:a6:0c:b2:bc:bb:c3:d8: 3b:89:a9:15:55:5e:9b:ba:c8:40:ba:b9:75:2c:62: b8:db:59:2b:e2:1e:b9:e5:87:00:6e:16:5e:83:36: 85:b4:7e:d0:c2:8d:d9:30:17:e9:e4:dd:16:68:4f: 4c:86:1b:42:4b:dc:24:64:14:d8:16:55:0b:e8:c1: f0:45:64:81:12:b6:09:45:68:4f:22:c9:85:4f:88: ce:7c:f8:5e:ea:37:42:84:2e:c6:98:7e:72:a8:cf: 02:aa:4c:ed:2d:4f:15:9b:cf:66:73:0d:77:c7:73: 7e:0f:06:04:1b:76:30:f9:38:20:c8:f8:fb:36:8f: 48:0f:33:72:5c:48:8d:63:37:3e:46:d7:4a:0c:41: 0b:7e:39:9e:51:2c:5a:67:0c:84:e2:b8:e5:da:72: 26:a7:0f:d3:ba:f4:10:ca:70:df:8d:99:de:b1:d0: 56:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:33:DB:93:0A:6F:72:3A:DB:73:ED:AB:72:8D:5D:11:FD:55:97:F1 X509v3 Authority Key Identifier: keyid:C2:E1:99:8A:C1:68:1A:41:F6:82:50:BF:AB:D0:5A:98:2E:00:EA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E1998AC1681A41F68250BFABD05A982E00EA44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:7e:4b:03:18:2b:fd:46:9e:7d:73:40:f5:a6:49:4b:22:1f: 12:c8:63:8e:b5:4e:0b:36:40:11:37:32:c5:50:4a:9a:94:89: e9:7b:97:be:5e:04:ba:dd:fc:c0:89:f0:40:8e:b3:54:f5:30: 37:ec:37:43:d1:41:bd:6b:37:41:2b:34:94:2d:b4:ad:0f:03: 64:fe:58:70:b1:67:13:ba:91:f7:b5:88:d8:d9:ac:16:9f:9c: 57:ce:80:a3:ff:44:d7:28:f5:94:80:0b:84:e4:1c:04:2c:db: 66:f0:ad:6b:bb:83:bc:c5:b7:6a:7c:ef:79:53:f1:75:b5:55: 2f:96:be:ff:ec:b8:4a:c0:8b:ef:fe:91:f9:20:e2:92:e8:88: 0a:ff:a9:70:f0:e0:43:b6:42:63:d7:fa:6a:5a:eb:09:a1:58: dd:da:0a:1e:b3:eb:29:6c:62:23:65:6f:a2:bc:02:09:c0:61: a0:de:eb:d5:68:2b:58:85:de:f3:b9:57:8f:b2:6d:21:68:d5: 96:a1:cc:07:8e:24:e2:aa:e7:6a:f7:54:c6:51:2e:23:af:09: 33:62:b2:82:7d:b2:1d:22:15:86:93:40:1b:5d:ec:c1:7a:a5: 46:23:1a:85:d6:2a:c6:cc:32:8a:2d:ca:8e:6d:cd:9c:7d:67: e2:c2:1a:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI6Hg5iJfw6VwLRL5DvhpJpepHJEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJFMTk5OEFDMTY4MUE0MUY2ODI1MEJGQUJEMDVBOTgy RTAwRUE0NDAeFw0yNTA4MjMwMjQ3MDRaFw0yNTA4MjYwMzI0MDRaMDMxMTAvBgNV BAMTKDEwMzNEQjkzMEE2RjcyM0FEQjczRURBQjcyOEQ1RDExRkQ1NTk3RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpFf+EIhIFDcW3r+GKV3XEqwGC MhqmistTyaTGQPce9pIhKO1LICwgAnbxRVzB+rUSach7zsjV4gM7dyivX+biQNnL /p/HEbREjvM7OHBxSb1UpgyyvLvD2DuJqRVVXpu6yEC6uXUsYrjbWSviHrnlhwBu Fl6DNoW0ftDCjdkwF+nk3RZoT0yGG0JL3CRkFNgWVQvowfBFZIEStglFaE8iyYVP iM58+F7qN0KELsaYfnKozwKqTO0tTxWbz2ZzDXfHc34PBgQbdjD5OCDI+Ps2j0gP M3JcSI1jNz5G10oMQQt+OZ5RLFpnDITiuOXacianD9O69BDKcN+Nmd6x0FZTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEDPbkwpvcjrbc+2rco1dEf1Vl/EwHwYDVR0j BBgwFoAUwuGZisFoGkH2glC/q9BamC4A6kQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRjZTM5MS1hNWQzLTQxMWItYTk3Yi1lODYyZmJmNTYzMWMvMS9DMkUxOTk4QUMx NjgxQTQxRjY4MjUwQkZBQkQwNUE5ODJFMDBFQTQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJFMTk5OEFDMTY4MUE0MUY2ODI1MEJGQUJEMDVBOTgyRTAw RUE0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkY2UzOTEtYTVkMy00MTFiLWE5 N2ItZTg2MmZiZjU2MzFjLzEvQzJFMTk5OEFDMTY4MUE0MUY2ODI1MEJGQUJEMDVB OTgyRTAwRUE0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJJ+SwMYK/1Gnn1zQPWmSUsiHxLIY461Tgs2 QBE3MsVQSpqUiel7l75eBLrd/MCJ8ECOs1T1MDfsN0PRQb1rN0ErNJQttK0PA2T+ WHCxZxO6kfe1iNjZrBafnFfOgKP/RNco9ZSAC4TkHAQs22bwrWu7g7zFt2p873lT 8XW1VS+Wvv/suErAi+/+kfkg4pLoiAr/qXDw4EO2QmPX+mpa6wmhWN3aCh6z6yls YiNlb6K8AgnAYaDe69VoK1iF3vO5V4+ybSFo1ZahzAeOJOKq52r3VMZRLiOvCTNi soJ9sh0iFYaTQBtd7MF6pUYjGoXWKsbMMootyo5tzZx9Z+LCGj8= -----END CERTIFICATE-----Generated at Sat Aug 23 12:05:20 2025 by rpki-client