$ rpki-client -vvf repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft File: C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft (raw, json) Hash identifier: kUc+3gwwaUxg7pNvWOR0xpiHPO2srXc2SeTMnL2AQKI= Subject key identifier: BA:C3:D0:DE:34:44:86:D5:CE:1D:74:5C:32:67:1A:2C:C8:BD:D2:ED Authority key identifier: C2:F9:56:B1:26:88:4B:5E:FD:8D:DA:DC:EB:0E:33:E1:B5:30:63:36 Certificate issuer: /CN=C2F956B126884B5EFD8DDADCEB0E33E1B5306336 Certificate serial: 4DE22BC7104B1605A60363EF5DBB60C95BD82C2B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft Manifest number: F4 Signing time: Fri 22 Aug 2025 09:40:50 +0000 Manifest this update: Fri 22 Aug 2025 09:35:50 +0000 Manifest next update: Mon 25 Aug 2025 14:44:50 +0000 Files and hashes: 1: 3230332e3134352e35392e302f32342d3234203d3e20313432333735.roa (hash: XQ5YOO3QMAmUiXXyDyAvfXAeHqliwoa7oF/Rg8qefuw=) 2: 3230332e3134352e35382e302f32332d3234203d3e20313432333735.roa (hash: lPAaUMCnmORN0lcIkL1SdTQ//TRobbXWIgBrv9ai9Yc=) 3: 3230332e3134352e35382e302f32342d3234203d3e20313432333735.roa (hash: bBnfqhprKZxO7GNHi6JFSi7ubIWOVMTy7/ydlUAr+qE=) 4: C2F956B126884B5EFD8DDADCEB0E33E1B5306336.crl (hash: c3VVWVPzGV5tVanBnH8oL5ONxPYW84z7LwmNJXNG3+w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.crl rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 14:44:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:e2:2b:c7:10:4b:16:05:a6:03:63:ef:5d:bb:60:c9:5b:d8:2c:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2F956B126884B5EFD8DDADCEB0E33E1B5306336 Validity Not Before: Aug 22 09:35:50 2025 GMT Not After : Aug 25 14:44:50 2025 GMT Subject: CN=BAC3D0DE344486D5CE1D745C32671A2CC8BDD2ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:0f:d0:27:82:e6:7b:68:81:44:ee:74:85:41: 56:52:d3:ce:32:8a:03:f7:ac:53:0b:df:49:78:23: e5:9e:62:41:83:c7:ef:86:1e:ea:87:d1:22:37:a3: 54:32:b0:fa:68:ce:5c:d3:8f:f9:74:c7:5f:11:20: 42:7e:a1:38:16:b6:e3:a6:50:2d:5b:2e:ac:cc:96: 12:8e:01:e5:dd:cd:c9:67:b1:ba:3e:38:9f:92:1b: d9:62:75:da:d4:ff:5a:b4:ff:3b:23:89:29:8f:70: c6:62:4e:69:d1:36:b2:24:66:28:9f:8a:cb:e4:3c: ea:03:cb:50:a5:6f:eb:d7:9f:28:3e:e6:7b:61:ef: af:f0:74:c1:9e:29:8f:10:fb:e4:02:20:b6:99:13: c6:23:44:9d:87:ca:cc:d2:05:2e:b8:fc:a3:b8:a0: c0:97:3c:ff:90:c8:c4:3b:44:f8:3c:d6:d2:3d:2f: a1:ba:39:b9:fa:69:f4:23:79:93:ba:d4:00:b6:ea: 2b:3c:db:af:30:66:22:bc:58:65:6a:9e:01:bf:b0: f3:88:2f:84:cf:5f:56:a7:70:8b:b2:75:dc:34:de: 28:af:21:b8:1d:77:31:a7:9e:0e:75:12:83:fd:5b: 72:d2:b1:71:ff:e1:cc:bb:fb:1d:7e:e9:fe:f9:94: 13:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C3:D0:DE:34:44:86:D5:CE:1D:74:5C:32:67:1A:2C:C8:BD:D2:ED X509v3 Authority Key Identifier: keyid:C2:F9:56:B1:26:88:4B:5E:FD:8D:DA:DC:EB:0E:33:E1:B5:30:63:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:57:5e:22:1c:a9:5f:32:24:16:18:c9:91:35:bc:fa:ef:cb: c3:7c:e5:55:fc:fc:be:fc:e2:56:52:55:f8:85:21:a4:ee:23: 10:81:da:92:e3:66:09:bc:29:7a:ec:1d:69:e3:8a:d6:a3:da: fc:4d:9e:ed:e5:b5:b2:3a:66:c1:3f:65:21:e3:98:68:af:ea: 68:8c:ea:59:3c:37:da:3f:91:5d:08:00:f4:e7:f0:cf:bb:54: 38:c9:b7:3f:16:98:89:c3:aa:1d:05:90:f1:e3:0f:2b:85:4a: 0b:09:e1:7f:53:cb:0c:56:c0:b5:dc:a9:42:3c:a6:fb:43:cc: 93:04:ab:cf:a6:be:53:1b:a7:85:07:15:c5:37:5a:7f:23:42: 0c:23:2e:bf:ba:20:3d:4a:7f:71:87:8d:e4:c2:8c:b0:c7:e4: f7:c5:83:b4:47:d6:cd:5d:ec:13:11:9c:e4:26:c7:b9:dd:d3: 1f:2f:70:09:4a:8a:bb:29:59:23:08:80:01:a0:51:63:54:41: f0:1e:b5:61:61:6d:14:c4:60:a2:ba:26:bc:51:ae:7c:73:1f: 3a:36:21:61:34:df:52:ed:47:91:e4:d0:e6:37:6b:64:74:3d: b9:08:a1:5b:02:22:af:e4:bf:ab:f8:7f:ee:2c:a3:9d:90:3f: 34:2e:d4:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTeIrxxBLFgWmA2PvXbtgyVvYLCswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJGOTU2QjEyNjg4NEI1RUZEOEREQURDRUIwRTMzRTFC NTMwNjMzNjAeFw0yNTA4MjIwOTM1NTBaFw0yNTA4MjUxNDQ0NTBaMDMxMTAvBgNV BAMTKEJBQzNEMERFMzQ0NDg2RDVDRTFENzQ1QzMyNjcxQTJDQzhCREQyRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmD9AnguZ7aIFE7nSFQVZS084y igP3rFML30l4I+WeYkGDx++GHuqH0SI3o1QysPpozlzTj/l0x18RIEJ+oTgWtuOm UC1bLqzMlhKOAeXdzclnsbo+OJ+SG9liddrU/1q0/zsjiSmPcMZiTmnRNrIkZiif isvkPOoDy1Clb+vXnyg+5nth76/wdMGeKY8Q++QCILaZE8YjRJ2HyszSBS64/KO4 oMCXPP+QyMQ7RPg81tI9L6G6Obn6afQjeZO61AC26is8268wZiK8WGVqngG/sPOI L4TPX1ancIuyddw03iivIbgddzGnng51EoP9W3LSsXH/4cy7+x1+6f75lBMLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUusPQ3jREhtXOHXRcMmcaLMi90u0wHwYDVR0j BBgwFoAUwvlWsSaIS179jdrc6w4z4bUwYzYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmFhM2JlYi01NzYxLTRjMzQtODhkMy0wMTVjY2M2NDAwMmYvMC9DMkY5NTZCMTI2 ODg0QjVFRkQ4RERBRENFQjBFMzNFMUI1MzA2MzM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJGOTU2QjEyNjg4NEI1RUZEOEREQURDRUIwRTMzRTFCNTMw NjMzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZhYTNiZWItNTc2MS00YzM0LTg4 ZDMtMDE1Y2NjNjQwMDJmLzAvQzJGOTU2QjEyNjg4NEI1RUZEOEREQURDRUIwRTMz RTFCNTMwNjMzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK5XXiIcqV8yJBYYyZE1vPrvy8N85VX8/L78 4lZSVfiFIaTuIxCB2pLjZgm8KXrsHWnjitaj2vxNnu3ltbI6ZsE/ZSHjmGiv6miM 6lk8N9o/kV0IAPTn8M+7VDjJtz8WmInDqh0FkPHjDyuFSgsJ4X9TywxWwLXcqUI8 pvtDzJMEq8+mvlMbp4UHFcU3Wn8jQgwjLr+6ID1Kf3GHjeTCjLDH5PfFg7RH1s1d 7BMRnOQmx7nd0x8vcAlKirspWSMIgAGgUWNUQfAetWFhbRTEYKK6JrxRrnxzHzo2 IWE031LtR5Hk0OY3a2R0PbkIoVsCIq/kv6v4f+4so52QPzQu1GQ= -----END CERTIFICATE-----Generated at Sat Aug 23 16:10:16 2025 by rpki-client