$ rpki-client -vvf repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft File: C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft (raw, json) Hash identifier: yta2fLvAXGGc+MrHv5bHXGYpZABh3Aitatm9f3SbdaY= Subject key identifier: 2E:EE:EC:6A:06:7D:1C:78:7A:BB:FD:2F:27:2F:7B:17:E6:DC:C4:24 Authority key identifier: C2:F9:56:B1:26:88:4B:5E:FD:8D:DA:DC:EB:0E:33:E1:B5:30:63:36 Certificate issuer: /CN=C2F956B126884B5EFD8DDADCEB0E33E1B5306336 Certificate serial: 4B2AF7FA3A9AA5A0F1215E4F78D09B2116FCEAA6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft Manifest number: DC Signing time: Sun 29 Jun 2025 14:30:49 +0000 Manifest this update: Sun 29 Jun 2025 14:25:49 +0000 Manifest next update: Wed 02 Jul 2025 14:46:49 +0000 Files and hashes: 1: C2F956B126884B5EFD8DDADCEB0E33E1B5306336.crl (hash: 2t4xTqT8G8UbNN+k08jC/HASPMcYoJcL7ak8gibC6DA=) 2: 3230332e3134352e35392e302f32342d3234203d3e20313432333735.roa (hash: XQ5YOO3QMAmUiXXyDyAvfXAeHqliwoa7oF/Rg8qefuw=) 3: 3230332e3134352e35382e302f32342d3234203d3e20313432333735.roa (hash: bBnfqhprKZxO7GNHi6JFSi7ubIWOVMTy7/ydlUAr+qE=) 4: 3230332e3134352e35382e302f32332d3234203d3e20313432333735.roa (hash: lPAaUMCnmORN0lcIkL1SdTQ//TRobbXWIgBrv9ai9Yc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.crl rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:2a:f7:fa:3a:9a:a5:a0:f1:21:5e:4f:78:d0:9b:21:16:fc:ea:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2F956B126884B5EFD8DDADCEB0E33E1B5306336 Validity Not Before: Jun 29 14:25:49 2025 GMT Not After : Jul 2 14:46:49 2025 GMT Subject: CN=2EEEEC6A067D1C787ABBFD2F272F7B17E6DCC424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f8:70:e5:cb:f6:64:d9:ee:f4:b7:5b:bd:cb: 16:bf:8f:2d:8d:ec:3e:2d:5a:f5:a3:4b:ac:16:ab: 3b:6e:76:fa:d5:4c:c2:13:3e:96:f2:1d:f1:4c:ec: 43:f1:94:68:c5:df:7b:e6:93:1d:41:32:b9:47:cd: c6:01:63:89:58:34:68:2e:32:98:55:43:f4:cb:71: fa:60:44:07:ac:ec:5e:72:78:b9:72:e6:84:20:72: c6:ac:3a:63:bf:20:14:19:66:ab:98:91:72:4a:ef: d4:df:6d:78:92:ad:21:2b:3f:3c:75:8d:14:cf:b0: f5:84:e7:f3:02:22:91:88:54:4e:3c:80:6f:30:68: 65:1b:94:a9:b3:d7:2d:d8:bb:4d:58:ee:da:1e:71: 3b:87:ad:26:ef:d1:6a:78:a4:e3:9e:71:4c:c8:07: d7:40:d3:e5:ba:1d:04:cd:9a:41:61:ec:44:c7:08: c1:8e:bc:c7:a9:2e:d4:cc:60:92:07:e6:85:fc:25: 32:81:75:a8:fb:c7:21:5e:7e:85:7f:8b:b3:d4:a7: 4e:23:13:a9:16:16:b1:67:22:e7:bf:13:1b:ff:b8: 73:c6:0c:65:1e:a1:45:e0:5a:96:2e:f1:fa:d1:73: 0d:19:88:35:0c:66:56:34:43:b3:11:b0:f0:f2:29: 60:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:EE:EC:6A:06:7D:1C:78:7A:BB:FD:2F:27:2F:7B:17:E6:DC:C4:24 X509v3 Authority Key Identifier: keyid:C2:F9:56:B1:26:88:4B:5E:FD:8D:DA:DC:EB:0E:33:E1:B5:30:63:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:eb:95:46:f7:5a:2a:f9:7d:08:cc:45:45:de:22:e9:4c:c7: 5e:8f:8e:83:79:6b:8b:a5:cc:6e:5d:71:d8:b7:61:20:5f:1e: 0c:7c:33:74:47:9e:5f:80:39:39:45:37:7f:c9:cb:cd:37:02: 05:4d:c0:87:ad:61:a2:a9:6d:5c:3a:7f:6b:e4:1a:bc:6c:1f: f8:45:9d:e6:80:3f:a9:07:91:01:c2:2f:ad:a6:e7:0d:d3:dd: a7:32:4a:a9:ec:e4:84:8a:75:8f:69:31:3f:00:2a:a5:96:20: 76:16:00:c7:51:a3:db:85:ab:9b:02:48:e3:3d:58:64:50:e7: 36:22:e9:0f:0d:48:be:a9:68:a4:3b:08:2c:b3:d7:ae:74:a3: a1:2f:92:0d:36:18:9a:d2:e5:c6:bc:fa:79:e0:5c:8e:04:33: 02:e3:c6:5b:f5:ae:2c:c7:52:24:26:b3:17:0d:4a:2a:94:62: f3:af:e5:37:24:e4:0f:5a:9b:c1:2c:a5:9c:8e:7b:6a:e9:2d: db:b8:2e:f3:1c:7d:a7:c4:55:0b:b7:b0:25:9d:91:a2:d2:af: f0:ec:81:e0:f1:20:0b:c7:83:ad:e9:b3:2f:2e:0c:82:16:87: 9f:2a:5e:ea:5c:9d:c7:d2:b1:57:fd:69:2d:64:83:4d:26:90: c8:be:2b:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSyr3+jqapaDxIV5PeNCbIRb86qYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJGOTU2QjEyNjg4NEI1RUZEOEREQURDRUIwRTMzRTFC NTMwNjMzNjAeFw0yNTA2MjkxNDI1NDlaFw0yNTA3MDIxNDQ2NDlaMDMxMTAvBgNV BAMTKDJFRUVFQzZBMDY3RDFDNzg3QUJCRkQyRjI3MkY3QjE3RTZEQ0M0MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN+HDly/Zk2e70t1u9yxa/jy2N 7D4tWvWjS6wWqztudvrVTMITPpbyHfFM7EPxlGjF33vmkx1BMrlHzcYBY4lYNGgu MphVQ/TLcfpgRAes7F5yeLly5oQgcsasOmO/IBQZZquYkXJK79TfbXiSrSErPzx1 jRTPsPWE5/MCIpGIVE48gG8waGUblKmz1y3Yu01Y7toecTuHrSbv0Wp4pOOecUzI B9dA0+W6HQTNmkFh7ETHCMGOvMepLtTMYJIH5oX8JTKBdaj7xyFefoV/i7PUp04j E6kWFrFnIue/Exv/uHPGDGUeoUXgWpYu8frRcw0ZiDUMZlY0Q7MRsPDyKWDbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULu7sagZ9HHh6u/0vJy97F+bcxCQwHwYDVR0j BBgwFoAUwvlWsSaIS179jdrc6w4z4bUwYzYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmFhM2JlYi01NzYxLTRjMzQtODhkMy0wMTVjY2M2NDAwMmYvMC9DMkY5NTZCMTI2 ODg0QjVFRkQ4RERBRENFQjBFMzNFMUI1MzA2MzM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJGOTU2QjEyNjg4NEI1RUZEOEREQURDRUIwRTMzRTFCNTMw NjMzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZhYTNiZWItNTc2MS00YzM0LTg4 ZDMtMDE1Y2NjNjQwMDJmLzAvQzJGOTU2QjEyNjg4NEI1RUZEOEREQURDRUIwRTMz RTFCNTMwNjMzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHXrlUb3Wir5fQjMRUXeIulMx16PjoN5a4ul zG5dcdi3YSBfHgx8M3RHnl+AOTlFN3/Jy803AgVNwIetYaKpbVw6f2vkGrxsH/hF neaAP6kHkQHCL62m5w3T3acySqns5ISKdY9pMT8AKqWWIHYWAMdRo9uFq5sCSOM9 WGRQ5zYi6Q8NSL6paKQ7CCyz1650o6Evkg02GJrS5ca8+nngXI4EMwLjxlv1rizH UiQmsxcNSiqUYvOv5Tck5A9am8EspZyOe2rpLdu4LvMcfafEVQu3sCWdkaLSr/Ds geDxIAvHg63psy8uDIIWh58qXupcncfSsVf9aS1kg00mkMi+K1A= -----END CERTIFICATE-----Generated at Mon Jun 30 00:15:26 2025 by rpki-client