$ rpki-client -vvf repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft File: 2CCC85BF6CCD365701EFA75EE416D234F861385B.mft (raw, json) Hash identifier: BMrfc5D+1jwT5T6707Gf9QLsOhnFVam7+jT2YChAYcg= Subject key identifier: 92:42:78:B5:8D:44:64:A9:7F:D9:7F:C4:86:23:EB:26:BA:78:42:74 Authority key identifier: 2C:CC:85:BF:6C:CD:36:57:01:EF:A7:5E:E4:16:D2:34:F8:61:38:5B Certificate issuer: /CN=2CCC85BF6CCD365701EFA75EE416D234F861385B Certificate serial: 3EC3C921D6B8D14619EEE1A90F9D3456188FE350 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft Manifest number: B2 Signing time: Sat 23 Aug 2025 10:52:17 +0000 Manifest this update: Sat 23 Aug 2025 10:47:17 +0000 Manifest next update: Tue 26 Aug 2025 13:31:17 +0000 Files and hashes: 1: 2CCC85BF6CCD365701EFA75EE416D234F861385B.crl (hash: +e1EsQPw/v7CzmTVaGdj75PGHp8Ir2Kykg6MA6G6Feg=) 2: 3136302e32352e3231382e302f32342d3234203d3e20313533303836.roa (hash: 8n7ggoSZj8jJnFz6/yug05Kf9QPxel8FaCv3JxdKJhk=) 3: 3136302e32352e3231392e302f32342d3234203d3e20313533303836.roa (hash: uxK7UAyx9SPI/sYZC+vqWCKSgnZeXgqAqFmQ+2Jnazc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.crl rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:c3:c9:21:d6:b8:d1:46:19:ee:e1:a9:0f:9d:34:56:18:8f:e3:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CCC85BF6CCD365701EFA75EE416D234F861385B Validity Not Before: Aug 23 10:47:17 2025 GMT Not After : Aug 26 13:31:17 2025 GMT Subject: CN=924278B58D4464A97FD97FC48623EB26BA784274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1f:07:34:a2:c5:d8:4d:90:99:9a:74:4f:4d: 90:9b:bf:9a:ad:29:1b:fc:35:91:05:7e:47:5e:e0: aa:ef:95:16:72:ea:48:34:f8:e8:83:1b:d4:12:0d: 49:e3:dc:4d:0b:95:4e:17:2b:ce:80:e7:b2:a1:d6: 3f:48:b9:3b:c4:30:7d:11:e5:bf:ae:02:4c:08:cb: 72:00:88:26:a8:2c:ab:a9:42:1f:9a:e4:3e:2e:87: 8b:4b:1a:6c:3b:a7:52:4b:bb:e2:91:de:24:dc:2a: 52:1a:6c:fe:ef:bf:4d:18:41:1f:8d:62:07:88:54: a8:60:84:d6:a1:c6:c3:75:b6:28:9e:ad:ef:4e:7e: 41:6c:50:7c:2b:6a:3a:02:9b:09:c2:b4:d4:38:55: 65:61:9e:53:9f:a5:8c:b9:02:9e:99:99:4e:eb:79: 41:18:bb:10:b5:66:39:5e:87:b5:29:d3:47:2c:1b: 70:b2:2a:d9:72:b2:83:7b:74:2d:62:f0:bd:10:05: cb:27:94:62:b0:c3:04:e7:dc:b7:46:d4:dd:98:e1: 4e:16:b6:a3:3c:40:30:97:11:ec:ff:a5:60:c0:3b: 11:fb:fc:97:44:c5:92:ac:1d:33:fe:a0:ce:49:29: 1f:40:e4:08:1b:b4:6a:09:65:22:8b:ea:72:81:21: 7c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:42:78:B5:8D:44:64:A9:7F:D9:7F:C4:86:23:EB:26:BA:78:42:74 X509v3 Authority Key Identifier: keyid:2C:CC:85:BF:6C:CD:36:57:01:EF:A7:5E:E4:16:D2:34:F8:61:38:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:29:0e:c1:0c:c8:61:cb:f9:12:f0:e0:93:0c:b3:0e:5b:63: 0f:af:a1:78:60:c5:70:f3:c8:f6:ff:7a:a3:7d:aa:b1:e5:79: 8d:52:b9:1e:d2:d3:50:46:28:53:7b:7a:bd:7b:58:a2:99:32: 3b:4b:03:fe:e4:7b:ea:46:40:a6:d0:b2:ab:72:9f:69:fe:72: 85:b3:c4:ba:50:7f:46:b7:49:7c:47:36:6c:89:e3:f9:1f:ae: 1a:48:ab:87:e0:ad:71:5f:75:3a:1a:4c:83:35:76:e7:8f:30: 8e:1d:5d:7f:d1:0c:63:79:dc:7a:d7:5c:dd:c4:65:ec:1c:18: b7:18:cf:31:a8:81:1d:06:ac:da:a3:32:16:80:21:06:b3:fd: 71:25:f8:39:d3:14:17:f5:cb:06:04:50:82:e2:5f:ea:25:a6: 6e:40:cd:6a:97:52:04:37:09:18:f2:67:42:5e:ca:a9:30:da: bc:b6:d1:ac:3c:50:1f:35:cb:10:fd:cd:3c:19:68:44:e9:63: 0a:ad:46:bf:a2:7d:75:80:fe:67:da:37:d8:2f:e6:b2:54:9a: c4:f5:e1:66:8b:cd:f4:99:0e:58:0d:0e:29:4f:f1:49:9d:f4: 87:77:31:51:b4:32:e8:43:c3:db:08:cb:76:4c:19:ef:11:d6: 56:45:89:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPsPJIda40UYZ7uGpD500VhiP41AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNDQzg1QkY2Q0NEMzY1NzAxRUZBNzVFRTQxNkQyMzRG ODYxMzg1QjAeFw0yNTA4MjMxMDQ3MTdaFw0yNTA4MjYxMzMxMTdaMDMxMTAvBgNV BAMTKDkyNDI3OEI1OEQ0NDY0QTk3RkQ5N0ZDNDg2MjNFQjI2QkE3ODQyNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOHwc0osXYTZCZmnRPTZCbv5qt KRv8NZEFfkde4KrvlRZy6kg0+OiDG9QSDUnj3E0LlU4XK86A57Kh1j9IuTvEMH0R 5b+uAkwIy3IAiCaoLKupQh+a5D4uh4tLGmw7p1JLu+KR3iTcKlIabP7vv00YQR+N YgeIVKhghNahxsN1tiiere9OfkFsUHwrajoCmwnCtNQ4VWVhnlOfpYy5Ap6ZmU7r eUEYuxC1Zjleh7Up00csG3CyKtlysoN7dC1i8L0QBcsnlGKwwwTn3LdG1N2Y4U4W tqM8QDCXEez/pWDAOxH7/JdExZKsHTP+oM5JKR9A5AgbtGoJZSKL6nKBIXzLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkkJ4tY1EZKl/2X/EhiPrJrp4QnQwHwYDVR0j BBgwFoAULMyFv2zNNlcB76de5BbSNPhhOFswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWYwN2YxOC01YzQ5LTQxMjktYWE1My03MDg1Y2NkNTdiNjMvMC8yQ0NDODVCRjZD Q0QzNjU3MDFFRkE3NUVFNDE2RDIzNEY4NjEzODVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkNDQzg1QkY2Q0NEMzY1NzAxRUZBNzVFRTQxNkQyMzRGODYx Mzg1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2FmMDdmMTgtNWM0OS00MTI5LWFh NTMtNzA4NWNjZDU3YjYzLzAvMkNDQzg1QkY2Q0NEMzY1NzAxRUZBNzVFRTQxNkQy MzRGODYxMzg1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADcpDsEMyGHL+RLw4JMMsw5bYw+voXhgxXDz yPb/eqN9qrHleY1SuR7S01BGKFN7er17WKKZMjtLA/7ke+pGQKbQsqtyn2n+coWz xLpQf0a3SXxHNmyJ4/kfrhpIq4fgrXFfdToaTIM1duePMI4dXX/RDGN53HrXXN3E ZewcGLcYzzGogR0GrNqjMhaAIQaz/XEl+DnTFBf1ywYEUILiX+olpm5AzWqXUgQ3 CRjyZ0Jeyqkw2ry20aw8UB81yxD9zTwZaETpYwqtRr+ifXWA/mfaN9gv5rJUmsT1 4WaLzfSZDlgNDilP8Umd9Id3MVG0MuhDw9sIy3ZMGe8R1lZFiV4= -----END CERTIFICATE-----Generated at Sat Aug 23 22:05:11 2025 by rpki-client