$ rpki-client -vvf repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.mft File: C2E929DFB05F81B91880BC808154365AECAC27D2.mft (raw, json) Hash identifier: idTMYCjA/cd9RLp3600MN0GVv66s0g/6DddzhfWhfY8= Subject key identifier: 5F:05:66:CC:35:A3:82:1F:30:69:32:F8:B5:A6:92:1B:5F:F1:FA:6B Authority key identifier: C2:E9:29:DF:B0:5F:81:B9:18:80:BC:80:81:54:36:5A:EC:AC:27:D2 Certificate issuer: /CN=C2E929DFB05F81B91880BC808154365AECAC27D2 Certificate serial: 02A57F150FBD4D2F0CBB516B3E2A75B1F5654D67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E929DFB05F81B91880BC808154365AECAC27D2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.mft Manifest number: 0106 Signing time: Sun 29 Jun 2025 07:11:40 +0000 Manifest this update: Sun 29 Jun 2025 07:06:40 +0000 Manifest next update: Wed 02 Jul 2025 14:41:40 +0000 Files and hashes: 1: 3230322e34372e3138362e302f32342d3234203d3e20313532303234.roa (hash: 0amdlqtrcYJjDto4OJYklzgZ1YTSYlkdFSOoVx3OhSE=) 2: C2E929DFB05F81B91880BC808154365AECAC27D2.crl (hash: 8YzzEQUPcu5c/2ebmpiB6cz/pbs7UVc3kfaDaIu4yeQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.crl rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E929DFB05F81B91880BC808154365AECAC27D2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:a5:7f:15:0f:bd:4d:2f:0c:bb:51:6b:3e:2a:75:b1:f5:65:4d:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2E929DFB05F81B91880BC808154365AECAC27D2 Validity Not Before: Jun 29 07:06:40 2025 GMT Not After : Jul 2 14:41:40 2025 GMT Subject: CN=5F0566CC35A3821F306932F8B5A6921B5FF1FA6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7d:8c:b1:a6:3c:2d:48:58:2b:4d:97:ca:17: df:68:18:2d:54:ba:db:7c:b5:ed:5f:58:1b:ea:17: 77:01:31:e2:0b:e7:e1:5f:45:4d:b0:37:a1:50:a1: ac:4b:80:b8:8e:3b:db:e1:5e:4e:dd:5b:99:ba:a2: ce:69:36:b2:e8:ab:37:a5:a2:14:10:41:7a:50:ab: 96:d2:39:c9:48:b9:6e:5a:d2:73:59:e0:59:43:ee: ba:44:06:89:4e:09:04:24:9e:3c:25:f4:2c:79:0b: 34:57:7b:e2:fe:d3:04:1d:32:a1:aa:9e:d0:8e:b4: 5c:e9:43:4d:58:45:d1:8f:75:b9:50:5a:ec:f2:02: 16:51:7e:c3:5a:e9:98:dc:05:de:64:f9:50:aa:2d: b2:21:2f:ae:9f:5b:e6:e6:c2:73:74:bd:83:b8:c4: 74:b8:ef:c6:5d:50:2e:74:aa:f8:85:ca:98:cf:03: 6d:6e:e0:fe:96:33:b8:02:05:da:5a:df:fb:05:d7: f6:0a:83:8b:47:0f:67:1d:5c:36:38:ea:d9:14:01: 19:f1:b4:33:6a:dd:6a:67:41:26:ff:ad:17:21:24: e9:2e:62:3d:d1:a4:b6:b6:6f:0f:80:b7:34:61:62: 9d:f6:31:32:31:44:12:b4:01:93:c0:2e:e2:2d:7a: 15:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:05:66:CC:35:A3:82:1F:30:69:32:F8:B5:A6:92:1B:5F:F1:FA:6B X509v3 Authority Key Identifier: keyid:C2:E9:29:DF:B0:5F:81:B9:18:80:BC:80:81:54:36:5A:EC:AC:27:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E929DFB05F81B91880BC808154365AECAC27D2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:02:3e:0e:43:4b:a2:fc:8e:08:36:a2:54:45:24:93:07:e5: 89:45:7a:a1:4a:72:02:0c:ca:3a:64:9f:e9:97:b6:52:ea:58: 57:71:18:81:76:e3:12:54:92:8a:4a:fb:8f:2c:8d:c6:88:c4: 3d:38:79:0b:46:34:6f:ae:b5:77:84:de:29:06:15:ea:c4:36: 1e:19:d5:2c:b4:23:5b:cf:6d:07:36:17:35:28:3b:2a:19:49: 26:fe:96:ef:54:a3:bb:fb:66:9f:63:16:23:8d:d9:84:20:10: a0:f6:ed:72:42:9b:ac:1f:c2:31:9d:fe:a3:2a:38:7a:31:1a: 3a:42:97:7c:11:3b:c4:63:0f:8d:70:b9:0c:77:cc:a8:da:bf: 9b:cb:eb:53:d2:f5:28:fc:ac:cd:0e:7f:a5:42:06:17:cf:60: cd:dc:8f:f0:79:83:8f:13:9d:f0:d9:47:22:a6:0b:76:19:61: 67:48:3c:be:7d:16:37:fd:0e:d9:9b:fc:0f:1d:cb:a4:f1:29: 2a:c4:d7:30:0b:ec:80:af:bd:71:c8:7c:22:46:e4:f9:50:4d: fe:21:b4:ce:d5:5c:6b:68:9d:13:ff:e1:07:a3:2e:e5:5e:9b: c8:68:e9:48:2b:02:72:05:bd:54:7c:ae:74:30:1e:be:37:5f: e6:60:63:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAqV/FQ+9TS8Mu1FrPip1sfVlTWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJFOTI5REZCMDVGODFCOTE4ODBCQzgwODE1NDM2NUFF Q0FDMjdEMjAeFw0yNTA2MjkwNzA2NDBaFw0yNTA3MDIxNDQxNDBaMDMxMTAvBgNV BAMTKDVGMDU2NkNDMzVBMzgyMUYzMDY5MzJGOEI1QTY5MjFCNUZGMUZBNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcfYyxpjwtSFgrTZfKF99oGC1U utt8te1fWBvqF3cBMeIL5+FfRU2wN6FQoaxLgLiOO9vhXk7dW5m6os5pNrLoqzel ohQQQXpQq5bSOclIuW5a0nNZ4FlD7rpEBolOCQQknjwl9Cx5CzRXe+L+0wQdMqGq ntCOtFzpQ01YRdGPdblQWuzyAhZRfsNa6ZjcBd5k+VCqLbIhL66fW+bmwnN0vYO4 xHS478ZdUC50qviFypjPA21u4P6WM7gCBdpa3/sF1/YKg4tHD2cdXDY46tkUARnx tDNq3WpnQSb/rRchJOkuYj3RpLa2bw+AtzRhYp32MTIxRBK0AZPALuItehX/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXwVmzDWjgh8waTL4taaSG1/x+mswHwYDVR0j BBgwFoAUwukp37BfgbkYgLyAgVQ2WuysJ9IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDZmZmFkMi0yMGJjLTQyNDYtODI5My00NDY2NmNlMWNmZTAvMC9DMkU5MjlERkIw NUY4MUI5MTg4MEJDODA4MTU0MzY1QUVDQUMyN0QyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJFOTI5REZCMDVGODFCOTE4ODBCQzgwODE1NDM2NUFFQ0FD MjdEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ2ZmZhZDItMjBiYy00MjQ2LTgy OTMtNDQ2NjZjZTFjZmUwLzAvQzJFOTI5REZCMDVGODFCOTE4ODBCQzgwODE1NDM2 NUFFQ0FDMjdEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAICPg5DS6L8jgg2olRFJJMH5YlFeqFKcgIM yjpkn+mXtlLqWFdxGIF24xJUkopK+48sjcaIxD04eQtGNG+utXeE3ikGFerENh4Z 1Sy0I1vPbQc2FzUoOyoZSSb+lu9Uo7v7Zp9jFiON2YQgEKD27XJCm6wfwjGd/qMq OHoxGjpCl3wRO8RjD41wuQx3zKjav5vL61PS9Sj8rM0Of6VCBhfPYM3cj/B5g48T nfDZRyKmC3YZYWdIPL59Fjf9Dtmb/A8dy6TxKSrE1zAL7ICvvXHIfCJG5PlQTf4h tM7VXGtonRP/4QejLuVem8ho6UgrAnIFvVR8rnQwHr43X+ZgY5Y= -----END CERTIFICATE-----Generated at Sun Jun 29 18:36:29 2025 by rpki-client