$ rpki-client -vvf repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft File: 2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft (raw, json) Hash identifier: rTmf/ujrap68L7emuji8iWaAzrTMi5g6SvtYbJYq400= Subject key identifier: 35:79:43:D5:BE:75:F7:97:3B:C0:F1:1B:92:C8:3F:65:90:15:6E:FC Authority key identifier: 2C:B2:1E:F3:36:B6:AB:46:40:E4:61:96:01:E0:F6:48:8C:B8:FD:52 Certificate issuer: /CN=2CB21EF336B6AB4640E4619601E0F6488CB8FD52 Certificate serial: 16F076745344986237BD57D4DDE6CE2B1FB2EC47 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft Manifest number: 0316 Signing time: Mon 30 Jun 2025 04:41:56 +0000 Manifest this update: Mon 30 Jun 2025 04:36:56 +0000 Manifest next update: Thu 03 Jul 2025 08:57:56 +0000 Files and hashes: 1: 2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl (hash: qLE7L4wF30y4dGy3G9FIx4ZQn/8pMzrGTWCYRUfn0/0=) 2: 3130332e3136302e31322e302f32332d3234203d3e20313331313131.roa (hash: 2TjUbAwclmvFhuQfA5b8APF/xfL7qfTm8NzkksHu4ng=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 08:57:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:f0:76:74:53:44:98:62:37:bd:57:d4:dd:e6:ce:2b:1f:b2:ec:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CB21EF336B6AB4640E4619601E0F6488CB8FD52 Validity Not Before: Jun 30 04:36:56 2025 GMT Not After : Jul 3 08:57:56 2025 GMT Subject: CN=357943D5BE75F7973BC0F11B92C83F6590156EFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9a:25:5a:5c:ec:3a:c2:43:68:0c:0c:4e:5c: 3e:e7:52:68:82:07:2c:19:cd:45:6d:f6:4b:fe:98: ce:86:8a:f3:c8:3b:f1:aa:a7:41:62:b7:29:41:e0: ca:47:db:6d:ed:be:d7:97:d2:b9:a4:6c:b0:2c:38: 64:68:fe:c9:85:c6:91:57:9f:f1:88:7b:d0:00:75: b2:46:72:ea:af:ae:8c:53:31:44:cf:55:63:b0:8a: ce:75:9b:67:13:79:fb:6c:63:45:69:95:b1:1f:68: 7f:12:c5:f8:1d:4c:17:d8:a5:e2:27:20:c2:1b:ea: 5d:3b:02:9d:a4:70:8f:6a:f8:0b:f9:02:7d:23:37: f7:92:73:d1:1d:7c:34:a8:c3:fa:d2:1f:72:59:40: 28:e2:01:d9:d1:f1:60:cf:2a:7f:a6:de:69:4f:2a: 4c:0c:49:02:69:83:c6:c9:05:17:f4:fb:13:48:1b: 31:76:94:24:b3:eb:ed:3b:7b:3b:31:b5:91:a6:58: fa:22:66:f6:f9:d5:4b:17:f0:ad:a0:0e:a9:24:14: 02:b3:9c:6c:4c:1e:73:40:ad:b5:1d:ae:92:bb:6e: b2:a1:58:6f:e5:78:a8:f4:2d:16:27:32:23:47:f9: 6f:9c:b9:9b:e9:be:9a:f0:f7:43:1c:2c:02:79:76: b6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:79:43:D5:BE:75:F7:97:3B:C0:F1:1B:92:C8:3F:65:90:15:6E:FC X509v3 Authority Key Identifier: keyid:2C:B2:1E:F3:36:B6:AB:46:40:E4:61:96:01:E0:F6:48:8C:B8:FD:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:3e:f2:ae:04:ee:72:71:53:7b:17:e2:72:6b:95:a5:1e:3e: 00:eb:00:0f:f1:2f:f6:e5:4d:06:b7:4a:6c:c3:de:18:58:bc: 7e:c9:52:13:65:1f:b7:58:a2:3e:38:bb:73:a7:43:b2:ba:a7: ce:9e:8c:ec:7f:db:c6:e9:a8:5d:f9:93:54:7d:01:51:f5:0b: e2:b7:0e:89:ec:84:c3:42:b4:b5:bd:de:91:49:96:0e:b5:40: be:44:66:be:22:49:a3:4e:ef:e4:1f:e9:12:39:21:b9:42:64: 56:14:25:0d:31:57:85:ca:20:b1:4a:c0:e7:18:b6:d0:0a:ba: 09:15:6f:4a:7d:63:47:30:db:d4:c5:49:d2:9b:0d:73:56:af: 86:b4:4f:51:68:d7:c4:3b:4e:a9:94:ed:fd:2a:f2:48:49:be: 09:e4:7f:7c:2c:61:ec:3f:08:53:2e:df:3c:97:5d:8e:27:dd: fa:5b:bf:53:43:26:40:25:6b:40:cf:75:5f:2e:45:01:1e:7b: ac:6f:2a:d0:fc:a3:8a:7b:cb:f2:a9:92:25:94:cd:21:45:6a: 5d:8f:a9:d0:2e:2d:db:1d:1f:5d:36:77:14:9a:97:66:b5:da: 00:85:72:5f:4a:cd:c9:53:da:b3:d3:69:07:9b:63:47:14:8a: f8:db:6a:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFvB2dFNEmGI3vVfU3ebOKx+y7EcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2NDg4 Q0I4RkQ1MjAeFw0yNTA2MzAwNDM2NTZaFw0yNTA3MDMwODU3NTZaMDMxMTAvBgNV BAMTKDM1Nzk0M0Q1QkU3NUY3OTczQkMwRjExQjkyQzgzRjY1OTAxNTZFRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDamiVaXOw6wkNoDAxOXD7nUmiC BywZzUVt9kv+mM6GivPIO/Gqp0FitylB4MpH223tvteX0rmkbLAsOGRo/smFxpFX n/GIe9AAdbJGcuqvroxTMUTPVWOwis51m2cTeftsY0VplbEfaH8SxfgdTBfYpeIn IMIb6l07Ap2kcI9q+Av5An0jN/eSc9EdfDSow/rSH3JZQCjiAdnR8WDPKn+m3mlP KkwMSQJpg8bJBRf0+xNIGzF2lCSz6+07ezsxtZGmWPoiZvb51UsX8K2gDqkkFAKz nGxMHnNArbUdrpK7brKhWG/leKj0LRYnMiNH+W+cuZvpvprw90McLAJ5dralAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNXlD1b5195c7wPEbksg/ZZAVbvwwHwYDVR0j BBgwFoAULLIe8za2q0ZA5GGWAeD2SIy4/VIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGM2Zjc3MC02ODZhLTQ1ZWYtOGRmYi0wYzNhODdkM2Q4ZGEvMC8yQ0IyMUVGMzM2 QjZBQjQ2NDBFNDYxOTYwMUUwRjY0ODhDQjhGRDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2NDg4Q0I4 RkQ1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRjNmY3NzAtNjg2YS00NWVmLThk ZmItMGMzYTg3ZDNkOGRhLzAvMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2 NDg4Q0I4RkQ1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAII+8q4E7nJxU3sX4nJrlaUePgDrAA/xL/bl TQa3SmzD3hhYvH7JUhNlH7dYoj44u3OnQ7K6p86ejOx/28bpqF35k1R9AVH1C+K3 DonshMNCtLW93pFJlg61QL5EZr4iSaNO7+Qf6RI5IblCZFYUJQ0xV4XKILFKwOcY ttAKugkVb0p9Y0cw29TFSdKbDXNWr4a0T1Fo18Q7TqmU7f0q8khJvgnkf3wsYew/ CFMu3zyXXY4n3fpbv1NDJkAla0DPdV8uRQEee6xvKtD8o4p7y/KpkiWUzSFFal2P qdAuLdsdH102dxSal2a12gCFcl9KzclT2rPTaQebY0cUivjbaow= -----END CERTIFICATE-----Generated at Mon Jun 30 16:43:53 2025 by rpki-client