$ rpki-client -vvf repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft File: 2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft (raw, json) Hash identifier: 9LlvyR1B+jRvIMan8Gkr4EWuxzT0M+p+I9p+HYRG/iU= Subject key identifier: 43:C3:DD:E2:9E:1B:98:42:79:6E:2F:C7:7E:7F:25:60:60:9C:41:3B Authority key identifier: 2C:9C:8D:6A:DB:43:A7:5F:1D:FA:48:05:3B:0E:13:BF:E4:BD:35:0A Certificate issuer: /CN=2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A Certificate serial: 79A7E6F50E7EA8D059BEC7F816CD381F31EBC8C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft Manifest number: 5D Signing time: Tue 01 Jul 2025 08:31:53 +0000 Manifest this update: Tue 01 Jul 2025 08:26:53 +0000 Manifest next update: Fri 04 Jul 2025 09:54:53 +0000 Files and hashes: 1: 2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.crl (hash: lQZRIb7kR0BR0ULU97rzlciwcHETOpMdbIC9GNgEKFY=) 2: 3136302e32322e39342e302f32332d3233203d3e20313533313130.roa (hash: NjyYz1ga8Qpztk8z2OnelqpIaeIr9KbAHbFDRDS0sFY=) 3: 3136302e32322e39342e302f32342d3234203d3e20313533313130.roa (hash: ss2EJAnpKFiDc20LCUbPWRGzhNcuFuLtxPENwLK+/ro=) 4: 3136302e32322e39352e302f32342d3234203d3e20313533313130.roa (hash: twzSlBh0NN1lf3cw6Hfv5Bifh4nztMxRMAZ/HjKNRio=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.crl rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 09:54:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:a7:e6:f5:0e:7e:a8:d0:59:be:c7:f8:16:cd:38:1f:31:eb:c8:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A Validity Not Before: Jul 1 08:26:53 2025 GMT Not After : Jul 4 09:54:53 2025 GMT Subject: CN=43C3DDE29E1B9842796E2FC77E7F2560609C413B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:51:56:23:9a:99:51:60:28:bd:db:74:b1:63: cd:89:b0:73:8a:86:a1:fe:a7:8b:b8:07:a0:16:da: 5f:05:95:43:7d:7f:55:bd:4c:f4:93:6f:01:9c:ba: 8d:ad:8b:c6:5b:8e:93:61:ac:1b:87:cd:1f:a0:5f: c3:10:dd:86:09:fd:8e:d1:cd:46:24:18:1b:89:b0: 6f:96:6b:86:22:72:38:6b:7e:fe:fa:cd:85:17:6a: c5:86:2a:c4:c0:8e:9b:08:22:db:a5:38:36:d2:60: ac:a2:67:80:a1:c0:91:19:21:c0:a0:ad:60:60:74: 92:59:ae:ed:98:55:9b:c5:7e:03:3a:6b:df:15:33: 28:bc:57:5a:d2:60:1a:28:8f:e8:e2:19:6c:7f:45: 88:0d:32:78:bc:e3:d6:18:bf:21:43:3a:d5:ee:44: e6:ee:17:59:98:cb:d8:20:05:08:b6:c7:3b:8d:06: 66:95:b2:3c:9c:81:76:28:17:a5:56:4e:87:ce:14: bf:0e:4d:16:dc:4c:21:1b:0b:37:ae:df:80:8e:ee: f1:d5:0f:ab:8e:84:00:79:0e:7c:95:63:5e:e5:e5: 5e:d7:8d:34:36:78:17:54:6b:9b:2e:2d:91:b6:de: 55:40:df:8e:b2:02:04:a2:90:d8:71:94:00:2f:35: 37:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C3:DD:E2:9E:1B:98:42:79:6E:2F:C7:7E:7F:25:60:60:9C:41:3B X509v3 Authority Key Identifier: keyid:2C:9C:8D:6A:DB:43:A7:5F:1D:FA:48:05:3B:0E:13:BF:E4:BD:35:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:60:aa:aa:41:59:bc:1a:14:4c:ec:6b:09:e1:ba:ca:96:6f: 80:a9:a9:7f:fe:b5:95:2a:4c:90:10:08:ee:f0:44:f1:5f:16: b0:9c:48:dc:f8:62:73:34:6f:f3:0f:9c:e5:30:92:fa:c9:08: 3b:31:3d:63:6c:fe:da:1a:78:de:78:a8:cb:ba:b3:4d:d0:21: 56:80:18:31:8d:12:b3:93:46:19:05:55:ed:8a:c6:72:b0:c6: 0d:2f:ff:af:b7:bf:e0:02:d4:c0:8d:af:fe:62:95:c9:52:8b: 77:15:92:55:df:7e:b0:e2:55:e8:1b:e2:ac:d1:32:58:43:e8: f3:f0:74:1c:2a:f3:ac:fe:00:fd:97:1d:45:9d:3d:3a:44:ad: 2c:3f:59:a9:d1:cf:37:d1:d4:eb:ef:ba:e9:cb:cd:e7:a1:57: 5e:6c:ba:6d:a8:17:f1:dc:fa:63:92:87:52:d3:d9:cd:b2:c9: 76:7c:41:5a:52:6b:fc:72:1e:c3:13:92:6e:ac:b9:7d:68:9b: b0:dd:f5:be:a3:9a:f8:18:b2:68:88:19:ab:59:dc:c7:4e:8a: 0b:19:ad:78:1c:0c:cc:a1:37:a1:dd:15:f4:c2:81:8c:a5:10: b6:80:0f:4d:77:2b:49:5d:21:b2:12:e1:a7:f8:c3:38:0b:99: b6:f4:f0:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeafm9Q5+qNBZvsf4Fs04HzHryMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM5QzhENkFEQjQzQTc1RjFERkE0ODA1M0IwRTEzQkZF NEJEMzUwQTAeFw0yNTA3MDEwODI2NTNaFw0yNTA3MDQwOTU0NTNaMDMxMTAvBgNV BAMTKDQzQzNEREUyOUUxQjk4NDI3OTZFMkZDNzdFN0YyNTYwNjA5QzQxM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEUVYjmplRYCi923SxY82JsHOK hqH+p4u4B6AW2l8FlUN9f1W9TPSTbwGcuo2ti8ZbjpNhrBuHzR+gX8MQ3YYJ/Y7R zUYkGBuJsG+Wa4Yicjhrfv76zYUXasWGKsTAjpsIItulODbSYKyiZ4ChwJEZIcCg rWBgdJJZru2YVZvFfgM6a98VMyi8V1rSYBooj+jiGWx/RYgNMni849YYvyFDOtXu RObuF1mYy9ggBQi2xzuNBmaVsjycgXYoF6VWTofOFL8OTRbcTCEbCzeu34CO7vHV D6uOhAB5DnyVY17l5V7XjTQ2eBdUa5suLZG23lVA346yAgSikNhxlAAvNTdLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ8Pd4p4bmEJ5bi/Hfn8lYGCcQTswHwYDVR0j BBgwFoAULJyNattDp18d+kgFOw4Tv+S9NQowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTA3NzM4Ni0zMDFiLTRmZjEtODcxYi02MjMyYjVmM2JlMDkvMC8yQzlDOEQ2QURC NDNBNzVGMURGQTQ4MDUzQjBFMTNCRkU0QkQzNTBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkM5QzhENkFEQjQzQTc1RjFERkE0ODA1M0IwRTEzQkZFNEJE MzUwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWEwNzczODYtMzAxYi00ZmYxLTg3 MWItNjIzMmI1ZjNiZTA5LzAvMkM5QzhENkFEQjQzQTc1RjFERkE0ODA1M0IwRTEz QkZFNEJEMzUwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF5gqqpBWbwaFEzsawnhusqWb4CpqX/+tZUq TJAQCO7wRPFfFrCcSNz4YnM0b/MPnOUwkvrJCDsxPWNs/toaeN54qMu6s03QIVaA GDGNErOTRhkFVe2KxnKwxg0v/6+3v+AC1MCNr/5ilclSi3cVklXffrDiVegb4qzR MlhD6PPwdBwq86z+AP2XHUWdPTpErSw/WanRzzfR1OvvuunLzeehV15sum2oF/Hc +mOSh1LT2c2yyXZ8QVpSa/xyHsMTkm6suX1om7Dd9b6jmvgYsmiIGatZ3MdOigsZ rXgcDMyhN6HdFfTCgYylELaAD013K0ldIbIS4af4wzgLmbb08B8= -----END CERTIFICATE-----Generated at Tue Jul 1 21:29:14 2025 by rpki-client