$ rpki-client -vvf repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft File: 2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft (raw, json) Hash identifier: PV3CPtmYpFNtbVGQq7c0h/ekGB3VR5LWVEfsoeVA/ac= Subject key identifier: D3:64:D0:95:01:1E:28:D1:BC:D3:00:58:96:D6:A7:4D:22:B1:88:04 Authority key identifier: 2C:9C:8D:6A:DB:43:A7:5F:1D:FA:48:05:3B:0E:13:BF:E4:BD:35:0A Certificate issuer: /CN=2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A Certificate serial: 301D1EFB13BE7726992F47127EE8821D744B2C95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft Manifest number: 74 Signing time: Thu 21 Aug 2025 15:01:59 +0000 Manifest this update: Thu 21 Aug 2025 14:56:59 +0000 Manifest next update: Sun 24 Aug 2025 21:21:59 +0000 Files and hashes: 1: 2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.crl (hash: qP7E3B7+eS7u0obQ1DOL9Q/F7L/y/mvG0WY6PCcVloA=) 2: 3136302e32322e39342e302f32332d3233203d3e20313533313130.roa (hash: NjyYz1ga8Qpztk8z2OnelqpIaeIr9KbAHbFDRDS0sFY=) 3: 3136302e32322e39352e302f32342d3234203d3e20313533313130.roa (hash: twzSlBh0NN1lf3cw6Hfv5Bifh4nztMxRMAZ/HjKNRio=) 4: 3136302e32322e39342e302f32342d3234203d3e20313533313130.roa (hash: ss2EJAnpKFiDc20LCUbPWRGzhNcuFuLtxPENwLK+/ro=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.crl rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 21:21:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:1d:1e:fb:13:be:77:26:99:2f:47:12:7e:e8:82:1d:74:4b:2c:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A Validity Not Before: Aug 21 14:56:59 2025 GMT Not After : Aug 24 21:21:59 2025 GMT Subject: CN=D364D095011E28D1BCD3005896D6A74D22B18804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c9:5a:e0:d8:ba:6e:ab:21:9d:af:99:96:79: e0:f5:4e:2f:4e:e5:64:61:1f:a5:2e:14:8e:16:e6: 5f:25:25:a1:9a:6a:5c:8d:69:b7:e7:a4:73:8b:0b: f2:48:64:59:ba:ba:53:a4:d6:2d:aa:00:ed:f1:60: a9:88:da:02:18:e4:86:9c:5b:17:8e:f2:cf:09:d6: 80:70:f6:45:82:32:76:d2:72:7a:4e:3a:8f:2c:50: b4:96:55:5d:86:4e:61:2a:34:7e:61:96:5a:60:a6: 02:4f:cd:d8:dc:eb:3c:c5:4a:61:60:66:cf:01:27: 3a:41:a9:42:cd:fa:88:4c:ac:5c:ee:cb:c4:52:f4: 3e:01:05:9f:f9:b3:3b:03:b7:9c:29:0b:ae:82:98: 16:7f:4f:a6:3a:1a:35:67:f7:a2:6e:e0:5a:51:21: 88:f9:69:28:13:94:9e:4c:2a:34:e0:fe:d2:94:01: db:69:a1:89:62:29:8d:ac:cb:c1:33:1e:88:47:2e: b2:1c:b1:11:09:11:59:c9:55:ca:46:be:a3:e2:c3: 43:83:bc:ef:84:d1:25:c0:ae:17:6a:96:f0:f6:30: 07:58:74:90:ff:b0:b9:c6:bc:72:c4:df:c6:90:46: ba:0b:ff:51:fa:df:ce:a9:75:a7:a4:59:3e:9d:db: bb:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:64:D0:95:01:1E:28:D1:BC:D3:00:58:96:D6:A7:4D:22:B1:88:04 X509v3 Authority Key Identifier: keyid:2C:9C:8D:6A:DB:43:A7:5F:1D:FA:48:05:3B:0E:13:BF:E4:BD:35:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:83:0e:13:9e:00:35:54:c8:8f:4c:c5:fe:2a:b4:fc:a9:03: a6:7d:5b:22:8f:b6:ae:ce:4f:32:b6:52:59:cc:9e:54:2a:a2: ac:bd:83:c6:35:0f:06:b5:c8:c5:e3:fa:67:1a:45:ff:9a:75: bd:45:bc:12:7d:be:72:f0:ee:e7:ce:ad:2d:df:9f:28:5d:c9: 72:44:20:1d:16:2e:b6:05:da:c1:db:12:92:4e:d4:e8:d8:59: 36:01:dc:70:d6:3a:20:c7:a7:72:a4:e5:0a:20:02:1a:da:f6: 69:1d:36:08:d2:d1:34:42:17:79:ff:52:7d:b7:d4:21:0b:7c: 54:85:7a:b2:e1:a8:6c:ad:e5:f2:0a:1f:6d:40:38:9e:df:7c: 90:f8:72:fc:ed:f1:21:20:7b:88:6e:21:eb:ee:cb:ab:2b:10: d3:a2:56:9e:d2:26:09:5c:1e:d9:36:c3:55:de:b9:9e:60:56: 93:6a:98:2e:6e:a2:57:6b:94:41:af:5f:66:c3:8e:59:cc:a1: 19:e7:75:18:7c:de:66:dd:a8:8c:4e:47:3d:20:c0:97:67:6a: 6c:5f:82:8c:a7:54:1a:0d:be:c7:fc:07:c5:3e:4b:43:65:de: 5d:83:79:53:ab:6b:c5:9e:3d:1f:3f:02:4b:a4:e9:e8:e6:96: a9:b2:0e:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMB0e+xO+dyaZL0cSfuiCHXRLLJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM5QzhENkFEQjQzQTc1RjFERkE0ODA1M0IwRTEzQkZF NEJEMzUwQTAeFw0yNTA4MjExNDU2NTlaFw0yNTA4MjQyMTIxNTlaMDMxMTAvBgNV BAMTKEQzNjREMDk1MDExRTI4RDFCQ0QzMDA1ODk2RDZBNzREMjJCMTg4MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTyVrg2LpuqyGdr5mWeeD1Ti9O 5WRhH6UuFI4W5l8lJaGaalyNabfnpHOLC/JIZFm6ulOk1i2qAO3xYKmI2gIY5Iac WxeO8s8J1oBw9kWCMnbScnpOOo8sULSWVV2GTmEqNH5hllpgpgJPzdjc6zzFSmFg Zs8BJzpBqULN+ohMrFzuy8RS9D4BBZ/5szsDt5wpC66CmBZ/T6Y6GjVn96Ju4FpR IYj5aSgTlJ5MKjTg/tKUAdtpoYliKY2sy8EzHohHLrIcsREJEVnJVcpGvqPiw0OD vO+E0SXArhdqlvD2MAdYdJD/sLnGvHLE38aQRroL/1H6386pdaekWT6d27utAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU02TQlQEeKNG80wBYltanTSKxiAQwHwYDVR0j BBgwFoAULJyNattDp18d+kgFOw4Tv+S9NQowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTA3NzM4Ni0zMDFiLTRmZjEtODcxYi02MjMyYjVmM2JlMDkvMC8yQzlDOEQ2QURC NDNBNzVGMURGQTQ4MDUzQjBFMTNCRkU0QkQzNTBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkM5QzhENkFEQjQzQTc1RjFERkE0ODA1M0IwRTEzQkZFNEJE MzUwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWEwNzczODYtMzAxYi00ZmYxLTg3 MWItNjIzMmI1ZjNiZTA5LzAvMkM5QzhENkFEQjQzQTc1RjFERkE0ODA1M0IwRTEz QkZFNEJEMzUwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAyDDhOeADVUyI9Mxf4qtPypA6Z9WyKPtq7O TzK2UlnMnlQqoqy9g8Y1Dwa1yMXj+mcaRf+adb1FvBJ9vnLw7ufOrS3fnyhdyXJE IB0WLrYF2sHbEpJO1OjYWTYB3HDWOiDHp3Kk5QogAhra9mkdNgjS0TRCF3n/Un23 1CELfFSFerLhqGyt5fIKH21AOJ7ffJD4cvzt8SEge4huIevuy6srENOiVp7SJglc Htk2w1XeuZ5gVpNqmC5uoldrlEGvX2bDjlnMoRnndRh83mbdqIxORz0gwJdnamxf goynVBoNvsf8B8U+S0Nl3l2DeVOra8WePR8/Akuk6ejmlqmyDuU= -----END CERTIFICATE-----Generated at Sat Aug 23 23:13:07 2025 by rpki-client