$ rpki-client -vvf repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft File: 2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft (raw, json) Hash identifier: HmACtK3QdrNyFNnwabe6/T0DSK097WQkD5F0Js7TD60= Subject key identifier: D9:72:07:A9:B5:A4:49:FC:61:0A:07:D6:D4:5C:B2:48:AB:BC:6A:8E Authority key identifier: 2C:83:67:04:27:BB:EA:5D:CC:6E:4F:5F:7E:E2:34:2D:B5:DC:2B:2E Certificate issuer: /CN=2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E Certificate serial: 44B2A322E8246C622400DA53EF0FAA74390F20DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft Manifest number: F5 Signing time: Thu 21 Aug 2025 20:01:20 +0000 Manifest this update: Thu 21 Aug 2025 19:56:20 +0000 Manifest next update: Mon 25 Aug 2025 03:47:20 +0000 Files and hashes: 1: 2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.crl (hash: fNsgZ+rRspURT/1oix1bmsb/iEAsjU0y+Ro2ShbNcxU=) 2: 3130332e3133312e35312e302f32342d3234203d3e20313331373735.roa (hash: T56TwNuf3EVVKNZ4lQ8Ldgdic1XY2tNrYbscCPFk9Pg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.crl rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 03:47:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:b2:a3:22:e8:24:6c:62:24:00:da:53:ef:0f:aa:74:39:0f:20:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E Validity Not Before: Aug 21 19:56:20 2025 GMT Not After : Aug 25 03:47:20 2025 GMT Subject: CN=D97207A9B5A449FC610A07D6D45CB248ABBC6A8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c0:25:51:65:05:ea:a1:21:65:3e:32:c6:40: cc:34:78:3d:fe:47:e3:3f:5e:74:90:0a:06:f9:76: c9:60:05:db:67:7c:9c:48:b4:a7:f5:05:7c:3c:90: 35:24:3f:11:8c:c0:60:97:59:8e:a9:b5:20:35:9e: 07:18:33:e9:b2:9e:97:3a:b1:68:4c:71:cc:7d:58: 0b:6d:36:f4:b3:aa:00:95:54:10:c5:2c:68:b9:53: 16:f1:a3:9c:20:b6:b8:34:cd:c1:29:4f:5d:26:33: dd:f2:33:e9:27:96:92:47:12:24:f4:d6:37:6a:cb: 82:04:af:2e:f6:83:80:ce:9f:dc:33:85:5b:66:16: 46:5b:8a:c4:2c:8e:d6:b5:bb:39:32:fd:73:87:c1: 7d:84:1c:3a:7a:19:91:04:78:f3:a2:a0:be:ad:56: e2:49:3f:24:76:3a:95:27:46:9a:bb:5e:b1:23:ce: 73:a8:7a:f7:8d:79:c9:d5:31:1e:cc:36:5e:ab:6e: 60:0e:20:b4:f8:c1:f8:f2:fc:40:31:8d:87:24:13: 6d:aa:e9:fa:f2:c2:8f:e2:4e:fb:38:14:55:de:ca: 24:e0:71:8c:8b:ef:a3:01:1b:1c:95:0d:91:c2:a5: fc:59:9d:f0:3f:2b:e2:ac:3d:5c:f4:64:27:10:20: b5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:72:07:A9:B5:A4:49:FC:61:0A:07:D6:D4:5C:B2:48:AB:BC:6A:8E X509v3 Authority Key Identifier: keyid:2C:83:67:04:27:BB:EA:5D:CC:6E:4F:5F:7E:E2:34:2D:B5:DC:2B:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:8a:81:68:23:0e:6a:15:e4:49:d1:ae:bf:54:d8:7d:ad:a4: 8e:d3:9f:33:c7:bb:f1:83:14:58:c3:36:ca:d6:a4:0d:39:ef: b5:83:96:df:47:f2:4b:ec:5b:b1:23:87:8a:67:48:f4:2d:d0: 57:2a:ac:cf:a9:5a:62:3b:18:aa:aa:6e:50:ab:2a:5e:00:ef: 9a:85:65:d3:a4:7b:11:5c:32:08:42:e0:10:d4:d2:5c:49:7f: 6b:83:01:97:99:10:81:54:e7:eb:1d:3c:1c:ba:82:2b:a7:97: 5b:5f:69:0b:33:b5:f0:e2:3f:0d:9e:82:23:62:f8:99:1d:69: 0a:cd:18:41:3d:3b:c6:32:ac:f4:29:85:ad:e6:7e:3d:d3:67: 73:6b:30:e6:26:dc:fe:2c:48:0a:83:4f:47:55:4b:fc:16:2b: 16:9e:15:e6:37:f8:c4:80:53:37:64:a2:b8:ee:6b:a7:2d:a7: 65:01:72:72:9b:36:6e:bf:b6:b5:f4:ec:00:a1:99:5d:97:4d: d8:2a:cd:75:fe:8d:88:47:c2:69:2d:38:04:21:97:85:24:2b: c0:d0:41:da:9e:93:3b:f7:29:00:b6:fd:81:e5:ae:ee:41:bf: 54:d5:6f:96:7c:b9:33:bd:b8:19:19:24:7d:23:37:84:35:2c: 10:13:c1:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURLKjIugkbGIkANpT7w+qdDkPIN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM4MzY3MDQyN0JCRUE1RENDNkU0RjVGN0VFMjM0MkRC NURDMkIyRTAeFw0yNTA4MjExOTU2MjBaFw0yNTA4MjUwMzQ3MjBaMDMxMTAvBgNV BAMTKEQ5NzIwN0E5QjVBNDQ5RkM2MTBBMDdENkQ0NUNCMjQ4QUJCQzZBOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIwCVRZQXqoSFlPjLGQMw0eD3+ R+M/XnSQCgb5dslgBdtnfJxItKf1BXw8kDUkPxGMwGCXWY6ptSA1ngcYM+mynpc6 sWhMccx9WAttNvSzqgCVVBDFLGi5Uxbxo5wgtrg0zcEpT10mM93yM+knlpJHEiT0 1jdqy4IEry72g4DOn9wzhVtmFkZbisQsjta1uzky/XOHwX2EHDp6GZEEePOioL6t VuJJPyR2OpUnRpq7XrEjznOoeveNecnVMR7MNl6rbmAOILT4wfjy/EAxjYckE22q 6frywo/iTvs4FFXeyiTgcYyL76MBGxyVDZHCpfxZnfA/K+KsPVz0ZCcQILVJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2XIHqbWkSfxhCgfW1FyySKu8ao4wHwYDVR0j BBgwFoAULINnBCe76l3Mbk9ffuI0LbXcKy4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NGI0ZWM5OC00ZDFmLTRlNmYtYTc2OC0wMjY4OTQyMDIyMjMvMC8yQzgzNjcwNDI3 QkJFQTVEQ0M2RTRGNUY3RUUyMzQyREI1REMyQjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkM4MzY3MDQyN0JCRUE1RENDNkU0RjVGN0VFMjM0MkRCNURD MkIyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjRiNGVjOTgtNGQxZi00ZTZmLWE3 NjgtMDI2ODk0MjAyMjIzLzAvMkM4MzY3MDQyN0JCRUE1RENDNkU0RjVGN0VFMjM0 MkRCNURDMkIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJuKgWgjDmoV5EnRrr9U2H2tpI7TnzPHu/GD FFjDNsrWpA0577WDlt9H8kvsW7Ejh4pnSPQt0FcqrM+pWmI7GKqqblCrKl4A75qF ZdOkexFcMghC4BDU0lxJf2uDAZeZEIFU5+sdPBy6giunl1tfaQsztfDiPw2egiNi +JkdaQrNGEE9O8YyrPQpha3mfj3TZ3NrMOYm3P4sSAqDT0dVS/wWKxaeFeY3+MSA Uzdkorjua6ctp2UBcnKbNm6/trX07AChmV2XTdgqzXX+jYhHwmktOAQhl4UkK8DQ Qdqekzv3KQC2/YHlru5Bv1TVb5Z8uTO9uBkZJH0jN4Q1LBATwXI= -----END CERTIFICATE-----Generated at Sat Aug 23 14:51:25 2025 by rpki-client