$ rpki-client -vvf repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft File: C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft (raw, json) Hash identifier: 4ktTKs4tyjljJKOIcN2xbsU69lWBpsvxT5ZqyXXQmYU= Subject key identifier: A9:3B:78:49:CB:83:6F:80:C0:03:0F:5A:C4:E4:CC:9D:A7:26:8A:B0 Authority key identifier: C2:D5:93:D1:C8:A7:F7:0D:45:12:5D:4B:DB:E5:77:49:27:C1:4E:55 Certificate issuer: /CN=C2D593D1C8A7F70D45125D4BDBE5774927C14E55 Certificate serial: 059761D0E5CAD348C1FD8878FC8F656ED87A7754 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft Manifest number: 82 Signing time: Sun 29 Jun 2025 17:51:05 +0000 Manifest this update: Sun 29 Jun 2025 17:46:05 +0000 Manifest next update: Thu 03 Jul 2025 01:17:05 +0000 Files and hashes: 1: 3136302e31392e3137392e302f32342d3234203d3e20313532373837.roa (hash: 0CvOPtspHIv++OpYpPeOAtYrJalD1E7T3Av1Tkd5zHo=) 2: C2D593D1C8A7F70D45125D4BDBE5774927C14E55.crl (hash: P+5TxLyJ1J9g9ToRwVbKSoH73zfKJip4un20Cw6jDJ0=) 3: 3136302e31392e3137382e302f32342d3234203d3e20313532373837.roa (hash: M1UfgBl+o+VtOJt76FjRKdEJWLXVwypZfHtYeDLVMfk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.crl rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 01:17:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:97:61:d0:e5:ca:d3:48:c1:fd:88:78:fc:8f:65:6e:d8:7a:77:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2D593D1C8A7F70D45125D4BDBE5774927C14E55 Validity Not Before: Jun 29 17:46:05 2025 GMT Not After : Jul 3 01:17:05 2025 GMT Subject: CN=A93B7849CB836F80C0030F5AC4E4CC9DA7268AB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ec:10:a1:4f:83:17:e0:ef:5d:df:68:e5:02: 30:e8:8f:4b:1b:34:38:01:e9:16:65:e0:14:6f:8f: ae:4a:41:ad:9b:16:ba:f0:a5:e0:4b:08:33:98:7a: 70:6f:48:38:67:0f:f4:93:6e:b5:35:21:cc:b2:21: 3c:d7:ea:69:29:3a:06:76:bf:13:dc:64:36:8e:55: d9:83:3d:7f:9f:a7:40:3f:ce:b6:ef:e5:a3:3c:ff: d4:d7:d3:ae:c5:af:b2:f5:64:89:e8:97:b5:f8:2b: 45:a8:67:79:c5:13:45:f4:2d:0d:9e:fd:ea:52:50: 01:ee:4a:9f:f2:85:8c:e8:52:de:77:1c:19:ac:3e: 51:fc:da:80:92:46:98:d1:06:bc:a3:73:73:1f:b8: 7b:ed:60:76:b7:36:45:a1:53:0b:a6:80:80:d9:52: 8e:7d:8b:c0:02:2a:88:65:79:90:5f:09:b0:d6:0e: 5b:3c:08:7f:41:0d:56:8d:ba:ab:12:a7:86:45:f2: 7f:11:01:0f:bb:71:c7:ae:36:a1:43:4b:b8:61:d5: 83:04:b9:4e:a5:58:08:dd:ee:a4:b7:bc:8e:9a:6d: 0b:44:07:20:16:a7:b3:67:83:86:0d:17:5f:23:fc: 3c:6b:ee:b4:17:55:83:ff:7c:99:95:b7:4f:0c:4c: fc:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:3B:78:49:CB:83:6F:80:C0:03:0F:5A:C4:E4:CC:9D:A7:26:8A:B0 X509v3 Authority Key Identifier: keyid:C2:D5:93:D1:C8:A7:F7:0D:45:12:5D:4B:DB:E5:77:49:27:C1:4E:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:b7:3b:57:d1:53:cc:42:6d:ed:8f:d8:3f:82:34:0c:cf:90: bb:03:ac:61:00:35:76:0d:4c:1a:76:18:f0:dc:17:4e:79:40: f6:9f:61:bc:e7:9e:27:10:12:76:c1:c6:26:35:45:70:4c:3f: c9:37:73:5a:84:22:0a:77:7e:8a:06:41:ba:ea:51:90:15:f2: 2f:b1:eb:55:30:22:4d:21:59:ae:7c:9b:7b:81:9e:f0:f3:7d: fd:a2:94:d4:9c:7e:28:90:89:a3:b3:42:54:47:2f:fa:a1:f8: 6b:8c:5c:a8:fd:d5:9e:b1:02:7e:42:cb:79:6c:b9:8b:e4:54: 4b:7e:9e:19:5b:29:aa:de:57:ed:66:2a:8f:fc:7d:98:69:02: 77:ef:6a:2a:f8:06:5d:37:07:d8:dd:78:1f:e3:66:07:53:5a: 83:3d:af:a6:74:42:9b:45:07:4c:dd:ba:45:2b:f8:77:f2:b1: 0d:5a:fe:ac:47:d8:05:30:23:07:a3:0e:61:e6:23:80:33:9c: 91:09:3a:f0:fe:1d:9c:f1:14:3e:f3:72:eb:05:fe:43:8a:17: ce:f8:4f:0b:3a:21:44:94:11:30:5a:88:0e:fc:62:1c:b0:e1: 68:11:cb:b3:c5:d8:c1:9b:60:da:b2:9d:ce:15:bf:9c:e9:96: 2d:50:ca:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBZdh0OXK00jB/Yh4/I9lbth6d1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJENTkzRDFDOEE3RjcwRDQ1MTI1RDRCREJFNTc3NDky N0MxNEU1NTAeFw0yNTA2MjkxNzQ2MDVaFw0yNTA3MDMwMTE3MDVaMDMxMTAvBgNV BAMTKEE5M0I3ODQ5Q0I4MzZGODBDMDAzMEY1QUM0RTRDQzlEQTcyNjhBQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs7BChT4MX4O9d32jlAjDoj0sb NDgB6RZl4BRvj65KQa2bFrrwpeBLCDOYenBvSDhnD/STbrU1IcyyITzX6mkpOgZ2 vxPcZDaOVdmDPX+fp0A/zrbv5aM8/9TX067Fr7L1ZInol7X4K0WoZ3nFE0X0LQ2e /epSUAHuSp/yhYzoUt53HBmsPlH82oCSRpjRBryjc3MfuHvtYHa3NkWhUwumgIDZ Uo59i8ACKohleZBfCbDWDls8CH9BDVaNuqsSp4ZF8n8RAQ+7cceuNqFDS7hh1YME uU6lWAjd7qS3vI6abQtEByAWp7Nng4YNF18j/Dxr7rQXVYP/fJmVt08MTPxLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqTt4ScuDb4DAAw9axOTMnacmirAwHwYDVR0j BBgwFoAUwtWT0cin9w1FEl1L2+V3SSfBTlUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZGIwMTMwZC1jYWEzLTQ3NmYtYWY4MS1iYTcyMjMzMGJlMmMvMC9DMkQ1OTNEMUM4 QTdGNzBENDUxMjVENEJEQkU1Nzc0OTI3QzE0RTU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzJENTkzRDFDOEE3RjcwRDQ1MTI1RDRCREJFNTc3NDkyN0Mx NEU1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmRiMDEzMGQtY2FhMy00NzZmLWFm ODEtYmE3MjIzMzBiZTJjLzAvQzJENTkzRDFDOEE3RjcwRDQ1MTI1RDRCREJFNTc3 NDkyN0MxNEU1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHK3O1fRU8xCbe2P2D+CNAzPkLsDrGEANXYN TBp2GPDcF055QPafYbznnicQEnbBxiY1RXBMP8k3c1qEIgp3fooGQbrqUZAV8i+x 61UwIk0hWa58m3uBnvDzff2ilNScfiiQiaOzQlRHL/qh+GuMXKj91Z6xAn5Cy3ls uYvkVEt+nhlbKareV+1mKo/8fZhpAnfvair4Bl03B9jdeB/jZgdTWoM9r6Z0QptF B0zdukUr+HfysQ1a/qxH2AUwIwejDmHmI4AznJEJOvD+HZzxFD7zcusF/kOKF874 Tws6IUSUETBaiA78Yhyw4WgRy7PF2MGbYNqync4Vv5zpli1QyqE= -----END CERTIFICATE-----Generated at Mon Jun 30 03:58:36 2025 by rpki-client