$ rpki-client -vvf repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft File: 2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft (raw, json) Hash identifier: A1xpJ51yM7QdpG96wDIE+Kc9S4hkAQNB/GhP4p69ZsQ= Subject key identifier: BC:3C:D8:2E:E7:C3:74:32:EB:6E:1A:92:9E:C1:02:C9:58:21:2C:94 Authority key identifier: 2D:51:7D:C0:24:CE:FC:FA:F8:0C:F7:FD:39:22:46:89:4E:94:F1:2F Certificate issuer: /CN=2D517DC024CEFCFAF80CF7FD392246894E94F12F Certificate serial: 4A29DE4BEF441D7840FD4DAF59706FB6007864DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft Manifest number: DC Signing time: Sat 19 Jul 2025 17:30:50 +0000 Manifest this update: Sat 19 Jul 2025 17:25:50 +0000 Manifest next update: Tue 22 Jul 2025 19:29:50 +0000 Files and hashes: 1: 3130332e3135362e3131302e302f32342d3234203d3e20313431303839.roa (hash: oX2rRL4yj7u4AFId0yrPwmCzP4drZZYO3pu9upGhNCY=) 2: 2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl (hash: 6IJKpuUWkkltAL49lOytsn+Z+i+fE3wqOF7r7O8P/C8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 19:29:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:29:de:4b:ef:44:1d:78:40:fd:4d:af:59:70:6f:b6:00:78:64:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D517DC024CEFCFAF80CF7FD392246894E94F12F Validity Not Before: Jul 19 17:25:50 2025 GMT Not After : Jul 22 19:29:50 2025 GMT Subject: CN=BC3CD82EE7C37432EB6E1A929EC102C958212C94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:39:6d:f4:e1:e3:5a:0d:39:9f:5f:62:89:40: d9:b9:49:c2:fc:41:5b:26:74:39:3b:02:5e:ce:c9: 47:76:40:f6:bf:c2:ad:45:41:6f:a7:6c:e4:86:71: e9:90:31:41:de:2d:80:38:71:d7:59:92:a2:b2:86: 6c:e6:0b:85:f8:07:4c:81:e4:3a:4f:da:8e:31:f0: 04:d9:84:34:d0:c8:39:c3:19:3a:a4:41:e0:fc:31: f8:d0:c8:b2:36:48:79:e2:f3:e8:32:19:19:37:dc: 2a:82:70:b5:45:3e:46:e2:21:13:04:97:75:fa:c9: 4a:67:e9:bb:f3:a3:bb:74:fb:f2:df:ec:2e:8d:2b: 23:5e:63:d1:c2:c2:a0:d0:2d:9e:64:51:4a:5a:fe: 90:d3:35:0d:1b:f0:c1:26:f4:ab:28:8e:3d:e3:20: 98:7d:38:e6:00:13:f0:93:d3:3b:08:00:9a:1e:57: 54:3e:03:df:a8:57:c3:c1:12:ab:7b:4c:66:19:12: 4b:00:27:c6:fa:9a:76:56:96:d7:14:f5:d8:49:e1: c1:3f:9e:3d:13:17:e4:21:cb:27:05:80:6b:f0:04: e0:b5:71:df:4c:3a:4c:e2:6d:07:c5:78:ef:3b:47: 02:0c:df:20:da:94:93:7f:7e:2d:3a:67:a2:68:ef: 39:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:3C:D8:2E:E7:C3:74:32:EB:6E:1A:92:9E:C1:02:C9:58:21:2C:94 X509v3 Authority Key Identifier: keyid:2D:51:7D:C0:24:CE:FC:FA:F8:0C:F7:FD:39:22:46:89:4E:94:F1:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:56:6c:97:92:45:df:b8:4e:75:8c:2e:c4:da:03:5c:33:f5: 7d:e9:07:62:1c:80:a7:50:0b:30:9f:a8:0a:4c:dd:8f:ac:30: cb:7d:4e:21:ef:7c:ee:00:4a:d1:fd:8c:6f:b0:b6:c0:c3:47: 94:80:43:c3:5c:97:af:49:bf:5e:26:80:c0:1b:9b:c2:ec:f4: b0:bf:e2:42:e5:b3:bf:5d:0c:26:02:1f:96:9c:3f:b3:0c:10: 61:bd:ca:3b:cd:33:5c:aa:a7:4f:bb:08:4b:3d:c8:00:21:e2: 72:c9:56:b3:84:b2:f4:52:69:2d:71:6a:69:5a:ba:49:f5:9f: d4:27:c9:8e:26:1a:89:c1:45:8f:2c:77:b3:56:e4:38:df:76: bd:c3:1f:ea:c6:e3:e8:f7:71:27:4d:68:3a:88:59:60:ca:9e: 0a:46:76:fb:20:11:7d:df:33:18:24:66:38:45:b8:22:07:da: 05:a3:56:77:70:23:f0:03:c2:4b:98:c8:b4:b4:db:f3:91:15: 36:e9:0f:b3:65:b7:83:74:c1:49:2e:05:9a:4e:44:53:21:9c: 6c:fa:a3:f7:83:62:35:e7:f9:e6:c3:7a:fa:1a:7d:f4:62:94: c3:b5:fe:33:60:22:5d:98:5a:ca:17:5b:2d:84:26:fd:86:e9: cf:f0:13:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSineS+9EHXhA/U2vWXBvtgB4ZNowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2ODk0 RTk0RjEyRjAeFw0yNTA3MTkxNzI1NTBaFw0yNTA3MjIxOTI5NTBaMDMxMTAvBgNV BAMTKEJDM0NEODJFRTdDMzc0MzJFQjZFMUE5MjlFQzEwMkM5NTgyMTJDOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLOW304eNaDTmfX2KJQNm5ScL8 QVsmdDk7Al7OyUd2QPa/wq1FQW+nbOSGcemQMUHeLYA4cddZkqKyhmzmC4X4B0yB 5DpP2o4x8ATZhDTQyDnDGTqkQeD8MfjQyLI2SHni8+gyGRk33CqCcLVFPkbiIRME l3X6yUpn6bvzo7t0+/Lf7C6NKyNeY9HCwqDQLZ5kUUpa/pDTNQ0b8MEm9Ksojj3j IJh9OOYAE/CT0zsIAJoeV1Q+A9+oV8PBEqt7TGYZEksAJ8b6mnZWltcU9dhJ4cE/ nj0TF+QhyycFgGvwBOC1cd9MOkzibQfFeO87RwIM3yDalJN/fi06Z6Jo7znTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvDzYLufDdDLrbhqSnsECyVghLJQwHwYDVR0j BBgwFoAULVF9wCTO/Pr4DPf9OSJGiU6U8S8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDMzYTFjNi0wZjcwLTRjOTgtOTZiMC1jYWI1ODEyNmFiOTQvMC8yRDUxN0RDMDI0 Q0VGQ0ZBRjgwQ0Y3RkQzOTIyNDY4OTRFOTRGMTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2ODk0RTk0 RjEyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQzM2ExYzYtMGY3MC00Yzk4LTk2 YjAtY2FiNTgxMjZhYjk0LzAvMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2 ODk0RTk0RjEyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFxWbJeSRd+4TnWMLsTaA1wz9X3pB2IcgKdQ CzCfqApM3Y+sMMt9TiHvfO4AStH9jG+wtsDDR5SAQ8Ncl69Jv14mgMAbm8Ls9LC/ 4kLls79dDCYCH5acP7MMEGG9yjvNM1yqp0+7CEs9yAAh4nLJVrOEsvRSaS1xamla ukn1n9QnyY4mGonBRY8sd7NW5Djfdr3DH+rG4+j3cSdNaDqIWWDKngpGdvsgEX3f MxgkZjhFuCIH2gWjVndwI/ADwkuYyLS02/ORFTbpD7Nlt4N0wUkuBZpORFMhnGz6 o/eDYjXn+ebDevoaffRilMO1/jNgIl2YWsoXWy2EJv2G6c/wE2A= -----END CERTIFICATE-----Generated at Sun Jul 20 21:27:22 2025 by rpki-client