$ rpki-client -vvf repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft File: 2FB994CD1282292E6D2907FCECD7F9E472F49985.mft (raw, json) Hash identifier: O8BRVH0d5GP/9DVjQ41pj/aeU02XvG7YzV7YXvlQzyk= Subject key identifier: 93:3A:53:52:20:F5:21:58:CA:34:11:30:0A:E9:CD:A6:E4:DE:5A:4C Authority key identifier: 2F:B9:94:CD:12:82:29:2E:6D:29:07:FC:EC:D7:F9:E4:72:F4:99:85 Certificate issuer: /CN=2FB994CD1282292E6D2907FCECD7F9E472F49985 Certificate serial: 3E5D13D3EEDBC1EA120D2DD477D09005DA1911B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft Manifest number: 04EF Signing time: Sat 19 Jul 2025 21:20:45 +0000 Manifest this update: Sat 19 Jul 2025 21:15:45 +0000 Manifest next update: Wed 23 Jul 2025 07:11:45 +0000 Files and hashes: 1: 3130332e3131302e31302e302f32342d3234203d3e20313331373137.roa (hash: Gcf2m6wvxledkwR1qQNWFpogqDCtyqIrxx7PKSay3xY=) 2: 3130332e3131302e31312e302f32342d3234203d3e20313331373137.roa (hash: gVdR11t5fw1Z3vuhsrv3YNa5sWCtSlARbhSmJWiHvO4=) 3: 3130332e3131302e382e302f32322d3232203d3e20313331373137.roa (hash: aTbEH2RiVh4K07qhKRGxV184e2sOPaIMjUhuR94+WEU=) 4: 3130332e3131302e382e302f32342d3234203d3e20313331373137.roa (hash: MJzwkeAeDIIHbvzCyYoNIOj+cbb5++mSci1EoFNlAV0=) 5: 3130332e3131302e392e302f32342d3234203d3e20313331373137.roa (hash: E2uu1x+I6SmKuq0aJgDdyKaobr6kyHxRsZ9a/8jvA7A=) 6: 2FB994CD1282292E6D2907FCECD7F9E472F49985.crl (hash: 1oV/mJiRXPfkt1yvknUqdjbnC5Rxh8F45HinISPDJ7I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.crl rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 07:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:5d:13:d3:ee:db:c1:ea:12:0d:2d:d4:77:d0:90:05:da:19:11:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FB994CD1282292E6D2907FCECD7F9E472F49985 Validity Not Before: Jul 19 21:15:45 2025 GMT Not After : Jul 23 07:11:45 2025 GMT Subject: CN=933A535220F52158CA3411300AE9CDA6E4DE5A4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d0:4e:a5:79:3c:da:06:03:77:01:34:54:dd: 8d:6c:c1:90:da:2a:57:6f:c8:11:6f:5f:02:fe:4c: 10:3e:63:2c:e2:65:7f:4e:0d:18:15:0a:27:29:6e: 74:68:a7:02:8f:f6:2d:5e:31:60:19:9e:1c:e5:1b: a7:5e:73:c6:5c:65:95:86:57:71:db:98:80:b1:24: ef:b6:b4:1b:df:f4:70:53:f0:3b:5e:62:e6:ed:1c: df:dd:89:7b:7e:d6:1a:9b:3b:db:da:2f:4f:a0:e7: db:19:5f:f3:0d:4b:6e:e4:e7:97:ed:c3:ee:8e:86: f7:48:6e:bc:8b:50:9e:e4:6e:5b:0b:85:15:d9:37: 65:f7:ac:f6:05:13:1c:e2:c3:ca:5f:4a:05:8f:f5: 4a:33:2b:0b:06:d6:26:c3:d6:bb:10:d1:6e:f1:a4: c2:32:07:05:35:27:2c:7c:ba:43:00:eb:b2:ab:b9: 60:c3:44:89:e5:95:fd:48:ba:ed:0a:34:78:f9:c0: 3a:6f:46:f3:bb:80:de:2a:6e:d2:1d:76:0e:6a:36: 4c:e6:e2:bc:c3:4e:d8:10:41:7e:2c:57:53:eb:2d: 49:2e:95:d7:a2:2c:db:c2:3f:fc:cb:cd:e4:6c:66: c5:c8:1b:c0:b4:fe:6f:dd:d9:cb:f0:38:a4:b2:ed: 03:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:3A:53:52:20:F5:21:58:CA:34:11:30:0A:E9:CD:A6:E4:DE:5A:4C X509v3 Authority Key Identifier: keyid:2F:B9:94:CD:12:82:29:2E:6D:29:07:FC:EC:D7:F9:E4:72:F4:99:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:21:be:4b:cb:da:06:9f:22:b3:bb:a8:79:d9:bf:86:bb:ca: d8:30:90:0e:e2:37:3d:5a:71:8c:97:a7:40:02:03:6c:2d:5f: c6:0e:74:3a:fd:22:cd:35:49:56:bd:20:f9:92:2c:e5:d1:88: 95:d8:d7:19:61:6a:fb:f7:a4:5f:49:34:ba:56:af:09:85:87: 93:02:8d:79:65:2a:29:b6:da:17:f4:ae:71:91:7b:b3:38:28: d4:f9:06:83:ff:bb:34:e3:18:e9:45:28:04:a3:58:17:be:5a: f3:dd:dc:b2:f1:77:6f:e7:ad:c5:a4:71:6f:d7:8c:55:83:e8: 9b:a4:db:f8:e3:a4:aa:af:17:30:7b:b8:dc:a2:61:6f:0d:b3: 5a:64:df:e3:a4:4f:eb:d1:3b:11:9d:d5:16:9a:25:1d:99:67: 9e:15:ba:94:a0:21:48:72:1c:23:96:55:20:8b:68:84:69:10: 5a:99:fe:fb:dd:d3:17:2e:5a:7c:a0:87:2f:70:31:9f:43:1a: 28:78:0c:45:33:39:45:b0:94:77:cd:7b:97:26:f4:d1:c4:f0: 73:aa:21:b4:52:1b:18:10:25:72:0e:55:ea:37:fd:93:74:41: 42:84:a0:35:54:a5:25:40:0d:c7:22:82:4c:d0:76:b0:bb:23: ca:a3:25:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPl0T0+7bweoSDS3Ud9CQBdoZEbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZCOTk0Q0QxMjgyMjkyRTZEMjkwN0ZDRUNEN0Y5RTQ3 MkY0OTk4NTAeFw0yNTA3MTkyMTE1NDVaFw0yNTA3MjMwNzExNDVaMDMxMTAvBgNV BAMTKDkzM0E1MzUyMjBGNTIxNThDQTM0MTEzMDBBRTlDREE2RTRERTVBNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD0E6leTzaBgN3ATRU3Y1swZDa KldvyBFvXwL+TBA+YyziZX9ODRgVCicpbnRopwKP9i1eMWAZnhzlG6dec8ZcZZWG V3HbmICxJO+2tBvf9HBT8DteYubtHN/diXt+1hqbO9vaL0+g59sZX/MNS27k55ft w+6OhvdIbryLUJ7kblsLhRXZN2X3rPYFExziw8pfSgWP9UozKwsG1ibD1rsQ0W7x pMIyBwU1Jyx8ukMA67KruWDDRInllf1Iuu0KNHj5wDpvRvO7gN4qbtIddg5qNkzm 4rzDTtgQQX4sV1PrLUkuldeiLNvCP/zLzeRsZsXIG8C0/m/d2cvwOKSy7QN7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkzpTUiD1IVjKNBEwCunNpuTeWkwwHwYDVR0j BBgwFoAUL7mUzRKCKS5tKQf87Nf55HL0mYUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZGE3NzNkZC05NWFhLTQ0N2UtOTkzZC00Y2Y0YTEyNzNiMzEvMC8yRkI5OTRDRDEy ODIyOTJFNkQyOTA3RkNFQ0Q3RjlFNDcyRjQ5OTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkZCOTk0Q0QxMjgyMjkyRTZEMjkwN0ZDRUNEN0Y5RTQ3MkY0 OTk4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmRhNzczZGQtOTVhYS00NDdlLTk5 M2QtNGNmNGExMjczYjMxLzAvMkZCOTk0Q0QxMjgyMjkyRTZEMjkwN0ZDRUNEN0Y5 RTQ3MkY0OTk4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA4hvkvL2gafIrO7qHnZv4a7ytgwkA7iNz1a cYyXp0ACA2wtX8YOdDr9Is01SVa9IPmSLOXRiJXY1xlhavv3pF9JNLpWrwmFh5MC jXllKim22hf0rnGRe7M4KNT5BoP/uzTjGOlFKASjWBe+WvPd3LLxd2/nrcWkcW/X jFWD6Juk2/jjpKqvFzB7uNyiYW8Ns1pk3+OkT+vROxGd1RaaJR2ZZ54VupSgIUhy HCOWVSCLaIRpEFqZ/vvd0xcuWnyghy9wMZ9DGih4DEUzOUWwlHfNe5cm9NHE8HOq IbRSGxgQJXIOVeo3/ZN0QUKEoDVUpSVADccigkzQdrC7I8qjJXM= -----END CERTIFICATE-----Generated at Mon Jul 21 18:09:15 2025 by rpki-client