$ rpki-client -vvf repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft File: 2D0745D26E59440CB71FAFE996834493DA753248.mft (raw, json) Hash identifier: KexKsnm+oz/RWCS2etKTm1ws/aE9/J5DRIn9MbyOMx4= Subject key identifier: AA:B1:52:29:80:A8:99:03:BA:B9:81:31:B7:8A:04:3C:72:7A:33:F8 Authority key identifier: 2D:07:45:D2:6E:59:44:0C:B7:1F:AF:E9:96:83:44:93:DA:75:32:48 Certificate issuer: /CN=2D0745D26E59440CB71FAFE996834493DA753248 Certificate serial: 0D19787FF652C860193C2B6E140A9CF3311BD90D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D0745D26E59440CB71FAFE996834493DA753248.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft Manifest number: 01C5 Signing time: Fri 25 Jul 2025 10:00:49 +0000 Manifest this update: Fri 25 Jul 2025 09:55:49 +0000 Manifest next update: Mon 28 Jul 2025 13:03:49 +0000 Files and hashes: 1: 3130332e37332e3135382e302f32342d3234203d3e203234343239.roa (hash: ujITe6uXtdvP5WOayQADk+Rg7asyYqwio86khyT1Nho=) 2: 3130332e37332e3135392e302f32342d3234203d3e20313338383836.roa (hash: nxYZnXzCnu/G6Di5JhS1WLXdlQHk8fuEdbh3UpU3Jf8=) 3: 2D0745D26E59440CB71FAFE996834493DA753248.crl (hash: JxESX5w6XM5QDidd4LQ37EK06hjOg9K4fyuMbMfODh4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.crl rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D0745D26E59440CB71FAFE996834493DA753248.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 13:03:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:19:78:7f:f6:52:c8:60:19:3c:2b:6e:14:0a:9c:f3:31:1b:d9:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D0745D26E59440CB71FAFE996834493DA753248 Validity Not Before: Jul 25 09:55:49 2025 GMT Not After : Jul 28 13:03:49 2025 GMT Subject: CN=AAB1522980A89903BAB98131B78A043C727A33F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ea:ba:35:be:04:96:1f:c8:90:57:5d:07:e3: d3:96:3d:f9:4a:fd:8a:8b:86:e4:7b:3a:df:02:d8: 50:fb:c9:da:7d:15:02:c4:64:52:7c:1e:16:88:ee: df:a7:0a:21:d8:b1:fc:41:a6:18:4c:b6:83:37:37: ac:53:ce:0e:a1:aa:25:6f:3b:12:70:f7:1b:47:c2: bf:a1:2a:61:15:79:51:f3:15:0b:b4:3c:d5:03:bd: 88:3c:56:45:99:c7:98:a1:c0:b8:09:f4:e3:85:3e: a9:e5:3a:82:f1:a5:3c:91:4f:f9:7a:12:64:b4:84: 55:ce:04:6a:15:cf:b2:74:81:e4:c6:47:cb:d8:08: bd:b1:83:64:cb:21:d1:91:b7:1f:ef:15:2d:4e:76: 83:23:50:7d:7e:0e:5c:33:f5:7c:96:b6:64:57:d9: 98:4f:6c:10:8f:7c:6f:53:14:a8:79:b2:c8:5d:6a: 94:68:d4:cd:23:e4:9e:37:04:e2:c7:ed:94:67:81: 89:d4:e8:7e:b1:1b:ad:95:b6:7f:41:84:ed:dd:de: f9:7e:3a:e0:01:79:f4:42:45:27:65:7d:08:e7:89: 5b:23:01:43:7c:9c:5e:c3:19:a3:b9:2e:56:64:27: 13:8d:ed:c3:c5:bd:59:d9:0a:a9:2b:79:46:96:95: 41:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:B1:52:29:80:A8:99:03:BA:B9:81:31:B7:8A:04:3C:72:7A:33:F8 X509v3 Authority Key Identifier: keyid:2D:07:45:D2:6E:59:44:0C:B7:1F:AF:E9:96:83:44:93:DA:75:32:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D0745D26E59440CB71FAFE996834493DA753248.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:8d:d6:60:22:a1:cd:5b:cd:86:46:96:87:75:a4:b5:c9:ed: e2:00:8f:e9:90:92:cd:db:a5:37:21:b1:5f:a5:d7:49:e0:bb: 39:b9:53:dc:2c:be:89:0b:6b:4c:a0:b0:b8:53:31:f0:2f:08: c9:76:2f:39:8c:4a:bb:38:8b:f9:20:fe:ea:e3:04:d0:b4:bc: 41:52:ef:ab:26:62:25:64:8e:1d:64:ba:df:a3:1c:d4:7a:d3: 97:1d:cc:42:68:41:46:fa:50:55:52:5e:75:8c:33:73:b9:c1: 17:90:1f:46:f7:cc:b2:c9:50:11:f1:26:3d:51:01:b2:20:46: a2:fa:d7:d4:99:9c:b7:9a:a1:89:cd:e3:d7:e2:5a:dd:0d:be: e0:71:fc:ca:68:19:8e:99:2e:f4:60:a1:49:97:88:84:3b:1d: be:b9:90:55:03:87:f9:9e:43:df:bf:e4:5c:96:38:b1:cc:f9: 3b:e0:56:e3:9b:61:19:2f:a2:b6:2c:44:07:96:2d:e6:a9:4c: 2d:86:2f:09:44:21:6d:f9:2a:3b:79:c1:5e:ae:c0:d7:80:bf: 28:36:8f:02:ec:66:af:72:bb:4d:ed:56:b4:a4:36:a9:f8:43: f8:f9:8a:a9:a0:0b:82:21:2d:3e:20:0b:23:64:bc:87:89:5d: 4b:e6:e7:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDRl4f/ZSyGAZPCtuFAqc8zEb2Q0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQwNzQ1RDI2RTU5NDQwQ0I3MUZBRkU5OTY4MzQ0OTNE QTc1MzI0ODAeFw0yNTA3MjUwOTU1NDlaFw0yNTA3MjgxMzAzNDlaMDMxMTAvBgNV BAMTKEFBQjE1MjI5ODBBODk5MDNCQUI5ODEzMUI3OEEwNDNDNzI3QTMzRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc6ro1vgSWH8iQV10H49OWPflK /YqLhuR7Ot8C2FD7ydp9FQLEZFJ8HhaI7t+nCiHYsfxBphhMtoM3N6xTzg6hqiVv OxJw9xtHwr+hKmEVeVHzFQu0PNUDvYg8VkWZx5ihwLgJ9OOFPqnlOoLxpTyRT/l6 EmS0hFXOBGoVz7J0geTGR8vYCL2xg2TLIdGRtx/vFS1OdoMjUH1+Dlwz9XyWtmRX 2ZhPbBCPfG9TFKh5sshdapRo1M0j5J43BOLH7ZRngYnU6H6xG62Vtn9BhO3d3vl+ OuABefRCRSdlfQjniVsjAUN8nF7DGaO5LlZkJxON7cPFvVnZCqkreUaWlUGTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqrFSKYComQO6uYExt4oEPHJ6M/gwHwYDVR0j BBgwFoAULQdF0m5ZRAy3H6/ploNEk9p1MkgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTQwNmNkYi0xNzkxLTQ3OGQtOWQyOC05ZTM3YTZmODA5Y2MvMC8yRDA3NDVEMjZF NTk0NDBDQjcxRkFGRTk5NjgzNDQ5M0RBNzUzMjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQwNzQ1RDI2RTU5NDQwQ0I3MUZBRkU5OTY4MzQ0OTNEQTc1 MzI0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E0MDZjZGItMTc5MS00NzhkLTlk MjgtOWUzN2E2ZjgwOWNjLzAvMkQwNzQ1RDI2RTU5NDQwQ0I3MUZBRkU5OTY4MzQ0 OTNEQTc1MzI0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGyN1mAioc1bzYZGlod1pLXJ7eIAj+mQks3b pTchsV+l10nguzm5U9wsvokLa0ygsLhTMfAvCMl2LzmMSrs4i/kg/urjBNC0vEFS 76smYiVkjh1kut+jHNR605cdzEJoQUb6UFVSXnWMM3O5wReQH0b3zLLJUBHxJj1R AbIgRqL619SZnLeaoYnN49fiWt0NvuBx/MpoGY6ZLvRgoUmXiIQ7Hb65kFUDh/me Q9+/5FyWOLHM+TvgVuObYRkvorYsRAeWLeapTC2GLwlEIW35Kjt5wV6uwNeAvyg2 jwLsZq9yu03tVrSkNqn4Q/j5iqmgC4IhLT4gCyNkvIeJXUvm55E= -----END CERTIFICATE-----Generated at Sat Jul 26 15:06:22 2025 by rpki-client