$ rpki-client -vvf repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.mft File: 2AAFA81414EDCB1032235F2240FE06773F3E6F16.mft (raw, json) Hash identifier: xI6WL5chC2/m/DmLHyHa9UkCuhTZmUw8tvagLwVNA1g= Subject key identifier: 35:B9:79:DE:48:CE:B2:90:60:39:37:30:82:B9:CF:0E:98:F9:AE:F0 Authority key identifier: 2A:AF:A8:14:14:ED:CB:10:32:23:5F:22:40:FE:06:77:3F:3E:6F:16 Certificate issuer: /CN=2AAFA81414EDCB1032235F2240FE06773F3E6F16 Certificate serial: 2BDEC86681823002FD2563B293A372463D67F0AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AAFA81414EDCB1032235F2240FE06773F3E6F16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.mft Manifest number: 0178 Signing time: Sun 20 Jul 2025 15:40:39 +0000 Manifest this update: Sun 20 Jul 2025 15:35:39 +0000 Manifest next update: Wed 23 Jul 2025 21:10:39 +0000 Files and hashes: 1: 3130332e3137372e3231382e302f32342d3234203d3e20313331373639.roa (hash: geET9/YOwUtWNeEIEWu0ZCElrUfY/yNFJvOG/4u0aBI=) 2: 3130332e3137372e3231392e302f32342d3234203d3e20313331373639.roa (hash: fU1tQ4gaeWNhq2F1RA67XHvI+/xcbSrzocYJJCxhg9Q=) 3: 2AAFA81414EDCB1032235F2240FE06773F3E6F16.crl (hash: FyrmvVz5wed6Zh+0QN3Mt24h23CRAoLrC/tQnNMY7Qc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.crl rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AAFA81414EDCB1032235F2240FE06773F3E6F16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 21:10:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:de:c8:66:81:82:30:02:fd:25:63:b2:93:a3:72:46:3d:67:f0:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AAFA81414EDCB1032235F2240FE06773F3E6F16 Validity Not Before: Jul 20 15:35:39 2025 GMT Not After : Jul 23 21:10:39 2025 GMT Subject: CN=35B979DE48CEB2906039373082B9CF0E98F9AEF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bf:ce:dc:83:88:9b:7d:18:df:5f:9a:28:e1: 37:9c:b1:fd:40:16:4d:42:df:b4:8d:a4:c2:19:43: c4:bb:ab:ff:3c:1f:ed:3d:da:87:d0:3a:50:d0:36: 01:67:79:76:4b:55:7b:76:e4:95:83:81:43:c4:a5: 44:4c:9d:58:e1:03:4e:4d:17:5c:36:dd:d7:29:d7: 7f:08:95:05:0e:cd:bd:7a:60:1e:3a:02:02:ac:96: 8f:44:c0:6b:99:c6:db:f6:06:19:67:69:11:83:24: 7a:ea:c1:c4:67:4b:5a:73:03:41:fd:a5:05:9d:54: 7c:8f:ef:7c:94:bf:78:31:f4:a3:31:66:d1:da:c4: 33:ec:22:92:9e:ca:e8:95:a3:9a:d9:38:c2:1b:0e: ec:11:13:4e:4b:9d:7c:1b:9f:ae:f6:82:51:2d:32: 30:64:27:a8:09:58:d5:72:09:02:4d:0c:d5:70:1b: 5c:47:b6:2b:a2:35:8b:10:07:e9:6f:71:74:d6:94: 15:2f:7e:a8:57:a5:b7:ce:9b:8d:7d:8b:7d:5d:b0: 55:4a:8c:fc:cd:c9:41:14:45:1a:9c:9d:27:ec:d4: 20:f0:67:e0:d2:41:dc:fd:5a:ff:91:2d:92:6c:2a: 5b:5f:1f:40:81:b3:f3:04:fc:09:64:9c:6d:6e:22: 47:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B9:79:DE:48:CE:B2:90:60:39:37:30:82:B9:CF:0E:98:F9:AE:F0 X509v3 Authority Key Identifier: keyid:2A:AF:A8:14:14:ED:CB:10:32:23:5F:22:40:FE:06:77:3F:3E:6F:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AAFA81414EDCB1032235F2240FE06773F3E6F16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:fc:5a:de:b4:ee:e4:3b:13:7b:eb:11:2d:0c:97:8b:45:72: 22:13:fd:31:43:c8:f9:c0:c3:f5:b7:72:3c:b5:42:85:1a:f5: ed:cb:96:64:29:2e:8f:ad:89:d8:1f:50:9f:86:d8:c9:7d:2f: 58:89:5c:d6:f9:b9:39:7c:78:48:e1:25:00:03:55:7e:ea:34: bc:94:e0:ed:68:ab:12:48:51:23:8a:57:c3:cc:51:8c:a9:59: 5c:ad:6a:a6:86:de:7c:c9:bb:77:3a:18:52:9d:72:b1:52:fe: 63:50:58:6e:2a:bb:a0:ad:c3:91:03:fe:18:f5:6f:2e:bc:f4: cb:94:48:27:97:eb:cd:5c:86:b8:5d:62:29:e5:e8:b3:58:f5: 84:e5:d9:76:f8:50:41:91:be:ec:80:ef:c7:13:f8:3b:48:44: 13:aa:d4:7a:82:9f:07:76:b9:72:47:b8:68:81:d5:4d:22:2a: d9:7b:27:61:b8:cc:3a:2d:fb:87:fc:87:92:1a:72:46:d4:57: 04:e6:81:48:6b:70:4e:3b:b8:2a:53:b8:2e:24:b4:6c:6e:0f: 1a:28:f1:97:ee:e4:b9:0e:43:fe:d1:e5:d8:11:1d:1f:37:10: ae:c0:e2:4a:d5:bb:a6:14:a2:88:93:df:a4:4c:e7:81:82:39: 80:e0:38:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK97IZoGCMAL9JWOyk6NyRj1n8KwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBRkE4MTQxNEVEQ0IxMDMyMjM1RjIyNDBGRTA2Nzcz RjNFNkYxNjAeFw0yNTA3MjAxNTM1MzlaFw0yNTA3MjMyMTEwMzlaMDMxMTAvBgNV BAMTKDM1Qjk3OURFNDhDRUIyOTA2MDM5MzczMDgyQjlDRjBFOThGOUFFRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVv87cg4ibfRjfX5oo4Tecsf1A Fk1C37SNpMIZQ8S7q/88H+092ofQOlDQNgFneXZLVXt25JWDgUPEpURMnVjhA05N F1w23dcp138IlQUOzb16YB46AgKslo9EwGuZxtv2BhlnaRGDJHrqwcRnS1pzA0H9 pQWdVHyP73yUv3gx9KMxZtHaxDPsIpKeyuiVo5rZOMIbDuwRE05LnXwbn672glEt MjBkJ6gJWNVyCQJNDNVwG1xHtiuiNYsQB+lvcXTWlBUvfqhXpbfOm419i31dsFVK jPzNyUEURRqcnSfs1CDwZ+DSQdz9Wv+RLZJsKltfH0CBs/ME/AlknG1uIkfTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNbl53kjOspBgOTcwgrnPDpj5rvAwHwYDVR0j BBgwFoAUKq+oFBTtyxAyI18iQP4Gdz8+bxYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWI4ZTYwZi1mOTkzLTQ1MzQtOWRhMC1mMjg1YTg2MDNmNjkvMC8yQUFGQTgxNDE0 RURDQjEwMzIyMzVGMjI0MEZFMDY3NzNGM0U2RjE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkFBRkE4MTQxNEVEQ0IxMDMyMjM1RjIyNDBGRTA2NzczRjNF NkYxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2FiOGU2MGYtZjk5My00NTM0LTlk YTAtZjI4NWE4NjAzZjY5LzAvMkFBRkE4MTQxNEVEQ0IxMDMyMjM1RjIyNDBGRTA2 NzczRjNFNkYxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJj8Wt607uQ7E3vrES0Ml4tFciIT/TFDyPnA w/W3cjy1QoUa9e3LlmQpLo+tidgfUJ+G2Ml9L1iJXNb5uTl8eEjhJQADVX7qNLyU 4O1oqxJIUSOKV8PMUYypWVytaqaG3nzJu3c6GFKdcrFS/mNQWG4qu6Ctw5ED/hj1 by689MuUSCeX681chrhdYinl6LNY9YTl2Xb4UEGRvuyA78cT+DtIRBOq1HqCnwd2 uXJHuGiB1U0iKtl7J2G4zDot+4f8h5IackbUVwTmgUhrcE47uCpTuC4ktGxuDxoo 8Zfu5LkOQ/7R5dgRHR83EK7A4krVu6YUooiT36RM54GCOYDgOOc= -----END CERTIFICATE-----Generated at Mon Jul 21 02:05:54 2025 by rpki-client