$ rpki-client -vvf repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft File: 2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft (raw, json) Hash identifier: BfgfBORHaRBN0q8HkUl2WsKPPDIarBb1MwUYWAVVpnQ= Subject key identifier: 0B:5A:9B:9B:E0:F1:92:99:7F:11:4B:F1:60:2E:C5:B7:39:2B:55:FA Authority key identifier: 2A:27:80:23:3B:F2:E0:6D:53:3E:C6:B0:5F:50:02:06:FB:B0:6D:6D Certificate issuer: /CN=2A2780233BF2E06D533EC6B05F500206FBB06D6D Certificate serial: 224A7A4BCE1F1D59C8A1005D80E5658EDC5873D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2780233BF2E06D533EC6B05F500206FBB06D6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft Manifest number: 0195 Signing time: Sun 20 Jul 2025 21:40:41 +0000 Manifest this update: Sun 20 Jul 2025 21:35:41 +0000 Manifest next update: Thu 24 Jul 2025 06:50:41 +0000 Files and hashes: 1: 2A2780233BF2E06D533EC6B05F500206FBB06D6D.crl (hash: 9ZO2Y4o18fyCHWKL2+rgFOxR2IdK8EPLMwBsPImTOW8=) 2: 3130332e3134312e3137302e302f32342d3234203d3e20313530353139.roa (hash: fbcGL1NLXeGrNrcBk/cYo3ucVVcH9bT5MeT1X/6RPlA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.crl rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2780233BF2E06D533EC6B05F500206FBB06D6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:4a:7a:4b:ce:1f:1d:59:c8:a1:00:5d:80:e5:65:8e:dc:58:73:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2780233BF2E06D533EC6B05F500206FBB06D6D Validity Not Before: Jul 20 21:35:41 2025 GMT Not After : Jul 24 06:50:41 2025 GMT Subject: CN=0B5A9B9BE0F192997F114BF1602EC5B7392B55FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:6a:3c:d5:17:43:4b:d7:04:49:27:41:d3:09: 77:07:6c:a8:bc:7a:3d:9e:68:7b:4a:7b:ff:fc:d7: 61:68:ff:b5:ff:3b:9c:43:f6:6f:ee:39:51:44:99: ce:e8:7a:32:7f:a0:b0:0f:32:9f:b3:d2:ba:9b:aa: c5:31:83:6a:50:cd:22:9d:c9:46:f2:0e:14:57:f6: 8b:6d:48:cc:a4:4f:50:16:c5:47:42:fc:85:86:da: ef:07:2a:9e:a5:cd:26:69:c9:6c:bd:02:88:0b:42: b1:fd:83:30:c5:36:bc:b7:ac:41:1f:cb:d8:d5:30: 4f:07:e6:bf:19:b6:52:f1:8e:34:83:e2:73:55:26: 14:8d:4c:8c:43:15:25:9b:a5:7e:1e:7a:8e:56:45: 16:20:80:bb:94:45:a5:ab:ba:6b:11:f8:49:e2:8b: 00:d2:b1:dc:51:24:65:cc:79:fa:b1:c9:63:d4:65: 66:48:4e:87:24:eb:d6:0a:6a:c3:94:10:b5:3f:ce: 85:85:e3:3f:1e:39:45:0b:2a:ff:cd:40:72:ea:b0: 24:6a:c3:04:0c:8d:c2:5b:1f:78:b3:6e:c4:3c:92: d7:44:da:2b:78:1c:01:ac:21:21:03:75:fc:e4:3c: 10:c4:64:11:82:e2:70:ab:40:1a:1e:b8:80:3a:25: bd:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:5A:9B:9B:E0:F1:92:99:7F:11:4B:F1:60:2E:C5:B7:39:2B:55:FA X509v3 Authority Key Identifier: keyid:2A:27:80:23:3B:F2:E0:6D:53:3E:C6:B0:5F:50:02:06:FB:B0:6D:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2780233BF2E06D533EC6B05F500206FBB06D6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:a4:4c:a1:b3:37:06:b8:74:38:f1:09:04:03:11:b3:46:87: 67:d4:17:e3:60:f1:ef:16:0f:b5:00:0c:5f:f5:7e:fc:3c:ed: e7:e2:53:23:82:c4:73:21:fb:d9:0d:7e:ec:51:db:20:06:15: b7:25:23:21:02:22:5e:42:a9:08:9e:16:fa:d7:ac:36:46:34: b5:5c:fe:7b:de:2c:3d:dc:3a:11:5c:b4:43:15:36:b3:1f:a0: 39:72:a2:95:08:fe:78:e6:2b:9e:51:11:70:7a:b0:04:fb:ad: 8a:71:60:62:af:bc:90:47:08:a7:17:bf:ff:44:cc:75:a7:65: 4c:41:57:fa:f9:2d:7b:6e:dd:20:36:54:a7:88:7b:93:8e:da: 7e:ec:9f:d4:9c:6c:ed:f9:e6:f7:0d:02:99:04:30:c6:b8:7f: 4b:ac:29:8d:23:4e:03:71:90:e2:a0:57:a8:0a:9e:3a:b6:2c: fe:fc:53:5b:b9:c3:86:b6:46:bb:a7:62:82:35:3c:ea:89:ee: 4e:fa:da:76:4e:8b:dc:33:94:39:e4:fd:92:00:04:af:5e:25: 97:bd:e1:7d:82:d2:94:d7:c3:21:fe:34:06:b1:80:63:46:80: 0a:73:b5:22:58:76:60:28:6c:e9:d0:0d:13:c2:14:14:42:2b: 9e:d9:94:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIkp6S84fHVnIoQBdgOVljtxYc9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyNzgwMjMzQkYyRTA2RDUzM0VDNkIwNUY1MDAyMDZG QkIwNkQ2RDAeFw0yNTA3MjAyMTM1NDFaFw0yNTA3MjQwNjUwNDFaMDMxMTAvBgNV BAMTKDBCNUE5QjlCRTBGMTkyOTk3RjExNEJGMTYwMkVDNUI3MzkyQjU1RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2ajzVF0NL1wRJJ0HTCXcHbKi8 ej2eaHtKe//812Fo/7X/O5xD9m/uOVFEmc7oejJ/oLAPMp+z0rqbqsUxg2pQzSKd yUbyDhRX9ottSMykT1AWxUdC/IWG2u8HKp6lzSZpyWy9AogLQrH9gzDFNry3rEEf y9jVME8H5r8ZtlLxjjSD4nNVJhSNTIxDFSWbpX4eeo5WRRYggLuURaWrumsR+Eni iwDSsdxRJGXMefqxyWPUZWZITock69YKasOUELU/zoWF4z8eOUULKv/NQHLqsCRq wwQMjcJbH3izbsQ8ktdE2it4HAGsISEDdfzkPBDEZBGC4nCrQBoeuIA6Jb15AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC1qbm+Dxkpl/EUvxYC7FtzkrVfowHwYDVR0j BBgwFoAUKieAIzvy4G1TPsawX1ACBvuwbW0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzZmOGMwYS1lMDNmLTQxNDAtYmExNi04MzNhYzIyNDFhZmIvMC8yQTI3ODAyMzNC RjJFMDZENTMzRUM2QjA1RjUwMDIwNkZCQjA2RDZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkEyNzgwMjMzQkYyRTA2RDUzM0VDNkIwNUY1MDAyMDZGQkIw NkQ2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M2ZjhjMGEtZTAzZi00MTQwLWJh MTYtODMzYWMyMjQxYWZiLzAvMkEyNzgwMjMzQkYyRTA2RDUzM0VDNkIwNUY1MDAy MDZGQkIwNkQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABykTKGzNwa4dDjxCQQDEbNGh2fUF+Ng8e8W D7UADF/1fvw87efiUyOCxHMh+9kNfuxR2yAGFbclIyECIl5CqQieFvrXrDZGNLVc /nveLD3cOhFctEMVNrMfoDlyopUI/njmK55REXB6sAT7rYpxYGKvvJBHCKcXv/9E zHWnZUxBV/r5LXtu3SA2VKeIe5OO2n7sn9ScbO355vcNApkEMMa4f0usKY0jTgNx kOKgV6gKnjq2LP78U1u5w4a2RrunYoI1POqJ7k762nZOi9wzlDnk/ZIABK9eJZe9 4X2C0pTXwyH+NAaxgGNGgApztSJYdmAobOnQDRPCFBRCK57ZlFs= -----END CERTIFICATE-----Generated at Mon Jul 21 01:37:26 2025 by rpki-client