$ rpki-client -vvf repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft File: 2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft (raw, json) Hash identifier: 307ys0oaxOFSMk+Q/HbQuITOvNFR7W+3S7wU+cm5YR0= Subject key identifier: 24:5B:3E:DC:AF:7D:06:3B:A6:46:AE:D2:0A:C9:27:41:25:A3:CF:11 Authority key identifier: 2A:F5:12:1C:D1:CF:A7:79:8C:C1:DD:77:7B:46:43:69:D1:DE:A6:C1 Certificate issuer: /CN=2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1 Certificate serial: 2C82F360E5057A965A319E72D3884FC4BA8F3FD1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft Manifest number: 0240 Signing time: Mon 21 Jul 2025 15:11:11 +0000 Manifest this update: Mon 21 Jul 2025 15:06:11 +0000 Manifest next update: Fri 25 Jul 2025 00:49:11 +0000 Files and hashes: 1: 2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl (hash: GkdQmWcHOqDjmjsdaWB6vnXRyCNB0nuaY6UeCNTNaZM=) 2: 3130332e3134382e32342e302f32332d3234203d3e20313339393831.roa (hash: 6FLbYuy1S5qOt7tY0dfAZpELgfONO6cx6swxFm3099E=) 3: 323430353a633863303a3a2f33322d3332203d3e20313339393831.roa (hash: xAQ8nY4YiCbyThm1ahzRI7qCPhGk2b5venOiA8cHRk4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 00:49:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:82:f3:60:e5:05:7a:96:5a:31:9e:72:d3:88:4f:c4:ba:8f:3f:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1 Validity Not Before: Jul 21 15:06:11 2025 GMT Not After : Jul 25 00:49:11 2025 GMT Subject: CN=245B3EDCAF7D063BA646AED20AC9274125A3CF11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:42:59:c8:c5:c8:b7:aa:27:53:1d:4d:6a:67: e4:85:89:11:cd:9c:e2:d1:86:e0:4b:46:93:b7:d3: 40:55:25:60:9c:31:08:ef:50:cd:c5:77:f8:f9:78: e9:40:77:41:a3:1c:51:d0:81:4f:3a:ca:62:e7:06: b6:e3:cd:de:6e:f4:b6:07:d1:53:0d:53:90:20:ea: ec:60:e4:2d:a8:4e:9e:cd:89:c8:e3:13:4a:80:60: b6:15:f9:c5:72:49:e9:05:ce:78:cb:3a:b2:01:e6: ed:22:a4:63:53:86:2d:eb:6e:f6:b2:6c:26:ff:c7: 7d:26:60:0e:2c:21:98:77:56:16:61:86:e3:1f:ce: 9c:d8:52:4f:2a:1b:19:2e:a4:f9:c8:57:dd:e6:df: 20:02:1c:f2:31:eb:70:11:86:c6:1f:41:dc:99:2c: ba:67:20:8d:e1:58:f2:2b:06:fe:7d:d6:43:0b:12: eb:c8:1e:2a:d2:6e:aa:34:d7:9e:4b:28:9c:b0:44: 30:9d:c7:0e:83:d5:ba:fc:94:5f:44:69:a8:dc:38: 62:99:91:39:fa:3c:39:1f:3a:c1:16:36:af:63:88: 48:12:67:30:54:78:81:28:ee:92:ad:85:24:0b:c0: b7:3f:3d:31:b9:2c:47:96:9e:31:f7:9f:75:f5:0a: 94:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:5B:3E:DC:AF:7D:06:3B:A6:46:AE:D2:0A:C9:27:41:25:A3:CF:11 X509v3 Authority Key Identifier: keyid:2A:F5:12:1C:D1:CF:A7:79:8C:C1:DD:77:7B:46:43:69:D1:DE:A6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:4f:79:a0:d8:56:00:7a:2b:19:ed:3f:6d:19:a8:ae:cb:48: 32:5e:41:3b:66:c8:a2:84:49:3e:a7:49:42:7e:36:f0:30:1e: 22:e0:cd:1d:d8:ee:46:eb:e1:1e:a5:ff:14:7f:9a:02:8d:ec: 58:1c:81:82:28:a8:f9:c0:c4:28:3d:b0:c7:73:5a:e2:72:1a: ec:47:7f:f4:3f:ad:ef:c1:15:d3:5c:50:a0:cf:f2:0d:48:6e: c3:39:8f:05:0f:05:3e:94:5b:e0:7d:1b:88:d0:9b:2a:bc:0b: 9f:4c:a5:51:84:05:94:4c:71:bd:ea:82:98:70:3e:a7:08:aa: 21:20:95:5c:fd:1e:35:c5:19:0e:e3:ee:87:4e:4f:9c:3f:30: 70:7e:e2:4e:0a:ce:e6:ef:a1:48:8c:86:8c:19:94:d9:20:dc: 68:28:21:66:1a:13:67:79:a8:69:df:7f:1c:49:eb:8f:2a:6d: 1e:55:bc:a1:2b:2a:d4:f6:cc:0b:e9:a1:2f:25:88:86:5d:06: 4b:b0:d8:d5:e3:30:29:a0:f7:6f:c2:c1:37:d1:f1:e4:8c:08: 4c:a8:d8:37:69:e3:2f:dd:22:3e:2e:45:87:83:43:0f:c4:40: 22:56:44:1d:16:ef:e5:78:98:f0:42:96:86:67:d8:24:7c:e8: 78:22:98:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULILzYOUFepZaMZ5y04hPxLqPP9EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQzNjlE MURFQTZDMTAeFw0yNTA3MjExNTA2MTFaFw0yNTA3MjUwMDQ5MTFaMDMxMTAvBgNV BAMTKDI0NUIzRURDQUY3RDA2M0JBNjQ2QUVEMjBBQzkyNzQxMjVBM0NGMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrQlnIxci3qidTHU1qZ+SFiRHN nOLRhuBLRpO300BVJWCcMQjvUM3Fd/j5eOlAd0GjHFHQgU86ymLnBrbjzd5u9LYH 0VMNU5Ag6uxg5C2oTp7NicjjE0qAYLYV+cVySekFznjLOrIB5u0ipGNThi3rbvay bCb/x30mYA4sIZh3VhZhhuMfzpzYUk8qGxkupPnIV93m3yACHPIx63ARhsYfQdyZ LLpnII3hWPIrBv591kMLEuvIHirSbqo0155LKJywRDCdxw6D1br8lF9EaajcOGKZ kTn6PDkfOsEWNq9jiEgSZzBUeIEo7pKthSQLwLc/PTG5LEeWnjH3n3X1CpRpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJFs+3K99BjumRq7SCsknQSWjzxEwHwYDVR0j BBgwFoAUKvUSHNHPp3mMwd13e0ZDadHepsEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OTJlMDdmOC0xYTQ4LTQzOTEtYTZhNS04ZTRlMzljODU4OGEvMC8yQUY1MTIxQ0Qx Q0ZBNzc5OENDMURENzc3QjQ2NDM2OUQxREVBNkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQzNjlEMURF QTZDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTkyZTA3ZjgtMWE0OC00MzkxLWE2 YTUtOGU0ZTM5Yzg1ODhhLzAvMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQz NjlEMURFQTZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAdPeaDYVgB6KxntP20ZqK7LSDJeQTtmyKKE ST6nSUJ+NvAwHiLgzR3Y7kbr4R6l/xR/mgKN7FgcgYIoqPnAxCg9sMdzWuJyGuxH f/Q/re/BFdNcUKDP8g1IbsM5jwUPBT6UW+B9G4jQmyq8C59MpVGEBZRMcb3qgphw PqcIqiEglVz9HjXFGQ7j7odOT5w/MHB+4k4KzubvoUiMhowZlNkg3GgoIWYaE2d5 qGnffxxJ648qbR5VvKErKtT2zAvpoS8liIZdBkuw2NXjMCmg92/CwTfR8eSMCEyo 2Ddp4y/dIj4uRYeDQw/EQCJWRB0W7+V4mPBCloZn2CR86HgimCU= -----END CERTIFICATE-----Generated at Wed Jul 23 12:09:53 2025 by rpki-client