$ rpki-client -vvf repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft File: 2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft (raw, json) Hash identifier: 2YNQMUluJwyxgdIB3k46N0gEgdwTpomS3aUdlHCK038= Subject key identifier: FA:64:7F:60:77:93:D8:C8:5B:E4:FE:CA:9F:61:55:88:3A:4B:09:68 Authority key identifier: 2A:A6:E6:5B:86:E4:42:3A:EC:7D:02:D8:5B:43:BA:00:80:12:D2:9D Certificate issuer: /CN=2AA6E65B86E4423AEC7D02D85B43BA008012D29D Certificate serial: 2300BDA814D80C4DA7FE0F8855FF286E8ADB2CDF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft Manifest number: 0195 Signing time: Mon 21 Jul 2025 04:31:03 +0000 Manifest this update: Mon 21 Jul 2025 04:26:03 +0000 Manifest next update: Thu 24 Jul 2025 07:26:03 +0000 Files and hashes: 1: 2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl (hash: 24Upl6tj1AbJGDVNt2RSfIlvC2EgVPyk/T3a3sJQDJY=) 2: 3130332e3132392e34382e302f32332d3234203d3e20313335343738.roa (hash: nuG2thm0oiOwKnakW1lHLkXwPbpo6Y7ruJlmvamdekA=) 3: 3130332e3132392e35302e302f32332d3234203d3e20313335343738.roa (hash: RsQS9pXwEYaCDD5cA+PCEhqN7yNzqnOa8ujUnr88Njo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 06:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:00:bd:a8:14:d8:0c:4d:a7:fe:0f:88:55:ff:28:6e:8a:db:2c:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AA6E65B86E4423AEC7D02D85B43BA008012D29D Validity Not Before: Jul 21 04:26:03 2025 GMT Not After : Jul 24 07:26:03 2025 GMT Subject: CN=FA647F607793D8C85BE4FECA9F6155883A4B0968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4d:3b:4b:2f:28:b6:16:74:50:47:78:e9:3f: ef:e6:13:a8:15:b0:8e:3d:66:79:4c:36:c6:c4:e7: b7:47:04:58:75:01:c2:f1:b4:89:93:07:bc:28:6c: 55:d3:2e:81:51:33:b2:da:6f:5f:69:f7:8d:65:e9: 56:55:46:55:42:62:46:91:e7:f1:99:2f:bb:24:51: 66:9c:10:f3:56:21:10:37:76:10:28:55:b4:8e:66: b0:73:ef:5a:9b:ad:11:17:32:e3:c2:a8:57:dd:82: 01:25:38:ca:78:3f:28:4e:a9:15:8c:02:71:cd:c1: 40:65:68:45:29:cd:aa:d2:58:1c:18:17:14:c4:b0: 74:e1:bd:65:50:50:84:36:ae:84:01:be:36:b5:d7: bd:ee:8d:91:ab:57:49:45:2c:f6:44:24:cd:65:e4: 9b:5d:40:97:79:8a:55:92:12:5a:12:c2:a6:90:fe: f2:1b:a8:03:dc:b3:d0:42:30:75:4e:b7:28:d5:99: 29:3a:cd:1e:c5:f5:05:70:0f:31:9d:bb:2f:ab:81: e8:6a:4f:6a:05:7b:b8:3b:40:3c:2f:de:3d:97:c0: 55:11:aa:f0:50:ad:a3:9d:db:f1:1e:52:e8:62:49: 55:9d:1f:e6:cc:8e:ad:53:7f:8c:a1:f3:0f:11:a4: dc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:64:7F:60:77:93:D8:C8:5B:E4:FE:CA:9F:61:55:88:3A:4B:09:68 X509v3 Authority Key Identifier: keyid:2A:A6:E6:5B:86:E4:42:3A:EC:7D:02:D8:5B:43:BA:00:80:12:D2:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:d4:6b:3a:b1:53:95:27:46:ff:27:e6:8f:aa:25:38:3b:95: 35:a7:3f:91:5e:30:d5:d5:cb:94:5d:cc:2f:21:93:8a:d9:c4: 1e:61:6b:bc:42:61:4d:0f:4d:84:39:8a:bc:ed:88:b7:2c:48: 57:b3:17:e4:e2:6c:6c:ac:f2:2d:73:f8:49:04:40:f6:c0:fd: 98:e4:a2:7d:9c:53:ec:13:8c:bd:ec:8f:2e:a2:31:cc:9f:e3: aa:32:3a:94:d4:f9:81:ff:a6:93:6d:b5:0b:04:3b:b0:f1:fd: cf:ef:98:66:50:c1:b2:43:44:45:cf:0e:2b:1a:cd:46:f6:a4: 47:58:92:6f:e4:b9:6c:71:22:dc:db:79:24:47:49:c3:9d:28: f9:50:17:e4:86:07:6b:26:73:e4:29:e7:92:be:d4:f1:83:38: 7a:19:04:06:14:98:3f:9c:73:12:91:0a:05:a0:4a:1a:6e:d0: b6:e0:f8:d5:19:60:ca:d3:eb:c0:9d:65:b3:69:39:c1:99:45: 48:96:af:73:fd:7a:7f:7a:45:4e:4f:c7:5b:50:2a:28:3a:1e: 2a:81:b4:19:6d:96:40:ce:97:8d:b7:00:44:53:0f:c5:e7:a7: f9:95:d2:25:b8:11:71:08:a6:c2:72:36:2a:94:4d:e4:67:66: b7:f3:58:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIwC9qBTYDE2n/g+IVf8oborbLN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBNkU2NUI4NkU0NDIzQUVDN0QwMkQ4NUI0M0JBMDA4 MDEyRDI5RDAeFw0yNTA3MjEwNDI2MDNaFw0yNTA3MjQwNzI2MDNaMDMxMTAvBgNV BAMTKEZBNjQ3RjYwNzc5M0Q4Qzg1QkU0RkVDQTlGNjE1NTg4M0E0QjA5NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8TTtLLyi2FnRQR3jpP+/mE6gV sI49ZnlMNsbE57dHBFh1AcLxtImTB7wobFXTLoFRM7Lab19p941l6VZVRlVCYkaR 5/GZL7skUWacEPNWIRA3dhAoVbSOZrBz71qbrREXMuPCqFfdggElOMp4PyhOqRWM AnHNwUBlaEUpzarSWBwYFxTEsHThvWVQUIQ2roQBvja1173ujZGrV0lFLPZEJM1l 5JtdQJd5ilWSEloSwqaQ/vIbqAPcs9BCMHVOtyjVmSk6zR7F9QVwDzGduy+rgehq T2oFe7g7QDwv3j2XwFURqvBQraOd2/EeUuhiSVWdH+bMjq1Tf4yh8w8RpNytAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+mR/YHeT2Mhb5P7Kn2FViDpLCWgwHwYDVR0j BBgwFoAUKqbmW4bkQjrsfQLYW0O6AIAS0p0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTZiZmY5ZC1mYjEzLTQ3YjktOWNjMC1kZDZhMDczMGExYzYvMC8yQUE2RTY1Qjg2 RTQ0MjNBRUM3RDAyRDg1QjQzQkEwMDgwMTJEMjlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkFBNkU2NUI4NkU0NDIzQUVDN0QwMkQ4NUI0M0JBMDA4MDEy RDI5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U2YmZmOWQtZmIxMy00N2I5LTlj YzAtZGQ2YTA3MzBhMWM2LzAvMkFBNkU2NUI4NkU0NDIzQUVDN0QwMkQ4NUI0M0JB MDA4MDEyRDI5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKzUazqxU5UnRv8n5o+qJTg7lTWnP5FeMNXV y5RdzC8hk4rZxB5ha7xCYU0PTYQ5irztiLcsSFezF+TibGys8i1z+EkEQPbA/Zjk on2cU+wTjL3sjy6iMcyf46oyOpTU+YH/ppNttQsEO7Dx/c/vmGZQwbJDREXPDisa zUb2pEdYkm/kuWxxItzbeSRHScOdKPlQF+SGB2smc+Qp55K+1PGDOHoZBAYUmD+c cxKRCgWgShpu0Lbg+NUZYMrT68CdZbNpOcGZRUiWr3P9en96RU5Px1tQKig6HiqB tBltlkDOl423AERTD8Xnp/mV0iW4EXEIpsJyNiqUTeRnZrfzWAs= -----END CERTIFICATE-----Generated at Mon Jul 21 07:24:57 2025 by rpki-client