$ rpki-client -vvf repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft File: 2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft (raw, json) Hash identifier: Obyd3E7raiEeaeFPlDvSKfEvqT7Mw7mcBViN7Zte3uI= Subject key identifier: 4D:A9:01:34:AE:65:F8:50:17:23:5E:C9:56:CE:47:BA:B5:14:E1:F1 Authority key identifier: 2D:6F:96:FA:63:0E:A7:AE:0A:2B:12:2B:6F:04:CC:4F:5F:32:CE:B5 Certificate issuer: /CN=2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5 Certificate serial: 27A6482D26E1E78270B215D94BACC7372964FF20 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft Manifest number: 01F3 Signing time: Sat 19 Jul 2025 21:00:52 +0000 Manifest this update: Sat 19 Jul 2025 20:55:52 +0000 Manifest next update: Wed 23 Jul 2025 00:38:52 +0000 Files and hashes: 1: 3130332e3139312e36302e302f32332d3234203d3e20313430343233.roa (hash: B7I4pT8xixNUOiX63bEN83in57afrlzmDDKwQ4/5sls=) 2: 3130332e3139312e36312e302f32342d3234203d3e20313430343233.roa (hash: GKmBfpKDeFOAn/hth0t5+jc0CLfcCDiIkzuoYyGRF6A=) 3: 3130332e3139312e36302e302f32342d3234203d3e20313430343233.roa (hash: sSH+72BWEr4MQc7BgNlbk4H5MkWrjKvE4wSUUqHwmBM=) 4: 2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl (hash: afdJamQjVb4OVUBErHDWj/tAUvyIvAEiwuQb1P6l+qg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 00:38:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:a6:48:2d:26:e1:e7:82:70:b2:15:d9:4b:ac:c7:37:29:64:ff:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5 Validity Not Before: Jul 19 20:55:52 2025 GMT Not After : Jul 23 00:38:52 2025 GMT Subject: CN=4DA90134AE65F85017235EC956CE47BAB514E1F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:13:30:74:9a:37:73:c4:e1:b1:47:12:6e:d0: 64:a7:89:15:b6:7d:78:16:01:7f:27:d6:3b:09:57: 57:18:12:9b:77:75:7c:91:3f:73:70:97:49:df:87: 51:30:ac:31:5e:e4:02:f4:f9:ec:9c:db:61:b4:d6: c8:b8:61:a4:92:bd:85:9a:de:fb:70:f3:d2:54:17: 6e:92:2e:2c:dc:dc:f0:de:3e:b7:86:ae:72:03:29: ca:ce:a2:5f:0c:da:df:da:b0:21:18:fc:dd:55:e5: 48:2f:ce:52:4b:1d:f0:64:a1:1b:a7:94:cf:96:9a: c4:b6:bf:94:0a:ee:95:da:ba:f4:cb:bb:13:00:d8: 94:90:19:f9:66:48:5f:29:87:bd:db:a3:9c:75:46: a9:83:7e:27:ab:e9:93:d3:6b:91:2a:d4:29:d6:29: 1c:fe:40:38:b9:75:26:66:46:97:da:3c:b9:93:21: 65:04:51:a1:4e:e2:7e:0b:52:fc:c2:95:69:e8:34: c8:03:c3:07:82:92:30:eb:37:62:15:64:f9:51:17: 50:5c:90:d1:24:f9:9f:40:a2:9c:21:32:7f:63:d0: 8e:de:97:b5:b9:63:0f:4f:54:7f:8e:b1:37:75:e9: 63:0a:a2:0e:d4:21:39:5a:b5:27:35:e1:f6:b8:5b: 4f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A9:01:34:AE:65:F8:50:17:23:5E:C9:56:CE:47:BA:B5:14:E1:F1 X509v3 Authority Key Identifier: keyid:2D:6F:96:FA:63:0E:A7:AE:0A:2B:12:2B:6F:04:CC:4F:5F:32:CE:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:47:c1:a8:f9:b9:76:0a:dd:b0:62:72:98:71:c3:d4:f7:62: fd:6f:fd:4d:e5:30:ae:c7:1d:f2:27:ff:59:11:3a:93:58:cd: 52:cb:94:8e:90:56:78:e2:c6:a0:ec:af:b3:be:e3:80:c0:ad: 07:b8:69:78:54:c0:f6:21:4f:97:b4:44:7a:42:48:76:54:16: d5:f5:e2:5c:10:99:3a:a2:11:55:4a:71:cd:7a:aa:8f:05:47: 8d:44:e2:84:ac:3a:aa:95:b9:0a:92:08:0f:19:94:b4:46:84: de:ec:ec:f5:03:ab:58:4a:86:e2:38:55:c1:3c:09:8f:27:bc: cb:20:fa:70:a3:61:eb:66:84:af:f5:22:47:0d:8e:89:9e:6e: 42:f3:27:b8:e1:f4:82:20:8b:31:0e:0b:09:df:fc:e2:48:27: e1:45:12:d8:84:ed:0d:58:5f:f8:93:bd:7f:25:b1:21:ed:a7: 39:97:8c:35:de:bc:d9:bb:cd:39:76:0f:7b:f9:cd:57:b7:00: ca:a2:21:9e:b3:97:6d:67:45:06:c7:a2:6d:b9:3c:2e:f4:49: 6e:b2:c2:90:91:dc:5b:73:96:88:7d:27:88:52:47:95:64:63: 77:c9:5b:a0:77:03:5a:3d:19:e9:dd:6b:ac:ff:18:69:f6:a1: 12:cd:8d:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ6ZILSbh54JwshXZS6zHNylk/yAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNENDNEY1 RjMyQ0VCNTAeFw0yNTA3MTkyMDU1NTJaFw0yNTA3MjMwMDM4NTJaMDMxMTAvBgNV BAMTKDREQTkwMTM0QUU2NUY4NTAxNzIzNUVDOTU2Q0U0N0JBQjUxNEUxRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+EzB0mjdzxOGxRxJu0GSniRW2 fXgWAX8n1jsJV1cYEpt3dXyRP3Nwl0nfh1EwrDFe5AL0+eyc22G01si4YaSSvYWa 3vtw89JUF26SLizc3PDePreGrnIDKcrOol8M2t/asCEY/N1V5UgvzlJLHfBkoRun lM+WmsS2v5QK7pXauvTLuxMA2JSQGflmSF8ph73bo5x1RqmDfier6ZPTa5Eq1CnW KRz+QDi5dSZmRpfaPLmTIWUEUaFO4n4LUvzClWnoNMgDwweCkjDrN2IVZPlRF1Bc kNEk+Z9AopwhMn9j0I7el7W5Yw9PVH+OsTd16WMKog7UITlatSc14fa4W08RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTakBNK5l+FAXI17JVs5HurUU4fEwHwYDVR0j BBgwFoAULW+W+mMOp64KKxIrbwTMT18yzrUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTM0ZDJkOC0zNGFmLTQ3NTctOGFkOS05MmRhMzVkOTIxNjgvMC8yRDZGOTZGQTYz MEVBN0FFMEEyQjEyMkI2RjA0Q0M0RjVGMzJDRUI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNENDNEY1RjMy Q0VCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUzNGQyZDgtMzRhZi00NzU3LThh ZDktOTJkYTM1ZDkyMTY4LzAvMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNEND NEY1RjMyQ0VCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9Hwaj5uXYK3bBicphxw9T3Yv1v/U3lMK7H HfIn/1kROpNYzVLLlI6QVnjixqDsr7O+44DArQe4aXhUwPYhT5e0RHpCSHZUFtX1 4lwQmTqiEVVKcc16qo8FR41E4oSsOqqVuQqSCA8ZlLRGhN7s7PUDq1hKhuI4VcE8 CY8nvMsg+nCjYetmhK/1IkcNjomebkLzJ7jh9IIgizEOCwnf/OJIJ+FFEtiE7Q1Y X/iTvX8lsSHtpzmXjDXevNm7zTl2D3v5zVe3AMqiIZ6zl21nRQbHom25PC70SW6y wpCR3Ftzloh9J4hSR5VkY3fJW6B3A1o9Genda6z/GGn2oRLNjQk= -----END CERTIFICATE-----Generated at Sun Jul 20 21:26:21 2025 by rpki-client