$ rpki-client -vvf repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft File: 2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft (raw, json) Hash identifier: BiFqTTFi2QWbCKOGl+Z+FnbsK3FjS1/2eBOO86lg74U= Subject key identifier: 1D:4A:14:0F:B2:12:71:FB:7E:70:17:E3:43:78:D3:14:61:0E:48:09 Authority key identifier: 2D:EC:7D:B2:A5:C9:62:CF:A5:3D:57:8D:EA:7D:C8:43:83:A6:33:D4 Certificate issuer: /CN=2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4 Certificate serial: 53F585CE93929E59E7498A4671E5F77CAC8C5E0C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft Manifest number: 04C6 Signing time: Fri 25 Jul 2025 02:41:21 +0000 Manifest this update: Fri 25 Jul 2025 02:36:21 +0000 Manifest next update: Mon 28 Jul 2025 08:50:21 +0000 Files and hashes: 1: 3130332e3133372e33382e302f32332d3234203d3e20313338383232.roa (hash: mA/rP0hr8/EieVP2HKsGbfcjdkP2Kd8or4Jc67/Y7I0=) 2: 323430343a613463303a3a2f33322d3438203d3e20313338383232.roa (hash: jd8RzIV4pb6xOSx8M2iJByCvMa7m6mddhFLRaUaFvoI=) 3: 323430343a613463303a666163653a3a2f34382d3438203d3e20313338383232.roa (hash: 8BcFapwe+X3BcAcYyUi0aKlB+9OoLNEUNoO57IgvOug=) 4: 2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.crl (hash: lLM7vZTJpZj+xxjMNI3XXrx8qVL00BsQKjB+OaAp4Cw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.crl rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 06:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:f5:85:ce:93:92:9e:59:e7:49:8a:46:71:e5:f7:7c:ac:8c:5e:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4 Validity Not Before: Jul 25 02:36:21 2025 GMT Not After : Jul 28 08:50:21 2025 GMT Subject: CN=1D4A140FB21271FB7E7017E34378D314610E4809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:94:4e:f8:5b:d6:37:08:c3:5d:4c:9d:cc:fa: 36:f7:a8:37:f3:58:1c:eb:23:c3:b9:30:57:cf:e9: 19:30:4c:37:d9:72:84:5f:bc:07:5e:a3:9a:d2:7f: 70:a8:5a:0d:5e:67:5f:d9:52:24:9b:48:e8:42:85: 7c:5e:f6:e4:f1:d2:a8:7e:7a:53:e4:3c:70:17:cd: 4e:49:19:37:7c:61:38:1a:de:4d:5a:9d:7d:c8:6d: c5:f6:c4:3f:99:26:11:8d:85:53:97:6e:4e:b9:4e: c2:61:8f:6a:b2:75:6d:fa:13:97:a5:d0:6d:20:cd: e6:37:4f:f1:1d:dd:04:0d:26:bb:ff:4a:97:e2:d9: 59:22:f4:db:23:28:ef:ba:5d:ca:30:31:b3:52:99: 51:b6:f0:ac:e3:50:e7:fa:ea:7c:0e:8b:86:44:76: e3:71:4f:27:61:17:1e:c8:a8:18:53:f9:49:4b:09: f2:b4:0f:02:d6:28:05:a8:a1:3e:91:3f:aa:29:36: 1f:15:a9:5c:bd:5e:67:98:1f:43:d6:0e:32:25:55: 8b:32:d7:79:07:fe:8b:a0:fb:77:d9:5a:ed:ac:53: 91:fb:98:7a:fc:56:f4:3b:15:8b:ca:f0:42:dc:cc: a0:0c:29:2f:d4:fc:8c:f5:4b:61:a6:f8:6c:ec:46: 96:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:4A:14:0F:B2:12:71:FB:7E:70:17:E3:43:78:D3:14:61:0E:48:09 X509v3 Authority Key Identifier: keyid:2D:EC:7D:B2:A5:C9:62:CF:A5:3D:57:8D:EA:7D:C8:43:83:A6:33:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:86:39:ee:f7:cc:a9:d7:da:b2:a3:27:94:2a:ba:62:4e:6a: 44:e6:b9:5e:08:df:18:47:2a:f3:2c:cf:7a:0f:b5:1d:d2:0a: 82:e9:51:e0:2e:35:97:e4:2b:0e:55:68:e6:12:2f:51:27:52: e6:a8:93:f4:ab:9b:4e:88:06:2d:9c:7c:9e:a9:cb:0f:55:8b: fb:73:e7:84:5c:e4:09:1d:fd:c3:1f:9d:c0:27:be:45:14:f9: ac:7f:52:1b:6d:7a:66:87:37:99:f7:28:39:5c:6b:05:c1:2d: bf:ad:dd:70:4b:46:02:6a:22:41:c8:18:75:78:c8:b7:95:4b: 43:65:06:c6:e7:09:91:30:49:0a:d9:15:f1:31:71:7c:5e:ca: 87:40:c3:b5:da:b2:63:e2:6c:17:f4:b9:85:c3:dc:b3:5b:a3: 26:5e:da:e0:ca:94:c6:f5:37:a5:29:3f:99:82:f3:43:3a:0b: 40:45:8a:39:08:dd:2a:9b:97:8c:5d:19:7c:55:bf:5c:f3:85: c3:db:27:1a:34:a6:7b:a9:fc:9f:d8:e4:81:62:28:6b:97:51: 8c:06:8d:e4:4a:e0:27:e4:a0:bf:d7:5e:f3:0d:23:a3:43:5b: 0f:6e:49:9f:cc:58:c6:ad:dd:f6:b3:ea:17:33:66:77:dd:11: 27:d8:ae:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU/WFzpOSnlnnSYpGceX3fKyMXgwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRFQzdEQjJBNUM5NjJDRkE1M0Q1NzhERUE3REM4NDM4 M0E2MzNENDAeFw0yNTA3MjUwMjM2MjFaFw0yNTA3MjgwODUwMjFaMDMxMTAvBgNV BAMTKDFENEExNDBGQjIxMjcxRkI3RTcwMTdFMzQzNzhEMzE0NjEwRTQ4MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0lE74W9Y3CMNdTJ3M+jb3qDfz WBzrI8O5MFfP6RkwTDfZcoRfvAdeo5rSf3CoWg1eZ1/ZUiSbSOhChXxe9uTx0qh+ elPkPHAXzU5JGTd8YTga3k1anX3IbcX2xD+ZJhGNhVOXbk65TsJhj2qydW36E5el 0G0gzeY3T/Ed3QQNJrv/Spfi2Vki9NsjKO+6XcowMbNSmVG28KzjUOf66nwOi4ZE duNxTydhFx7IqBhT+UlLCfK0DwLWKAWooT6RP6opNh8VqVy9XmeYH0PWDjIlVYsy 13kH/oug+3fZWu2sU5H7mHr8VvQ7FYvK8ELczKAMKS/U/Iz1S2Gm+GzsRpbfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHUoUD7IScft+cBfjQ3jTFGEOSAkwHwYDVR0j BBgwFoAULex9sqXJYs+lPVeN6n3IQ4OmM9QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l M2JiZjFkYS1lMzE3LTQ4ZWYtYWQ2ZC1mZThhOGJmMDg0MDAvMC8yREVDN0RCMkE1 Qzk2MkNGQTUzRDU3OERFQTdEQzg0MzgzQTYzM0Q0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkRFQzdEQjJBNUM5NjJDRkE1M0Q1NzhERUE3REM4NDM4M0E2 MzNENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTNiYmYxZGEtZTMxNy00OGVmLWFk NmQtZmU4YThiZjA4NDAwLzAvMkRFQzdEQjJBNUM5NjJDRkE1M0Q1NzhERUE3REM4 NDM4M0E2MzNENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHaGOe73zKnX2rKjJ5QqumJOakTmuV4I3xhH KvMsz3oPtR3SCoLpUeAuNZfkKw5VaOYSL1EnUuaok/Srm06IBi2cfJ6pyw9Vi/tz 54Rc5Akd/cMfncAnvkUU+ax/UhttemaHN5n3KDlcawXBLb+t3XBLRgJqIkHIGHV4 yLeVS0NlBsbnCZEwSQrZFfExcXxeyodAw7XasmPibBf0uYXD3LNboyZe2uDKlMb1 N6UpP5mC80M6C0BFijkI3Sqbl4xdGXxVv1zzhcPbJxo0pnup/J/Y5IFiKGuXUYwG jeRK4CfkoL/XXvMNI6NDWw9uSZ/MWMat3faz6hczZnfdESfYrnA= -----END CERTIFICATE-----Generated at Fri Jul 25 06:44:14 2025 by rpki-client