$ rpki-client -vvf repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.mft File: 2ADCBF290A98776E6F59353351C879A1502B884A.mft (raw, json) Hash identifier: eKemBSHgxdKPtTg74EMdFHBexBddJqZCDmgZze85V1Y= Subject key identifier: F8:50:B7:D8:3B:8E:50:E6:49:9E:22:48:04:AF:28:1C:5B:E0:B2:69 Authority key identifier: 2A:DC:BF:29:0A:98:77:6E:6F:59:35:33:51:C8:79:A1:50:2B:88:4A Certificate issuer: /CN=2ADCBF290A98776E6F59353351C879A1502B884A Certificate serial: 7646A879FE580193348AE2DEE4BEAB7BD67DC05D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2ADCBF290A98776E6F59353351C879A1502B884A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.mft Manifest number: 0195 Signing time: Sun 20 Jul 2025 22:10:46 +0000 Manifest this update: Sun 20 Jul 2025 22:05:46 +0000 Manifest next update: Thu 24 Jul 2025 09:14:46 +0000 Files and hashes: 1: 2ADCBF290A98776E6F59353351C879A1502B884A.crl (hash: Ni7tTWSK17MYSMdNkgsO83UYC4drDJ3Il4APSXWfZmY=) 2: 3130332e35342e38322e302f32332d3233203d3e20313530353132.roa (hash: FjkCQEbxTkTrmju7umuTXr3UC7Hk/PD5qd4yUNE4PfI=) 3: 3130332e35342e38332e302f32342d3234203d3e20313530353132.roa (hash: TNPPWguy+EG+YXVjh98k8HLbiPmnDYSLszixyMOhlSg=) 4: 3130332e35342e38322e302f32342d3234203d3e20313530353132.roa (hash: Bn094jjpTmS3GhwwJiONFucK7tyqAYJ6uENssiFFaws=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.crl rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2ADCBF290A98776E6F59353351C879A1502B884A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 09:14:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:46:a8:79:fe:58:01:93:34:8a:e2:de:e4:be:ab:7b:d6:7d:c0:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ADCBF290A98776E6F59353351C879A1502B884A Validity Not Before: Jul 20 22:05:46 2025 GMT Not After : Jul 24 09:14:46 2025 GMT Subject: CN=F850B7D83B8E50E6499E224804AF281C5BE0B269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:42:88:a9:c0:57:1b:01:0a:da:17:4d:d9:df: 74:86:d4:14:d4:b0:16:fb:53:ea:a7:a7:ee:99:00: 04:bc:05:c1:ce:5e:fb:d6:be:58:e5:0b:d4:7d:33: eb:4b:15:43:bd:7b:b6:d9:10:37:67:fa:9d:eb:90: 57:be:5d:9c:88:3f:85:50:8e:07:76:0c:79:6c:1f: d6:07:11:11:1f:78:c9:44:ea:aa:4e:f1:a8:76:60: b5:6c:c0:68:53:3a:f5:cc:05:ac:5b:5f:fe:d9:08: f5:bc:71:9e:42:54:18:ea:20:05:3a:e5:05:d1:19: 54:a8:f6:42:19:f7:1f:98:8f:05:b4:c1:3a:cf:c3: 5d:d0:d0:7f:e0:9f:ec:ad:52:fa:ae:30:b1:d0:94: 48:1a:1c:70:a3:d6:e4:f1:14:c4:5a:92:26:94:19: bd:1b:4b:ee:aa:71:f2:24:d0:79:31:ca:68:cb:fe: 58:22:ad:71:be:5a:c2:a2:24:17:96:2e:45:c9:1c: f1:4b:73:f4:82:93:f8:96:0c:3e:5e:70:7b:0c:96: 08:d3:e6:fa:27:13:d4:81:45:c8:7d:d9:e7:f6:be: d7:e6:b8:06:0f:55:4c:b5:de:16:aa:f8:65:86:7a: 31:b1:9c:5b:c2:38:33:d8:ec:2d:a3:93:11:b5:bd: 12:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:50:B7:D8:3B:8E:50:E6:49:9E:22:48:04:AF:28:1C:5B:E0:B2:69 X509v3 Authority Key Identifier: keyid:2A:DC:BF:29:0A:98:77:6E:6F:59:35:33:51:C8:79:A1:50:2B:88:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2ADCBF290A98776E6F59353351C879A1502B884A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:1e:67:ba:0c:97:87:fc:46:aa:bc:6b:e5:6d:51:12:92:8e: cc:71:5a:71:e6:32:df:c8:ef:34:84:88:d9:e4:4a:4c:e4:9f: 14:32:22:dc:53:94:4d:82:05:42:75:20:14:b5:22:76:a6:17: 5a:35:3a:d4:00:59:16:0a:cb:6e:c3:52:3e:3f:99:f8:1e:a5: b3:d6:4d:d9:15:84:09:e2:d9:bf:14:8f:2a:9f:50:cf:f7:6f: 4c:7b:20:11:fc:e2:17:87:a1:ce:43:07:55:95:ed:29:07:a8: e2:ad:eb:23:c0:65:4b:e9:f4:63:bc:13:67:38:0b:c9:8a:ad: 3d:48:fc:e2:23:30:92:5a:70:2f:2f:96:4c:8c:72:95:8a:13: f9:dd:2d:98:0d:5b:ff:80:6e:6e:60:30:e1:37:40:35:35:2a: 6d:13:fc:8a:3d:e0:35:eb:70:8a:17:54:52:6c:04:cf:94:67: a8:b2:d6:c3:b1:c7:b5:99:75:44:1e:ac:71:a3:5a:77:12:e6: a7:17:49:ed:1b:53:15:20:22:53:b8:b7:dc:c8:8c:a2:2c:07: 15:26:ba:8d:96:84:f6:a8:70:03:c4:20:a6:29:78:f3:f7:85: 66:8b:69:6c:47:96:88:d1:13:91:8e:58:19:81:ff:15:64:9e: 6b:b9:79:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdkaoef5YAZM0iuLe5L6re9Z9wF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFEQ0JGMjkwQTk4Nzc2RTZGNTkzNTMzNTFDODc5QTE1 MDJCODg0QTAeFw0yNTA3MjAyMjA1NDZaFw0yNTA3MjQwOTE0NDZaMDMxMTAvBgNV BAMTKEY4NTBCN0Q4M0I4RTUwRTY0OTlFMjI0ODA0QUYyODFDNUJFMEIyNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHQoipwFcbAQraF03Z33SG1BTU sBb7U+qnp+6ZAAS8BcHOXvvWvljlC9R9M+tLFUO9e7bZEDdn+p3rkFe+XZyIP4VQ jgd2DHlsH9YHEREfeMlE6qpO8ah2YLVswGhTOvXMBaxbX/7ZCPW8cZ5CVBjqIAU6 5QXRGVSo9kIZ9x+YjwW0wTrPw13Q0H/gn+ytUvquMLHQlEgaHHCj1uTxFMRakiaU Gb0bS+6qcfIk0HkxymjL/lgirXG+WsKiJBeWLkXJHPFLc/SCk/iWDD5ecHsMlgjT 5vonE9SBRch92ef2vtfmuAYPVUy13haq+GWGejGxnFvCODPY7C2jkxG1vRIvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+FC32DuOUOZJniJIBK8oHFvgsmkwHwYDVR0j BBgwFoAUKty/KQqYd25vWTUzUch5oVAriEowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGRlOTQ2My02OGE3LTQ2MmQtOTQwOC1hN2MzOWNlNmU4ZmYvMC8yQURDQkYyOTBB OTg3NzZFNkY1OTM1MzM1MUM4NzlBMTUwMkI4ODRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkFEQ0JGMjkwQTk4Nzc2RTZGNTkzNTMzNTFDODc5QTE1MDJC ODg0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThkZTk0NjMtNjhhNy00NjJkLTk0 MDgtYTdjMzljZTZlOGZmLzAvMkFEQ0JGMjkwQTk4Nzc2RTZGNTkzNTMzNTFDODc5 QTE1MDJCODg0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADAeZ7oMl4f8Rqq8a+VtURKSjsxxWnHmMt/I 7zSEiNnkSkzknxQyItxTlE2CBUJ1IBS1InamF1o1OtQAWRYKy27DUj4/mfgepbPW TdkVhAni2b8UjyqfUM/3b0x7IBH84heHoc5DB1WV7SkHqOKt6yPAZUvp9GO8E2c4 C8mKrT1I/OIjMJJacC8vlkyMcpWKE/ndLZgNW/+Abm5gMOE3QDU1Km0T/Io94DXr cIoXVFJsBM+UZ6iy1sOxx7WZdUQerHGjWncS5qcXSe0bUxUgIlO4t9zIjKIsBxUm uo2WhPaocAPEIKYpePP3hWaLaWxHlojRE5GOWBmB/xVknmu5eQE= -----END CERTIFICATE-----Generated at Tue Jul 22 04:18:04 2025 by rpki-client