$ rpki-client -vvf repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft File: 2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft (raw, json) Hash identifier: y3Uaf+wVuDst8WlUqIHe1YD9EZWStDNiQFFco5NX9YI= Subject key identifier: 29:2A:22:54:93:3D:A4:F0:63:D7:7D:54:6D:DB:97:96:B5:CB:44:11 Authority key identifier: 2B:15:30:AD:20:AC:1F:2F:7F:2E:A2:EB:AA:E7:07:D0:E1:28:A1:DC Certificate issuer: /CN=2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC Certificate serial: 1FE96EC23427F6CE05B6A4E3F4F51E31997646B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft Manifest number: 0312 Signing time: Sun 20 Jul 2025 14:52:16 +0000 Manifest this update: Sun 20 Jul 2025 14:47:15 +0000 Manifest next update: Wed 23 Jul 2025 16:13:15 +0000 Files and hashes: 1: 2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl (hash: kploP2VohIwPGZCVtkrtJeCXYUEecpTvYOIpYYSnQes=) 2: 3130332e3137322e31372e302f32342d3234203d3e20313432333831.roa (hash: DVIrghrEW7VwPIX0cx9PZe/9iJL/OmwC/t6EzXjRAD8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 16:13:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:e9:6e:c2:34:27:f6:ce:05:b6:a4:e3:f4:f5:1e:31:99:76:46:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC Validity Not Before: Jul 20 14:47:15 2025 GMT Not After : Jul 23 16:13:15 2025 GMT Subject: CN=292A2254933DA4F063D77D546DDB9796B5CB4411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c2:b4:5a:7a:9a:f4:06:12:39:ed:15:f8:0b: 1f:c7:e4:7e:8a:c1:a1:8a:f7:6a:70:80:35:37:f3: ba:98:2f:7f:d7:c6:2a:1b:40:06:5f:2e:a3:44:47: 7e:4f:f9:ff:8e:28:e1:e4:4e:82:00:da:ae:53:cc: 01:f9:f9:74:f8:bb:d8:64:59:09:8b:74:b2:2e:de: ae:8a:3f:15:c2:d7:b4:f2:8f:11:4b:ae:6b:35:0c: 2c:a2:1d:6f:a5:63:4c:6d:81:d0:46:01:a7:b8:6a: ca:f9:10:33:64:24:ef:62:c1:b5:11:12:34:a3:78: c9:85:f4:4a:e1:9f:ac:32:95:90:d3:4f:2c:ca:3a: 72:22:19:eb:82:db:dd:d6:62:70:7e:f0:ea:15:f6: 9d:9e:88:10:ec:fb:39:d9:eb:29:95:61:f3:b4:49: 5b:74:00:de:88:6e:1d:ff:39:a6:fc:d7:ca:a9:3e: 97:d4:78:66:c6:9f:e1:0c:0e:ce:82:19:a4:1b:58: a0:04:6a:e6:d4:b4:3e:83:3e:e3:b0:68:37:9e:e8: 35:b4:02:9d:ea:f6:fb:8f:6b:30:ba:4c:a2:89:75: 2c:da:bf:d8:ef:4e:97:b9:91:9a:89:19:bd:46:92: 9a:ae:b1:f2:4a:c3:1c:5f:dd:e0:ad:a7:2c:ec:a8: 70:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:2A:22:54:93:3D:A4:F0:63:D7:7D:54:6D:DB:97:96:B5:CB:44:11 X509v3 Authority Key Identifier: keyid:2B:15:30:AD:20:AC:1F:2F:7F:2E:A2:EB:AA:E7:07:D0:E1:28:A1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:81:f3:ef:d5:76:e9:51:83:3c:16:67:ff:60:c9:85:9d:1a: bb:30:aa:19:34:cf:f3:39:10:8c:62:f2:e6:33:11:ab:36:45: e9:02:aa:7c:5a:33:d2:f9:a2:f3:d7:60:25:83:0f:81:55:93: ea:09:c7:e6:45:92:f8:82:1a:de:fd:a3:84:c1:1f:56:3d:22: 70:97:de:71:87:0e:72:68:69:d0:57:3d:2a:13:a1:bb:53:b4: 0f:06:26:44:a4:36:39:07:3b:88:b6:cb:d5:6d:91:2f:1b:a4: b4:62:31:bf:40:99:77:03:ca:82:7d:c7:fe:ca:3e:1a:39:ff: 09:08:4f:55:97:0b:33:fa:6b:7c:59:f7:4f:96:27:5e:cb:1e: 7d:ed:08:c4:74:85:30:69:ce:0b:c8:81:5c:22:d9:e7:99:e1: a1:ea:83:c8:da:75:0b:fe:2e:7f:dc:6d:5a:df:e1:88:83:9a: 8f:23:a1:32:fa:14:55:de:8a:87:ec:ff:88:2e:f7:2e:db:da: e5:fa:c8:e0:2e:08:78:44:88:b8:98:18:49:99:b5:9d:3f:a1: a7:fc:9a:f7:06:be:55:cd:14:12:dc:35:9c:9c:de:b8:86:a0: 56:df:97:f4:6c:fb:13:5c:b4:14:12:de:e9:36:2a:25:bc:40: 6c:28:3b:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH+luwjQn9s4FtqTj9PUeMZl2RrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3RDBF MTI4QTFEQzAeFw0yNTA3MjAxNDQ3MTVaFw0yNTA3MjMxNjEzMTVaMDMxMTAvBgNV BAMTKDI5MkEyMjU0OTMzREE0RjA2M0Q3N0Q1NDZEREI5Nzk2QjVDQjQ0MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuwrRaepr0BhI57RX4Cx/H5H6K waGK92pwgDU387qYL3/XxiobQAZfLqNER35P+f+OKOHkToIA2q5TzAH5+XT4u9hk WQmLdLIu3q6KPxXC17TyjxFLrms1DCyiHW+lY0xtgdBGAae4asr5EDNkJO9iwbUR EjSjeMmF9Erhn6wylZDTTyzKOnIiGeuC293WYnB+8OoV9p2eiBDs+znZ6ymVYfO0 SVt0AN6Ibh3/Oab818qpPpfUeGbGn+EMDs6CGaQbWKAEaubUtD6DPuOwaDee6DW0 Ap3q9vuPazC6TKKJdSzav9jvTpe5kZqJGb1GkpqusfJKwxxf3eCtpyzsqHBvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKSoiVJM9pPBj131UbduXlrXLRBEwHwYDVR0j BBgwFoAUKxUwrSCsHy9/LqLrqucH0OEoodwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NjY4ODU0YS0zZjI0LTQwYjEtODBjZC1lNjM2YWE3ZThiMWMvMC8yQjE1MzBBRDIw QUMxRjJGN0YyRUEyRUJBQUU3MDdEMEUxMjhBMURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3RDBFMTI4 QTFEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjY2ODg1NGEtM2YyNC00MGIxLTgw Y2QtZTYzNmFhN2U4YjFjLzAvMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3 RDBFMTI4QTFEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM+B8+/VdulRgzwWZ/9gyYWdGrswqhk0z/M5 EIxi8uYzEas2RekCqnxaM9L5ovPXYCWDD4FVk+oJx+ZFkviCGt79o4TBH1Y9InCX 3nGHDnJoadBXPSoTobtTtA8GJkSkNjkHO4i2y9VtkS8bpLRiMb9AmXcDyoJ9x/7K Pho5/wkIT1WXCzP6a3xZ90+WJ17LHn3tCMR0hTBpzgvIgVwi2eeZ4aHqg8jadQv+ Ln/cbVrf4YiDmo8joTL6FFXeiofs/4gu9y7b2uX6yOAuCHhEiLiYGEmZtZ0/oaf8 mvcGvlXNFBLcNZyc3riGoFbfl/Rs+xNctBQS3uk2KiW8QGwoOyY= -----END CERTIFICATE-----Generated at Sun Jul 20 21:24:19 2025 by rpki-client