$ rpki-client -vvf repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft File: 2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft (raw, json) Hash identifier: QigvpUB5vqCE6DEUwG3U+GZjKFUXsD5rTKosHIj/oQg= Subject key identifier: CD:09:78:5F:2A:49:7E:ED:DE:98:16:D4:E7:9C:E1:F0:81:62:3D:DA Authority key identifier: 2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10 Certificate issuer: /CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210 Certificate serial: 211BE16620C5A02A3B6E60B2D173FBC8823A0F22 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft Manifest number: D3 Signing time: Sat 06 Sep 2025 23:12:05 +0000 Manifest this update: Sat 06 Sep 2025 23:07:05 +0000 Manifest next update: Wed 10 Sep 2025 10:31:05 +0000 Files and hashes: 1: 3136302e32322e36332e302f32342d3234203d3e20313439373138.roa (hash: FdD4yXGMsks45ng3y/QGMQ3cyOtlAzR9+CDLALaQ1/8=) 2: 2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl (hash: rK7kFRnZw7yj0mbymfkcAikQXUVEA1Wh5EzITjCGQb0=) 3: 3136302e32322e36322e302f32342d3234203d3e20313439373230.roa (hash: YoRi0wh2sw9GoYCOeEcjR9q///J9GRgGfI+RYp9E7Ao=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:31:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:1b:e1:66:20:c5:a0:2a:3b:6e:60:b2:d1:73:fb:c8:82:3a:0f:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210 Validity Not Before: Sep 6 23:07:05 2025 GMT Not After : Sep 10 10:31:05 2025 GMT Subject: CN=CD09785F2A497EEDDE9816D4E79CE1F081623DDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c6:13:a6:bb:55:2c:2c:45:38:0e:0b:94:48: fc:d6:e7:4b:9c:02:0c:e5:63:c7:28:f8:a6:98:4b: ae:e8:c3:2b:94:b0:18:5d:56:07:4b:4c:8d:a3:1b: 40:35:e8:2e:8e:d5:3b:3a:ef:ea:7c:c3:1f:c2:aa: fe:88:09:02:e3:41:62:49:24:1b:50:a3:ef:ef:d6: af:18:be:16:25:05:2c:ce:0d:49:76:8c:f5:43:a9: 4e:5e:5f:8c:e0:32:1e:48:b3:dc:93:b1:28:48:6b: 97:35:27:6f:73:85:06:a1:15:9d:09:c5:7a:16:e8: 75:2f:ab:41:8a:68:85:9c:f2:5f:56:01:dd:ed:34: 93:e3:1a:49:ab:55:9b:28:7b:d9:d2:ab:f3:64:04: 5f:cf:9e:75:98:d6:b0:8a:33:f6:63:d0:ee:9c:12: ef:59:da:ac:f6:e7:03:b1:9b:cf:15:11:7e:70:72: 70:e8:95:56:54:cd:ac:f3:d8:49:e1:4c:a6:f6:af: bb:b5:f1:25:62:75:5b:46:cc:4b:88:5c:5c:d6:31: bf:a9:83:08:5f:b3:44:8a:d3:57:02:86:44:bb:f0: 94:4e:84:ce:ee:63:7b:22:00:35:3f:79:19:f0:7c: 5a:c1:1e:7d:b3:46:af:24:f3:3e:29:7d:0a:22:74: 3c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:09:78:5F:2A:49:7E:ED:DE:98:16:D4:E7:9C:E1:F0:81:62:3D:DA X509v3 Authority Key Identifier: keyid:2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:7d:91:c0:a4:98:c8:3a:f4:13:f5:a9:5b:e3:59:63:38:e4: 27:ef:c5:16:6d:c6:b7:53:91:c6:54:58:84:b1:02:3d:3d:94: f8:0e:7c:6e:37:81:82:ac:29:20:3b:ce:9f:9a:92:0d:ab:c6: 9e:73:30:07:75:ab:41:f1:03:d5:d0:c7:05:bf:e8:fc:c9:bd: 1c:20:dd:e7:82:b5:b6:fb:5e:fd:3e:3c:2b:16:87:bf:c0:53: 8a:64:24:62:59:41:1b:62:1b:47:96:9e:df:23:7e:83:1d:c3: ac:b7:96:8e:43:b3:a4:c7:98:43:17:ea:84:f2:96:f4:16:e5: 99:26:e5:cb:6b:57:59:85:b5:18:35:42:cc:d0:57:2f:90:ee: 8e:bc:3f:34:9a:9a:f8:45:a7:c6:58:5a:b7:b1:06:f2:c7:ea: 25:5c:8c:f9:66:79:96:df:22:97:17:e6:c9:22:fb:cf:88:e4: d6:8b:89:4e:b0:c8:71:9f:71:37:1d:9e:e7:0f:80:c0:2e:3f: 8f:34:51:40:08:db:90:96:ce:31:f2:79:c0:12:2b:1b:6a:eb: f4:51:58:89:90:d0:34:9a:f9:f3:14:9e:c9:70:97:73:3d:d8: ed:10:03:96:92:e3:c0:9a:07:9c:a0:d2:a5:d2:4b:71:53:56: 4e:10:4b:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIRvhZiDFoCo7bmCy0XP7yII6DyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4Q0Iw RDU4MDIxMDAeFw0yNTA5MDYyMzA3MDVaFw0yNTA5MTAxMDMxMDVaMDMxMTAvBgNV BAMTKENEMDk3ODVGMkE0OTdFRURERTk4MTZENEU3OUNFMUYwODE2MjNEREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdxhOmu1UsLEU4DguUSPzW50uc AgzlY8co+KaYS67owyuUsBhdVgdLTI2jG0A16C6O1Ts67+p8wx/Cqv6ICQLjQWJJ JBtQo+/v1q8YvhYlBSzODUl2jPVDqU5eX4zgMh5Is9yTsShIa5c1J29zhQahFZ0J xXoW6HUvq0GKaIWc8l9WAd3tNJPjGkmrVZsoe9nSq/NkBF/PnnWY1rCKM/Zj0O6c Eu9Z2qz25wOxm88VEX5wcnDolVZUzazz2EnhTKb2r7u18SVidVtGzEuIXFzWMb+p gwhfs0SK01cChkS78JROhM7uY3siADU/eRnwfFrBHn2zRq8k8z4pfQoidDwbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzQl4XypJfu3emBbU55zh8IFiPdowHwYDVR0j BBgwFoAUKteJ6/xYwfDk+HOQeB04yw1YAhAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWM2NzdmZC1kNTY5LTRjYzUtYTU2My05YjBmMjQ4YjFhZjEvMC8yQUQ3ODlFQkZD NThDMUYwRTRGODczOTA3ODFEMzhDQjBENTgwMjEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4Q0IwRDU4 MDIxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVjNjc3ZmQtZDU2OS00Y2M1LWE1 NjMtOWIwZjI0OGIxYWYxLzAvMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4 Q0IwRDU4MDIxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMR9kcCkmMg69BP1qVvjWWM45CfvxRZtxrdT kcZUWISxAj09lPgOfG43gYKsKSA7zp+akg2rxp5zMAd1q0HxA9XQxwW/6PzJvRwg 3eeCtbb7Xv0+PCsWh7/AU4pkJGJZQRtiG0eWnt8jfoMdw6y3lo5Ds6THmEMX6oTy lvQW5Zkm5ctrV1mFtRg1QszQVy+Q7o68PzSamvhFp8ZYWrexBvLH6iVcjPlmeZbf IpcX5ski+8+I5NaLiU6wyHGfcTcdnucPgMAuP480UUAI25CWzjHyecASKxtq6/RR WImQ0DSa+fMUnslwl3M92O0QA5aS48CaB5yg0qXSS3FTVk4QS7E= -----END CERTIFICATE-----Generated at Mon Sep 8 08:50:23 2025 by rpki-client