$ rpki-client -vvf repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft File: 2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft (raw, json) Hash identifier: AvUpiCz9mytrBzCmbjrSeMLrM8A+k5arZKYsiWKPotM= Subject key identifier: 28:70:67:D4:0A:51:45:A3:69:6C:48:E7:84:13:28:C3:37:6D:23:34 Authority key identifier: 2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10 Certificate issuer: /CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210 Certificate serial: 47FC5CA2E2586037F194073273C16F9E526D0FAF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft Manifest number: BE Signing time: Mon 21 Jul 2025 23:22:03 +0000 Manifest this update: Mon 21 Jul 2025 23:17:03 +0000 Manifest next update: Fri 25 Jul 2025 00:52:03 +0000 Files and hashes: 1: 2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl (hash: nApQlPMysoS6feg8WbFWlu1kO5OwKyokCeMsbIDkBBQ=) 2: 3136302e32322e36322e302f32342d3234203d3e20313439373230.roa (hash: YoRi0wh2sw9GoYCOeEcjR9q///J9GRgGfI+RYp9E7Ao=) 3: 3136302e32322e36332e302f32342d3234203d3e20313439373138.roa (hash: FdD4yXGMsks45ng3y/QGMQ3cyOtlAzR9+CDLALaQ1/8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 00:52:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:fc:5c:a2:e2:58:60:37:f1:94:07:32:73:c1:6f:9e:52:6d:0f:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210 Validity Not Before: Jul 21 23:17:03 2025 GMT Not After : Jul 25 00:52:03 2025 GMT Subject: CN=287067D40A5145A3696C48E7841328C3376D2334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:50:d3:a2:30:ec:61:82:53:72:92:2f:17:89: 06:79:9d:13:16:ba:b7:84:5b:46:9b:09:26:11:72: ea:bb:c4:3f:43:59:de:62:25:c0:0f:02:6d:68:1f: ae:9f:87:9d:3b:b0:84:0a:74:69:16:8f:61:63:f7: 23:02:06:1a:59:e2:83:ff:75:2c:fd:6c:65:d3:4e: 46:70:a8:ec:bf:cb:c9:29:fe:e6:78:b5:28:f0:ea: a6:dd:e8:c4:e2:a8:ba:5c:20:50:8f:6f:6c:68:47: 19:7a:d0:b5:fc:66:c6:a5:64:f5:08:37:0f:ad:93: 19:8b:e9:94:c8:1d:12:d5:bc:8d:1f:05:98:ea:10: 4b:e3:08:4a:86:20:80:ef:b8:fd:19:3e:41:37:f6: 5d:79:2d:65:06:a7:12:4f:9f:dd:30:7b:36:a9:9c: ce:29:1a:39:f2:1e:fd:3e:f3:d2:3a:12:b6:c6:a4: ce:1e:7f:c1:54:51:0d:67:a1:c1:fe:09:d4:93:f9: 9a:1b:1c:82:97:da:04:92:66:e0:8e:fb:48:95:ba: 00:ce:0c:a0:e9:cd:29:5c:54:a8:1a:7c:7e:eb:56: e6:1e:0d:99:86:57:f3:83:bc:a7:03:cd:da:a4:1f: 42:ac:ba:16:9a:3e:ce:8a:d5:d4:a9:95:59:eb:08: e6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:70:67:D4:0A:51:45:A3:69:6C:48:E7:84:13:28:C3:37:6D:23:34 X509v3 Authority Key Identifier: keyid:2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:0a:97:04:76:7a:8d:46:a4:9c:74:21:c8:cf:0a:c1:3b:e5: 3e:5d:cd:f3:7b:e9:35:ec:71:d6:ce:34:f7:6b:a6:14:19:22: 41:bc:72:5b:3f:81:26:04:f1:99:2e:04:cb:46:47:4a:22:58: 0c:24:0d:79:8c:58:67:39:19:03:a2:e7:e0:05:d7:d3:0c:48: 20:b7:bb:93:3a:e4:49:48:34:0b:06:16:d0:7b:1f:ec:ca:45: 82:29:5c:8a:ff:63:25:13:31:f9:25:ab:fd:5b:e1:17:97:82: 4f:a5:c6:f0:01:ea:9b:db:54:0f:8a:0f:68:90:d0:1e:87:e7: 8e:89:e9:80:db:06:49:1c:91:d0:3a:17:66:84:a7:fc:5f:34: ad:6c:6f:7b:6b:6d:a4:99:03:9d:bc:55:e5:19:cc:61:20:92: 1b:a5:bd:79:79:40:35:1b:7a:a9:d7:38:69:df:d9:df:ff:7c: 91:fa:65:d2:ed:22:da:f3:35:91:89:e8:3d:c7:ed:7c:fd:f1: c5:5f:c8:e7:40:55:fd:02:9e:1e:eb:2c:5c:67:20:44:4b:dd: 92:54:8c:a9:a5:b0:1c:96:2b:96:5f:f2:11:89:83:86:45:92: df:9d:74:2e:81:6f:28:9a:1c:ee:9f:64:92:7b:44:6c:8c:7a: 2a:69:b5:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR/xcouJYYDfxlAcyc8FvnlJtD68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4Q0Iw RDU4MDIxMDAeFw0yNTA3MjEyMzE3MDNaFw0yNTA3MjUwMDUyMDNaMDMxMTAvBgNV BAMTKDI4NzA2N0Q0MEE1MTQ1QTM2OTZDNDhFNzg0MTMyOEMzMzc2RDIzMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuUNOiMOxhglNyki8XiQZ5nRMW ureEW0abCSYRcuq7xD9DWd5iJcAPAm1oH66fh507sIQKdGkWj2Fj9yMCBhpZ4oP/ dSz9bGXTTkZwqOy/y8kp/uZ4tSjw6qbd6MTiqLpcIFCPb2xoRxl60LX8ZsalZPUI Nw+tkxmL6ZTIHRLVvI0fBZjqEEvjCEqGIIDvuP0ZPkE39l15LWUGpxJPn90wezap nM4pGjnyHv0+89I6ErbGpM4ef8FUUQ1nocH+CdST+ZobHIKX2gSSZuCO+0iVugDO DKDpzSlcVKgafH7rVuYeDZmGV/ODvKcDzdqkH0KsuhaaPs6K1dSplVnrCOZXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKHBn1ApRRaNpbEjnhBMowzdtIzQwHwYDVR0j BBgwFoAUKteJ6/xYwfDk+HOQeB04yw1YAhAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWM2NzdmZC1kNTY5LTRjYzUtYTU2My05YjBmMjQ4YjFhZjEvMC8yQUQ3ODlFQkZD NThDMUYwRTRGODczOTA3ODFEMzhDQjBENTgwMjEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4Q0IwRDU4 MDIxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVjNjc3ZmQtZDU2OS00Y2M1LWE1 NjMtOWIwZjI0OGIxYWYxLzAvMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4 Q0IwRDU4MDIxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJkKlwR2eo1GpJx0IcjPCsE75T5dzfN76TXs cdbONPdrphQZIkG8cls/gSYE8ZkuBMtGR0oiWAwkDXmMWGc5GQOi5+AF19MMSCC3 u5M65ElINAsGFtB7H+zKRYIpXIr/YyUTMfklq/1b4ReXgk+lxvAB6pvbVA+KD2iQ 0B6H546J6YDbBkkckdA6F2aEp/xfNK1sb3trbaSZA528VeUZzGEgkhulvXl5QDUb eqnXOGnf2d//fJH6ZdLtItrzNZGJ6D3H7Xz98cVfyOdAVf0Cnh7rLFxnIERL3ZJU jKmlsByWK5Zf8hGJg4ZFkt+ddC6BbyiaHO6fZJJ7RGyMeipptbo= -----END CERTIFICATE-----Generated at Wed Jul 23 07:57:32 2025 by rpki-client