$ rpki-client -vvf repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft File: 2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft (raw, json) Hash identifier: mgdNoPnSp3xrx4IP2pZmt3NQPjaEKrQ9ussOO04q53A= Subject key identifier: 08:4D:AA:01:F0:57:F9:D2:0E:95:FF:C6:4B:BC:E0:8A:4E:E3:FC:5E Authority key identifier: 2D:51:7D:C0:24:CE:FC:FA:F8:0C:F7:FD:39:22:46:89:4E:94:F1:2F Certificate issuer: /CN=2D517DC024CEFCFAF80CF7FD392246894E94F12F Certificate serial: 1CC3FAE0270E9906CA9E88AB70D3D304BC0BEB09 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft Manifest number: F2 Signing time: Sun 07 Sep 2025 02:10:51 +0000 Manifest this update: Sun 07 Sep 2025 02:05:51 +0000 Manifest next update: Wed 10 Sep 2025 11:32:51 +0000 Files and hashes: 1: 3130332e3135362e3131302e302f32342d3234203d3e20313431303839.roa (hash: oX2rRL4yj7u4AFId0yrPwmCzP4drZZYO3pu9upGhNCY=) 2: 2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl (hash: 3VB6ypU2HbkqX7A2h1X/iW0RnbuBWKwQaALHW3HfvQs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:c3:fa:e0:27:0e:99:06:ca:9e:88:ab:70:d3:d3:04:bc:0b:eb:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D517DC024CEFCFAF80CF7FD392246894E94F12F Validity Not Before: Sep 7 02:05:51 2025 GMT Not After : Sep 10 11:32:51 2025 GMT Subject: CN=084DAA01F057F9D20E95FFC64BBCE08A4EE3FC5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5b:7f:96:11:d2:9c:e1:3c:74:35:e8:62:63: 02:e3:d1:8c:cb:63:71:2e:f4:f2:74:ad:f2:e7:53: e0:7c:d5:0e:12:ae:89:a0:f5:60:59:56:00:96:80: 52:a5:31:5c:4c:cd:c6:8c:6b:56:d5:72:4a:6f:47: b9:db:3f:14:f5:2d:a8:f9:ec:e2:36:3a:96:e8:7d: c1:d8:d4:e6:7a:b0:84:30:e8:b4:1c:37:83:38:bc: 33:37:50:36:b6:b0:3d:3b:9e:45:12:2d:20:6a:4b: 05:9b:f1:47:9f:49:be:55:e4:dc:f1:19:31:6f:06: cc:00:ba:ce:8f:da:56:94:4c:99:b5:eb:4b:98:7c: 1d:52:81:df:14:a7:a3:51:6b:ee:98:c1:c2:11:6c: d8:10:38:2d:18:d8:46:f5:24:33:e0:e3:82:35:85: 04:7c:c1:a6:3c:6d:f3:2a:37:65:fe:85:03:cc:c5: 32:51:69:52:3a:b5:f2:45:d9:e0:aa:31:07:f9:7d: 81:a9:3d:5f:67:a5:7a:53:0f:db:75:d4:71:1d:15: e2:23:21:af:50:c9:d7:79:5f:dd:04:6f:e9:3a:14: fb:9c:e3:cf:0b:6b:fd:1f:04:e2:e5:ae:61:7c:a1: 6d:b2:1b:a9:7f:d9:53:83:9e:13:3d:e3:a0:6a:56: 91:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:4D:AA:01:F0:57:F9:D2:0E:95:FF:C6:4B:BC:E0:8A:4E:E3:FC:5E X509v3 Authority Key Identifier: keyid:2D:51:7D:C0:24:CE:FC:FA:F8:0C:F7:FD:39:22:46:89:4E:94:F1:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:63:85:35:9a:1c:ee:c4:74:94:90:b2:0e:db:76:1d:0a:e5: 6c:39:63:f7:65:b2:52:ec:62:dd:62:83:99:04:39:43:70:30: 2e:97:da:78:63:5d:6d:53:b9:c6:4a:1b:7a:b5:12:69:9f:9d: 75:e4:48:6d:cd:41:64:19:85:49:0a:89:5b:10:a9:b3:97:5c: 3c:a2:50:e9:32:18:73:ab:a5:f8:f6:d2:c3:2e:ef:ab:42:cc: e6:26:00:69:cf:f5:f9:f7:43:da:22:89:94:a6:0c:31:db:e1: cd:bc:37:b5:f4:67:9b:b1:16:0d:01:0b:a5:bd:e5:6b:6c:c9: 3c:99:a0:16:ca:17:37:6f:c9:17:d9:07:a8:20:74:3e:d6:12: a1:80:66:19:49:49:dc:62:67:d8:40:34:90:bb:20:42:53:c3: da:f7:42:f6:ba:25:4e:53:b3:fd:e8:1c:7c:b9:08:2e:d9:d6: 48:10:00:46:c4:90:ec:9c:5f:43:e8:e5:dd:1f:9c:fa:fc:3d: b0:7d:60:6e:8b:21:b6:0c:f2:c5:c4:4d:8c:68:1f:96:b6:9a: a4:9f:39:a9:5c:aa:f5:cd:a0:f0:2d:27:79:c8:af:5a:3c:6b: ae:b0:30:f6:19:00:de:6c:fe:15:dd:e9:87:3a:3a:7a:56:0d: c6:a3:31:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHMP64CcOmQbKnoircNPTBLwL6wkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2ODk0 RTk0RjEyRjAeFw0yNTA5MDcwMjA1NTFaFw0yNTA5MTAxMTMyNTFaMDMxMTAvBgNV BAMTKDA4NERBQTAxRjA1N0Y5RDIwRTk1RkZDNjRCQkNFMDhBNEVFM0ZDNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkW3+WEdKc4Tx0NehiYwLj0YzL Y3Eu9PJ0rfLnU+B81Q4Sromg9WBZVgCWgFKlMVxMzcaMa1bVckpvR7nbPxT1Laj5 7OI2OpbofcHY1OZ6sIQw6LQcN4M4vDM3UDa2sD07nkUSLSBqSwWb8UefSb5V5Nzx GTFvBswAus6P2laUTJm160uYfB1Sgd8Up6NRa+6YwcIRbNgQOC0Y2Eb1JDPg44I1 hQR8waY8bfMqN2X+hQPMxTJRaVI6tfJF2eCqMQf5fYGpPV9npXpTD9t11HEdFeIj Ia9Qydd5X90Eb+k6FPuc488La/0fBOLlrmF8oW2yG6l/2VODnhM946BqVpE5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCE2qAfBX+dIOlf/GS7zgik7j/F4wHwYDVR0j BBgwFoAULVF9wCTO/Pr4DPf9OSJGiU6U8S8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDMzYTFjNi0wZjcwLTRjOTgtOTZiMC1jYWI1ODEyNmFiOTQvMC8yRDUxN0RDMDI0 Q0VGQ0ZBRjgwQ0Y3RkQzOTIyNDY4OTRFOTRGMTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2ODk0RTk0 RjEyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQzM2ExYzYtMGY3MC00Yzk4LTk2 YjAtY2FiNTgxMjZhYjk0LzAvMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2 ODk0RTk0RjEyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGRjhTWaHO7EdJSQsg7bdh0K5Ww5Y/dlslLs Yt1ig5kEOUNwMC6X2nhjXW1TucZKG3q1EmmfnXXkSG3NQWQZhUkKiVsQqbOXXDyi UOkyGHOrpfj20sMu76tCzOYmAGnP9fn3Q9oiiZSmDDHb4c28N7X0Z5uxFg0BC6W9 5WtsyTyZoBbKFzdvyRfZB6ggdD7WEqGAZhlJSdxiZ9hANJC7IEJTw9r3Qva6JU5T s/3oHHy5CC7Z1kgQAEbEkOycX0Po5d0fnPr8PbB9YG6LIbYM8sXETYxoH5a2mqSf OalcqvXNoPAtJ3nIr1o8a66wMPYZAN5s/hXd6Yc6OnpWDcajMXA= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:46 2025 by rpki-client