$ rpki-client -vvf repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft File: 2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft (raw, json) Hash identifier: 4Ng/mtNIiDa/dHglOZrSblLSTeMT0nsSkUHEkaCZOYg= Subject key identifier: 62:9F:B9:08:C7:1C:3E:A4:D9:3E:58:DA:75:CC:5E:A0:35:87:2D:12 Authority key identifier: 2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9 Certificate issuer: /CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9 Certificate serial: 0FB713AF7611C378E84E1616AE9BB9A18FAB9876 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft Manifest number: 0502 Signing time: Thu 04 Sep 2025 16:11:50 +0000 Manifest this update: Thu 04 Sep 2025 16:06:50 +0000 Manifest next update: Mon 08 Sep 2025 00:50:50 +0000 Files and hashes: 1: 323430323a663038303a333a3a2f34382d3438203d3e203338313530.roa (hash: oVmfGlTp0DWOtWPGyWCK/51mm8QlFMAOkDDm7W0JfnE=) 2: 3230322e39312e31352e302f32342d3234203d3e203338313530.roa (hash: sTkMNKXQHwGJCIGPBjMVfmb030wQu4FTAnEhwXDkkhA=) 3: 323430323a663038303a3a2f34382d3438203d3e203338313530.roa (hash: SpSJ2mlMQ8WdpZZy+WtaRGJCKRn7SkirsoH4mwvq2iA=) 4: 3138302e3231342e3234382e302f32342d3234203d3e203338313530.roa (hash: O4758ltnaCnZlk7IYIR3KUuRIpNS2S4KZ7yVd+rr0y0=) 5: 3138302e3231342e3235322e302f32342d3234203d3e203338313530.roa (hash: oOJaEiRPwPQflN2dss15Y4scB4IK0srdXT4sQ+7Afow=) 6: 3138302e3231342e3234322e302f32342d3234203d3e203338313530.roa (hash: b1d2IpMrPiIjBD6MTNOx5pdXixsLXZonVO5D5NGCeqQ=) 7: 3138302e3231342e3234362e302f32342d3234203d3e203338313530.roa (hash: euoMpvL4eG72VF7oEqlEoSVWhRjwaeq3y0huB9mjd6w=) 8: 3230322e39312e31302e302f32342d3234203d3e203338313530.roa (hash: iEwos51aWtJInprKu1evUCiZY2FYY6kr/E794RVuLRw=) 9: 3230322e39312e31332e302f32342d3234203d3e203338313530.roa (hash: Pm3ejHe0iKXyhk2uLd7JZnNwWHWfKfQSqqt4OykxpQA=) 10: 3230322e39312e31322e302f32342d3234203d3e203338313530.roa (hash: M1sZzZsXerpK67gBWx+pwUlEiAdZNEC8sdxke6ageOg=) 11: 3138302e3231342e3234302e302f32342d3234203d3e203338313530.roa (hash: 3hpRgS72xqbHw/rzHvrZvr06sNkUSk2YClN/PS2G8VY=) 12: 3230322e39312e31312e302f32342d3234203d3e203338313530.roa (hash: GOw6BJn4XT5wEmOGVeX/6A1aWsswmeb6q3J3zFZr2JM=) 13: 3138302e3231342e3234332e302f32342d3234203d3e203338313530.roa (hash: akxHC8MKM3EFjHhlpdlYP+/pk7TEX/1Nsq+20Bs3aRk=) 14: 3138302e3231342e3234372e302f32342d3234203d3e203338313530.roa (hash: 7CnLEJTxSmV5XmK1oL/nqrOB4/valIkxzWgpmSqfSL0=) 15: 3138302e3231342e3234392e302f32342d3234203d3e203338313530.roa (hash: ktBqyZQvnsVWZJg0o8QMMym54n+sUY8BtLk1pA6WS3M=) 16: 3230322e39312e382e302f32342d3234203d3e203338313530.roa (hash: Ge6toEI3GzH1rudvQNuKe4sTOqkKcImFzmaL0fB9K2A=) 17: 323430323a663038303a613a3a2f34382d3438203d3e203338313530.roa (hash: DnA9pVTlc5t5JUQmGO4bpvoQrAWbOAtoPuSdy5Z19iI=) 18: 3230322e39312e31342e302f32342d3234203d3e203338313530.roa (hash: afV3DuPWJs229SMBfZ6L1zzWwdYeqEIzLl+zAnPOPc8=) 19: 3138302e3231342e3235342e302f32342d3234203d3e203338313530.roa (hash: qU/iCVYcrH5NwRFFUnpTANC1C4dNa/LYJXSxq8pN8yQ=) 20: 3138302e3231342e3235332e302f32342d3234203d3e203338313530.roa (hash: vVu41fldo66s3GTiO3p70Y9WjrS6PJn4ErhvMTYrL+0=) 21: 3138302e3231342e3234342e302f32342d3234203d3e203338313530.roa (hash: t73bJSev/MnTBxda4w51EgtY3s6q8wQKW/7viVMLk2M=) 22: 323430323a663038303a313a3a2f34382d3438203d3e203338313530.roa (hash: l7IvhWfbT+lx2dajFWFQHmgoo+JryhgkVz+DjITDf5w=) 23: 3138302e3231342e3235352e302f32342d3234203d3e203338313530.roa (hash: 9DRtavO7TXPRRO9r4nJOU2l6z0jZDLCjiuHMpKPIfJU=) 24: 323430323a663038303a323a3a2f34382d3438203d3e203338313530.roa (hash: nbkYpz+Buhh+XcMqkAbLahjlkTuDcneq98AvbJE0oqQ=) 25: 323430323a663038303a633a3a2f34382d3438203d3e203338313530.roa (hash: 2I4LUvDndEY+56Z45Zke7IZg+TWoP7vGoCnv2WeX4qA=) 26: 323430323a663038303a623a3a2f34382d3438203d3e203338313530.roa (hash: Rjbhv9edaboHxu8zehTXAVaGiJWP5SEtMWZfSRiWBmE=) 27: 3138302e3231342e3234312e302f32342d3234203d3e203338313530.roa (hash: bu8PQupPQERGQ/wzLVVe3ZYhIOmwELfx937WvLW0lzc=) 28: 3138302e3231342e3234352e302f32342d3234203d3e203338313530.roa (hash: impujDOUoN2BKQyTyiVBUJjqkOdpqC1eOXOcnJD1Ge8=) 29: 2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl (hash: evzGCJt3Y3jsfXU1j05VGD/DyfLKMH8wkhU2VtI9mbU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 00:50:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:b7:13:af:76:11:c3:78:e8:4e:16:16:ae:9b:b9:a1:8f:ab:98:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9 Validity Not Before: Sep 4 16:06:50 2025 GMT Not After : Sep 8 00:50:50 2025 GMT Subject: CN=629FB908C71C3EA4D93E58DA75CC5EA035872D12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2c:dd:2b:75:47:ec:73:0f:e8:de:61:a1:8e: fc:e0:78:91:b8:bb:b7:a4:4c:0c:66:10:6b:f9:26: 80:c8:6a:fa:4e:69:ed:ae:1c:16:33:f6:d4:e1:0f: 33:93:34:03:91:9a:c5:68:64:70:cf:ee:08:ee:fe: a5:16:bb:e3:9e:c6:3f:3f:db:e5:b3:35:39:63:33: ea:8c:f1:bd:cd:cf:34:7e:60:eb:23:b5:fc:78:94: bb:ff:13:ed:6a:37:c3:8e:bc:42:65:5d:1f:a4:28: 5a:ad:67:c9:51:d3:fc:75:d5:2e:49:00:ba:61:46: f1:a6:2b:c4:43:9a:d7:b9:b4:20:8a:f1:b8:9d:8c: 89:e3:81:72:29:7b:61:0e:e8:56:ac:96:30:79:fb: 89:e4:4b:f5:a3:83:42:87:db:c1:23:09:bb:e5:eb: 0e:41:15:81:0e:1f:bb:a0:63:2d:cc:bf:32:9f:5a: 94:8f:06:f2:d8:6a:9d:8b:9c:0c:27:ea:9b:97:53: 20:4e:92:88:63:c4:e0:d8:98:fe:9e:23:f7:c9:44: e4:4b:56:ea:e0:10:68:8e:35:e6:23:03:c4:ca:aa: 85:8f:20:b5:7a:8d:90:73:f6:8c:9a:c9:41:ff:70: b7:21:e5:10:44:67:45:4e:06:9f:07:6f:14:c1:ad: 26:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:9F:B9:08:C7:1C:3E:A4:D9:3E:58:DA:75:CC:5E:A0:35:87:2D:12 X509v3 Authority Key Identifier: keyid:2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:7d:b0:69:99:d4:2c:10:ec:3b:17:fb:a1:da:79:23:3f:21: ef:a3:43:3e:2d:19:b9:82:87:b0:ad:e4:eb:77:53:22:1c:eb: f6:80:bc:5a:12:49:03:68:04:2d:1a:0f:ac:0b:49:0c:54:e0: 8a:29:9d:b3:90:23:e6:c4:8b:07:6f:d2:06:0d:6c:e7:ef:96: dc:65:3e:fe:51:55:c0:04:16:a0:73:a1:0b:c8:c3:c4:82:9c: 26:a6:ab:4c:24:ad:30:75:0b:4c:92:ea:c9:cf:8f:a8:c7:78: 3d:3b:44:52:37:80:a1:b8:ac:8f:d6:1a:f0:67:64:09:db:1a: 0e:23:6f:dc:3a:5c:31:e0:17:88:1b:1c:c3:ef:a5:d6:c0:6c: 3f:3a:8a:ab:a5:1d:bc:81:61:3c:e9:6d:dd:4a:d7:f4:9d:dd: b7:b8:ee:38:57:b6:ac:7a:d9:da:58:f4:8b:66:10:0e:b8:4a: df:a0:9f:14:88:4a:f4:90:40:3a:19:80:0f:90:03:49:45:5e: f0:af:bf:c8:df:66:f8:2d:d0:c8:11:de:50:2d:83:d0:9d:7c: 56:12:ae:56:39:dd:bc:94:9f:06:da:f8:50:92:8a:b0:fe:e2: 8f:36:c7:c3:77:00:1e:ee:77:2b:c2:7c:41:18:6e:0e:2f:e6: 72:7e:e7:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD7cTr3YRw3joThYWrpu5oY+rmHYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNBNDc0ODdGNzI3ODE3MzMzMzBBMzhDOTVGRjhBNURG NjhDREJCOTAeFw0yNTA5MDQxNjA2NTBaFw0yNTA5MDgwMDUwNTBaMDMxMTAvBgNV BAMTKDYyOUZCOTA4QzcxQzNFQTREOTNFNThEQTc1Q0M1RUEwMzU4NzJEMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6LN0rdUfscw/o3mGhjvzgeJG4 u7ekTAxmEGv5JoDIavpOae2uHBYz9tThDzOTNAORmsVoZHDP7gju/qUWu+Oexj8/ 2+WzNTljM+qM8b3NzzR+YOsjtfx4lLv/E+1qN8OOvEJlXR+kKFqtZ8lR0/x11S5J ALphRvGmK8RDmte5tCCK8bidjInjgXIpe2EO6FasljB5+4nkS/Wjg0KH28EjCbvl 6w5BFYEOH7ugYy3MvzKfWpSPBvLYap2LnAwn6puXUyBOkohjxODYmP6eI/fJRORL VurgEGiONeYjA8TKqoWPILV6jZBz9oyayUH/cLch5RBEZ0VOBp8HbxTBrSZFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYp+5CMccPqTZPljadcxeoDWHLRIwHwYDVR0j BBgwFoAULKR0h/cngXMzMKOMlf+KXfaM27kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2U2NWI2Ny05MDVjLTQwM2MtOGM3OS0yMzE1NjU5NjY4YWEvMC8yQ0E0NzQ4N0Y3 Mjc4MTczMzMzMEEzOEM5NUZGOEE1REY2OENEQkI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkNBNDc0ODdGNzI3ODE3MzMzMzBBMzhDOTVGRjhBNURGNjhD REJCOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTdlNjViNjctOTA1Yy00MDNjLThj NzktMjMxNTY1OTY2OGFhLzAvMkNBNDc0ODdGNzI3ODE3MzMzMzBBMzhDOTVGRjhB NURGNjhDREJCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFl9sGmZ1CwQ7DsX+6HaeSM/Ie+jQz4tGbmC h7Ct5Ot3UyIc6/aAvFoSSQNoBC0aD6wLSQxU4IopnbOQI+bEiwdv0gYNbOfvltxl Pv5RVcAEFqBzoQvIw8SCnCamq0wkrTB1C0yS6snPj6jHeD07RFI3gKG4rI/WGvBn ZAnbGg4jb9w6XDHgF4gbHMPvpdbAbD86iqulHbyBYTzpbd1K1/Sd3be47jhXtqx6 2dpY9ItmEA64St+gnxSISvSQQDoZgA+QA0lFXvCvv8jfZvgt0MgR3lAtg9CdfFYS rlY53byUnwba+FCSirD+4o82x8N3AB7udyvCfEEYbg4v5nJ+52k= -----END CERTIFICATE-----Generated at Fri Sep 5 10:29:31 2025 by rpki-client