$ rpki-client -vvf repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft File: 2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft (raw, json) Hash identifier: 80Z5dBvhyEzXLXwqOWxiUyROfeT0jy8oDHebrSUV6yo= Subject key identifier: 88:B5:9C:48:70:AB:38:79:EA:07:70:70:1D:D9:B3:56:63:E5:2E:29 Authority key identifier: 2A:06:B4:29:F7:0B:86:9F:9E:70:FB:36:95:16:74:F7:D8:A4:AC:4E Certificate issuer: /CN=2A06B429F70B869F9E70FB36951674F7D8A4AC4E Certificate serial: 611237C363CF1BB02A823774F95AABD8506A0943 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft Manifest number: 0127 Signing time: Thu 04 Sep 2025 10:32:14 +0000 Manifest this update: Thu 04 Sep 2025 10:27:14 +0000 Manifest next update: Sun 07 Sep 2025 11:28:14 +0000 Files and hashes: 1: 2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl (hash: SozaVeQiyNeA0forFIRuZwJWM7wWXDK6i5urvtNn9w4=) 2: 3130332e3135312e32342e302f32342d3234203d3e20313530353332.roa (hash: 3tho/NQEZ7clEuLXEou7D6b7IKWMhHVDrU5KgBLQwQM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 11:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:12:37:c3:63:cf:1b:b0:2a:82:37:74:f9:5a:ab:d8:50:6a:09:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A06B429F70B869F9E70FB36951674F7D8A4AC4E Validity Not Before: Sep 4 10:27:14 2025 GMT Not After : Sep 7 11:28:14 2025 GMT Subject: CN=88B59C4870AB3879EA0770701DD9B35663E52E29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:20:a2:57:e5:90:54:c8:81:3d:05:14:aa:70: 07:4b:13:f6:dd:4b:15:9e:2d:d6:7b:98:3d:17:0b: d4:4c:a4:4f:d5:ca:46:35:6a:eb:69:4e:78:b0:33: e4:ca:e8:9d:04:c9:a2:eb:c6:96:be:c5:30:71:df: e3:fe:5b:24:ea:a0:73:0b:3b:2b:9f:02:7b:a6:5c: f2:dd:bd:53:03:f2:bf:9d:83:30:89:fb:14:67:f5: 47:ce:5c:8d:81:2a:7f:a7:af:d0:ee:7c:68:bb:24: dd:41:ae:47:84:c0:6b:a0:12:71:9d:bc:69:a0:76: b0:4d:b0:63:b4:28:0e:c0:9f:ac:0b:ff:44:eb:30: fa:4c:f2:a2:c3:fa:7f:04:60:44:b7:93:3a:8c:b0: 8c:be:e4:1d:78:fb:57:ea:7b:de:05:98:6a:a1:9d: de:4f:bb:37:9f:2a:09:cb:38:2a:c6:c5:93:aa:4e: c6:3c:8c:de:99:ae:ad:e8:2b:11:bd:26:f7:4d:83: 4e:bb:f7:3b:b5:3c:67:26:5c:57:e5:29:02:90:dd: f8:f1:df:a5:d9:69:76:5e:33:d0:01:24:76:40:37: b2:8b:c8:cf:21:b0:9b:50:10:23:09:10:5a:16:cf: 95:25:76:67:60:50:dc:2b:4d:4e:50:48:3c:5f:f7: a8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B5:9C:48:70:AB:38:79:EA:07:70:70:1D:D9:B3:56:63:E5:2E:29 X509v3 Authority Key Identifier: keyid:2A:06:B4:29:F7:0B:86:9F:9E:70:FB:36:95:16:74:F7:D8:A4:AC:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:5f:a7:03:43:1b:d4:a8:d4:dc:8b:ce:ac:dd:1c:5d:de:ea: 97:35:64:10:f3:12:19:0c:e7:ee:9a:98:27:65:d1:7b:6c:1d: de:53:0b:cd:35:bb:d0:ba:84:5a:47:89:99:1a:dc:e7:52:49: 27:73:20:82:b5:0b:66:3d:f0:ee:da:2a:a2:cd:14:b7:25:b0: 23:54:8f:c2:0c:51:b2:25:e8:77:b9:f9:9d:bf:ad:da:4e:ea: b0:e1:df:58:16:37:81:04:28:42:19:aa:da:3c:e0:82:8d:9a: 6b:b0:fc:d7:62:ca:7c:7f:27:f7:9f:77:9d:1d:8c:d1:e6:e9: ca:b1:8d:bc:44:54:d0:a7:f1:11:cb:62:10:5d:10:a1:bc:8c: 38:30:ab:f9:4c:45:f0:b9:d7:65:31:13:b2:af:f4:94:2e:2a: 98:ee:e3:d1:19:7b:92:50:34:08:4a:6e:4f:5e:86:15:ec:c7: 67:3a:6a:2e:57:ea:45:09:60:8b:6d:4b:01:7a:a5:3b:97:bb: 0e:b7:cf:c8:07:d5:28:58:a6:42:a4:2d:0e:25:bf:33:e4:c1: 9e:09:1a:99:21:41:7d:90:2f:3a:b0:dd:62:39:20:0b:22:48: c6:0d:6d:62:d7:1d:cb:82:a2:2c:d7:9e:9c:d4:ad:37:23:13: dd:de:8b:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYRI3w2PPG7Aqgjd0+Vqr2FBqCUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEwNkI0MjlGNzBCODY5RjlFNzBGQjM2OTUxNjc0RjdE OEE0QUM0RTAeFw0yNTA5MDQxMDI3MTRaFw0yNTA5MDcxMTI4MTRaMDMxMTAvBgNV BAMTKDg4QjU5QzQ4NzBBQjM4NzlFQTA3NzA3MDFERDlCMzU2NjNFNTJFMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7IKJX5ZBUyIE9BRSqcAdLE/bd SxWeLdZ7mD0XC9RMpE/VykY1autpTniwM+TK6J0EyaLrxpa+xTBx3+P+WyTqoHML OyufAnumXPLdvVMD8r+dgzCJ+xRn9UfOXI2BKn+nr9DufGi7JN1BrkeEwGugEnGd vGmgdrBNsGO0KA7An6wL/0TrMPpM8qLD+n8EYES3kzqMsIy+5B14+1fqe94FmGqh nd5PuzefKgnLOCrGxZOqTsY8jN6Zrq3oKxG9JvdNg0679zu1PGcmXFflKQKQ3fjx 36XZaXZeM9ABJHZAN7KLyM8hsJtQECMJEFoWz5UldmdgUNwrTU5QSDxf96iLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiLWcSHCrOHnqB3BwHdmzVmPlLikwHwYDVR0j BBgwFoAUKga0KfcLhp+ecPs2lRZ099ikrE4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjVhNDdiNi01NTEzLTQ2MTAtOTRjZi0xZmVlYzRlZWVjZjMvMC8yQTA2QjQyOUY3 MEI4NjlGOUU3MEZCMzY5NTE2NzRGN0Q4QTRBQzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkEwNkI0MjlGNzBCODY5RjlFNzBGQjM2OTUxNjc0RjdEOEE0 QUM0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI1YTQ3YjYtNTUxMy00NjEwLTk0 Y2YtMWZlZWM0ZWVlY2YzLzAvMkEwNkI0MjlGNzBCODY5RjlFNzBGQjM2OTUxNjc0 RjdEOEE0QUM0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABVfpwNDG9So1NyLzqzdHF3e6pc1ZBDzEhkM 5+6amCdl0XtsHd5TC801u9C6hFpHiZka3OdSSSdzIIK1C2Y98O7aKqLNFLclsCNU j8IMUbIl6He5+Z2/rdpO6rDh31gWN4EEKEIZqto84IKNmmuw/Ndiynx/J/efd50d jNHm6cqxjbxEVNCn8RHLYhBdEKG8jDgwq/lMRfC512UxE7Kv9JQuKpju49EZe5JQ NAhKbk9ehhXsx2c6ai5X6kUJYIttSwF6pTuXuw63z8gH1ShYpkKkLQ4lvzPkwZ4J GpkhQX2QLzqw3WI5IAsiSMYNbWLXHcuCoizXnpzUrTcjE93ei30= -----END CERTIFICATE-----Generated at Fri Sep 5 10:31:53 2025 by rpki-client