$ rpki-client -vvf repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft File: 2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft (raw, json) Hash identifier: +beQ84K5/Iqudzzi1aaoqjbSkc4idIxPjfbUcyVA57o= Subject key identifier: F4:D6:7C:B9:D5:4C:BC:48:3B:36:BC:E8:BE:51:1B:B4:50:24:30:07 Authority key identifier: 2A:DD:D4:03:51:73:FA:C3:BB:39:49:CB:36:CC:EF:25:53:79:8B:FC Certificate issuer: /CN=2ADDD4035173FAC3BB3949CB36CCEF2553798BFC Certificate serial: 2353468F4CEEB0E10D025FC9A2D141C8E8757109 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft Manifest number: D8 Signing time: Sun 07 Sep 2025 21:40:39 +0000 Manifest this update: Sun 07 Sep 2025 21:35:39 +0000 Manifest next update: Thu 11 Sep 2025 05:30:39 +0000 Files and hashes: 1: 3135372e32302e3234342e302f32342d3234203d3e20313338303839.roa (hash: teoM6MXntxfZebuRvj4HuDCmBJE7bmAYK9p8NliSwzQ=) 2: 2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.crl (hash: i9BFisuBUxec8qy3bAbx1g9ShSYjzdzDYnUlbkmR8Zs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.crl rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 05:30:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:53:46:8f:4c:ee:b0:e1:0d:02:5f:c9:a2:d1:41:c8:e8:75:71:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ADDD4035173FAC3BB3949CB36CCEF2553798BFC Validity Not Before: Sep 7 21:35:39 2025 GMT Not After : Sep 11 05:30:39 2025 GMT Subject: CN=F4D67CB9D54CBC483B36BCE8BE511BB450243007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:04:32:49:49:c6:e9:68:58:ee:b4:6d:8f:2c: e8:97:42:52:1b:98:50:52:3d:bd:5d:f5:a6:55:d5: b0:c8:0e:70:83:57:84:5b:e0:e9:de:56:9e:8e:36: e1:42:97:1e:50:d1:fa:6c:b3:38:f0:db:02:51:fb: 46:db:20:27:91:4c:0d:dd:59:31:c5:02:57:fa:67: 33:1b:92:ed:fa:9a:cd:ee:ec:f4:f4:03:e7:f6:9d: cc:9b:89:a2:5c:42:87:a7:d8:a4:5e:7b:e3:b3:7c: 5c:77:78:4f:68:04:68:d5:ad:c0:3c:a0:d3:33:3d: 7c:5b:c2:9e:ad:b7:13:e8:19:b7:3e:0d:32:b9:c9: ec:46:13:a4:a4:a4:9b:47:3d:04:c4:23:43:2f:ef: b0:6b:af:0e:3e:a8:8f:a5:8b:7e:61:a4:3c:9a:5e: 5a:f4:2f:9a:c1:73:82:f4:29:3b:64:ea:ea:a7:eb: 80:fd:e6:b7:30:53:f9:40:49:11:0d:44:87:de:2f: 13:a4:a4:3e:63:81:0e:1d:fc:2b:03:4a:9f:4d:15: 36:4f:8d:51:68:ed:ca:36:4a:23:37:15:92:88:d7: 20:02:06:ac:06:a6:32:1f:48:6f:e9:fc:85:35:af: ee:51:62:ec:a9:5e:36:44:01:89:d8:8a:8c:87:64: 60:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D6:7C:B9:D5:4C:BC:48:3B:36:BC:E8:BE:51:1B:B4:50:24:30:07 X509v3 Authority Key Identifier: keyid:2A:DD:D4:03:51:73:FA:C3:BB:39:49:CB:36:CC:EF:25:53:79:8B:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:f9:99:f3:2f:cb:77:2a:32:56:37:e7:a5:d4:d1:c2:12:0f: 01:03:11:d7:31:3a:23:06:7e:6e:13:6d:5b:db:dd:87:68:87: f5:e2:3a:03:de:ed:4f:01:7d:20:a1:d1:50:78:21:89:12:d2: 46:ad:d9:ef:73:ef:c7:f1:16:f3:88:89:9e:d7:e5:45:bd:b4: 8d:54:1d:46:e7:34:66:f5:cf:33:9d:b5:75:41:11:1e:28:82: a9:45:b8:b2:fd:a4:0e:5e:da:86:64:ea:ab:3c:f4:e0:25:39: 54:2f:e9:82:18:39:43:7d:65:85:74:cc:41:8e:3e:35:6d:22: f3:69:33:1d:bb:7e:9f:6c:d3:7e:db:1b:24:27:b4:59:65:d3: 39:c1:6a:b0:6d:94:51:04:f7:f2:3b:7b:ee:1d:6b:ee:b9:af: df:17:87:a6:9b:c8:19:7a:e2:2f:1b:fa:52:0c:e5:9e:1e:eb: af:cc:c2:a0:00:93:b0:ab:30:76:f5:77:17:d9:8d:c8:42:dc: f5:e4:74:ee:73:c2:5f:31:b1:73:1e:e7:6f:79:0b:d7:98:43: 6a:5a:9a:53:d7:a2:c2:e5:60:1b:38:03:3c:ae:a8:5a:82:6e: e6:8d:d1:62:33:48:2d:c8:b0:12:8e:24:05:1d:f2:b0:d7:95: d3:aa:00:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI1NGj0zusOENAl/JotFByOh1cQkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFEREQ0MDM1MTczRkFDM0JCMzk0OUNCMzZDQ0VGMjU1 Mzc5OEJGQzAeFw0yNTA5MDcyMTM1MzlaFw0yNTA5MTEwNTMwMzlaMDMxMTAvBgNV BAMTKEY0RDY3Q0I5RDU0Q0JDNDgzQjM2QkNFOEJFNTExQkI0NTAyNDMwMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuBDJJScbpaFjutG2PLOiXQlIb mFBSPb1d9aZV1bDIDnCDV4Rb4OneVp6ONuFClx5Q0fpsszjw2wJR+0bbICeRTA3d WTHFAlf6ZzMbku36ms3u7PT0A+f2ncybiaJcQoen2KRee+OzfFx3eE9oBGjVrcA8 oNMzPXxbwp6ttxPoGbc+DTK5yexGE6SkpJtHPQTEI0Mv77Brrw4+qI+li35hpDya Xlr0L5rBc4L0KTtk6uqn64D95rcwU/lASRENRIfeLxOkpD5jgQ4d/CsDSp9NFTZP jVFo7co2SiM3FZKI1yACBqwGpjIfSG/p/IU1r+5RYuypXjZEAYnYioyHZGD9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9NZ8udVMvEg7NrzovlEbtFAkMAcwHwYDVR0j BBgwFoAUKt3UA1Fz+sO7OUnLNszvJVN5i/wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODY3YTJlZS1kNDExLTRmZjgtOWY1Yy0zNWQwMzQxMjNmODQvMC8yQURERDQwMzUx NzNGQUMzQkIzOTQ5Q0IzNkNDRUYyNTUzNzk4QkZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkFEREQ0MDM1MTczRkFDM0JCMzk0OUNCMzZDQ0VGMjU1Mzc5 OEJGQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjg2N2EyZWUtZDQxMS00ZmY4LTlm NWMtMzVkMDM0MTIzZjg0LzAvMkFEREQ0MDM1MTczRkFDM0JCMzk0OUNCMzZDQ0VG MjU1Mzc5OEJGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE35mfMvy3cqMlY356XU0cISDwEDEdcxOiMG fm4TbVvb3Ydoh/XiOgPe7U8BfSCh0VB4IYkS0kat2e9z78fxFvOIiZ7X5UW9tI1U HUbnNGb1zzOdtXVBER4ogqlFuLL9pA5e2oZk6qs89OAlOVQv6YIYOUN9ZYV0zEGO PjVtIvNpMx27fp9s037bGyQntFll0znBarBtlFEE9/I7e+4da+65r98Xh6abyBl6 4i8b+lIM5Z4e66/MwqAAk7CrMHb1dxfZjchC3PXkdO5zwl8xsXMe5295C9eYQ2pa mlPXosLlYBs4AzyuqFqCbuaN0WIzSC3IsBKOJAUd8rDXldOqABE= -----END CERTIFICATE-----Generated at Mon Sep 8 05:09:37 2025 by rpki-client