$ rpki-client -vvf repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft File: 2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft (raw, json) Hash identifier: nEmmj5nmHyOwrpaERaQEYEuTgY1M4qSVarEpQ9xMU0o= Subject key identifier: C5:3C:AC:2F:33:C8:D8:95:12:3F:81:BA:83:74:BF:49:66:F7:06:C0 Authority key identifier: 2A:DD:D4:03:51:73:FA:C3:BB:39:49:CB:36:CC:EF:25:53:79:8B:FC Certificate issuer: /CN=2ADDD4035173FAC3BB3949CB36CCEF2553798BFC Certificate serial: 24D7C7748694475FAEB914827FCB678E1977B51A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft Manifest number: C2 Signing time: Sun 20 Jul 2025 14:20:39 +0000 Manifest this update: Sun 20 Jul 2025 14:15:39 +0000 Manifest next update: Wed 23 Jul 2025 21:04:39 +0000 Files and hashes: 1: 2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.crl (hash: xoZt7dtydLk3rvYyfXoHQtxN//cZC0FO0RxhdOOlbgM=) 2: 3135372e32302e3234342e302f32342d3234203d3e20313338303839.roa (hash: teoM6MXntxfZebuRvj4HuDCmBJE7bmAYK9p8NliSwzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.crl rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 21:04:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:d7:c7:74:86:94:47:5f:ae:b9:14:82:7f:cb:67:8e:19:77:b5:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ADDD4035173FAC3BB3949CB36CCEF2553798BFC Validity Not Before: Jul 20 14:15:39 2025 GMT Not After : Jul 23 21:04:39 2025 GMT Subject: CN=C53CAC2F33C8D895123F81BA8374BF4966F706C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d5:36:67:4f:be:61:3f:2e:40:fc:39:4d:76: ac:48:58:00:85:82:c1:03:cc:5d:51:8f:e0:d2:28: 34:3c:22:f6:74:8b:f5:91:a8:dc:d5:9d:4a:fb:a0: 7d:f0:12:3e:2e:c5:c5:dc:82:ec:6b:25:c2:47:a8: ff:98:db:39:67:73:14:ec:ac:b9:82:2d:9d:8d:3f: 46:25:59:30:0f:e6:79:9d:11:f9:cf:6e:8b:b6:91: 7e:09:1a:df:b9:31:72:5f:4a:a9:5e:c0:ee:6c:52: e5:0f:98:fa:ba:59:0c:80:be:22:27:d9:9c:30:e8: 43:a5:14:5d:0d:72:56:dc:e9:12:f7:27:d2:19:6b: 8c:60:9a:8f:eb:a0:b2:ae:b0:a9:92:b1:4a:a6:ac: d1:8d:3d:64:ad:25:0f:92:14:55:4e:8b:13:0d:96: 9c:08:ed:16:87:09:6d:41:24:8a:a6:0d:5f:b6:aa: af:64:c3:3f:f1:64:ed:f5:1a:f3:a0:00:57:64:ea: a7:77:d4:1e:57:be:27:ec:c6:b7:d4:5f:04:56:bd: 58:32:2d:f8:cb:c4:a1:e8:48:89:ea:58:7d:5d:44: 25:6b:0c:04:b6:6c:bf:99:6d:b4:f1:45:71:7c:62: 5f:b0:88:ba:03:e1:45:aa:15:e7:bc:4c:8e:0b:ed: fc:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:3C:AC:2F:33:C8:D8:95:12:3F:81:BA:83:74:BF:49:66:F7:06:C0 X509v3 Authority Key Identifier: keyid:2A:DD:D4:03:51:73:FA:C3:BB:39:49:CB:36:CC:EF:25:53:79:8B:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:60:ff:70:50:04:bb:99:f2:eb:b0:1c:ea:c7:78:98:f7:be: a5:79:c6:82:4d:f4:54:13:2e:70:d7:3c:3e:ff:b0:93:f9:a9: 3b:59:1b:f1:fb:8e:e6:2e:6e:e0:e0:b4:20:55:4f:01:07:f7: 8d:b3:9f:23:81:a1:1c:56:7a:0a:50:d6:c8:d1:9c:b2:ac:a4: b3:9c:e7:fe:21:54:22:2b:cf:2b:50:49:e2:98:2e:f4:ef:ea: a2:a1:7a:6b:59:05:98:03:4b:fa:2a:18:b4:37:5b:76:71:17: 85:b5:a1:ad:ed:b2:23:ec:18:d1:4b:33:2a:fb:13:c4:a9:55: 8e:3e:f8:4b:55:55:2e:e7:d7:4d:4d:88:bf:b1:ce:ce:7e:d4: 23:92:6b:92:d2:17:c6:d7:5d:ca:b0:b0:bb:7d:dc:66:68:e7: f6:d9:47:39:fe:6c:54:75:36:71:9a:79:9e:5b:2b:13:79:e9: 12:9c:5c:fc:28:bc:08:09:58:8e:af:06:bf:2c:70:8a:ad:e2: 73:c7:06:c6:24:5b:66:c3:e3:33:ef:07:0a:5f:8d:de:82:f4: 84:be:b2:54:bc:9e:fc:e8:82:18:2e:72:43:1c:38:cc:01:28: 52:47:42:d7:a1:51:8c:29:bb:90:f4:9e:ac:f4:8b:18:9d:8f: ab:fd:ce:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJNfHdIaUR1+uuRSCf8tnjhl3tRowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFEREQ0MDM1MTczRkFDM0JCMzk0OUNCMzZDQ0VGMjU1 Mzc5OEJGQzAeFw0yNTA3MjAxNDE1MzlaFw0yNTA3MjMyMTA0MzlaMDMxMTAvBgNV BAMTKEM1M0NBQzJGMzNDOEQ4OTUxMjNGODFCQTgzNzRCRjQ5NjZGNzA2QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP1TZnT75hPy5A/DlNdqxIWACF gsEDzF1Rj+DSKDQ8IvZ0i/WRqNzVnUr7oH3wEj4uxcXcguxrJcJHqP+Y2zlncxTs rLmCLZ2NP0YlWTAP5nmdEfnPbou2kX4JGt+5MXJfSqlewO5sUuUPmPq6WQyAviIn 2Zww6EOlFF0Nclbc6RL3J9IZa4xgmo/roLKusKmSsUqmrNGNPWStJQ+SFFVOixMN lpwI7RaHCW1BJIqmDV+2qq9kwz/xZO31GvOgAFdk6qd31B5XvifsxrfUXwRWvVgy LfjLxKHoSInqWH1dRCVrDAS2bL+ZbbTxRXF8Yl+wiLoD4UWqFee8TI4L7fzlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxTysLzPI2JUSP4G6g3S/SWb3BsAwHwYDVR0j BBgwFoAUKt3UA1Fz+sO7OUnLNszvJVN5i/wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODY3YTJlZS1kNDExLTRmZjgtOWY1Yy0zNWQwMzQxMjNmODQvMC8yQURERDQwMzUx NzNGQUMzQkIzOTQ5Q0IzNkNDRUYyNTUzNzk4QkZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkFEREQ0MDM1MTczRkFDM0JCMzk0OUNCMzZDQ0VGMjU1Mzc5 OEJGQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjg2N2EyZWUtZDQxMS00ZmY4LTlm NWMtMzVkMDM0MTIzZjg0LzAvMkFEREQ0MDM1MTczRkFDM0JCMzk0OUNCMzZDQ0VG MjU1Mzc5OEJGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFxg/3BQBLuZ8uuwHOrHeJj3vqV5xoJN9FQT LnDXPD7/sJP5qTtZG/H7juYubuDgtCBVTwEH942znyOBoRxWegpQ1sjRnLKspLOc 5/4hVCIrzytQSeKYLvTv6qKhemtZBZgDS/oqGLQ3W3ZxF4W1oa3tsiPsGNFLMyr7 E8SpVY4++EtVVS7n101NiL+xzs5+1COSa5LSF8bXXcqwsLt93GZo5/bZRzn+bFR1 NnGaeZ5bKxN56RKcXPwovAgJWI6vBr8scIqt4nPHBsYkW2bD4zPvBwpfjd6C9IS+ slS8nvzoghguckMcOMwBKFJHQtehUYwpu5D0nqz0ixidj6v9zoM= -----END CERTIFICATE-----Generated at Mon Jul 21 10:53:16 2025 by rpki-client