$ rpki-client -vvf repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft File: 2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft (raw, json) Hash identifier: NgVK/UmRHP+frB/X26dnQGrCUJndEhTB1ccpET8oF9s= Subject key identifier: F6:EC:2F:96:2C:AF:BB:F2:BD:E2:9F:09:51:C9:E6:99:E6:D6:96:8C Authority key identifier: 2D:9D:91:37:D4:42:7A:9D:34:E1:B1:5F:16:C5:C6:89:A8:C5:49:D9 Certificate issuer: /CN=2D9D9137D4427A9D34E1B15F16C5C689A8C549D9 Certificate serial: 61D0238E09B64364666138F0BCF54215A084E2E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft Manifest number: 0507 Signing time: Sun 07 Sep 2025 11:51:20 +0000 Manifest this update: Sun 07 Sep 2025 11:46:20 +0000 Manifest next update: Wed 10 Sep 2025 15:00:20 +0000 Files and hashes: 1: 3130332e3134342e3130332e302f32342d3234203d3e20313339343231.roa (hash: /ZqmuN0x+ZwpTTLsOK93bf5aWydgNNzXSi3NS4bqhi0=) 2: 2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.crl (hash: i/oxFKnSo40IDXmG26VqNSAfyDlwSxn3ZBee63jf9ZE=) 3: 3130332e3134342e3130322e302f32332d3234203d3e20313339343231.roa (hash: cdpLxSADx6mq88cWkf5UoxPyeajYM3Kq/Bc+NW2yaec=) 4: 3130332e3134342e3130322e302f32342d3234203d3e20313339343231.roa (hash: bV9xBqFWWdQNpl4xPPj/IRLaOQzWewk+JeafEOq6H8g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.crl rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:d0:23:8e:09:b6:43:64:66:61:38:f0:bc:f5:42:15:a0:84:e2:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D9D9137D4427A9D34E1B15F16C5C689A8C549D9 Validity Not Before: Sep 7 11:46:20 2025 GMT Not After : Sep 10 15:00:20 2025 GMT Subject: CN=F6EC2F962CAFBBF2BDE29F0951C9E699E6D6968C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1a:33:1b:2c:ff:42:8f:54:e6:6b:cb:91:d3: 2f:f8:6f:33:70:7c:9f:34:15:e7:76:97:e8:0a:3c: 93:da:32:6d:07:97:09:0a:a5:6f:7c:c0:0b:8b:b5: 95:21:a3:8c:b9:07:b7:1d:84:3b:32:6f:9c:90:75: ff:15:16:0c:f1:6d:74:49:13:6c:44:cb:83:1b:1c: 43:f6:66:8b:ed:78:49:ec:66:c0:22:06:46:5b:f1: 4e:31:74:f6:07:b4:b2:b6:17:bb:b3:30:8b:05:67: 78:93:3f:f8:27:45:47:4d:04:2c:5c:7d:e3:91:4f: c6:83:3b:e9:09:d6:18:c3:e1:ba:1c:2f:cd:ce:70: a5:b4:9c:6a:0a:13:5f:43:66:37:89:3c:f9:10:8d: e7:45:81:c6:ed:d6:63:39:af:1c:75:d4:b9:95:58: 1f:7c:6b:02:75:79:47:df:54:06:9d:62:9a:c7:22: b6:78:10:e9:f4:2d:60:4b:51:59:68:e3:82:3a:a0: 98:31:9b:53:6a:e0:b2:8d:2f:2b:a6:3e:5e:6b:d5: a7:5f:18:ec:e5:54:7b:a8:2e:d2:06:4b:e8:bb:e5: 32:13:1d:1d:5f:b7:7d:f9:a0:a3:82:da:2b:92:61: ba:27:d1:cb:d4:16:e1:ec:eb:55:f5:50:13:b2:b2: 94:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:EC:2F:96:2C:AF:BB:F2:BD:E2:9F:09:51:C9:E6:99:E6:D6:96:8C X509v3 Authority Key Identifier: keyid:2D:9D:91:37:D4:42:7A:9D:34:E1:B1:5F:16:C5:C6:89:A8:C5:49:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:5e:79:22:1c:f0:d7:f8:a6:57:8f:bf:80:e2:0f:9e:29:0f: b1:b5:a4:8c:ac:45:17:f0:a5:84:a5:1b:a0:d3:36:97:35:29: 88:aa:b2:30:8d:57:44:be:27:03:70:1c:63:ec:e0:e1:3e:29: dc:43:a2:60:d8:ec:9b:cb:ae:26:e7:d1:2d:9a:da:d6:36:0b: 88:b7:27:5b:9f:31:aa:03:b7:7a:e8:39:00:c8:ee:1e:4d:cf: 18:1b:88:1f:1f:fc:9c:ae:9b:33:14:45:3f:4c:46:db:02:e9: ff:98:5f:2b:ee:4c:2d:90:93:f5:a3:bf:1f:d6:29:82:25:d2: ad:3c:91:8d:05:22:5a:c2:53:b2:88:82:25:f3:bd:9b:1c:0d: b7:b7:c1:1e:2b:24:cc:09:69:ce:c5:81:e6:d9:0d:58:e6:3e: 95:63:c2:ef:f2:05:ab:c3:6c:1e:15:52:bb:d5:a1:df:1b:dd: 64:09:fe:69:87:56:aa:c0:90:72:ad:09:25:2e:18:e9:35:34: 83:8a:89:75:5c:31:62:2a:e3:ea:2c:da:b7:47:25:9c:4b:72: a1:f4:25:73:d3:63:01:5b:a8:2b:5f:37:ca:4e:ce:8c:43:e0: bd:a2:8d:91:dd:00:fd:76:9f:43:2f:a6:1a:62:9c:26:cf:50: 6d:40:f1:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYdAjjgm2Q2RmYTjwvPVCFaCE4uIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ5RDkxMzdENDQyN0E5RDM0RTFCMTVGMTZDNUM2ODlB OEM1NDlEOTAeFw0yNTA5MDcxMTQ2MjBaFw0yNTA5MTAxNTAwMjBaMDMxMTAvBgNV BAMTKEY2RUMyRjk2MkNBRkJCRjJCREUyOUYwOTUxQzlFNjk5RTZENjk2OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+GjMbLP9Cj1Tma8uR0y/4bzNw fJ80Fed2l+gKPJPaMm0HlwkKpW98wAuLtZUho4y5B7cdhDsyb5yQdf8VFgzxbXRJ E2xEy4MbHEP2ZovteEnsZsAiBkZb8U4xdPYHtLK2F7uzMIsFZ3iTP/gnRUdNBCxc feORT8aDO+kJ1hjD4bocL83OcKW0nGoKE19DZjeJPPkQjedFgcbt1mM5rxx11LmV WB98awJ1eUffVAadYprHIrZ4EOn0LWBLUVlo44I6oJgxm1Nq4LKNLyumPl5r1adf GOzlVHuoLtIGS+i75TITHR1ft335oKOC2iuSYbon0cvUFuHs61X1UBOyspQJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9uwvliyvu/K94p8JUcnmmebWlowwHwYDVR0j BBgwFoAULZ2RN9RCep004bFfFsXGiajFSdkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTUzNDFlOC0yMmQ4LTQ0OWMtYTc1My1lNDdiYmZjNDg1MzgvMC8yRDlEOTEzN0Q0 NDI3QTlEMzRFMUIxNUYxNkM1QzY4OUE4QzU0OUQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQ5RDkxMzdENDQyN0E5RDM0RTFCMTVGMTZDNUM2ODlBOEM1 NDlEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE1MzQxZTgtMjJkOC00NDljLWE3 NTMtZTQ3YmJmYzQ4NTM4LzAvMkQ5RDkxMzdENDQyN0E5RDM0RTFCMTVGMTZDNUM2 ODlBOEM1NDlEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKheeSIc8Nf4plePv4DiD54pD7G1pIysRRfw pYSlG6DTNpc1KYiqsjCNV0S+JwNwHGPs4OE+KdxDomDY7JvLribn0S2a2tY2C4i3 J1ufMaoDt3roOQDI7h5NzxgbiB8f/JyumzMURT9MRtsC6f+YXyvuTC2Qk/Wjvx/W KYIl0q08kY0FIlrCU7KIgiXzvZscDbe3wR4rJMwJac7FgebZDVjmPpVjwu/yBavD bB4VUrvVod8b3WQJ/mmHVqrAkHKtCSUuGOk1NIOKiXVcMWIq4+os2rdHJZxLcqH0 JXPTYwFbqCtfN8pOzoxD4L2ijZHdAP12n0MvphpinCbPUG1A8Xg= -----END CERTIFICATE-----Generated at Sun Sep 7 15:25:46 2025 by rpki-client