$ rpki-client -vvf repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft File: 2FB994CD1282292E6D2907FCECD7F9E472F49985.mft (raw, json) Hash identifier: bO0PGvre7ikjzK2fo4rufab0uum4VoS89CR/dNNDVBA= Subject key identifier: F0:75:71:B9:69:C8:6D:41:CF:C4:B9:95:6C:B7:48:95:4F:DB:09:F6 Authority key identifier: 2F:B9:94:CD:12:82:29:2E:6D:29:07:FC:EC:D7:F9:E4:72:F4:99:85 Certificate issuer: /CN=2FB994CD1282292E6D2907FCECD7F9E472F49985 Certificate serial: 387FDCD56133379C32E045BC282C1EEC98C41E06 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft Manifest number: 0504 Signing time: Fri 05 Sep 2025 09:00:46 +0000 Manifest this update: Fri 05 Sep 2025 08:55:46 +0000 Manifest next update: Mon 08 Sep 2025 17:10:46 +0000 Files and hashes: 1: 3130332e3131302e31312e302f32342d3234203d3e20313331373137.roa (hash: gVdR11t5fw1Z3vuhsrv3YNa5sWCtSlARbhSmJWiHvO4=) 2: 2FB994CD1282292E6D2907FCECD7F9E472F49985.crl (hash: K7ZEhNTdgdX66j1nueZWsnhTvNkpSWbFCvzugVNukUM=) 3: 3130332e3131302e382e302f32342d3234203d3e20313331373137.roa (hash: MJzwkeAeDIIHbvzCyYoNIOj+cbb5++mSci1EoFNlAV0=) 4: 3130332e3131302e31302e302f32342d3234203d3e20313331373137.roa (hash: Gcf2m6wvxledkwR1qQNWFpogqDCtyqIrxx7PKSay3xY=) 5: 3130332e3131302e392e302f32342d3234203d3e20313331373137.roa (hash: E2uu1x+I6SmKuq0aJgDdyKaobr6kyHxRsZ9a/8jvA7A=) 6: 3130332e3131302e382e302f32322d3232203d3e20313331373137.roa (hash: aTbEH2RiVh4K07qhKRGxV184e2sOPaIMjUhuR94+WEU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.crl rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 17:10:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:7f:dc:d5:61:33:37:9c:32:e0:45:bc:28:2c:1e:ec:98:c4:1e:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FB994CD1282292E6D2907FCECD7F9E472F49985 Validity Not Before: Sep 5 08:55:46 2025 GMT Not After : Sep 8 17:10:46 2025 GMT Subject: CN=F07571B969C86D41CFC4B9956CB748954FDB09F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:04:05:5d:45:b3:67:03:71:fc:55:83:23:09: fc:74:5d:ad:0c:49:a8:15:a4:56:5b:db:e1:18:03: da:50:ad:99:22:ec:3c:e4:d3:22:f9:fc:da:b1:71: fc:22:e6:46:5d:87:e9:34:23:c1:2d:54:eb:a7:92: d5:c1:83:0b:4e:d5:09:49:58:26:e9:10:2b:b4:42: 1d:5c:f1:8b:b6:9b:21:cd:3f:bb:bc:dd:50:6d:e1: d5:65:65:86:2e:e2:65:08:2b:de:e7:fd:8a:e2:b7: 97:f8:9c:bd:8f:98:59:00:1e:80:5b:44:ea:22:d3: ce:34:31:7c:d9:70:87:59:ff:47:88:ef:90:0d:03: 48:0d:36:24:96:a9:17:a1:0c:73:fb:77:85:01:3b: f0:40:07:fe:19:2e:09:1d:63:a4:fb:51:ff:f6:4a: 47:97:3e:38:de:28:8e:a0:5f:b4:6e:2f:14:02:60: c5:1b:5d:ad:4e:02:c3:2b:51:41:1c:85:db:fe:77: ae:61:3c:59:94:52:ac:e7:4a:6f:67:dd:0e:09:d5: c4:bd:19:f4:73:05:9a:b6:54:75:2e:8a:e6:32:fc: fd:8a:cf:53:43:44:a9:f6:fd:65:02:d4:4f:d3:47: 57:7a:c1:2a:9a:14:98:b0:ee:0c:5d:52:a5:a7:73: fa:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:75:71:B9:69:C8:6D:41:CF:C4:B9:95:6C:B7:48:95:4F:DB:09:F6 X509v3 Authority Key Identifier: keyid:2F:B9:94:CD:12:82:29:2E:6D:29:07:FC:EC:D7:F9:E4:72:F4:99:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:15:dd:bc:75:bf:bf:19:82:a4:c6:0f:1f:e0:f3:6b:c4:a0: a7:79:83:d8:ec:29:9f:5d:55:4d:7c:f3:91:7a:fd:ed:e2:22: 0e:44:03:d1:ac:ad:88:1a:96:9f:21:16:2c:01:ef:bc:8d:a5: 99:63:7e:7e:ca:ce:64:93:88:19:f9:76:00:77:7b:6f:ff:5a: 0b:27:03:0b:ef:1d:c5:d2:87:04:35:f8:50:ec:cd:fc:21:f2: 7d:31:75:98:a8:18:d5:6c:ed:75:48:ef:c6:2d:19:ae:fd:0d: b1:c7:d9:b5:c9:38:98:c2:39:38:ab:6d:22:be:53:70:6d:3b: 73:97:a6:b8:bd:4c:ff:34:87:89:63:39:8d:09:a1:f6:51:06: fc:f5:e8:21:2e:53:c3:ba:fd:bc:db:30:1e:00:3f:84:c8:a3: 88:50:fa:84:85:af:a7:d7:e6:2c:08:88:b3:74:c1:ba:68:18: 56:3a:20:6c:32:0a:19:ae:a1:23:76:4e:f4:04:10:34:64:ce: 6a:7e:da:88:d8:cb:1f:27:e9:c9:bf:4b:5f:80:79:33:75:81: 45:11:4e:4c:5a:bf:8d:09:fb:3c:b1:70:d4:a2:7b:ae:d4:89: b4:c1:7e:cb:a9:91:1d:01:ba:e8:43:be:f7:cc:3a:45:29:33: 0b:91:40:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOH/c1WEzN5wy4EW8KCwe7JjEHgYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZCOTk0Q0QxMjgyMjkyRTZEMjkwN0ZDRUNEN0Y5RTQ3 MkY0OTk4NTAeFw0yNTA5MDUwODU1NDZaFw0yNTA5MDgxNzEwNDZaMDMxMTAvBgNV BAMTKEYwNzU3MUI5NjlDODZENDFDRkM0Qjk5NTZDQjc0ODk1NEZEQjA5RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+BAVdRbNnA3H8VYMjCfx0Xa0M SagVpFZb2+EYA9pQrZki7Dzk0yL5/Nqxcfwi5kZdh+k0I8EtVOunktXBgwtO1QlJ WCbpECu0Qh1c8Yu2myHNP7u83VBt4dVlZYYu4mUIK97n/Yrit5f4nL2PmFkAHoBb ROoi0840MXzZcIdZ/0eI75ANA0gNNiSWqRehDHP7d4UBO/BAB/4ZLgkdY6T7Uf/2 SkeXPjjeKI6gX7RuLxQCYMUbXa1OAsMrUUEchdv+d65hPFmUUqznSm9n3Q4J1cS9 GfRzBZq2VHUuiuYy/P2Kz1NDRKn2/WUC1E/TR1d6wSqaFJiw7gxdUqWnc/rLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8HVxuWnIbUHPxLmVbLdIlU/bCfYwHwYDVR0j BBgwFoAUL7mUzRKCKS5tKQf87Nf55HL0mYUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZGE3NzNkZC05NWFhLTQ0N2UtOTkzZC00Y2Y0YTEyNzNiMzEvMC8yRkI5OTRDRDEy ODIyOTJFNkQyOTA3RkNFQ0Q3RjlFNDcyRjQ5OTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkZCOTk0Q0QxMjgyMjkyRTZEMjkwN0ZDRUNEN0Y5RTQ3MkY0 OTk4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmRhNzczZGQtOTVhYS00NDdlLTk5 M2QtNGNmNGExMjczYjMxLzAvMkZCOTk0Q0QxMjgyMjkyRTZEMjkwN0ZDRUNEN0Y5 RTQ3MkY0OTk4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIIV3bx1v78ZgqTGDx/g82vEoKd5g9jsKZ9d VU1885F6/e3iIg5EA9GsrYgalp8hFiwB77yNpZljfn7KzmSTiBn5dgB3e2//Wgsn AwvvHcXShwQ1+FDszfwh8n0xdZioGNVs7XVI78YtGa79DbHH2bXJOJjCOTirbSK+ U3BtO3OXpri9TP80h4ljOY0JofZRBvz16CEuU8O6/bzbMB4AP4TIo4hQ+oSFr6fX 5iwIiLN0wbpoGFY6IGwyChmuoSN2TvQEEDRkzmp+2ojYyx8n6cm/S1+AeTN1gUUR Tkxav40J+zyxcNSie67UibTBfsupkR0BuuhDvvfMOkUpMwuRQJ8= -----END CERTIFICATE-----Generated at Sun Sep 7 14:00:48 2025 by rpki-client