$ rpki-client -vvf repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.mft File: 2AAFA81414EDCB1032235F2240FE06773F3E6F16.mft (raw, json) Hash identifier: Y06C/cz6IRiAgPGHtMuIVZOuD55Ezpz9/CSirJQEmBY= Subject key identifier: C3:FD:5F:B3:0D:97:91:C8:0D:90:C7:B9:B2:43:7F:70:08:74:2A:59 Authority key identifier: 2A:AF:A8:14:14:ED:CB:10:32:23:5F:22:40:FE:06:77:3F:3E:6F:16 Certificate issuer: /CN=2AAFA81414EDCB1032235F2240FE06773F3E6F16 Certificate serial: 4B5E933D2A8C217B4BFA8FF63645B90143D5599A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AAFA81414EDCB1032235F2240FE06773F3E6F16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.mft Manifest number: 018D Signing time: Sat 06 Sep 2025 13:20:40 +0000 Manifest this update: Sat 06 Sep 2025 13:15:40 +0000 Manifest next update: Tue 09 Sep 2025 15:48:40 +0000 Files and hashes: 1: 3130332e3137372e3231392e302f32342d3234203d3e20313331373639.roa (hash: fU1tQ4gaeWNhq2F1RA67XHvI+/xcbSrzocYJJCxhg9Q=) 2: 2AAFA81414EDCB1032235F2240FE06773F3E6F16.crl (hash: qA6nqWinV9L9Qvw3hi7dW2OPPFdIgWZfGk67sIOgpfE=) 3: 3130332e3137372e3231382e302f32342d3234203d3e20313331373639.roa (hash: geET9/YOwUtWNeEIEWu0ZCElrUfY/yNFJvOG/4u0aBI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.crl rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AAFA81414EDCB1032235F2240FE06773F3E6F16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 15:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:5e:93:3d:2a:8c:21:7b:4b:fa:8f:f6:36:45:b9:01:43:d5:59:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AAFA81414EDCB1032235F2240FE06773F3E6F16 Validity Not Before: Sep 6 13:15:40 2025 GMT Not After : Sep 9 15:48:40 2025 GMT Subject: CN=C3FD5FB30D9791C80D90C7B9B2437F7008742A59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:5c:c4:c2:21:9b:4f:9e:96:dc:bb:ea:6e:74: 6a:be:03:20:83:61:49:5f:87:01:c3:de:f0:40:5b: 59:bc:66:ee:a5:7a:d0:aa:b1:20:ec:a1:e1:48:90: 9b:e4:52:7b:69:e1:0d:cc:09:fc:db:4f:1e:6a:50: 0c:e8:c8:57:5b:56:2e:42:cc:e3:87:7e:42:2c:48: 7a:e2:f9:38:18:6f:a4:50:eb:62:a6:74:82:d1:0b: cd:16:11:4b:69:c7:73:09:a2:57:9e:cb:7e:81:0e: b5:ff:37:f2:e4:36:a5:fa:0c:eb:6a:59:4d:66:49: 76:81:e5:ae:07:fd:62:fb:5e:84:92:b5:6d:98:b9: 0e:89:db:1b:1e:0f:c6:42:6f:e4:66:78:40:f1:2f: 09:49:fc:f1:51:44:ea:97:94:42:14:ef:63:70:3c: da:c1:ea:55:7e:ce:29:ae:9a:f8:fb:02:b4:58:17: 9e:f9:ff:8e:33:31:f4:59:ec:5c:85:cf:1f:ca:3a: b5:35:ba:1f:5d:78:c8:78:82:93:f8:81:18:b4:38: f9:66:83:20:4c:70:2e:4c:45:f0:d2:c2:10:bb:e4: 6f:99:bf:52:33:dc:c0:b5:ce:05:53:4f:9d:e8:16: 16:c3:c6:34:fb:c8:8e:1d:b1:45:b3:23:88:27:cc: 1f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:FD:5F:B3:0D:97:91:C8:0D:90:C7:B9:B2:43:7F:70:08:74:2A:59 X509v3 Authority Key Identifier: keyid:2A:AF:A8:14:14:ED:CB:10:32:23:5F:22:40:FE:06:77:3F:3E:6F:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AAFA81414EDCB1032235F2240FE06773F3E6F16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:05:47:a9:2b:39:87:b0:fd:23:75:f3:87:58:1b:c8:de:ba: 7e:a7:0a:5d:9b:a5:85:60:e3:93:7e:41:a8:61:36:8e:a9:67: 69:d3:92:70:3f:b8:af:1e:d6:52:10:52:f1:07:44:48:a5:c6: 72:68:db:a5:93:9d:fb:b8:78:5d:83:d3:b6:8a:30:01:e2:b8: 72:a2:ed:64:96:41:b0:70:58:61:b1:42:dd:bb:a3:d3:cc:0a: 68:a7:c4:f7:74:f7:d4:a6:df:c1:aa:ec:a2:9c:a8:9e:67:29: a6:b8:51:5e:3d:ec:68:dd:e2:a3:82:73:a1:64:69:a1:6c:96: 72:14:3a:05:9d:47:86:36:46:5f:76:d7:ff:53:2a:43:6e:25: da:c4:10:ee:3a:6b:79:51:20:9e:fa:ca:1c:09:27:f2:d8:17: 67:57:d5:8f:44:c9:33:ec:d8:81:9e:61:c4:a5:cc:ca:cb:9f: e3:02:40:85:f1:54:19:7e:61:15:95:94:71:96:a2:fd:1e:ac: a1:57:4c:e2:2a:f3:cc:24:10:5d:0b:33:50:58:45:ee:48:61: dc:20:b4:d0:bb:a3:da:cd:be:1a:53:25:7a:85:11:da:8a:0d: bd:e3:61:2d:c1:dd:a7:38:5d:4f:3f:5f:f8:ed:0c:da:bd:31: b5:2d:81:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS16TPSqMIXtL+o/2NkW5AUPVWZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBRkE4MTQxNEVEQ0IxMDMyMjM1RjIyNDBGRTA2Nzcz RjNFNkYxNjAeFw0yNTA5MDYxMzE1NDBaFw0yNTA5MDkxNTQ4NDBaMDMxMTAvBgNV BAMTKEMzRkQ1RkIzMEQ5NzkxQzgwRDkwQzdCOUIyNDM3RjcwMDg3NDJBNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhXMTCIZtPnpbcu+pudGq+AyCD YUlfhwHD3vBAW1m8Zu6letCqsSDsoeFIkJvkUntp4Q3MCfzbTx5qUAzoyFdbVi5C zOOHfkIsSHri+TgYb6RQ62KmdILRC80WEUtpx3MJoleey36BDrX/N/LkNqX6DOtq WU1mSXaB5a4H/WL7XoSStW2YuQ6J2xseD8ZCb+RmeEDxLwlJ/PFRROqXlEIU72Nw PNrB6lV+zimumvj7ArRYF575/44zMfRZ7FyFzx/KOrU1uh9deMh4gpP4gRi0OPlm gyBMcC5MRfDSwhC75G+Zv1Iz3MC1zgVTT53oFhbDxjT7yI4dsUWzI4gnzB8XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw/1fsw2XkcgNkMe5skN/cAh0KlkwHwYDVR0j BBgwFoAUKq+oFBTtyxAyI18iQP4Gdz8+bxYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWI4ZTYwZi1mOTkzLTQ1MzQtOWRhMC1mMjg1YTg2MDNmNjkvMC8yQUFGQTgxNDE0 RURDQjEwMzIyMzVGMjI0MEZFMDY3NzNGM0U2RjE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkFBRkE4MTQxNEVEQ0IxMDMyMjM1RjIyNDBGRTA2NzczRjNF NkYxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2FiOGU2MGYtZjk5My00NTM0LTlk YTAtZjI4NWE4NjAzZjY5LzAvMkFBRkE4MTQxNEVEQ0IxMDMyMjM1RjIyNDBGRTA2 NzczRjNFNkYxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABwFR6krOYew/SN184dYG8jeun6nCl2bpYVg 45N+QahhNo6pZ2nTknA/uK8e1lIQUvEHREilxnJo26WTnfu4eF2D07aKMAHiuHKi 7WSWQbBwWGGxQt27o9PMCminxPd099Sm38Gq7KKcqJ5nKaa4UV497Gjd4qOCc6Fk aaFslnIUOgWdR4Y2Rl921/9TKkNuJdrEEO46a3lRIJ76yhwJJ/LYF2dX1Y9EyTPs 2IGeYcSlzMrLn+MCQIXxVBl+YRWVlHGWov0erKFXTOIq88wkEF0LM1BYRe5IYdwg tNC7o9rNvhpTJXqFEdqKDb3jYS3B3ac4XU8/X/jtDNq9MbUtga8= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:44 2025 by rpki-client