$ rpki-client -vvf repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft File: 2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft (raw, json) Hash identifier: HiTZ6Vhnn/PQGWXwf3+JXS0Ay4UENQbBG2Wdq5VPQDA= Subject key identifier: 47:E9:44:74:EA:EB:03:BE:52:77:91:C3:23:CB:4E:FA:E9:E7:18:07 Authority key identifier: 2A:27:80:23:3B:F2:E0:6D:53:3E:C6:B0:5F:50:02:06:FB:B0:6D:6D Certificate issuer: /CN=2A2780233BF2E06D533EC6B05F500206FBB06D6D Certificate serial: 4C1EF7E3FA94E63A4B3C947C46E8F9FA78E813AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2780233BF2E06D533EC6B05F500206FBB06D6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft Manifest number: 01AA Signing time: Sat 06 Sep 2025 14:50:40 +0000 Manifest this update: Sat 06 Sep 2025 14:45:40 +0000 Manifest next update: Tue 09 Sep 2025 16:28:40 +0000 Files and hashes: 1: 2A2780233BF2E06D533EC6B05F500206FBB06D6D.crl (hash: N/RT85HaCWJYcG4vAk1Ac18zyJLwUc6hWi5bHWV1jaM=) 2: 3130332e3134312e3137302e302f32342d3234203d3e20313530353139.roa (hash: fbcGL1NLXeGrNrcBk/cYo3ucVVcH9bT5MeT1X/6RPlA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.crl rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2780233BF2E06D533EC6B05F500206FBB06D6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 16:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:1e:f7:e3:fa:94:e6:3a:4b:3c:94:7c:46:e8:f9:fa:78:e8:13:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2780233BF2E06D533EC6B05F500206FBB06D6D Validity Not Before: Sep 6 14:45:40 2025 GMT Not After : Sep 9 16:28:40 2025 GMT Subject: CN=47E94474EAEB03BE527791C323CB4EFAE9E71807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:10:04:6f:0a:49:da:1e:f2:b0:1c:80:e0:a9: a1:78:53:f3:db:cc:ad:fe:bb:90:e2:4c:49:c7:ca: 52:22:16:e0:cf:0e:dc:fa:ce:32:1f:45:00:24:c2: 73:56:7c:a1:13:6a:d1:33:de:61:9c:b9:ac:57:25: dd:c2:e8:d1:78:bf:f7:80:8a:84:3f:1f:7e:e9:b3: c0:b4:05:a9:80:9e:e1:1c:7c:13:90:c6:22:64:7c: e6:ea:46:79:f7:44:13:fb:b3:15:99:bd:23:87:f8: 92:9d:68:7f:66:3b:d7:9a:d8:db:d7:7e:a6:fb:07: 84:fa:09:f5:37:e2:62:5e:cf:50:15:65:c6:b2:4c: 60:81:4c:93:80:d0:c5:2c:e6:fa:5d:3a:e6:56:c1: 45:19:79:52:48:b6:ac:45:86:9a:64:44:cf:e4:d5: 60:56:ac:ea:4a:fc:c1:ce:e8:c3:71:17:2c:91:83: e5:0f:28:f8:3b:cf:36:19:73:41:29:f1:92:43:35: 0c:97:b7:cb:f1:5a:04:5a:9b:9c:de:c7:e3:d9:63: 30:bd:ce:f9:f2:ae:9b:32:d8:ea:12:23:cb:2e:5e: d5:44:d2:27:0b:ae:de:76:14:f5:b4:ce:21:e6:ee: e2:c9:87:b3:de:9c:b4:f0:ad:fa:a9:a6:09:f6:40: aa:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:E9:44:74:EA:EB:03:BE:52:77:91:C3:23:CB:4E:FA:E9:E7:18:07 X509v3 Authority Key Identifier: keyid:2A:27:80:23:3B:F2:E0:6D:53:3E:C6:B0:5F:50:02:06:FB:B0:6D:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2780233BF2E06D533EC6B05F500206FBB06D6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:93:a0:94:0f:92:26:58:b1:64:00:39:6d:24:21:42:6c:50: 39:67:2c:9d:f2:70:4f:d5:7c:96:51:6d:d2:f8:00:df:45:97: 19:6d:c7:11:07:a8:4d:d0:79:38:c1:d3:a2:81:d7:8b:f7:1e: 51:53:ff:30:a7:ca:21:cd:03:76:9e:8e:b9:d7:23:84:d4:69: 6b:ef:02:71:18:2a:eb:10:f2:39:2d:cf:08:41:1f:25:8d:43: e0:a5:99:08:b3:71:89:4a:58:72:55:be:c1:7c:f2:12:61:66: 12:b5:dc:1b:30:49:c1:1b:e5:8b:00:0a:f6:c2:4b:df:81:8e: 0d:f5:81:92:fb:58:d6:de:8e:45:42:65:82:46:dd:7d:ab:1a: ff:de:0a:e4:7d:fe:e9:27:84:9e:0e:ff:f2:c5:ea:99:b9:d5: bc:16:3c:71:9b:bd:91:ad:3b:11:9a:83:c6:ca:7a:35:17:71: 25:cb:c9:85:41:74:42:a4:f3:fb:7d:53:58:f5:2c:49:a2:82: dc:80:39:d0:b7:9e:e9:33:1f:b6:3a:a8:d6:05:35:7b:96:6a: 90:f9:66:bf:30:41:50:11:1e:d7:5e:57:d6:ac:2d:36:0a:98: f0:7d:77:db:5e:73:0f:fb:51:62:f8:26:d7:2f:10:ed:a0:d2: fa:84:72:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTB734/qU5jpLPJR8Ruj5+njoE6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyNzgwMjMzQkYyRTA2RDUzM0VDNkIwNUY1MDAyMDZG QkIwNkQ2RDAeFw0yNTA5MDYxNDQ1NDBaFw0yNTA5MDkxNjI4NDBaMDMxMTAvBgNV BAMTKDQ3RTk0NDc0RUFFQjAzQkU1Mjc3OTFDMzIzQ0I0RUZBRTlFNzE4MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsEARvCknaHvKwHIDgqaF4U/Pb zK3+u5DiTEnHylIiFuDPDtz6zjIfRQAkwnNWfKETatEz3mGcuaxXJd3C6NF4v/eA ioQ/H37ps8C0BamAnuEcfBOQxiJkfObqRnn3RBP7sxWZvSOH+JKdaH9mO9ea2NvX fqb7B4T6CfU34mJez1AVZcayTGCBTJOA0MUs5vpdOuZWwUUZeVJItqxFhppkRM/k 1WBWrOpK/MHO6MNxFyyRg+UPKPg7zzYZc0Ep8ZJDNQyXt8vxWgRam5zex+PZYzC9 zvnyrpsy2OoSI8suXtVE0icLrt52FPW0ziHm7uLJh7PenLTwrfqppgn2QKpHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR+lEdOrrA75Sd5HDI8tO+unnGAcwHwYDVR0j BBgwFoAUKieAIzvy4G1TPsawX1ACBvuwbW0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzZmOGMwYS1lMDNmLTQxNDAtYmExNi04MzNhYzIyNDFhZmIvMC8yQTI3ODAyMzNC RjJFMDZENTMzRUM2QjA1RjUwMDIwNkZCQjA2RDZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkEyNzgwMjMzQkYyRTA2RDUzM0VDNkIwNUY1MDAyMDZGQkIw NkQ2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M2ZjhjMGEtZTAzZi00MTQwLWJh MTYtODMzYWMyMjQxYWZiLzAvMkEyNzgwMjMzQkYyRTA2RDUzM0VDNkIwNUY1MDAy MDZGQkIwNkQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEuToJQPkiZYsWQAOW0kIUJsUDlnLJ3ycE/V fJZRbdL4AN9FlxltxxEHqE3QeTjB06KB14v3HlFT/zCnyiHNA3aejrnXI4TUaWvv AnEYKusQ8jktzwhBHyWNQ+ClmQizcYlKWHJVvsF88hJhZhK13BswScEb5YsACvbC S9+Bjg31gZL7WNbejkVCZYJG3X2rGv/eCuR9/uknhJ4O//LF6pm51bwWPHGbvZGt OxGag8bKejUXcSXLyYVBdEKk8/t9U1j1LEmigtyAOdC3nukzH7Y6qNYFNXuWapD5 Zr8wQVARHtdeV9asLTYKmPB9d9tecw/7UWL4JtcvEO2g0vqEcuE= -----END CERTIFICATE-----Generated at Sun Sep 7 15:29:09 2025 by rpki-client