$ rpki-client -vvf repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft File: 2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft (raw, json) Hash identifier: L6sAUSvNbm1caOERFRUIETjNalzZhMjWMk1wqnEHs3U= Subject key identifier: 96:4D:16:1B:65:E8:BB:C8:DA:15:C0:96:8C:8B:99:F5:A9:AC:3F:83 Authority key identifier: 2B:DF:AF:A7:0A:11:BF:BF:6C:98:2B:BF:2C:2C:08:4D:E8:0E:03:4E Certificate issuer: /CN=2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E Certificate serial: 322F2F917BF412FB7AA4CE12F651ECE6B18BEF16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft Manifest number: 037E Signing time: Wed 03 Sep 2025 12:02:01 +0000 Manifest this update: Wed 03 Sep 2025 11:57:01 +0000 Manifest next update: Sat 06 Sep 2025 23:54:01 +0000 Files and hashes: 1: 3130332e3136392e322e302f32332d3234203d3e203137393935.roa (hash: IRRwlFxdlw58Hq9FIW3eCT24cVIv6qhlkYjQet5GmTc=) 2: 2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl (hash: ymhwooe5Lu2iIupwNtVxEJUE4YFSHNfIcSIRkCFbZn0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 23:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:2f:2f:91:7b:f4:12:fb:7a:a4:ce:12:f6:51:ec:e6:b1:8b:ef:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E Validity Not Before: Sep 3 11:57:01 2025 GMT Not After : Sep 6 23:54:01 2025 GMT Subject: CN=964D161B65E8BBC8DA15C0968C8B99F5A9AC3F83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c2:37:1b:44:fb:5b:79:45:35:d0:ca:07:84: c8:93:ae:86:2c:88:14:fb:68:f8:40:d7:ce:86:b6: 0c:db:28:0d:18:5b:9c:c5:c0:c7:7c:07:c1:f9:55: 7e:6a:79:ec:df:ca:ce:a0:7d:ed:7e:25:a2:7b:9f: 15:17:7c:94:5c:0d:1c:86:2b:d8:ca:63:38:f1:9b: 9e:00:63:0a:11:98:ef:d8:fe:79:ea:ab:c5:ad:de: ac:a0:55:bc:b6:f7:06:32:00:96:3e:5f:31:44:86: 53:14:ec:cb:ce:dd:69:bd:44:87:ca:db:48:5e:a1: e0:af:82:d2:0c:f1:f1:01:c8:a1:60:f1:2c:2d:04: 84:d0:f9:dc:8e:67:eb:8e:a0:fa:78:54:40:62:58: 40:01:02:42:cf:20:15:b3:53:ec:d3:ec:42:6f:19: 15:4b:ee:6a:b5:c1:a0:62:8d:90:3d:cf:43:87:ac: 32:43:5d:82:1e:28:f2:b0:a5:0c:ad:27:d5:05:e3: 0a:49:be:de:81:dc:16:a1:82:f7:2e:63:0f:58:d1: d9:6d:1d:c2:1f:ff:2d:b2:12:d1:74:08:2e:62:8d: a8:a2:37:04:0d:ec:cf:d4:10:99:70:d6:d3:ad:0e: 1a:25:a4:a2:af:0b:b4:d0:3b:a7:73:05:75:bd:a4: fc:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:4D:16:1B:65:E8:BB:C8:DA:15:C0:96:8C:8B:99:F5:A9:AC:3F:83 X509v3 Authority Key Identifier: keyid:2B:DF:AF:A7:0A:11:BF:BF:6C:98:2B:BF:2C:2C:08:4D:E8:0E:03:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:3c:a9:33:15:8a:da:b9:9e:13:7a:2c:e0:13:d3:79:f4:52: 6b:44:23:4c:8d:a5:ac:4e:3d:1d:56:cb:30:5c:83:68:2b:3b: 2d:34:70:39:61:99:dd:42:ca:e8:ed:b0:9a:c5:64:af:5c:07: f8:c2:26:15:b8:84:c8:52:0c:7f:e2:b9:b8:70:12:bc:38:2d: 57:f1:1b:9b:69:c0:a0:2d:2f:d9:00:c3:b1:53:50:3b:be:1c: 28:be:44:10:a8:27:50:2c:06:b0:c3:df:08:d9:a2:ac:c6:c2: 2b:e5:01:55:1a:df:47:b0:57:65:d6:61:eb:65:b4:4a:0d:03: 67:ea:eb:5d:33:ec:80:df:51:a6:d2:6b:80:64:98:8e:ca:ec: 95:59:82:68:0e:d8:76:fb:56:12:3e:58:f4:90:d1:62:92:4e: 08:d4:70:13:fc:a2:4f:cc:ef:69:63:dc:64:f9:93:e7:82:bd: 14:16:f6:35:bb:ec:bd:67:8e:6e:ee:24:bd:40:36:6e:48:67: 99:61:0e:5d:ba:1b:3a:18:a4:3d:89:bf:e3:bf:20:c0:09:a5: 53:4f:79:06:75:4a:b7:85:7b:cf:38:56:a6:cd:97:e4:b6:8f: da:68:55:af:ba:29:44:92:53:73:0c:4e:b2:18:88:4a:8b:58: 48:63:5f:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMi8vkXv0Evt6pM4S9lHs5rGL7xYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4NERF ODBFMDM0RTAeFw0yNTA5MDMxMTU3MDFaFw0yNTA5MDYyMzU0MDFaMDMxMTAvBgNV BAMTKDk2NEQxNjFCNjVFOEJCQzhEQTE1QzA5NjhDOEI5OUY1QTlBQzNGODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDwjcbRPtbeUU10MoHhMiTroYs iBT7aPhA186GtgzbKA0YW5zFwMd8B8H5VX5qeezfys6gfe1+JaJ7nxUXfJRcDRyG K9jKYzjxm54AYwoRmO/Y/nnqq8Wt3qygVby29wYyAJY+XzFEhlMU7MvO3Wm9RIfK 20heoeCvgtIM8fEByKFg8SwtBITQ+dyOZ+uOoPp4VEBiWEABAkLPIBWzU+zT7EJv GRVL7mq1waBijZA9z0OHrDJDXYIeKPKwpQytJ9UF4wpJvt6B3BahgvcuYw9Y0dlt HcIf/y2yEtF0CC5ijaiiNwQN7M/UEJlw1tOtDholpKKvC7TQO6dzBXW9pPzHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlk0WG2Xou8jaFcCWjIuZ9amsP4MwHwYDVR0j BBgwFoAUK9+vpwoRv79smCu/LCwITegOA04wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmNkOWNlYS0zYmY0LTRhOWMtYWVlNi0wMDMzOWMwNjU1MGIvMC8yQkRGQUZBNzBB MTFCRkJGNkM5ODJCQkYyQzJDMDg0REU4MEUwMzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4NERFODBF MDM0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJjZDljZWEtM2JmNC00YTljLWFl ZTYtMDAzMzljMDY1NTBiLzAvMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4 NERFODBFMDM0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAU8qTMVitq5nhN6LOAT03n0UmtEI0yNpaxO PR1WyzBcg2grOy00cDlhmd1CyujtsJrFZK9cB/jCJhW4hMhSDH/iubhwErw4LVfx G5tpwKAtL9kAw7FTUDu+HCi+RBCoJ1AsBrDD3wjZoqzGwivlAVUa30ewV2XWYetl tEoNA2fq610z7IDfUabSa4BkmI7K7JVZgmgO2Hb7VhI+WPSQ0WKSTgjUcBP8ok/M 72lj3GT5k+eCvRQW9jW77L1njm7uJL1ANm5IZ5lhDl26GzoYpD2Jv+O/IMAJpVNP eQZ1SreFe884VqbNl+S2j9poVa+6KUSSU3MMTrIYiEqLWEhjX1I= -----END CERTIFICATE-----Generated at Fri Sep 5 10:34:24 2025 by rpki-client