$ rpki-client -vvf repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft File: 2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft (raw, json) Hash identifier: zndwCObm1Xmiq3aKFrGrlN/InIXURrklW9MroMfupJA= Subject key identifier: 66:C7:51:63:D6:FB:D2:B4:8C:FC:F3:1B:F2:D6:AC:90:A3:C4:80:30 Authority key identifier: 2A:A6:E6:5B:86:E4:42:3A:EC:7D:02:D8:5B:43:BA:00:80:12:D2:9D Certificate issuer: /CN=2AA6E65B86E4423AEC7D02D85B43BA008012D29D Certificate serial: 69B11EA4C87FB84EAA20B63CCA6A21727570CFA3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft Manifest number: 01AB Signing time: Sun 07 Sep 2025 12:21:05 +0000 Manifest this update: Sun 07 Sep 2025 12:16:05 +0000 Manifest next update: Wed 10 Sep 2025 17:57:05 +0000 Files and hashes: 1: 3130332e3132392e34382e302f32332d3234203d3e20313335343738.roa (hash: nuG2thm0oiOwKnakW1lHLkXwPbpo6Y7ruJlmvamdekA=) 2: 2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl (hash: I5AIF58J0LBIH3D2qD36bY5MZuaY/HZhhjl5Nylo5f4=) 3: 3130332e3132392e35302e302f32332d3234203d3e20313335343738.roa (hash: RsQS9pXwEYaCDD5cA+PCEhqN7yNzqnOa8ujUnr88Njo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:b1:1e:a4:c8:7f:b8:4e:aa:20:b6:3c:ca:6a:21:72:75:70:cf:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AA6E65B86E4423AEC7D02D85B43BA008012D29D Validity Not Before: Sep 7 12:16:05 2025 GMT Not After : Sep 10 17:57:05 2025 GMT Subject: CN=66C75163D6FBD2B48CFCF31BF2D6AC90A3C48030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6e:da:2f:5a:b7:f4:75:dd:94:c5:80:e7:ac: 32:a4:c7:3f:5b:e7:07:72:42:ff:6f:25:14:4d:51: f1:82:14:b4:d3:11:44:1a:01:73:a1:fb:a8:15:ac: bc:d5:3f:8a:10:e5:c6:cf:84:5c:bf:6c:95:43:cb: 08:11:ff:67:af:b4:ee:67:f3:78:e8:55:cd:6f:6b: 8e:a4:59:61:f6:27:64:a2:b7:b8:43:b3:6a:82:8a: 1d:c2:09:29:d0:d4:0c:7e:e3:0a:05:79:1b:95:ce: ee:2f:4f:48:c7:95:9c:d1:11:f7:aa:be:2d:09:53: e8:92:ca:bb:08:39:05:1b:ec:c8:e6:7a:a3:00:7b: 4b:32:f3:1f:49:a5:35:7f:54:1d:9d:93:ed:b5:b9: 6e:d6:68:22:63:48:2c:00:d9:ad:40:63:8b:97:69: 92:b6:5c:cb:20:f1:7b:c8:db:cb:da:e5:d0:a0:23: 7c:6e:50:4c:b8:11:70:35:f4:0f:2b:89:8a:c7:6e: 15:1d:7c:ea:1e:ac:47:52:8c:2b:a2:6a:fb:b2:a0: 24:64:0f:30:88:5c:17:a7:4d:9a:d1:ee:ab:b0:60: 48:79:1d:4a:25:e1:c3:f6:00:d6:f6:3f:e5:a9:1b: ec:ab:0f:75:c4:7c:24:3b:2b:c0:91:49:95:fa:57: 3d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C7:51:63:D6:FB:D2:B4:8C:FC:F3:1B:F2:D6:AC:90:A3:C4:80:30 X509v3 Authority Key Identifier: keyid:2A:A6:E6:5B:86:E4:42:3A:EC:7D:02:D8:5B:43:BA:00:80:12:D2:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e8:d4:e9:94:fc:be:03:aa:e7:b9:71:42:08:e5:a6:32:a7:9b: c0:51:88:c9:c7:2f:45:72:7c:48:89:0b:73:66:25:79:51:2d: b5:43:b6:4d:96:7b:f6:73:3d:61:79:23:3d:7b:4c:6f:32:dd: 60:d3:84:3e:5d:ff:77:f0:ac:93:b6:87:a1:26:96:83:f5:d2: e2:82:d1:9e:ba:bb:58:b6:95:12:7f:4e:dd:3b:5d:c5:03:8e: ea:b9:93:07:7a:90:87:39:32:f0:4e:94:60:1d:ec:19:f7:2e: 70:71:f2:37:ea:8d:7d:97:26:cd:da:a6:b7:98:9d:06:29:7a: 9c:bf:41:81:03:0c:a2:fc:9a:09:8e:26:4c:16:21:7e:33:ee: 70:89:3c:d1:d0:68:e9:23:33:6c:de:73:a6:78:22:cf:83:26: ad:a1:3a:18:c8:e7:dd:8a:a6:85:e4:6b:1e:1b:81:cb:44:b1: 2d:ee:3e:46:3d:a5:81:87:99:b5:51:26:64:ee:c0:51:4b:d0: 8a:2d:1f:98:29:53:cf:63:01:3b:3b:8e:c2:c3:8e:9c:02:7c: cb:57:99:79:b2:9f:01:2d:bc:57:0d:36:9b:30:a8:c2:51:dc: f4:93:ff:f2:48:f7:d9:3b:f5:68:f9:0c:e7:48:19:17:bf:8f: 51:a8:9c:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUabEepMh/uE6qILY8ymohcnVwz6MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBNkU2NUI4NkU0NDIzQUVDN0QwMkQ4NUI0M0JBMDA4 MDEyRDI5RDAeFw0yNTA5MDcxMjE2MDVaFw0yNTA5MTAxNzU3MDVaMDMxMTAvBgNV BAMTKDY2Qzc1MTYzRDZGQkQyQjQ4Q0ZDRjMxQkYyRDZBQzkwQTNDNDgwMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEbtovWrf0dd2UxYDnrDKkxz9b 5wdyQv9vJRRNUfGCFLTTEUQaAXOh+6gVrLzVP4oQ5cbPhFy/bJVDywgR/2evtO5n 83joVc1va46kWWH2J2Sit7hDs2qCih3CCSnQ1Ax+4woFeRuVzu4vT0jHlZzREfeq vi0JU+iSyrsIOQUb7MjmeqMAe0sy8x9JpTV/VB2dk+21uW7WaCJjSCwA2a1AY4uX aZK2XMsg8XvI28va5dCgI3xuUEy4EXA19A8riYrHbhUdfOoerEdSjCuiavuyoCRk DzCIXBenTZrR7quwYEh5HUol4cP2ANb2P+WpG+yrD3XEfCQ7K8CRSZX6Vz0LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZsdRY9b70rSM/PMb8taskKPEgDAwHwYDVR0j BBgwFoAUKqbmW4bkQjrsfQLYW0O6AIAS0p0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTZiZmY5ZC1mYjEzLTQ3YjktOWNjMC1kZDZhMDczMGExYzYvMC8yQUE2RTY1Qjg2 RTQ0MjNBRUM3RDAyRDg1QjQzQkEwMDgwMTJEMjlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkFBNkU2NUI4NkU0NDIzQUVDN0QwMkQ4NUI0M0JBMDA4MDEy RDI5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U2YmZmOWQtZmIxMy00N2I5LTlj YzAtZGQ2YTA3MzBhMWM2LzAvMkFBNkU2NUI4NkU0NDIzQUVDN0QwMkQ4NUI0M0JB MDA4MDEyRDI5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOjU6ZT8vgOq57lxQgjlpjKnm8BRiMnHL0Vy fEiJC3NmJXlRLbVDtk2We/ZzPWF5Iz17TG8y3WDThD5d/3fwrJO2h6EmloP10uKC 0Z66u1i2lRJ/Tt07XcUDjuq5kwd6kIc5MvBOlGAd7Bn3LnBx8jfqjX2XJs3apreY nQYpepy/QYEDDKL8mgmOJkwWIX4z7nCJPNHQaOkjM2zec6Z4Is+DJq2hOhjI592K poXkax4bgctEsS3uPkY9pYGHmbVRJmTuwFFL0IotH5gpU89jATs7jsLDjpwCfMtX mXmynwEtvFcNNpswqMJR3PST//JI99k79Wj5DOdIGRe/j1GonLE= -----END CERTIFICATE-----Generated at Sun Sep 7 15:34:15 2025 by rpki-client