$ rpki-client -vvf repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft File: 2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft (raw, json) Hash identifier: MAQn6JL0JQbX3eSCZeQ3P7VQKoi5mRaX3bsiF9N1cdI= Subject key identifier: 63:95:9B:1C:53:56:22:CC:D5:97:DA:E0:CF:A4:6F:8D:D7:77:48:78 Authority key identifier: 2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6 Certificate issuer: /CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6 Certificate serial: 1BF9BD964975183D2C3640AF380725A3194BD869 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft Manifest number: 0366 Signing time: Wed 03 Sep 2025 13:11:25 +0000 Manifest this update: Wed 03 Sep 2025 13:06:25 +0000 Manifest next update: Sat 06 Sep 2025 14:05:25 +0000 Files and hashes: 1: 3130332e3233312e38332e302f32342d3234203d3e20313331373335.roa (hash: UN6dazoYFxgS6jdi8SmiPFiRAzrs0mSEhCBMn6iEnws=) 2: 2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl (hash: u5QkLbFqeVErv9+sQsFTduT9iUUZg94oyk5CF646B/I=) 3: 3130332e3233312e38312e302f32342d3234203d3e20313331373335.roa (hash: cHq0w9NeVR2kphOoYMXZeSGQxfdQLrs5CAZ+diGk+MY=) 4: 3130332e3233312e38322e302f32342d3234203d3e20313331373335.roa (hash: 8zUKTcgIM2YuD1hdzVzeO7drrLCkIVs9L0M7lsGNsV4=) 5: 3130332e3233312e38302e302f32342d3234203d3e20313331373335.roa (hash: etlEVL/G6ecv5pikZQs/QfSTGNp1Hz5OKi7d2dSKjks=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 14:05:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:f9:bd:96:49:75:18:3d:2c:36:40:af:38:07:25:a3:19:4b:d8:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6 Validity Not Before: Sep 3 13:06:25 2025 GMT Not After : Sep 6 14:05:25 2025 GMT Subject: CN=63959B1C535622CCD597DAE0CFA46F8DD7774878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:58:cb:ab:7b:fb:66:8d:b4:3e:39:e3:e9:9f: eb:47:19:64:4e:6b:b7:99:79:a7:1b:8b:29:7f:d5: ff:8b:7d:c0:72:52:00:30:c8:1c:66:8a:ed:e8:1b: 72:8d:ed:f7:9f:23:4b:ab:5e:77:39:85:69:4c:1d: 94:8a:5a:97:28:9b:b0:bd:33:8b:e0:3d:bf:1c:31: b6:3e:39:6b:79:8d:b7:8a:68:a4:b9:62:ad:f6:92: 78:e1:57:a3:23:9a:0e:9a:6b:a2:25:98:cd:67:32: b0:db:e1:a1:62:40:de:86:e4:cf:f8:96:70:76:d1: 6c:fb:74:5c:12:a7:d1:d5:84:0c:ae:24:f6:72:a9: 62:fd:c0:da:81:eb:d8:4e:72:b4:40:55:2b:16:36: ff:99:9f:64:53:fe:f6:9e:a3:37:90:98:19:63:d4: 67:0d:d6:fe:e5:4a:4b:51:79:60:ba:71:6e:18:e9: d6:c4:fc:f4:60:73:6c:7a:f1:fa:8a:92:ea:ff:41: 3e:14:c9:d3:1b:fa:81:19:4c:d1:1a:a1:a3:c2:4d: ca:06:89:16:e6:f9:7d:62:fc:c4:4c:2d:8c:03:f7: da:c9:ba:d0:c5:d6:ff:54:31:c9:4a:93:a4:b3:18: 81:2e:df:58:65:5a:8d:12:9a:6c:d0:58:e3:80:53: 97:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:95:9B:1C:53:56:22:CC:D5:97:DA:E0:CF:A4:6F:8D:D7:77:48:78 X509v3 Authority Key Identifier: keyid:2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:48:72:ff:91:a3:66:97:42:8a:9a:ef:d3:96:1c:9c:18:c1: 6b:8c:2d:77:de:2b:79:42:97:8d:d5:43:30:70:81:f6:34:bd: 2b:c0:e8:dc:aa:c2:2f:ac:ea:df:e0:3d:bb:ac:fa:05:cb:d8: 15:a8:86:b3:3c:40:10:d5:48:36:fd:c3:dc:d7:92:46:ef:98: b1:32:fd:50:7f:08:b4:ce:64:28:94:89:46:6c:dc:fc:13:eb: 1b:b6:5e:2f:7d:64:b6:87:4a:18:1c:b6:46:89:44:45:c2:33: c2:bd:cd:4f:f8:3f:68:76:ad:75:ae:d1:cb:7b:40:08:ab:de: 55:40:48:8d:9a:0e:e6:77:27:43:63:a9:71:e4:24:a5:03:7f: 13:c2:46:07:b5:7d:60:4b:0c:b5:87:30:15:32:59:59:09:22: 1f:bb:9a:51:f2:33:70:10:6e:13:f2:2e:38:58:66:a3:9e:e5: 54:8b:fb:6a:0b:a4:c8:68:33:b3:d2:51:3a:c0:c9:d9:e2:09: 28:1a:ca:5d:3b:4f:45:77:b6:ed:f9:c0:7e:80:22:77:b0:82: 3e:60:25:32:bd:80:fa:4c:f2:55:7b:91:68:7b:eb:46:9b:98: 93:04:b6:12:d9:22:36:db:8a:c2:10:b2:e2:27:97:14:12:5f: 22:10:99:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG/m9lkl1GD0sNkCvOAcloxlL2GkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3REU1 RDdBNjNBNjAeFw0yNTA5MDMxMzA2MjVaFw0yNTA5MDYxNDA1MjVaMDMxMTAvBgNV BAMTKDYzOTU5QjFDNTM1NjIyQ0NENTk3REFFMENGQTQ2RjhERDc3NzQ4NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFWMure/tmjbQ+OePpn+tHGWRO a7eZeacbiyl/1f+LfcByUgAwyBxmiu3oG3KN7fefI0urXnc5hWlMHZSKWpcom7C9 M4vgPb8cMbY+OWt5jbeKaKS5Yq32knjhV6Mjmg6aa6IlmM1nMrDb4aFiQN6G5M/4 lnB20Wz7dFwSp9HVhAyuJPZyqWL9wNqB69hOcrRAVSsWNv+Zn2RT/vaeozeQmBlj 1GcN1v7lSktReWC6cW4Y6dbE/PRgc2x68fqKkur/QT4UydMb+oEZTNEaoaPCTcoG iRbm+X1i/MRMLYwD99rJutDF1v9UMclKk6SzGIEu31hlWo0SmmzQWOOAU5eRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY5WbHFNWIszVl9rgz6Rvjdd3SHgwHwYDVR0j BBgwFoAUK7E4J0I1dRQdoPHFezPn3l16Y6YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTQ5M2JlMS1mMDY0LTQ5ZTYtOTQ5YS1jYjNlY2JmYzhmNDYvMC8yQkIxMzgyNzQy MzU3NTE0MURBMEYxQzU3QjMzRTdERTVEN0E2M0E2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3REU1RDdB NjNBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGE0OTNiZTEtZjA2NC00OWU2LTk0 OWEtY2IzZWNiZmM4ZjQ2LzAvMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3 REU1RDdBNjNBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAlIcv+Ro2aXQoqa79OWHJwYwWuMLXfeK3lC l43VQzBwgfY0vSvA6Nyqwi+s6t/gPbus+gXL2BWohrM8QBDVSDb9w9zXkkbvmLEy /VB/CLTOZCiUiUZs3PwT6xu2Xi99ZLaHShgctkaJREXCM8K9zU/4P2h2rXWu0ct7 QAir3lVASI2aDuZ3J0NjqXHkJKUDfxPCRge1fWBLDLWHMBUyWVkJIh+7mlHyM3AQ bhPyLjhYZqOe5VSL+2oLpMhoM7PSUTrAydniCSgayl07T0V3tu35wH6AInewgj5g JTK9gPpM8lV7kWh760abmJMEthLZIjbbisIQsuInlxQSXyIQmUA= -----END CERTIFICATE-----Generated at Fri Sep 5 10:39:41 2025 by rpki-client