$ rpki-client -vvf repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.mft File: 2FD08E6755CF1CCAAF9D5834449797848A706B57.mft (raw, json) Hash identifier: y94JAyuBCfxhuBZ76FmAhS+Z+3s4PApDGBHmvTItAWs= Subject key identifier: 1F:F3:BB:C0:42:E9:26:10:8B:C7:84:05:1E:71:6C:A6:85:FF:18:60 Authority key identifier: 2F:D0:8E:67:55:CF:1C:CA:AF:9D:58:34:44:97:97:84:8A:70:6B:57 Certificate issuer: /CN=2FD08E6755CF1CCAAF9D5834449797848A706B57 Certificate serial: 1D10388F088510906928E9A098A42F6FA44D14D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FD08E6755CF1CCAAF9D5834449797848A706B57.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.mft Manifest number: 03AB Signing time: Sat 06 Sep 2025 08:01:59 +0000 Manifest this update: Sat 06 Sep 2025 07:56:59 +0000 Manifest next update: Tue 09 Sep 2025 10:34:59 +0000 Files and hashes: 1: 3130332e3136332e3232382e302f32332d3233203d3e20313431383935.roa (hash: XjGDHZwetIWHjLp7+uPq3/exRvIl0m5tUGNnQVZ+/fU=) 2: 2FD08E6755CF1CCAAF9D5834449797848A706B57.crl (hash: RdrQFYaiSePC8gz0w+917ICJ7vuVLgtNSopv5bDcMSk=) 3: 3130332e3136332e3232392e302f32342d3234203d3e20313431383935.roa (hash: 73VvZzU4m43+fgjvOlr3Vv7ZHMtLS9jm+/QTGsOwFck=) 4: 3130332e3136332e3232382e302f32342d3234203d3e20313431383935.roa (hash: QZlEVkF+HK3hEYAiWRapnYHmq7/bX0k5ZRTsDh0lSOE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.crl rsync://repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FD08E6755CF1CCAAF9D5834449797848A706B57.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 10:34:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:10:38:8f:08:85:10:90:69:28:e9:a0:98:a4:2f:6f:a4:4d:14:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FD08E6755CF1CCAAF9D5834449797848A706B57 Validity Not Before: Sep 6 07:56:59 2025 GMT Not After : Sep 9 10:34:59 2025 GMT Subject: CN=1FF3BBC042E926108BC784051E716CA685FF1860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:54:77:a6:25:b9:19:cc:71:88:0e:40:a8:2b: 56:58:4e:47:cb:20:aa:25:64:22:b8:2c:a8:11:4a: 84:b6:b6:ee:5d:29:83:09:e0:f0:a0:dc:ea:63:28: a5:90:6f:cf:9c:ff:5f:17:7b:29:06:a1:1d:74:3e: e2:5f:bf:ad:ab:95:a5:f9:5e:e5:59:0a:34:b0:4f: 0f:e0:66:20:40:59:e0:c1:cf:96:03:f6:94:ad:2a: ea:e5:db:ab:4e:58:b5:1c:07:5d:e2:5a:51:52:d8: c7:93:2d:d2:5f:76:d2:b7:f3:18:c4:a3:06:3d:52: c0:78:b7:62:12:62:67:41:87:39:f9:aa:be:62:3b: db:45:ef:50:fe:2c:2c:6a:8e:f7:aa:82:bb:eb:d3: 35:04:f8:c5:2d:39:6c:02:88:84:fc:d3:8d:67:2b: 64:12:5e:7f:df:1d:3c:aa:86:ce:b1:ae:66:76:95: 4a:b6:a6:2a:f0:74:2c:37:dd:2c:e6:df:ab:3b:c0: 1c:74:82:df:97:75:24:d6:2a:9f:56:f2:85:99:34: 1e:37:43:8e:71:c2:dc:c3:6e:e3:56:92:7d:66:99: a9:e3:b1:b2:93:13:ac:d1:06:12:60:08:a5:00:ad: 4a:eb:ff:97:3a:8b:4a:0f:fc:18:1d:79:02:54:d5: 13:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F3:BB:C0:42:E9:26:10:8B:C7:84:05:1E:71:6C:A6:85:FF:18:60 X509v3 Authority Key Identifier: keyid:2F:D0:8E:67:55:CF:1C:CA:AF:9D:58:34:44:97:97:84:8A:70:6B:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FD08E6755CF1CCAAF9D5834449797848A706B57.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:09:5d:4d:8f:30:e4:8b:26:34:a8:bf:34:69:13:b6:45:ba: e3:7a:4e:2b:54:18:be:dc:21:99:1e:86:45:ae:df:86:97:3f: d2:b1:bb:43:f4:b5:68:3d:52:92:fd:7f:98:2f:94:ae:4d:af: 9e:5f:c3:c1:a8:a5:e6:a2:fe:f1:97:c7:2e:d9:c8:17:b9:72: a5:e1:09:b6:38:46:63:4d:c5:14:91:83:6a:cb:30:3e:00:5e: 76:f2:4c:87:90:a9:4c:4d:27:ea:0f:10:fa:99:72:b7:a1:d3: 2c:9f:cf:77:2d:28:bc:ca:a8:3d:0b:fa:7e:53:d8:90:d1:41: a5:b6:d3:71:0f:26:56:bf:b4:9b:6a:3b:43:a1:23:33:27:c3: 7c:7e:8d:b4:26:47:4f:8c:41:d3:08:13:75:16:e9:f8:c9:e2: 1b:81:85:f0:3e:32:6f:16:9e:db:dd:35:ba:a6:3d:79:e9:d6: de:da:d3:ce:3d:81:05:f7:ad:fd:e6:84:bd:9f:6f:a4:ff:dd: 59:2e:69:3b:a5:50:8d:54:1d:93:49:eb:65:50:d7:65:23:31: 17:8e:d3:0d:4c:f2:4e:07:bb:46:76:d2:60:7e:c4:cf:e0:4d: a9:35:6e:13:2e:c6:3e:54:63:74:29:0a:52:37:8d:24:2b:30: 05:bf:86:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHRA4jwiFEJBpKOmgmKQvb6RNFNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZEMDhFNjc1NUNGMUNDQUFGOUQ1ODM0NDQ5Nzk3ODQ4 QTcwNkI1NzAeFw0yNTA5MDYwNzU2NTlaFw0yNTA5MDkxMDM0NTlaMDMxMTAvBgNV BAMTKDFGRjNCQkMwNDJFOTI2MTA4QkM3ODQwNTFFNzE2Q0E2ODVGRjE4NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5VHemJbkZzHGIDkCoK1ZYTkfL IKolZCK4LKgRSoS2tu5dKYMJ4PCg3OpjKKWQb8+c/18XeykGoR10PuJfv62rlaX5 XuVZCjSwTw/gZiBAWeDBz5YD9pStKurl26tOWLUcB13iWlFS2MeTLdJfdtK38xjE owY9UsB4t2ISYmdBhzn5qr5iO9tF71D+LCxqjveqgrvr0zUE+MUtOWwCiIT8041n K2QSXn/fHTyqhs6xrmZ2lUq2pirwdCw33Szm36s7wBx0gt+XdSTWKp9W8oWZNB43 Q45xwtzDbuNWkn1mmanjsbKTE6zRBhJgCKUArUrr/5c6i0oP/BgdeQJU1ROPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH/O7wELpJhCLx4QFHnFspoX/GGAwHwYDVR0j BBgwFoAUL9COZ1XPHMqvnVg0RJeXhIpwa1cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2QwZDdmYS1kNmY4LTRjMjItYjQ4YS01OGI4ZWQ4ZWRkYTcvMC8yRkQwOEU2NzU1 Q0YxQ0NBQUY5RDU4MzQ0NDk3OTc4NDhBNzA2QjU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkZEMDhFNjc1NUNGMUNDQUFGOUQ1ODM0NDQ5Nzk3ODQ4QTcw NkI1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGNkMGQ3ZmEtZDZmOC00YzIyLWI0 OGEtNThiOGVkOGVkZGE3LzAvMkZEMDhFNjc1NUNGMUNDQUFGOUQ1ODM0NDQ5Nzk3 ODQ4QTcwNkI1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKwJXU2PMOSLJjSovzRpE7ZFuuN6TitUGL7c IZkehkWu34aXP9Kxu0P0tWg9UpL9f5gvlK5Nr55fw8Gopeai/vGXxy7ZyBe5cqXh CbY4RmNNxRSRg2rLMD4AXnbyTIeQqUxNJ+oPEPqZcreh0yyfz3ctKLzKqD0L+n5T 2JDRQaW203EPJla/tJtqO0OhIzMnw3x+jbQmR0+MQdMIE3UW6fjJ4huBhfA+Mm8W ntvdNbqmPXnp1t7a0849gQX3rf3mhL2fb6T/3VkuaTulUI1UHZNJ62VQ12UjMReO 0w1M8k4Hu0Z20mB+xM/gTak1bhMuxj5UY3QpClI3jSQrMAW/hq8= -----END CERTIFICATE-----Generated at Sun Sep 7 15:14:38 2025 by rpki-client