$ rpki-client -vvf repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft File: 2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft (raw, json) Hash identifier: /YrUjosp3yo7msNhR6SgadWIx79oq8C6gUZwtWsYzSA= Subject key identifier: 39:5A:3C:C3:7C:3B:9A:B6:3F:D9:53:48:97:47:75:59:2C:55:84:33 Authority key identifier: 2B:69:EA:50:8D:C6:2D:34:C2:B3:CA:4F:BA:57:BF:3A:FF:FD:49:94 Certificate issuer: /CN=2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994 Certificate serial: 6CA99CD6AFFCEAE8368B1379A8683CE8D34E248A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft Manifest number: 0467 Signing time: Fri 05 Sep 2025 17:11:09 +0000 Manifest this update: Fri 05 Sep 2025 17:06:09 +0000 Manifest next update: Tue 09 Sep 2025 01:50:09 +0000 Files and hashes: 1: 3130332e3136322e31392e302f32342d3234203d3e20313431363430.roa (hash: dsIKfbnR+pN9Hwy4NZz2+3xuPhAknppnbWGiA908HyE=) 2: 2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.crl (hash: aTqFdmfgI1b8HciLCDEa2dHeIdNb7yR38TanNgkv8E4=) 3: 323030313a6466353a653238303a3a2f34382d3438203d3e20313431363430.roa (hash: +ZHphLOhvruOuJkUwXhmKIA/kEZXmDLtlpGcK4ZlSQI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.crl rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 01:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:a9:9c:d6:af:fc:ea:e8:36:8b:13:79:a8:68:3c:e8:d3:4e:24:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994 Validity Not Before: Sep 5 17:06:09 2025 GMT Not After : Sep 9 01:50:09 2025 GMT Subject: CN=395A3CC37C3B9AB63FD95348974775592C558433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:15:2d:92:d6:11:33:58:77:f5:82:bc:c0:bf: b1:51:f1:48:b2:eb:0d:2d:c7:10:23:5e:52:82:be: 11:12:4b:6e:4a:65:e6:10:b3:5f:d2:cc:e3:d0:bf: a2:f5:92:e3:27:ff:47:56:09:d5:2d:d1:25:0e:c1: fb:3a:52:da:51:5d:ea:5d:c3:1f:55:9d:38:37:d2: 10:b3:a6:6c:00:6e:4d:ed:8b:b6:d6:00:87:1b:92: 03:74:69:bb:b8:cd:85:95:fb:29:84:98:10:1d:7a: 23:30:3e:09:1c:b0:64:d7:47:ce:af:f4:da:d7:ac: de:98:ed:54:39:fa:2f:80:11:52:e8:5b:28:0a:be: 21:32:46:88:a5:e0:75:e0:5d:b7:f7:c4:2c:ab:51: 8f:bb:d5:2d:ab:9a:f1:a1:82:c9:82:31:f9:89:32: 4e:66:a2:9d:05:b3:ca:6c:71:3a:a0:52:32:87:68: cc:c1:13:e7:68:e9:6e:06:90:d8:c5:83:3b:14:36: 58:af:85:4c:3a:ea:65:9a:fc:2e:f2:7b:4f:f5:1f: 8e:cd:5d:13:26:f2:a4:13:a9:2c:a3:17:99:81:93: 8c:4a:72:ed:f1:c0:0c:04:de:58:9d:aa:28:69:40: 50:63:d2:f0:50:84:08:4d:c0:98:57:48:42:e5:38: 0d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:5A:3C:C3:7C:3B:9A:B6:3F:D9:53:48:97:47:75:59:2C:55:84:33 X509v3 Authority Key Identifier: keyid:2B:69:EA:50:8D:C6:2D:34:C2:B3:CA:4F:BA:57:BF:3A:FF:FD:49:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:56:09:93:55:61:40:88:c1:44:bd:05:23:b9:b8:8e:a0:68: 0c:32:82:9a:ff:c5:9b:f9:2b:9e:d0:dc:23:d8:b8:51:57:46: 7f:83:90:34:57:be:9d:78:87:4e:ae:2d:7a:52:86:d8:c0:90: 47:ed:0b:3b:63:f3:b9:84:0c:c8:a0:c7:e9:64:9c:a2:35:7d: f5:8b:2e:04:8c:30:b8:7e:a2:a9:a3:fb:bc:b0:b9:b7:db:d6: a5:27:f4:06:49:8a:3d:0c:0a:08:8f:0e:7d:b5:c1:25:ec:60: 44:d7:3a:d3:30:66:62:41:d4:9f:6f:4c:86:c0:8b:51:46:96: 0f:17:46:f6:58:3b:3c:a4:7a:be:d7:27:5a:f3:50:e2:5d:c3: 19:ab:7a:b4:d5:3e:19:ad:7a:e9:ae:d6:8c:e2:d7:e8:60:f5: 47:4d:89:ec:c9:53:57:ff:f2:75:2f:bb:6b:40:4b:81:75:1a: 53:8e:8e:7d:8d:3a:67:58:55:e1:3c:d8:50:04:d8:3f:4f:f7: 1f:5c:cf:29:bc:93:73:e5:b6:40:d0:32:f2:bf:62:b3:b8:ab: 90:72:00:a5:88:f2:05:08:68:a0:2d:4e:4c:fc:a0:df:f6:6a: 56:28:9c:2c:94:35:ae:54:15:44:3b:5a:97:f1:12:e5:0e:cd: 0c:03:05:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbKmc1q/86ug2ixN5qGg86NNOJIowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI2OUVBNTA4REM2MkQzNEMyQjNDQTRGQkE1N0JGM0FG RkZENDk5NDAeFw0yNTA5MDUxNzA2MDlaFw0yNTA5MDkwMTUwMDlaMDMxMTAvBgNV BAMTKDM5NUEzQ0MzN0MzQjlBQjYzRkQ5NTM0ODk3NDc3NTU5MkM1NTg0MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4FS2S1hEzWHf1grzAv7FR8Uiy 6w0txxAjXlKCvhESS25KZeYQs1/SzOPQv6L1kuMn/0dWCdUt0SUOwfs6UtpRXepd wx9VnTg30hCzpmwAbk3ti7bWAIcbkgN0abu4zYWV+ymEmBAdeiMwPgkcsGTXR86v 9NrXrN6Y7VQ5+i+AEVLoWygKviEyRoil4HXgXbf3xCyrUY+71S2rmvGhgsmCMfmJ Mk5mop0Fs8pscTqgUjKHaMzBE+do6W4GkNjFgzsUNlivhUw66mWa/C7ye0/1H47N XRMm8qQTqSyjF5mBk4xKcu3xwAwE3lidqihpQFBj0vBQhAhNwJhXSELlOA2TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOVo8w3w7mrY/2VNIl0d1WSxVhDMwHwYDVR0j BBgwFoAUK2nqUI3GLTTCs8pPule/Ov/9SZQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2M2MzdiZC01OTcxLTQyNjQtOTk3YS03NDlkODA0YTY4NTgvMC8yQjY5RUE1MDhE QzYyRDM0QzJCM0NBNEZCQTU3QkYzQUZGRkQ0OTk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkI2OUVBNTA4REM2MkQzNEMyQjNDQTRGQkE1N0JGM0FGRkZE NDk5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWNjNjM3YmQtNTk3MS00MjY0LTk5 N2EtNzQ5ZDgwNGE2ODU4LzAvMkI2OUVBNTA4REM2MkQzNEMyQjNDQTRGQkE1N0JG M0FGRkZENDk5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAINWCZNVYUCIwUS9BSO5uI6gaAwygpr/xZv5 K57Q3CPYuFFXRn+DkDRXvp14h06uLXpShtjAkEftCztj87mEDMigx+lknKI1ffWL LgSMMLh+oqmj+7ywubfb1qUn9AZJij0MCgiPDn21wSXsYETXOtMwZmJB1J9vTIbA i1FGlg8XRvZYOzyker7XJ1rzUOJdwxmrerTVPhmteumu1ozi1+hg9UdNiezJU1f/ 8nUvu2tAS4F1GlOOjn2NOmdYVeE82FAE2D9P9x9czym8k3PltkDQMvK/YrO4q5By AKWI8gUIaKAtTkz8oN/2alYonCyUNa5UFUQ7WpfxEuUOzQwDBa4= -----END CERTIFICATE-----Generated at Sun Sep 7 15:24:32 2025 by rpki-client