$ rpki-client -vvf repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft File: 2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft (raw, json) Hash identifier: gkRsLYxHa6yviDBghucl4nGXJzYee/FzVJiMwLCxPQA= Subject key identifier: 27:97:60:06:58:3F:08:76:D2:DF:B7:ED:ED:60:8D:41:9E:B1:9A:0D Authority key identifier: 2E:29:F4:8B:C4:E2:FD:64:21:F1:2F:27:5B:FE:54:CB:5A:FC:4C:BF Certificate issuer: /CN=2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF Certificate serial: 37C7A772C2E073F0D778B05483375CA573DF3480 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft Manifest number: 022C Signing time: Fri 05 Sep 2025 18:52:15 +0000 Manifest this update: Fri 05 Sep 2025 18:47:15 +0000 Manifest next update: Tue 09 Sep 2025 01:55:15 +0000 Files and hashes: 1: 2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.crl (hash: rMaU85hmrVcLiG6joW5dX6nuPv8B5PlA72AqjRz40aM=) 2: 3130332e3138342e3138322e302f32342d3234203d3e20313439363736.roa (hash: 1ohXfgQVLOVqfzLUY6nq2zHsOKGWcr19CJg3R6qlyZU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.crl rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 01:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:c7:a7:72:c2:e0:73:f0:d7:78:b0:54:83:37:5c:a5:73:df:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF Validity Not Before: Sep 5 18:47:15 2025 GMT Not After : Sep 9 01:55:15 2025 GMT Subject: CN=27976006583F0876D2DFB7EDED608D419EB19A0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:26:14:00:9c:7b:fc:fb:ab:12:3c:24:f7:78: 7c:fd:f5:60:88:1d:bb:ae:b0:f9:a4:f7:25:02:fd: cb:6d:b6:ba:aa:89:5f:4e:44:5b:93:e7:83:1f:f8: 6c:a1:b3:cb:55:2c:fc:76:ef:00:29:be:cf:05:22: 2f:aa:29:69:d0:5d:78:05:4f:e4:3c:dc:34:2d:a0: 9c:90:cf:54:89:de:25:07:a5:69:8f:15:fc:69:a6: 6d:37:d9:6b:9f:90:18:61:44:c3:aa:37:69:ad:b9: 71:d6:cb:a0:58:ec:15:45:95:0f:63:64:37:9f:31: bc:d1:d5:fe:7e:a0:ee:32:f1:69:65:7c:b3:67:f6: 89:ef:86:e0:88:7b:9e:73:cd:67:70:21:26:25:ba: 29:6c:f3:b6:82:3a:ce:a5:1b:72:e8:56:73:47:ff: f4:dc:d1:73:b8:0d:07:4a:5c:fd:c0:c4:65:2b:53: bc:a9:98:ec:5d:7a:39:4c:19:ed:47:0c:11:ea:25: c1:75:f8:00:dd:54:3c:38:5b:e9:f7:86:17:f2:d7: f2:30:44:45:7f:1f:68:14:8d:a4:a5:b1:4f:03:c5: d4:a3:c9:96:c0:08:35:3c:31:eb:87:84:a9:6a:de: b6:f9:7f:e0:eb:80:1b:70:8f:d0:29:74:b3:d9:06: 9a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:97:60:06:58:3F:08:76:D2:DF:B7:ED:ED:60:8D:41:9E:B1:9A:0D X509v3 Authority Key Identifier: keyid:2E:29:F4:8B:C4:E2:FD:64:21:F1:2F:27:5B:FE:54:CB:5A:FC:4C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:91:11:6a:1e:6a:9f:f5:f9:80:de:ec:d3:3b:c3:37:d6:78: e6:3e:10:fd:e2:4f:52:0e:61:0d:f0:1c:be:da:3d:b0:4b:d9: 09:5e:75:1c:0e:df:a9:3c:26:8c:2a:23:f5:b4:b3:99:48:c3: cd:ba:4b:56:35:3e:23:a0:a2:8b:4b:ea:60:07:43:0e:d5:a6: 44:d6:62:30:16:38:38:d7:cf:34:93:42:d3:2a:2f:f1:2e:b9: 48:72:b2:84:45:94:c4:67:e4:91:63:7e:23:1a:42:5e:19:0e: b9:6a:6f:f1:d8:24:e4:39:92:7f:58:52:b0:6d:85:7c:86:b3: da:ce:0a:02:6d:6d:ae:c4:b4:b7:87:e2:b8:71:ec:58:7f:bb: e1:ad:94:e6:9b:d4:45:ac:b5:90:0d:db:c6:bc:c9:ea:42:8c: 6c:46:02:19:90:41:17:c1:70:55:77:29:2a:4e:66:23:e9:24: f9:6b:bb:58:4e:4c:02:81:da:60:2b:ac:fd:46:34:52:1e:3e: 3e:d4:76:d6:ab:61:6a:5b:8b:fe:de:0f:e9:dc:1a:e6:84:06: ea:c3:5c:0f:43:28:a1:a1:cf:50:df:b0:89:a0:a9:99:d5:72: 98:8b:49:bc:f2:57:12:98:bb:36:30:fc:cb:3d:05:59:79:eb: f3:f1:b4:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN8encsLgc/DXeLBUgzdcpXPfNIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUyOUY0OEJDNEUyRkQ2NDIxRjEyRjI3NUJGRTU0Q0I1 QUZDNENCRjAeFw0yNTA5MDUxODQ3MTVaFw0yNTA5MDkwMTU1MTVaMDMxMTAvBgNV BAMTKDI3OTc2MDA2NTgzRjA4NzZEMkRGQjdFREVENjA4RDQxOUVCMTlBMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqJhQAnHv8+6sSPCT3eHz99WCI HbuusPmk9yUC/ctttrqqiV9ORFuT54Mf+Gyhs8tVLPx27wApvs8FIi+qKWnQXXgF T+Q83DQtoJyQz1SJ3iUHpWmPFfxppm032WufkBhhRMOqN2mtuXHWy6BY7BVFlQ9j ZDefMbzR1f5+oO4y8WllfLNn9onvhuCIe55zzWdwISYluils87aCOs6lG3LoVnNH //Tc0XO4DQdKXP3AxGUrU7ypmOxdejlMGe1HDBHqJcF1+ADdVDw4W+n3hhfy1/Iw REV/H2gUjaSlsU8DxdSjyZbACDU8MeuHhKlq3rb5f+DrgBtwj9ApdLPZBpqjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ5dgBlg/CHbS37ft7WCNQZ6xmg0wHwYDVR0j BBgwFoAULin0i8Ti/WQh8S8nW/5Uy1r8TL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YjI1ZjBlYi0zYzRkLTRmYzctYjNhNC1hZGIyMjk3ZGU2Y2YvMC8yRTI5RjQ4QkM0 RTJGRDY0MjFGMTJGMjc1QkZFNTRDQjVBRkM0Q0JGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUyOUY0OEJDNEUyRkQ2NDIxRjEyRjI3NUJGRTU0Q0I1QUZD NENCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmIyNWYwZWItM2M0ZC00ZmM3LWIz YTQtYWRiMjI5N2RlNmNmLzAvMkUyOUY0OEJDNEUyRkQ2NDIxRjEyRjI3NUJGRTU0 Q0I1QUZDNENCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ2REWoeap/1+YDe7NM7wzfWeOY+EP3iT1IO YQ3wHL7aPbBL2QledRwO36k8JowqI/W0s5lIw826S1Y1PiOgootL6mAHQw7VpkTW YjAWODjXzzSTQtMqL/EuuUhysoRFlMRn5JFjfiMaQl4ZDrlqb/HYJOQ5kn9YUrBt hXyGs9rOCgJtba7EtLeH4rhx7Fh/u+GtlOab1EWstZAN28a8yepCjGxGAhmQQRfB cFV3KSpOZiPpJPlru1hOTAKB2mArrP1GNFIePj7UdtarYWpbi/7eD+ncGuaEBurD XA9DKKGhz1DfsImgqZnVcpiLSbzyVxKYuzYw/Ms9BVl56/PxtO0= -----END CERTIFICATE-----Generated at Sun Sep 7 15:34:22 2025 by rpki-client