$ rpki-client -vvf repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft File: 2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft (raw, json) Hash identifier: 4/Y3aiFTMaa+b6hu3kuVSFQE7msKlrCkDNLFOuznQw0= Subject key identifier: 7C:AF:CD:6F:21:95:E1:32:4D:3A:80:23:76:C7:EE:26:37:9D:CF:54 Authority key identifier: 2A:57:5A:DD:64:4E:97:D6:1D:2E:BF:FF:2A:23:05:6B:78:EF:AE:6C Certificate issuer: /CN=2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C Certificate serial: 38E483A8AD30AA8ABABB00AB8F41FAED62457B62 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft Manifest number: B7 Signing time: Fri 29 Aug 2025 01:31:44 +0000 Manifest this update: Fri 29 Aug 2025 01:26:44 +0000 Manifest next update: Mon 01 Sep 2025 06:51:44 +0000 Files and hashes: 1: 2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.crl (hash: d4hu75h2mLJgUI9Zmvlb1Qpphrxi29ccrA4ux3Im0Gc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.crl rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 01 Sep 2025 06:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:e4:83:a8:ad:30:aa:8a:ba:bb:00:ab:8f:41:fa:ed:62:45:7b:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C Validity Not Before: Aug 29 01:26:44 2025 GMT Not After : Sep 1 06:51:44 2025 GMT Subject: CN=7CAFCD6F2195E1324D3A802376C7EE26379DCF54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:12:09:d9:7b:40:14:c6:62:86:dd:8c:93:5f: fa:ac:e7:63:ce:5a:a4:f7:49:49:c5:6c:ea:79:c3: 5b:54:ce:50:93:4b:e9:8e:3f:87:2e:a4:f5:4e:27: 36:25:9e:28:58:1c:54:5b:d3:90:89:e3:1b:f6:2c: 06:50:78:63:24:b2:26:6a:06:14:62:0b:d3:4d:16: 8f:27:c0:90:38:b0:54:3d:26:b6:54:0d:5e:92:36: d2:30:55:25:d6:f8:f8:1a:e3:9a:52:6e:ca:26:db: f0:d2:3d:4f:2b:b8:49:2c:f2:29:36:b5:a5:bc:1f: 13:8f:42:a6:85:4a:0b:22:42:28:41:bc:dd:85:8b: 57:f7:dd:41:66:ac:e7:ac:3d:0b:f3:64:e5:f0:63: b8:08:f0:af:9a:5a:30:13:80:52:88:1c:d4:a5:f5: b3:63:f3:b1:10:af:18:73:a3:8b:90:02:27:6c:7c: bd:38:b5:9b:6b:d2:6e:06:ae:9f:20:f4:71:16:7b: bb:ce:2c:6f:e2:04:1a:08:74:88:c1:24:e9:2a:d2: 5c:94:4d:3c:b1:e9:61:c3:41:ee:97:c8:6d:bd:ed: 36:e3:e1:62:40:90:3e:d1:67:1f:89:4a:a8:98:48: 4b:8a:08:04:07:54:25:ec:f3:bc:ef:75:3d:34:f8: 78:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:AF:CD:6F:21:95:E1:32:4D:3A:80:23:76:C7:EE:26:37:9D:CF:54 X509v3 Authority Key Identifier: keyid:2A:57:5A:DD:64:4E:97:D6:1D:2E:BF:FF:2A:23:05:6B:78:EF:AE:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:2d:1a:b1:bb:14:d4:fb:83:64:4e:ad:84:48:31:bd:9b:20: 36:77:d7:44:6b:68:37:ee:b7:74:f4:c2:7d:f7:f0:59:4b:5f: 89:74:6e:2e:e3:91:0b:54:4d:2b:45:cb:11:ea:21:66:8f:30: 1a:dc:e5:07:ef:52:8c:a4:f0:e5:c9:13:50:d4:40:ec:ad:7c: 88:68:06:76:cd:5c:22:3d:24:46:b3:68:bd:25:ff:d5:12:37: 16:25:10:0e:08:79:0b:01:fe:fe:ce:b4:6f:86:22:67:15:cc: c9:4e:51:40:ff:6b:a2:e7:79:57:2a:98:3c:86:c7:a6:5a:66: c2:71:a7:fa:0a:d8:ae:77:bc:da:6e:f7:6f:89:55:32:e6:fd: b6:e2:6f:b3:73:95:46:8c:ef:05:51:a6:4d:e9:c4:2d:88:59: 38:bf:ef:ed:a5:6c:63:48:e0:0f:01:80:10:30:dd:f0:44:06: 42:d4:86:c6:5c:03:fc:cd:1b:4b:e2:af:80:22:3e:41:3c:4e: 5c:40:e4:be:5a:78:bd:5a:a8:81:66:b0:72:4b:b2:6a:44:ea: a8:84:a2:de:e5:b7:8f:71:52:c1:ab:80:ff:08:6c:e5:78:e4: 49:9d:c7:c9:36:b5:7f:9f:64:15:9e:77:1f:b7:7a:71:79:c3: 42:7f:1a:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOOSDqK0wqoq6uwCrj0H67WJFe2IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE1NzVBREQ2NDRFOTdENjFEMkVCRkZGMkEyMzA1NkI3 OEVGQUU2QzAeFw0yNTA4MjkwMTI2NDRaFw0yNTA5MDEwNjUxNDRaMDMxMTAvBgNV BAMTKDdDQUZDRDZGMjE5NUUxMzI0RDNBODAyMzc2QzdFRTI2Mzc5RENGNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAEgnZe0AUxmKG3YyTX/qs52PO WqT3SUnFbOp5w1tUzlCTS+mOP4cupPVOJzYlnihYHFRb05CJ4xv2LAZQeGMksiZq BhRiC9NNFo8nwJA4sFQ9JrZUDV6SNtIwVSXW+Pga45pSbsom2/DSPU8ruEks8ik2 taW8HxOPQqaFSgsiQihBvN2Fi1f33UFmrOesPQvzZOXwY7gI8K+aWjATgFKIHNSl 9bNj87EQrxhzo4uQAidsfL04tZtr0m4Grp8g9HEWe7vOLG/iBBoIdIjBJOkq0lyU TTyx6WHDQe6XyG297Tbj4WJAkD7RZx+JSqiYSEuKCAQHVCXs87zvdT00+HijAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfK/NbyGV4TJNOoAjdsfuJjedz1QwHwYDVR0j BBgwFoAUKlda3WROl9YdLr//KiMFa3jvrmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDM1NGMxYi02NzdlLTQxZDYtYWIwZi1lOTZlZGZkOTI5NTcvMC8yQTU3NUFERDY0 NEU5N0Q2MUQyRUJGRkYyQTIzMDU2Qjc4RUZBRTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkE1NzVBREQ2NDRFOTdENjFEMkVCRkZGMkEyMzA1NkI3OEVG QUU2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQzNTRjMWItNjc3ZS00MWQ2LWFi MGYtZTk2ZWRmZDkyOTU3LzAvMkE1NzVBREQ2NDRFOTdENjFEMkVCRkZGMkEyMzA1 NkI3OEVGQUU2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFwtGrG7FNT7g2ROrYRIMb2bIDZ310RraDfu t3T0wn338FlLX4l0bi7jkQtUTStFyxHqIWaPMBrc5QfvUoyk8OXJE1DUQOytfIho BnbNXCI9JEazaL0l/9USNxYlEA4IeQsB/v7OtG+GImcVzMlOUUD/a6LneVcqmDyG x6ZaZsJxp/oK2K53vNpu92+JVTLm/bbib7NzlUaM7wVRpk3pxC2IWTi/7+2lbGNI 4A8BgBAw3fBEBkLUhsZcA/zNG0vir4AiPkE8TlxA5L5aeL1aqIFmsHJLsmpE6qiE ot7lt49xUsGrgP8IbOV45Emdx8k2tX+fZBWedx+3enF5w0J/Goc= -----END CERTIFICATE-----Generated at Fri Aug 29 23:22:28 2025 by rpki-client