$ rpki-client -vvf repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft File: 2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft (raw, json) Hash identifier: 3waAYF9nhY6Ewt644ehPNy9664y3QtJ0WA1yuIICARk= Subject key identifier: E5:96:7D:9D:B7:94:FD:2B:59:F0:64:45:9C:CB:92:F6:69:8E:98:E7 Authority key identifier: 2A:62:B9:64:EC:86:44:7D:C2:2D:DE:70:DC:35:17:F0:CF:7C:9A:CD Certificate issuer: /CN=2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD Certificate serial: 5E86C1F756E53F1A296C39612FC7954F66E07A01 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft Manifest number: B6 Signing time: Sat 19 Jul 2025 18:20:35 +0000 Manifest this update: Sat 19 Jul 2025 18:15:35 +0000 Manifest next update: Wed 23 Jul 2025 00:46:35 +0000 Files and hashes: 1: 3135372e36362e3132332e302f32342d3234203d3e20313532373731.roa (hash: U13ray6Q2sSoKG3Sl/JF9ePon4W14X24dzQnJX7hj3o=) 2: 2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.crl (hash: k2aJXCdahimCI5+FThA83xiQW+D0TpH5NRco6U2d9aE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.crl rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 00:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:86:c1:f7:56:e5:3f:1a:29:6c:39:61:2f:c7:95:4f:66:e0:7a:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD Validity Not Before: Jul 19 18:15:35 2025 GMT Not After : Jul 23 00:46:35 2025 GMT Subject: CN=E5967D9DB794FD2B59F064459CCB92F6698E98E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5a:b0:21:86:20:df:91:86:45:f1:92:dd:b9: ee:c7:85:ba:c4:44:55:00:2f:0f:a6:b9:13:5c:11: 1b:4a:7a:4c:3e:a2:6f:b9:f4:53:ce:9a:18:70:d6: c1:3c:2b:88:50:d6:b9:49:31:b2:a9:12:58:7a:d6: 72:78:da:ff:2d:6b:05:a4:ac:fe:51:bf:e1:7e:a2: c5:ed:3d:7d:00:cc:3c:76:4b:c0:8e:98:5e:eb:2f: ef:a1:d7:6c:e1:fc:c6:bf:9b:07:8f:e7:d8:85:67: 6d:58:08:ec:9f:87:69:e0:2a:33:f9:0d:ca:65:d3: ce:04:b7:19:35:30:5d:44:86:06:49:46:a6:84:98: 2b:45:be:ca:20:81:68:5e:c9:1a:89:38:1c:d5:6f: 5d:a1:17:82:4e:2b:fb:d9:db:95:06:9d:58:63:f6: 95:11:c0:d1:cb:0b:66:8f:cf:ea:ac:07:f1:da:cf: b2:d4:4e:ae:e5:ab:fe:a5:52:94:0a:fa:9a:0a:e3: 4e:59:78:a7:fc:7c:34:e0:da:a2:97:4a:0a:f2:89: d8:02:93:39:a1:dd:1e:27:c6:48:13:f0:e3:58:3d: 76:28:c8:82:82:d4:76:f3:6e:69:cf:9a:a9:6b:d0: 54:42:3e:2a:0b:04:89:11:e6:2c:9b:a1:ea:5a:ca: 95:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:96:7D:9D:B7:94:FD:2B:59:F0:64:45:9C:CB:92:F6:69:8E:98:E7 X509v3 Authority Key Identifier: keyid:2A:62:B9:64:EC:86:44:7D:C2:2D:DE:70:DC:35:17:F0:CF:7C:9A:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:bc:16:06:d5:da:70:16:45:cb:1c:67:a1:66:71:40:be:46: 07:7a:70:a2:75:af:4a:b1:f6:dc:d3:7e:8d:72:f0:d2:6d:23: 5f:19:7a:da:9c:69:6e:36:ad:e3:2f:e3:62:6f:61:e7:a9:74: b5:66:6f:e4:fb:93:e2:47:ef:75:f0:95:04:8b:b2:a2:0d:95: dd:f9:05:7b:6f:10:90:9b:84:6e:a4:96:00:18:bb:31:30:ce: 28:70:ab:23:34:23:7c:3b:37:bf:d4:4b:b8:b3:d9:ff:3e:a5: 8d:67:a9:f6:29:6c:19:65:92:d3:3d:5e:35:69:e4:22:75:9e: 1f:43:8f:54:9f:5c:42:0f:f3:fa:6a:5b:9c:25:53:53:86:47: e6:09:eb:6a:47:46:e8:90:16:25:ae:45:8b:31:af:16:6d:fb: 49:55:e8:d4:85:88:e8:ce:88:93:eb:77:bf:18:85:b6:cd:36: 88:c4:cd:1e:85:1e:81:63:9c:b0:a0:13:3c:aa:2a:81:2a:a3: 4b:4b:3b:79:98:2f:05:f4:a5:e6:c5:50:e9:f4:6e:93:7d:3b: 91:8a:8c:50:07:f9:84:4b:c3:ab:1d:0e:ff:b7:1e:50:2c:43: c6:b7:1a:9b:c5:8e:7a:f1:ef:9f:c5:d0:67:a8:62:06:66:57: b9:fc:5a:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXobB91blPxopbDlhL8eVT2bgegEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE2MkI5NjRFQzg2NDQ3REMyMkRERTcwREMzNTE3RjBD RjdDOUFDRDAeFw0yNTA3MTkxODE1MzVaFw0yNTA3MjMwMDQ2MzVaMDMxMTAvBgNV BAMTKEU1OTY3RDlEQjc5NEZEMkI1OUYwNjQ0NTlDQ0I5MkY2Njk4RTk4RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEWrAhhiDfkYZF8ZLdue7HhbrE RFUALw+muRNcERtKekw+om+59FPOmhhw1sE8K4hQ1rlJMbKpElh61nJ42v8tawWk rP5Rv+F+osXtPX0AzDx2S8COmF7rL++h12zh/Ma/mweP59iFZ21YCOyfh2ngKjP5 Dcpl084Etxk1MF1EhgZJRqaEmCtFvsoggWheyRqJOBzVb12hF4JOK/vZ25UGnVhj 9pURwNHLC2aPz+qsB/Haz7LUTq7lq/6lUpQK+poK405ZeKf8fDTg2qKXSgryidgC kzmh3R4nxkgT8ONYPXYoyIKC1HbzbmnPmqlr0FRCPioLBIkR5iyboepaypXxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5ZZ9nbeU/StZ8GRFnMuS9mmOmOcwHwYDVR0j BBgwFoAUKmK5ZOyGRH3CLd5w3DUX8M98ms0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWIwODg0NS1kZjgyLTQ0YzItOTc2ZC02ZDc0YjgxMTY2ZjQvMC8yQTYyQjk2NEVD ODY0NDdEQzIyRERFNzBEQzM1MTdGMENGN0M5QUNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkE2MkI5NjRFQzg2NDQ3REMyMkRERTcwREMzNTE3RjBDRjdD OUFDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFiMDg4NDUtZGY4Mi00NGMyLTk3 NmQtNmQ3NGI4MTE2NmY0LzAvMkE2MkI5NjRFQzg2NDQ3REMyMkRERTcwREMzNTE3 RjBDRjdDOUFDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAe8FgbV2nAWRcscZ6FmcUC+Rgd6cKJ1r0qx 9tzTfo1y8NJtI18ZetqcaW42reMv42JvYeepdLVmb+T7k+JH73XwlQSLsqINld35 BXtvEJCbhG6klgAYuzEwzihwqyM0I3w7N7/US7iz2f8+pY1nqfYpbBllktM9XjVp 5CJ1nh9Dj1SfXEIP8/pqW5wlU1OGR+YJ62pHRuiQFiWuRYsxrxZt+0lV6NSFiOjO iJPrd78YhbbNNojEzR6FHoFjnLCgEzyqKoEqo0tLO3mYLwX0pebFUOn0bpN9O5GK jFAH+YRLw6sdDv+3HlAsQ8a3GpvFjnrx75/F0GeoYgZmV7n8Wqw= -----END CERTIFICATE-----Generated at Mon Jul 21 10:53:17 2025 by rpki-client