$ rpki-client -vvf repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft File: 2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft (raw, json) Hash identifier: OLauNTbAQxarowp2ap92jYhFuY8+l/H+s50U1z3k2zc= Subject key identifier: 41:56:E0:88:8D:18:DF:15:E4:80:3D:65:14:03:40:E0:87:CF:1F:5D Authority key identifier: 2A:62:B9:64:EC:86:44:7D:C2:2D:DE:70:DC:35:17:F0:CF:7C:9A:CD Certificate issuer: /CN=2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD Certificate serial: 42A999E3819E89C4E346F387C35684281D59FDE8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft Manifest number: CC Signing time: Sun 07 Sep 2025 04:40:36 +0000 Manifest this update: Sun 07 Sep 2025 04:35:36 +0000 Manifest next update: Wed 10 Sep 2025 08:21:36 +0000 Files and hashes: 1: 3135372e36362e3132332e302f32342d3234203d3e20313532373731.roa (hash: U13ray6Q2sSoKG3Sl/JF9ePon4W14X24dzQnJX7hj3o=) 2: 2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.crl (hash: P7mRHsfGoj4xY3yT6vkqaNxgA9+Js5MIL44OohoBNRA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.crl rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 08:21:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:a9:99:e3:81:9e:89:c4:e3:46:f3:87:c3:56:84:28:1d:59:fd:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD Validity Not Before: Sep 7 04:35:36 2025 GMT Not After : Sep 10 08:21:36 2025 GMT Subject: CN=4156E0888D18DF15E4803D65140340E087CF1F5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:89:05:ef:61:82:48:ba:78:4a:48:18:16:2b: d6:61:0e:2e:e1:53:7b:12:a1:0a:dc:53:04:6a:24: 88:8e:9f:4f:27:26:af:28:57:53:56:57:56:53:ca: e6:2e:36:d6:fd:72:88:e9:38:74:35:33:5b:36:0f: df:d1:49:f5:86:3e:71:ee:99:a4:09:88:c4:5b:67: fa:82:47:42:1f:33:49:36:a2:e4:0b:83:05:84:d6: 5f:03:bc:36:de:9b:d2:8b:b9:a8:ee:f8:be:63:8f: 25:1f:c6:6b:0a:38:a6:97:f2:77:5d:3a:6a:01:86: 42:b9:ea:c6:81:1a:f5:c1:1c:91:1c:f2:f4:f5:25: 8d:c6:92:5b:1f:96:b6:e0:06:a3:df:2b:fd:1e:d6: 0a:09:b7:67:fa:6d:f3:0b:16:6f:a0:54:94:f7:70: b6:9d:3f:6b:c6:96:34:cc:35:7a:cb:9e:0b:ab:e4: 86:78:58:31:84:43:4c:16:9f:ad:0a:71:b0:6e:76: de:48:3f:d3:4a:6c:61:77:b2:96:b5:9c:77:99:e2: 77:ab:79:6c:58:0e:55:9e:a2:ca:07:88:a4:5b:4d: ea:ee:7e:83:12:ed:0e:7c:14:3c:91:35:da:3b:4a: bd:41:c0:dc:1f:09:3b:d9:62:c7:6a:4d:f7:a6:96: 0c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:56:E0:88:8D:18:DF:15:E4:80:3D:65:14:03:40:E0:87:CF:1F:5D X509v3 Authority Key Identifier: keyid:2A:62:B9:64:EC:86:44:7D:C2:2D:DE:70:DC:35:17:F0:CF:7C:9A:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:df:81:5f:a0:06:d1:7b:59:e2:ee:aa:72:28:55:83:6c:ab: 95:b2:c9:a8:10:7a:e3:1c:4b:68:2a:87:64:ae:18:62:ed:49: a3:09:25:00:96:da:d9:e0:9b:80:94:28:aa:a1:c6:40:cb:2f: 03:c0:09:06:8a:5f:34:48:37:3b:3e:8b:f2:6c:7e:6d:1e:c7: e2:96:2a:4f:81:e5:96:5f:a2:6f:9d:60:c4:a0:7c:70:7e:9a: 50:97:da:c4:0c:f4:82:3c:c0:a0:73:87:f7:c7:84:0b:08:a4: 1b:97:77:1b:08:cc:d0:f0:c9:2e:c6:6f:cb:67:11:64:6d:c5: 73:5a:33:86:1c:16:47:97:05:49:d4:7d:82:e6:96:7b:89:04: 89:24:82:72:a2:59:0a:cd:8b:9f:e2:6e:b8:c8:46:7d:22:ba: bf:7e:cd:c2:92:3a:1e:a4:8c:5f:e6:a9:31:d8:7c:1a:4f:7d: 8d:36:42:d1:97:3b:df:43:e8:e5:d2:93:71:28:f9:12:bc:4d: 4b:87:bc:b2:7c:1f:93:53:dc:45:c3:ad:1b:7e:ec:1b:ee:6a: 55:d8:92:f2:04:d4:02:91:06:94:14:c2:0d:15:c2:df:11:5d: 3b:64:56:af:b3:53:d7:b9:8d:f8:1c:0e:27:88:06:29:d6:16: f9:91:e8:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQqmZ44GeicTjRvOHw1aEKB1Z/egwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE2MkI5NjRFQzg2NDQ3REMyMkRERTcwREMzNTE3RjBD RjdDOUFDRDAeFw0yNTA5MDcwNDM1MzZaFw0yNTA5MTAwODIxMzZaMDMxMTAvBgNV BAMTKDQxNTZFMDg4OEQxOERGMTVFNDgwM0Q2NTE0MDM0MEUwODdDRjFGNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYiQXvYYJIunhKSBgWK9ZhDi7h U3sSoQrcUwRqJIiOn08nJq8oV1NWV1ZTyuYuNtb9cojpOHQ1M1s2D9/RSfWGPnHu maQJiMRbZ/qCR0IfM0k2ouQLgwWE1l8DvDbem9KLuaju+L5jjyUfxmsKOKaX8ndd OmoBhkK56saBGvXBHJEc8vT1JY3GklsflrbgBqPfK/0e1goJt2f6bfMLFm+gVJT3 cLadP2vGljTMNXrLngur5IZ4WDGEQ0wWn60KcbBudt5IP9NKbGF3spa1nHeZ4ner eWxYDlWeosoHiKRbTerufoMS7Q58FDyRNdo7Sr1BwNwfCTvZYsdqTfemlgyFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQVbgiI0Y3xXkgD1lFANA4IfPH10wHwYDVR0j BBgwFoAUKmK5ZOyGRH3CLd5w3DUX8M98ms0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWIwODg0NS1kZjgyLTQ0YzItOTc2ZC02ZDc0YjgxMTY2ZjQvMC8yQTYyQjk2NEVD ODY0NDdEQzIyRERFNzBEQzM1MTdGMENGN0M5QUNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkE2MkI5NjRFQzg2NDQ3REMyMkRERTcwREMzNTE3RjBDRjdD OUFDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFiMDg4NDUtZGY4Mi00NGMyLTk3 NmQtNmQ3NGI4MTE2NmY0LzAvMkE2MkI5NjRFQzg2NDQ3REMyMkRERTcwREMzNTE3 RjBDRjdDOUFDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD7fgV+gBtF7WeLuqnIoVYNsq5WyyagQeuMc S2gqh2SuGGLtSaMJJQCW2tngm4CUKKqhxkDLLwPACQaKXzRINzs+i/Jsfm0ex+KW Kk+B5ZZfom+dYMSgfHB+mlCX2sQM9II8wKBzh/fHhAsIpBuXdxsIzNDwyS7Gb8tn EWRtxXNaM4YcFkeXBUnUfYLmlnuJBIkkgnKiWQrNi5/ibrjIRn0iur9+zcKSOh6k jF/mqTHYfBpPfY02QtGXO99D6OXSk3Eo+RK8TUuHvLJ8H5NT3EXDrRt+7BvualXY kvIE1AKRBpQUwg0Vwt8RXTtkVq+zU9e5jfgcDieIBinWFvmR6A8= -----END CERTIFICATE-----Generated at Mon Sep 8 05:09:02 2025 by rpki-client