$ rpki-client -vvf repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft File: 2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft (raw, json) Hash identifier: CHR87lWRfKUSC7ro7HK1upuummKI6wEL2691V1dHY+s= Subject key identifier: 8E:BF:6E:B9:FD:C7:C4:49:94:05:28:23:FE:03:CA:4A:1C:E5:BB:54 Authority key identifier: 2A:2A:BC:86:29:3A:3D:A3:60:2C:0D:FB:CE:D7:D9:92:4F:E5:A5:8B Certificate issuer: /CN=2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B Certificate serial: 3118E2802BA4A814003487D30E418E4F4EAED3C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft Manifest number: 0506 Signing time: Sun 07 Sep 2025 11:40:50 +0000 Manifest this update: Sun 07 Sep 2025 11:35:50 +0000 Manifest next update: Wed 10 Sep 2025 12:33:50 +0000 Files and hashes: 1: 3130332e3134352e3234322e302f32332d3234203d3e20313339343534.roa (hash: D2W67nt589wKu+2Bfg+V0s/E2/ZjISUp5pz9rbCWuK0=) 2: 2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.crl (hash: wBA43BvQavmAhgaUL783oBzgFI8DCMRexRsQM/gjwoo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.crl rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:18:e2:80:2b:a4:a8:14:00:34:87:d3:0e:41:8e:4f:4e:ae:d3:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B Validity Not Before: Sep 7 11:35:50 2025 GMT Not After : Sep 10 12:33:50 2025 GMT Subject: CN=8EBF6EB9FDC7C44994052823FE03CA4A1CE5BB54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:05:ea:e8:12:af:16:c0:13:c6:33:d3:57:1c: 9a:01:39:76:d5:82:29:ed:23:5d:7e:65:d4:41:ba: 81:30:37:e6:1f:46:df:a8:3e:60:55:b1:e8:a8:e7: 62:60:16:c3:08:7b:35:16:75:48:b6:96:9d:d5:70: e2:61:ee:11:bf:7e:84:fc:16:1c:0a:3c:b3:55:e8: 40:0c:5c:a9:5e:c0:94:81:34:ae:51:73:b8:4d:03: 59:d4:c7:f0:1f:18:2c:62:1b:55:f5:50:71:a2:22: 72:eb:bc:71:67:9e:e5:3b:ae:0b:3b:ff:7e:66:69: 78:0b:9e:70:50:14:46:00:ce:b0:34:93:94:f6:da: 82:38:b6:bf:e2:ce:fb:dd:08:f3:a1:f1:cb:04:04: ba:22:13:c1:75:9c:6e:4b:81:91:b2:39:4f:bf:df: 2a:68:bc:1d:f8:3d:bb:6b:d3:86:38:4a:9f:a7:3f: 41:42:ba:3a:57:7d:4e:a5:8b:72:78:5e:2e:8a:79: 7b:b2:86:93:29:8c:ad:51:5c:62:cc:be:97:c5:a4: 29:0a:21:e8:22:30:c9:74:3f:d1:01:16:44:ca:91: d7:a0:69:56:c5:2d:9f:09:6d:0d:da:33:70:eb:d3: 60:65:d5:7e:78:f1:81:69:47:96:73:29:e7:c7:1f: 45:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:BF:6E:B9:FD:C7:C4:49:94:05:28:23:FE:03:CA:4A:1C:E5:BB:54 X509v3 Authority Key Identifier: keyid:2A:2A:BC:86:29:3A:3D:A3:60:2C:0D:FB:CE:D7:D9:92:4F:E5:A5:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:b1:03:fc:17:3a:0a:4c:94:c4:ac:d1:50:a2:ec:a6:f7:98: 6b:39:8d:50:15:19:ae:d9:38:3e:68:d0:76:d0:73:ec:e5:6a: 43:37:6c:2c:6c:ee:3f:83:86:9b:df:29:64:3f:4e:33:bb:a2: 8d:7d:a0:7b:73:27:14:c5:2e:9b:4e:69:8c:82:49:35:37:7f: c2:59:13:75:30:a5:71:be:bb:60:a0:78:33:cf:20:b9:9b:b9: 70:20:1f:0a:f5:57:6b:bd:fd:c5:7b:34:10:55:89:73:e5:65: 51:5c:e0:87:82:a0:22:b5:d1:eb:28:5c:a8:af:c0:a9:70:74: 51:c0:b6:f9:4b:91:3f:a0:63:29:c1:5a:b4:1a:32:2a:5c:37: b1:c0:a4:d8:fb:0f:97:7f:f1:6b:bc:14:9f:3a:06:5e:e5:73: 1f:f0:74:b5:df:45:32:84:87:aa:85:8b:29:f9:65:60:b0:3c: 5b:7a:8e:cc:ae:58:2b:a2:54:eb:4b:93:4c:7d:70:a8:a6:d4: fd:7e:ad:e3:31:3c:a4:4b:73:27:c7:12:6b:bb:4a:99:21:7b: ef:0c:55:9d:a5:4e:0c:74:48:ac:3e:9b:a4:66:3a:49:9b:e4: 78:a1:ab:26:c7:a6:29:68:31:40:85:03:17:f4:c1:dc:ef:37: ac:b4:ae:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMRjigCukqBQANIfTDkGOT06u08gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyQUJDODYyOTNBM0RBMzYwMkMwREZCQ0VEN0Q5OTI0 RkU1QTU4QjAeFw0yNTA5MDcxMTM1NTBaFw0yNTA5MTAxMjMzNTBaMDMxMTAvBgNV BAMTKDhFQkY2RUI5RkRDN0M0NDk5NDA1MjgyM0ZFMDNDQTRBMUNFNUJCNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzBeroEq8WwBPGM9NXHJoBOXbV gintI11+ZdRBuoEwN+YfRt+oPmBVseio52JgFsMIezUWdUi2lp3VcOJh7hG/foT8 FhwKPLNV6EAMXKlewJSBNK5Rc7hNA1nUx/AfGCxiG1X1UHGiInLrvHFnnuU7rgs7 /35maXgLnnBQFEYAzrA0k5T22oI4tr/izvvdCPOh8csEBLoiE8F1nG5LgZGyOU+/ 3ypovB34Pbtr04Y4Sp+nP0FCujpXfU6li3J4Xi6KeXuyhpMpjK1RXGLMvpfFpCkK IegiMMl0P9EBFkTKkdegaVbFLZ8JbQ3aM3Dr02Bl1X548YFpR5ZzKefHH0VLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjr9uuf3HxEmUBSgj/gPKShzlu1QwHwYDVR0j BBgwFoAUKiq8hik6PaNgLA37ztfZkk/lpYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzUwYTY1MS0xYTFhLTQ1MDEtYThiYy05NTkxZTExMDlhMjcvMC8yQTJBQkM4NjI5 M0EzREEzNjAyQzBERkJDRUQ3RDk5MjRGRTVBNThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkEyQUJDODYyOTNBM0RBMzYwMkMwREZCQ0VEN0Q5OTI0RkU1 QTU4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc1MGE2NTEtMWExYS00NTAxLWE4 YmMtOTU5MWUxMTA5YTI3LzAvMkEyQUJDODYyOTNBM0RBMzYwMkMwREZCQ0VEN0Q5 OTI0RkU1QTU4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHqxA/wXOgpMlMSs0VCi7Kb3mGs5jVAVGa7Z OD5o0HbQc+zlakM3bCxs7j+DhpvfKWQ/TjO7oo19oHtzJxTFLptOaYyCSTU3f8JZ E3UwpXG+u2CgeDPPILmbuXAgHwr1V2u9/cV7NBBViXPlZVFc4IeCoCK10esoXKiv wKlwdFHAtvlLkT+gYynBWrQaMipcN7HApNj7D5d/8Wu8FJ86Bl7lcx/wdLXfRTKE h6qFiyn5ZWCwPFt6jsyuWCuiVOtLk0x9cKim1P1+reMxPKRLcyfHEmu7Spkhe+8M VZ2lTgx0SKw+m6RmOkmb5HihqybHpiloMUCFAxf0wdzvN6y0rjg= -----END CERTIFICATE-----Generated at Sun Sep 7 15:36:45 2025 by rpki-client