$ rpki-client -vvf repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft File: 2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft (raw, json) Hash identifier: UgzNYnlJoBB2JKIdjuOyAc2GshgTQKOtJrA5DR3/jDg= Subject key identifier: FF:B7:D2:27:D4:3E:E7:3A:CE:30:5E:FC:64:25:4E:82:8B:E4:C0:1C Authority key identifier: 2D:23:C6:29:ED:95:6F:17:36:B7:DA:EC:CD:2A:AF:31:C4:F1:7C:26 Certificate issuer: /CN=2D23C629ED956F1736B7DAECCD2AAF31C4F17C26 Certificate serial: 32E303ACCA6F859779E1319611370C7A5F64CB55 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft Manifest number: 01E7 Signing time: Sat 06 Sep 2025 12:20:57 +0000 Manifest this update: Sat 06 Sep 2025 12:15:57 +0000 Manifest next update: Tue 09 Sep 2025 20:58:57 +0000 Files and hashes: 1: 3130332e3133382e31302e302f32342d3234203d3e20313338383335.roa (hash: G/xb7tdZk9UZaq4hfvb/m2IU6lYeHr5mMwL3BOuVZMU=) 2: 2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl (hash: zInBc3UqHLPaOXLdQTCOk/kKHh7z4270zlfleKJA8LA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 20:58:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:e3:03:ac:ca:6f:85:97:79:e1:31:96:11:37:0c:7a:5f:64:cb:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D23C629ED956F1736B7DAECCD2AAF31C4F17C26 Validity Not Before: Sep 6 12:15:57 2025 GMT Not After : Sep 9 20:58:57 2025 GMT Subject: CN=FFB7D227D43EE73ACE305EFC64254E828BE4C01C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:56:81:f3:0f:d2:dd:e7:4a:34:1f:ac:b5:19: aa:59:4e:e6:2d:c5:de:36:37:f8:2a:91:2b:b2:b4: 9b:d4:bb:4f:ea:c7:a5:6b:34:f1:3a:90:66:ee:1d: 12:af:d0:2b:9b:0f:a3:fc:dc:7c:6d:cd:e8:05:99: f8:dc:32:2a:5d:e1:1e:fe:c1:bf:51:11:4e:fe:bb: 7a:59:f9:c5:37:df:36:61:67:54:6e:40:41:6a:2e: b0:9b:08:84:c5:ef:ec:81:db:ba:1a:de:c8:f9:05: d5:4f:ba:c7:40:43:98:dc:c5:b5:6d:c7:56:95:ee: e9:52:84:f2:73:4b:84:5f:e7:4c:2b:d0:34:ac:c8: 0e:58:51:32:a6:87:ac:f7:32:10:81:42:c3:cd:b4: 2a:67:dc:00:72:e7:8f:b2:9d:ac:c2:b3:b7:e5:e8: 6a:38:4b:a0:fa:b0:c3:1d:5d:13:3d:0f:7b:f9:4f: d9:ce:03:02:a4:0d:40:99:08:e9:04:da:0f:de:7e: c2:87:96:76:7b:f3:39:36:4a:1a:70:55:01:e7:48: 05:b1:87:43:97:20:22:25:a8:c5:14:17:bb:6e:c0: a8:7f:2a:8a:25:39:78:77:2c:e9:81:9d:41:b1:a3: 2e:9b:80:c9:f1:d3:a4:f6:a7:9a:1a:9b:e8:a4:b9: ba:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:B7:D2:27:D4:3E:E7:3A:CE:30:5E:FC:64:25:4E:82:8B:E4:C0:1C X509v3 Authority Key Identifier: keyid:2D:23:C6:29:ED:95:6F:17:36:B7:DA:EC:CD:2A:AF:31:C4:F1:7C:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:4c:2f:4d:0c:7a:f0:2a:e3:b3:2a:16:2e:b7:95:95:1a:86: 16:40:66:6e:ac:d1:e7:67:7c:0c:3c:f6:db:93:3b:2f:51:e0: 31:5d:3d:8f:97:73:d0:64:2c:5b:9a:f5:fb:79:a7:d6:d7:e2: 37:f3:8d:1d:0f:5e:7f:92:aa:ec:52:24:ba:08:71:d4:b5:0c: 0d:5c:38:01:c3:8d:17:59:4d:3f:80:78:06:ff:cb:82:4e:63: 7f:9b:9e:5b:bf:21:e7:62:5e:0f:d4:45:59:01:7c:64:ea:6c: 3a:96:46:a5:01:b7:b2:e2:8c:14:03:bd:55:61:69:51:d9:e3: e9:d0:4d:21:cb:c0:de:d8:3c:94:1c:d2:5f:39:a2:69:4b:e4: 7d:1d:9b:d7:39:f2:3c:e5:96:ff:8a:96:83:86:c4:a8:38:88: 2b:67:bf:f9:a4:a3:a9:b5:0d:58:69:b9:96:f6:a5:c0:0d:ad: fc:a3:f8:ba:85:8f:76:c6:81:7c:0d:75:16:99:c1:40:10:e4: d3:af:fa:93:46:ba:b2:b4:07:11:eb:de:99:c1:1c:60:70:73: 1a:61:70:5a:3e:6e:43:59:1c:d5:77:28:2a:0c:a6:f5:1c:54: 8b:7e:88:27:13:c1:e4:c2:7b:67:e8:64:be:ba:1d:c7:99:3f: c5:71:1a:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMuMDrMpvhZd54TGWETcMel9ky1UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFGMzFD NEYxN0MyNjAeFw0yNTA5MDYxMjE1NTdaFw0yNTA5MDkyMDU4NTdaMDMxMTAvBgNV BAMTKEZGQjdEMjI3RDQzRUU3M0FDRTMwNUVGQzY0MjU0RTgyOEJFNEMwMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRVoHzD9Ld50o0H6y1GapZTuYt xd42N/gqkSuytJvUu0/qx6VrNPE6kGbuHRKv0CubD6P83HxtzegFmfjcMipd4R7+ wb9REU7+u3pZ+cU33zZhZ1RuQEFqLrCbCITF7+yB27oa3sj5BdVPusdAQ5jcxbVt x1aV7ulShPJzS4Rf50wr0DSsyA5YUTKmh6z3MhCBQsPNtCpn3ABy54+ynazCs7fl 6Go4S6D6sMMdXRM9D3v5T9nOAwKkDUCZCOkE2g/efsKHlnZ78zk2ShpwVQHnSAWx h0OXICIlqMUUF7tuwKh/KoolOXh3LOmBnUGxoy6bgMnx06T2p5oam+ikubpXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/7fSJ9Q+5zrOMF78ZCVOgovkwBwwHwYDVR0j BBgwFoAULSPGKe2Vbxc2t9rszSqvMcTxfCYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODY4Y2YyMi1kMDI5LTQ1ZTItOWUyMS1kOTg5MmQzYWY3YTYvMC8yRDIzQzYyOUVE OTU2RjE3MzZCN0RBRUNDRDJBQUYzMUM0RjE3QzI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFGMzFDNEYx N0MyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDg2OGNmMjItZDAyOS00NWUyLTll MjEtZDk4OTJkM2FmN2E2LzAvMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFG MzFDNEYxN0MyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJxML00MevAq47MqFi63lZUahhZAZm6s0edn fAw89tuTOy9R4DFdPY+Xc9BkLFua9ft5p9bX4jfzjR0PXn+SquxSJLoIcdS1DA1c OAHDjRdZTT+AeAb/y4JOY3+bnlu/IediXg/URVkBfGTqbDqWRqUBt7LijBQDvVVh aVHZ4+nQTSHLwN7YPJQc0l85omlL5H0dm9c58jzllv+KloOGxKg4iCtnv/mko6m1 DVhpuZb2pcANrfyj+LqFj3bGgXwNdRaZwUAQ5NOv+pNGurK0BxHr3pnBHGBwcxph cFo+bkNZHNV3KCoMpvUcVIt+iCcTweTCe2foZL66HceZP8VxGgw= -----END CERTIFICATE-----Generated at Sun Sep 7 15:34:23 2025 by rpki-client