$ rpki-client -vvf repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft File: 2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft (raw, json) Hash identifier: LSFYEzKo4BhwMWYbxPkJXPQgPD1CZyYRnzL5gxqlS74= Subject key identifier: 79:B9:1A:EF:90:F8:C2:F8:8D:8A:62:78:7E:FA:DA:BC:89:0B:74:F1 Authority key identifier: 2E:2D:92:69:32:C5:C7:E2:96:93:1D:88:19:08:A4:BB:1E:98:EB:6D Certificate issuer: /CN=2E2D926932C5C7E296931D881908A4BB1E98EB6D Certificate serial: 5C78BC2008D73F63A595717F409BF91CFD7860B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft Manifest number: 024D Signing time: Sat 06 Sep 2025 01:41:53 +0000 Manifest this update: Sat 06 Sep 2025 01:36:53 +0000 Manifest next update: Tue 09 Sep 2025 04:55:53 +0000 Files and hashes: 1: 3130332e3138312e3235312e302f32342d3234203d3e2039333431.roa (hash: HM/zqihNRtDQE+DnhG8b5XIeNqQOzvMA43WJGWaoV58=) 2: 2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl (hash: a4WUF0ouUeqI3a2cgN1HmgaMNp2XgLbWzBO9btdIpyU=) 3: 3130332e3138312e3235302e302f32332d3233203d3e2039333431.roa (hash: VX04EL/wbd2do7GkgjsMSku0mt+fGXzZJka0o80KEQo=) 4: 3130332e3138312e3235302e302f32342d3234203d3e2039333431.roa (hash: Kh7pHFYHeApzfjYgrJNd5I2iP4JAPgnfkCfLUW4wIPU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 04:55:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:78:bc:20:08:d7:3f:63:a5:95:71:7f:40:9b:f9:1c:fd:78:60:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E2D926932C5C7E296931D881908A4BB1E98EB6D Validity Not Before: Sep 6 01:36:53 2025 GMT Not After : Sep 9 04:55:53 2025 GMT Subject: CN=79B91AEF90F8C2F88D8A62787EFADABC890B74F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:17:8c:e0:e7:d0:6b:28:9b:a0:86:6b:35:5a: 3c:12:91:60:4d:64:16:b8:79:e3:4c:a8:e2:a4:79: df:58:d2:ef:f9:73:e9:99:cb:8d:c0:0e:6b:6f:c6: a7:70:8f:84:07:98:35:69:7f:45:54:50:e6:58:1a: f8:57:79:2f:db:1e:49:71:0a:9c:82:68:30:5d:77: d8:fc:0a:73:dd:af:55:c8:72:5a:34:c1:31:17:87: cf:01:fc:c4:78:eb:9f:08:8b:28:6a:99:4f:d4:28: e3:5c:f3:aa:8c:8d:cc:96:95:d8:a9:90:25:a5:6a: e7:86:a1:09:0d:a3:35:61:65:c0:e4:c4:6d:61:58: 2f:85:9c:c3:ba:e4:b2:3c:91:47:00:63:48:3c:06: e5:43:c5:ad:f7:a5:33:89:66:fe:ef:46:6d:46:7f: 0e:ef:60:2a:14:09:7d:5e:63:47:e9:e6:6a:aa:7a: 36:de:af:36:39:37:77:34:78:95:ea:18:c6:9e:b5: 4f:7e:c1:65:69:ec:ba:6c:d3:32:03:81:d6:a2:01: f0:14:b1:b0:6e:d6:fe:eb:fa:5f:0a:42:1a:f0:bf: ee:71:99:d6:81:c4:7d:e4:e1:f3:32:b1:70:f2:49: 67:fe:ea:ac:4c:bf:38:c5:f9:00:c0:57:fd:8b:2f: 06:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:B9:1A:EF:90:F8:C2:F8:8D:8A:62:78:7E:FA:DA:BC:89:0B:74:F1 X509v3 Authority Key Identifier: keyid:2E:2D:92:69:32:C5:C7:E2:96:93:1D:88:19:08:A4:BB:1E:98:EB:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:3a:67:a3:45:8a:3d:4e:d6:19:f1:4c:cb:e7:ec:51:37:48: 1a:60:2d:8d:8f:01:6c:42:85:b5:3c:68:36:28:51:71:6b:fc: 58:66:99:2b:5b:e0:89:69:f9:8c:01:4c:da:ca:18:6b:fa:0f: ac:f3:58:5f:ae:28:1e:b5:c9:60:56:4f:bd:59:14:0c:7c:af: 61:3a:c7:b8:35:1d:c4:52:98:79:bc:48:8c:e8:3a:c4:f4:ee: 51:46:ef:df:fe:10:e0:aa:e6:63:63:9f:59:5b:3c:58:1a:89: 00:65:a5:e0:40:99:7d:c9:24:72:cd:09:76:1b:38:b5:2e:c0: a5:90:cd:9d:22:3f:41:35:61:04:25:71:09:e5:c5:b8:fc:0a: 6e:e1:31:c8:23:c4:7a:41:e2:14:61:06:98:67:f7:73:62:df: 62:9a:f9:e0:ef:66:c2:f9:bb:18:41:52:25:5b:b6:9e:53:88: 2d:90:4a:3b:64:33:17:f5:b7:a7:04:70:ac:47:fb:2c:67:c3: 3f:59:49:da:c7:5e:92:86:83:de:8c:10:67:96:6f:1a:1f:c7: 97:16:b4:cd:da:60:0b:4e:aa:2d:78:69:f8:63:41:78:de:e8: 47:51:21:70:c9:ef:89:73:67:f3:ca:c0:b9:ca:e0:05:5e:ad: f8:3e:da:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXHi8IAjXP2OllXF/QJv5HP14YLAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0QkIx RTk4RUI2RDAeFw0yNTA5MDYwMTM2NTNaFw0yNTA5MDkwNDU1NTNaMDMxMTAvBgNV BAMTKDc5QjkxQUVGOTBGOEMyRjg4RDhBNjI3ODdFRkFEQUJDODkwQjc0RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVF4zg59BrKJughms1WjwSkWBN ZBa4eeNMqOKked9Y0u/5c+mZy43ADmtvxqdwj4QHmDVpf0VUUOZYGvhXeS/bHklx CpyCaDBdd9j8CnPdr1XIclo0wTEXh88B/MR4658IiyhqmU/UKONc86qMjcyWldip kCWlaueGoQkNozVhZcDkxG1hWC+FnMO65LI8kUcAY0g8BuVDxa33pTOJZv7vRm1G fw7vYCoUCX1eY0fp5mqqejberzY5N3c0eJXqGMaetU9+wWVp7Lps0zIDgdaiAfAU sbBu1v7r+l8KQhrwv+5xmdaBxH3k4fMysXDySWf+6qxMvzjF+QDAV/2LLwY1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUebka75D4wviNimJ4fvravIkLdPEwHwYDVR0j BBgwFoAULi2SaTLFx+KWkx2IGQikux6Y620wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmE1ODllZi05ZjNkLTQzYmMtYmEzMC1mYTMyNmI3MWY3ODcvMC8yRTJEOTI2OTMy QzVDN0UyOTY5MzFEODgxOTA4QTRCQjFFOThFQjZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0QkIxRTk4 RUI2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZhNTg5ZWYtOWYzZC00M2JjLWJh MzAtZmEzMjZiNzFmNzg3LzAvMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0 QkIxRTk4RUI2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEk6Z6NFij1O1hnxTMvn7FE3SBpgLY2PAWxC hbU8aDYoUXFr/FhmmStb4Ilp+YwBTNrKGGv6D6zzWF+uKB61yWBWT71ZFAx8r2E6 x7g1HcRSmHm8SIzoOsT07lFG79/+EOCq5mNjn1lbPFgaiQBlpeBAmX3JJHLNCXYb OLUuwKWQzZ0iP0E1YQQlcQnlxbj8Cm7hMcgjxHpB4hRhBphn93Ni32Ka+eDvZsL5 uxhBUiVbtp5TiC2QSjtkMxf1t6cEcKxH+yxnwz9ZSdrHXpKGg96MEGeWbxofx5cW tM3aYAtOqi14afhjQXje6EdRIXDJ74lzZ/PKwLnK4AVerfg+2l8= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:12 2025 by rpki-client