$ rpki-client -vvf repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.mft File: 2ADCBF290A98776E6F59353351C879A1502B884A.mft (raw, json) Hash identifier: 58DqU34Vyh+kz89tVm5WCsPeKLEvZQUY5Y70DhNggRs= Subject key identifier: FF:0D:D8:BC:BC:7A:2D:97:A4:EF:44:A0:6E:66:93:08:F5:D4:7B:03 Authority key identifier: 2A:DC:BF:29:0A:98:77:6E:6F:59:35:33:51:C8:79:A1:50:2B:88:4A Certificate issuer: /CN=2ADCBF290A98776E6F59353351C879A1502B884A Certificate serial: 318E4AF49CBDBDA2F2524D4EB0108EED91151559 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2ADCBF290A98776E6F59353351C879A1502B884A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.mft Manifest number: 01A9 Signing time: Wed 03 Sep 2025 21:30:47 +0000 Manifest this update: Wed 03 Sep 2025 21:25:47 +0000 Manifest next update: Sat 06 Sep 2025 23:52:47 +0000 Files and hashes: 1: 3130332e35342e38332e302f32342d3234203d3e20313530353132.roa (hash: TNPPWguy+EG+YXVjh98k8HLbiPmnDYSLszixyMOhlSg=) 2: 3130332e35342e38322e302f32332d3233203d3e20313530353132.roa (hash: FjkCQEbxTkTrmju7umuTXr3UC7Hk/PD5qd4yUNE4PfI=) 3: 3130332e35342e38322e302f32342d3234203d3e20313530353132.roa (hash: Bn094jjpTmS3GhwwJiONFucK7tyqAYJ6uENssiFFaws=) 4: 2ADCBF290A98776E6F59353351C879A1502B884A.crl (hash: UvdHwgQBdS5DBZvF5VFaEM21EXrLdMMPSnatyenO2R4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.crl rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2ADCBF290A98776E6F59353351C879A1502B884A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 23:52:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:8e:4a:f4:9c:bd:bd:a2:f2:52:4d:4e:b0:10:8e:ed:91:15:15:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ADCBF290A98776E6F59353351C879A1502B884A Validity Not Before: Sep 3 21:25:47 2025 GMT Not After : Sep 6 23:52:47 2025 GMT Subject: CN=FF0DD8BCBC7A2D97A4EF44A06E669308F5D47B03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f7:b2:3f:e4:4a:72:f9:88:f8:f5:f5:f1:4a: 26:2d:21:d8:61:ec:86:e4:ab:c4:59:d8:48:43:10: 16:4a:a0:92:8e:14:0a:0c:9e:d5:d5:e9:33:91:59: 37:de:15:72:e3:22:c7:b0:55:68:23:af:4f:aa:c8: ca:36:3c:7a:c2:fe:e5:22:03:84:01:c7:9e:19:f5: ce:e3:62:c5:ac:31:2b:a3:8a:86:3a:4c:5a:06:f6: ab:5e:c4:21:57:52:1c:f6:2c:08:fa:db:53:47:a4: eb:a5:bc:61:9c:1b:68:38:9c:3a:1e:d1:a5:10:13: 5c:e3:a0:c9:72:2f:44:c9:c6:10:0c:1d:e5:9f:35: ad:f5:31:b7:f1:6a:c2:70:96:25:83:3c:6f:73:89: e0:5a:78:5b:c6:8c:8a:e0:42:d8:ac:82:fd:d2:22: 0d:01:bc:15:16:3d:fc:1e:6c:d3:f3:2f:2e:24:dd: 35:bb:51:f6:0f:88:e2:97:b2:7a:c5:4e:63:33:07: f8:cb:81:d7:05:c8:eb:ac:de:fd:e1:28:f2:53:17: 72:62:b6:40:bc:01:b5:27:1d:c1:51:6b:25:b7:41: 64:24:7d:61:80:7b:53:b3:77:20:28:3c:8e:60:27: 20:a2:1f:9e:ff:ff:9d:5d:25:34:65:3b:ee:d2:0d: 95:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:0D:D8:BC:BC:7A:2D:97:A4:EF:44:A0:6E:66:93:08:F5:D4:7B:03 X509v3 Authority Key Identifier: keyid:2A:DC:BF:29:0A:98:77:6E:6F:59:35:33:51:C8:79:A1:50:2B:88:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2ADCBF290A98776E6F59353351C879A1502B884A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:71:94:2d:ff:a9:26:58:13:6d:b5:60:5b:0a:45:38:b3:aa: 20:48:33:03:f9:80:26:1e:6e:c3:e8:27:ce:1b:d6:13:16:ac: ad:26:84:7a:f6:9e:19:34:99:91:f5:f8:05:a7:40:8f:3a:ad: 96:fa:df:95:f1:62:f6:29:03:d9:ce:8b:6c:31:49:df:95:e6: c9:c6:58:f7:a2:fd:62:27:1f:d5:1a:85:79:85:e8:89:95:b3: 59:23:da:4d:a7:45:99:26:3e:5d:4f:4f:ef:f0:d2:4c:57:9b: 0e:5a:f0:9b:5b:94:cf:c4:f1:fc:df:0b:95:f4:37:46:b1:b9: 20:7a:79:13:3f:24:0f:19:e7:4e:a4:de:cc:4f:63:eb:36:84: fb:3f:67:6b:0e:bb:9a:79:41:78:ca:a4:b6:6c:9e:6b:44:de: 89:f8:ea:cd:8a:67:c4:03:6f:a3:9a:13:78:e5:8e:a0:8e:25: df:d4:a9:95:51:90:73:fa:c9:b9:a6:10:34:71:4d:20:98:0d: 6e:41:d8:5b:5a:d0:a4:94:7c:67:24:0e:4d:51:b3:6a:b8:2a: a7:3c:e7:0e:46:7d:85:5e:59:53:b5:99:de:51:d9:00:40:9a: e3:58:f6:d5:62:53:da:13:6e:06:7b:56:cc:59:b7:97:1c:2f: 14:04:f2:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMY5K9Jy9vaLyUk1OsBCO7ZEVFVkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFEQ0JGMjkwQTk4Nzc2RTZGNTkzNTMzNTFDODc5QTE1 MDJCODg0QTAeFw0yNTA5MDMyMTI1NDdaFw0yNTA5MDYyMzUyNDdaMDMxMTAvBgNV BAMTKEZGMEREOEJDQkM3QTJEOTdBNEVGNDRBMDZFNjY5MzA4RjVENDdCMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt97I/5Epy+Yj49fXxSiYtIdhh 7Ibkq8RZ2EhDEBZKoJKOFAoMntXV6TORWTfeFXLjIsewVWgjr0+qyMo2PHrC/uUi A4QBx54Z9c7jYsWsMSujioY6TFoG9qtexCFXUhz2LAj621NHpOulvGGcG2g4nDoe 0aUQE1zjoMlyL0TJxhAMHeWfNa31MbfxasJwliWDPG9zieBaeFvGjIrgQtisgv3S Ig0BvBUWPfwebNPzLy4k3TW7UfYPiOKXsnrFTmMzB/jLgdcFyOus3v3hKPJTF3Ji tkC8AbUnHcFRayW3QWQkfWGAe1OzdyAoPI5gJyCiH57//51dJTRlO+7SDZU3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/w3YvLx6LZek70SgbmaTCPXUewMwHwYDVR0j BBgwFoAUKty/KQqYd25vWTUzUch5oVAriEowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGRlOTQ2My02OGE3LTQ2MmQtOTQwOC1hN2MzOWNlNmU4ZmYvMC8yQURDQkYyOTBB OTg3NzZFNkY1OTM1MzM1MUM4NzlBMTUwMkI4ODRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkFEQ0JGMjkwQTk4Nzc2RTZGNTkzNTMzNTFDODc5QTE1MDJC ODg0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThkZTk0NjMtNjhhNy00NjJkLTk0 MDgtYTdjMzljZTZlOGZmLzAvMkFEQ0JGMjkwQTk4Nzc2RTZGNTkzNTMzNTFDODc5 QTE1MDJCODg0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNxlC3/qSZYE221YFsKRTizqiBIMwP5gCYe bsPoJ84b1hMWrK0mhHr2nhk0mZH1+AWnQI86rZb635XxYvYpA9nOi2wxSd+V5snG WPei/WInH9UahXmF6ImVs1kj2k2nRZkmPl1PT+/w0kxXmw5a8JtblM/E8fzfC5X0 N0axuSB6eRM/JA8Z506k3sxPY+s2hPs/Z2sOu5p5QXjKpLZsnmtE3on46s2KZ8QD b6OaE3jljqCOJd/UqZVRkHP6ybmmEDRxTSCYDW5B2Fta0KSUfGckDk1Rs2q4Kqc8 5w5GfYVeWVO1md5R2QBAmuNY9tViU9oTbgZ7VsxZt5ccLxQE8ls= -----END CERTIFICATE-----Generated at Fri Sep 5 10:18:45 2025 by rpki-client