$ rpki-client -vvf repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft File: 2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft (raw, json) Hash identifier: 1Otsc9fLQgdUu0FP2ztEr46QJzJ8P3GAfyAfVx0Dux4= Subject key identifier: 2E:B4:FA:EE:AE:B2:D6:F5:83:DC:78:EE:EA:BA:6C:C1:4C:02:45:8C Authority key identifier: 2B:15:30:AD:20:AC:1F:2F:7F:2E:A2:EB:AA:E7:07:D0:E1:28:A1:DC Certificate issuer: /CN=2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC Certificate serial: 1931E4CBC0B5AB3C87821DF7AB837FAE1973030C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft Manifest number: 0327 Signing time: Sat 06 Sep 2025 06:52:21 +0000 Manifest this update: Sat 06 Sep 2025 06:47:21 +0000 Manifest next update: Tue 09 Sep 2025 17:04:21 +0000 Files and hashes: 1: 3130332e3137322e31372e302f32342d3234203d3e20313432333831.roa (hash: DVIrghrEW7VwPIX0cx9PZe/9iJL/OmwC/t6EzXjRAD8=) 2: 2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl (hash: aNO2MNvphXr8d+uK9vMwkJDpVnGaEjSTyYPNNpacP18=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 17:04:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:31:e4:cb:c0:b5:ab:3c:87:82:1d:f7:ab:83:7f:ae:19:73:03:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC Validity Not Before: Sep 6 06:47:21 2025 GMT Not After : Sep 9 17:04:21 2025 GMT Subject: CN=2EB4FAEEAEB2D6F583DC78EEEABA6CC14C02458C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1e:fd:73:79:f0:f9:cf:24:84:82:f6:09:6e: 10:a2:32:1f:df:a7:97:3c:91:24:2a:9d:14:3b:88: 40:aa:47:f0:57:92:58:ce:91:e8:c5:39:80:db:22: 3d:89:a4:05:8c:b0:d0:8f:2c:45:3d:77:87:2f:ab: 68:0d:92:f0:b8:d4:73:38:a6:88:8d:b3:c5:cd:a6: e1:bf:c2:db:6b:c5:b0:4e:f9:99:ae:4d:bb:5c:26: c7:16:3b:09:f3:20:96:01:cf:55:2e:86:fa:c2:89: 9f:a2:54:97:57:5c:28:43:92:46:60:07:a4:ab:f4: c9:e1:c5:13:ae:78:c7:ad:81:93:97:37:b1:6c:d1: 0c:bd:a1:44:43:08:bc:38:d8:d4:f8:9b:26:51:6d: c8:64:6e:b7:0c:58:0b:35:44:15:71:00:5a:b7:bb: 4d:68:a9:3a:36:88:b5:71:ed:c3:57:49:3d:fd:d4: cf:6d:c4:65:ba:20:ee:83:92:95:6c:21:be:df:ef: 1d:d8:85:64:b4:0a:8b:42:6c:24:d3:0e:15:a6:91: d8:a0:9f:8d:7b:7e:be:fb:f8:bc:04:20:7e:4b:c4: cd:56:4d:6a:97:b8:f2:1a:e2:71:ac:95:f0:43:6e: cd:fd:1f:ac:56:58:35:12:30:c2:c9:6d:d4:2c:9b: ee:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B4:FA:EE:AE:B2:D6:F5:83:DC:78:EE:EA:BA:6C:C1:4C:02:45:8C X509v3 Authority Key Identifier: keyid:2B:15:30:AD:20:AC:1F:2F:7F:2E:A2:EB:AA:E7:07:D0:E1:28:A1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:37:7b:e7:c3:78:1a:d7:9e:80:fb:ab:30:e7:cf:5b:2f:f0: 77:da:31:1d:80:d3:71:6f:a8:ea:2a:97:70:69:31:d1:23:dd: 6e:d0:e8:a2:74:d0:73:4d:37:5e:28:4c:50:a6:d2:12:4d:0a: 54:f1:ce:db:8f:bf:c3:08:40:91:81:bb:c9:4c:7b:3a:e8:5e: 89:5a:4f:e4:18:21:1d:f4:00:e9:79:8f:d6:f9:f0:5e:73:90: ac:0a:71:c4:5a:01:a4:38:ac:e9:99:55:2f:d6:67:b1:9b:8a: ba:ff:4b:2c:78:3d:63:2e:70:28:47:21:bb:85:7e:03:d1:c3: 68:2f:93:bf:0e:21:44:e5:0a:8a:e7:9e:96:c2:ca:99:fd:df: 20:70:38:12:c1:bc:9f:15:09:1e:e4:bb:d7:51:e1:8f:bd:bf: 96:eb:48:bf:c6:4b:cc:7d:3d:17:ff:1c:a8:cf:04:7a:e1:c8: 63:66:7b:5e:51:a1:d1:2a:72:b5:8c:1f:63:ed:b9:fd:79:b6: 10:af:7d:7e:fa:b0:5b:43:39:b6:97:c5:61:ce:81:c9:d1:7f: 2f:87:69:8a:ef:06:de:d7:5b:2b:25:10:73:04:43:d8:82:23: 95:5a:9c:4a:01:1e:e1:30:77:a3:34:c0:9e:b6:a1:0e:1d:ed: 83:37:e0:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGTHky8C1qzyHgh33q4N/rhlzAwwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3RDBF MTI4QTFEQzAeFw0yNTA5MDYwNjQ3MjFaFw0yNTA5MDkxNzA0MjFaMDMxMTAvBgNV BAMTKDJFQjRGQUVFQUVCMkQ2RjU4M0RDNzhFRUVBQkE2Q0MxNEMwMjQ1OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHHv1zefD5zySEgvYJbhCiMh/f p5c8kSQqnRQ7iECqR/BXkljOkejFOYDbIj2JpAWMsNCPLEU9d4cvq2gNkvC41HM4 poiNs8XNpuG/wttrxbBO+ZmuTbtcJscWOwnzIJYBz1UuhvrCiZ+iVJdXXChDkkZg B6Sr9MnhxROueMetgZOXN7Fs0Qy9oURDCLw42NT4myZRbchkbrcMWAs1RBVxAFq3 u01oqTo2iLVx7cNXST391M9txGW6IO6DkpVsIb7f7x3YhWS0CotCbCTTDhWmkdig n417fr77+LwEIH5LxM1WTWqXuPIa4nGslfBDbs39H6xWWDUSMMLJbdQsm+79AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULrT67q6y1vWD3Hju6rpswUwCRYwwHwYDVR0j BBgwFoAUKxUwrSCsHy9/LqLrqucH0OEoodwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NjY4ODU0YS0zZjI0LTQwYjEtODBjZC1lNjM2YWE3ZThiMWMvMC8yQjE1MzBBRDIw QUMxRjJGN0YyRUEyRUJBQUU3MDdEMEUxMjhBMURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3RDBFMTI4 QTFEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjY2ODg1NGEtM2YyNC00MGIxLTgw Y2QtZTYzNmFhN2U4YjFjLzAvMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3 RDBFMTI4QTFEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM83e+fDeBrXnoD7qzDnz1sv8HfaMR2A03Fv qOoql3BpMdEj3W7Q6KJ00HNNN14oTFCm0hJNClTxztuPv8MIQJGBu8lMezroXola T+QYIR30AOl5j9b58F5zkKwKccRaAaQ4rOmZVS/WZ7Gbirr/Syx4PWMucChHIbuF fgPRw2gvk78OIUTlCornnpbCypn93yBwOBLBvJ8VCR7ku9dR4Y+9v5brSL/GS8x9 PRf/HKjPBHrhyGNme15RodEqcrWMH2Ptuf15thCvfX76sFtDObaXxWHOgcnRfy+H aYrvBt7XWyslEHMEQ9iCI5VanEoBHuEwd6M0wJ62oQ4d7YM34PM= -----END CERTIFICATE-----Generated at Sun Sep 7 13:45:15 2025 by rpki-client