$ rpki-client -vvf repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft File: 2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft (raw, json) Hash identifier: tcQMehX4kMS15X5tQhwvsfIS7qAQqiOaxA7OMxTLHoM= Subject key identifier: 71:EC:4C:1D:32:BB:72:A3:84:9D:57:8C:6A:F0:C6:0E:DB:AA:00:C4 Authority key identifier: 2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10 Certificate issuer: /CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210 Certificate serial: 232E87B0811DA3CDD92D94C482CEBDDB69EBE3B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft Manifest number: C5 Signing time: Wed 06 Aug 2025 14:12:04 +0000 Manifest this update: Wed 06 Aug 2025 14:07:04 +0000 Manifest next update: Sun 10 Aug 2025 00:01:04 +0000 Files and hashes: 1: 2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl (hash: +BSWPmY828OEhHX3AY5iRi/kaJ8alRb3iJrYyxAW7Zs=) 2: 3136302e32322e36332e302f32342d3234203d3e20313439373138.roa (hash: FdD4yXGMsks45ng3y/QGMQ3cyOtlAzR9+CDLALaQ1/8=) 3: 3136302e32322e36322e302f32342d3234203d3e20313439373230.roa (hash: YoRi0wh2sw9GoYCOeEcjR9q///J9GRgGfI+RYp9E7Ao=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 00:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:2e:87:b0:81:1d:a3:cd:d9:2d:94:c4:82:ce:bd:db:69:eb:e3:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210 Validity Not Before: Aug 6 14:07:04 2025 GMT Not After : Aug 10 00:01:04 2025 GMT Subject: CN=71EC4C1D32BB72A3849D578C6AF0C60EDBAA00C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8e:07:86:37:8c:ee:c1:a4:c5:f1:3f:be:3a: b8:0b:50:e5:e8:91:1d:d5:f2:59:74:a6:3f:fc:40: 28:6a:ba:3b:2c:d3:e2:e9:f8:40:4e:8c:0e:24:d8: 1c:9e:39:07:0f:bb:20:02:9a:94:a2:f4:34:f3:09: 76:e6:a3:83:f6:b5:ed:2a:26:7a:8b:6b:bc:ea:73: 90:ee:0d:3a:b6:a0:c1:b1:eb:b6:85:32:33:99:92: c8:4b:cc:a7:f5:67:ed:a4:6e:3f:af:4b:59:65:fb: 26:44:b3:e9:01:c4:48:4f:9b:fb:04:fe:4c:4a:77: b9:7f:b5:a0:62:36:66:ce:02:09:0b:46:31:7a:4f: ec:bc:01:e6:06:24:f3:67:7e:26:99:5e:04:d9:f9: 89:6a:e5:25:8e:2f:63:a2:13:03:3a:32:2f:f6:85: 62:7e:a2:8e:89:79:7c:d5:46:e9:e1:39:0c:a3:0e: 5f:aa:05:52:ef:02:e0:f6:69:e0:dd:c9:87:b6:f4: 5d:1c:d8:f3:cb:79:36:a0:a3:fb:4d:73:c4:8b:b4: 41:b7:41:25:d0:f6:56:e9:28:a4:c3:d1:95:15:df: 76:d7:25:f3:6e:c0:d4:d5:6e:aa:4a:61:69:54:03: 6d:bc:cd:35:2f:33:9a:61:7f:a5:a2:ea:32:29:c4: c9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:EC:4C:1D:32:BB:72:A3:84:9D:57:8C:6A:F0:C6:0E:DB:AA:00:C4 X509v3 Authority Key Identifier: keyid:2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:3f:ba:b5:5e:02:41:07:8e:00:de:b4:47:02:34:23:25:65: 2d:67:20:3a:cf:0c:03:dd:6d:29:58:40:df:e9:0b:56:51:b7: e1:09:2c:0e:b2:dd:e2:ee:dc:34:a6:90:f2:14:74:60:17:88: f5:98:7a:fc:fa:bf:c6:41:5b:a8:b4:78:c0:b7:9f:1c:af:70: af:b3:ed:94:f4:e8:ab:5d:e3:c0:7b:1b:fd:5a:a6:52:8f:4a: e5:c8:79:4f:01:ef:e8:ff:24:1b:3d:c0:96:a2:ca:4b:72:6c: 9d:dc:c0:71:86:9b:93:4f:ea:66:8a:13:31:1a:b1:20:83:b0: 23:05:57:8d:b2:ea:95:5d:14:91:c4:8a:ad:ef:d6:af:61:1e: e2:c5:35:2b:7e:08:a7:76:84:12:38:b8:39:80:6d:26:00:d5: 61:f2:19:10:47:88:fa:ee:89:5a:05:03:5c:88:0a:fc:14:0d: 07:a3:fb:5b:30:f2:51:c5:8b:da:76:85:18:e7:52:8b:35:a3: 49:1f:b4:24:10:45:ba:cb:31:8f:37:3c:7e:e0:1c:39:d5:fc: e2:84:63:a8:bc:41:23:14:69:53:b9:2c:6f:fd:80:fe:b2:d0: 44:9a:18:d9:3d:34:70:bd:dd:05:5e:31:3e:73:98:57:ce:39: 52:35:27:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIy6HsIEdo83ZLZTEgs6922nr47MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4Q0Iw RDU4MDIxMDAeFw0yNTA4MDYxNDA3MDRaFw0yNTA4MTAwMDAxMDRaMDMxMTAvBgNV BAMTKDcxRUM0QzFEMzJCQjcyQTM4NDlENTc4QzZBRjBDNjBFREJBQTAwQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhjgeGN4zuwaTF8T++OrgLUOXo kR3V8ll0pj/8QChqujss0+Lp+EBOjA4k2ByeOQcPuyACmpSi9DTzCXbmo4P2te0q JnqLa7zqc5DuDTq2oMGx67aFMjOZkshLzKf1Z+2kbj+vS1ll+yZEs+kBxEhPm/sE /kxKd7l/taBiNmbOAgkLRjF6T+y8AeYGJPNnfiaZXgTZ+Ylq5SWOL2OiEwM6Mi/2 hWJ+oo6JeXzVRunhOQyjDl+qBVLvAuD2aeDdyYe29F0c2PPLeTago/tNc8SLtEG3 QSXQ9lbpKKTD0ZUV33bXJfNuwNTVbqpKYWlUA228zTUvM5phf6Wi6jIpxMkRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcexMHTK7cqOEnVeMavDGDtuqAMQwHwYDVR0j BBgwFoAUKteJ6/xYwfDk+HOQeB04yw1YAhAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWM2NzdmZC1kNTY5LTRjYzUtYTU2My05YjBmMjQ4YjFhZjEvMC8yQUQ3ODlFQkZD NThDMUYwRTRGODczOTA3ODFEMzhDQjBENTgwMjEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4Q0IwRDU4 MDIxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVjNjc3ZmQtZDU2OS00Y2M1LWE1 NjMtOWIwZjI0OGIxYWYxLzAvMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4 Q0IwRDU4MDIxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJQ/urVeAkEHjgDetEcCNCMlZS1nIDrPDAPd bSlYQN/pC1ZRt+EJLA6y3eLu3DSmkPIUdGAXiPWYevz6v8ZBW6i0eMC3nxyvcK+z 7ZT06Ktd48B7G/1aplKPSuXIeU8B7+j/JBs9wJaiyktybJ3cwHGGm5NP6maKEzEa sSCDsCMFV42y6pVdFJHEiq3v1q9hHuLFNSt+CKd2hBI4uDmAbSYA1WHyGRBHiPru iVoFA1yICvwUDQej+1sw8lHFi9p2hRjnUos1o0kftCQQRbrLMY83PH7gHDnV/OKE Y6i8QSMUaVO5LG/9gP6y0ESaGNk9NHC93QVeMT5zmFfOOVI1J/4= -----END CERTIFICATE-----Generated at Fri Aug 8 10:10:46 2025 by rpki-client