$ rpki-client -vvf repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft File: 2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft (raw, json) Hash identifier: 4NzNzGh1/Y1kEgIBYIIfFvNzgBRYooxZ8HjQCCRRF3A= Subject key identifier: ED:FC:98:4A:59:56:45:B3:0B:68:49:43:9D:9D:DD:D1:4A:D7:C3:70 Authority key identifier: 2A:06:B4:29:F7:0B:86:9F:9E:70:FB:36:95:16:74:F7:D8:A4:AC:4E Certificate issuer: /CN=2A06B429F70B869F9E70FB36951674F7D8A4AC4E Certificate serial: 14F7D297CE550CA0E654275CE7851D7D887386D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft Manifest number: 011B Signing time: Fri 08 Aug 2025 11:12:18 +0000 Manifest this update: Fri 08 Aug 2025 11:07:18 +0000 Manifest next update: Mon 11 Aug 2025 12:09:18 +0000 Files and hashes: 1: 2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl (hash: SeX38h5+sbGvcWuz8aHui6otgdaP2MnuB8Mj+TFkPIg=) 2: 3130332e3135312e32342e302f32342d3234203d3e20313530353332.roa (hash: 3tho/NQEZ7clEuLXEou7D6b7IKWMhHVDrU5KgBLQwQM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 12:09:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:f7:d2:97:ce:55:0c:a0:e6:54:27:5c:e7:85:1d:7d:88:73:86:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A06B429F70B869F9E70FB36951674F7D8A4AC4E Validity Not Before: Aug 8 11:07:18 2025 GMT Not After : Aug 11 12:09:18 2025 GMT Subject: CN=EDFC984A595645B30B6849439D9DDDD14AD7C370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cc:ca:77:ce:a1:57:ac:7a:7a:16:69:f6:5d: 12:ed:60:73:6e:0e:54:ca:40:0b:a7:d9:a4:ab:be: 39:31:b0:d8:61:22:49:da:1b:5d:e6:2a:0d:47:40: 0f:29:e4:b2:e5:a4:59:ab:c4:c7:3f:96:5d:4c:9f: 18:c3:55:74:5e:d8:8e:1e:58:22:f9:66:81:a9:31: cd:c5:13:27:be:77:9a:21:02:40:b1:50:c1:29:bf: 10:51:b0:4c:27:c0:53:b9:a7:5e:5e:8d:28:91:c2: 6c:0b:ed:4b:e6:4a:d9:09:db:b6:05:ec:3d:2f:6d: d3:f4:96:03:a5:4a:d1:43:39:fe:1e:55:ea:a2:49: 1d:e9:f1:81:bb:c2:ab:0d:b9:a4:09:83:10:57:98: a3:d9:b0:94:86:68:43:1a:b4:c2:42:d2:0a:a9:8b: c9:55:cf:c1:e4:94:d0:7f:5d:f8:cc:af:3f:09:96: 8a:c3:e8:5b:71:63:02:3e:ef:99:17:fd:cf:bf:d4: 46:08:c4:b6:c9:11:ec:7b:d2:70:7f:75:2b:1c:d6: 74:d9:ea:a0:7c:fa:20:72:9e:0a:c5:17:82:77:cf: 1b:64:da:b9:66:4e:2a:a6:20:b9:35:e2:5a:e6:97: 87:78:d0:20:9e:a4:9b:af:5b:dc:b9:74:8a:ef:af: 9d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:FC:98:4A:59:56:45:B3:0B:68:49:43:9D:9D:DD:D1:4A:D7:C3:70 X509v3 Authority Key Identifier: keyid:2A:06:B4:29:F7:0B:86:9F:9E:70:FB:36:95:16:74:F7:D8:A4:AC:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:bf:77:7d:3e:39:81:69:48:6c:46:62:69:c0:d7:3a:54:eb: a4:b5:ba:4b:e5:99:37:ad:3a:be:57:1c:29:cb:36:91:37:c7: 8d:86:42:a2:3a:a5:9c:76:30:90:d0:26:a3:50:b9:08:3d:06: 20:d8:86:92:52:57:d0:23:1b:0a:e8:95:71:87:27:b8:f3:6e: 17:80:3e:ae:e0:8a:b8:f5:91:43:80:ce:61:06:44:48:d7:c6: 70:7c:ce:22:91:b1:1a:ef:60:40:21:f9:cc:85:ac:6b:69:27: 32:87:d2:e2:d0:b3:ad:ec:23:30:3d:b9:ed:4b:29:87:7e:35: 40:c2:8b:4b:7d:ed:d8:63:04:17:26:f1:25:64:0c:58:1a:24: 6e:be:6b:ce:e7:78:f3:df:14:47:a1:0a:ff:0c:d2:4a:bd:fd: 83:8e:94:f0:da:8b:0a:54:73:10:10:11:de:44:4a:f4:bf:ad: a5:42:3b:52:17:88:ab:e4:d1:4b:93:9e:03:8c:9d:bb:e9:87: cb:36:fd:b4:4f:be:44:09:f1:ca:65:09:f3:85:a2:18:0a:cb: 0c:29:f7:c6:bc:3d:21:e8:83:c3:6d:c8:b5:45:eb:89:d4:8c: 91:3d:03:06:78:15:e0:d2:c7:20:d9:2c:a1:a9:ac:79:a1:bc: ae:75:62:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFPfSl85VDKDmVCdc54UdfYhzhtgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEwNkI0MjlGNzBCODY5RjlFNzBGQjM2OTUxNjc0RjdE OEE0QUM0RTAeFw0yNTA4MDgxMTA3MThaFw0yNTA4MTExMjA5MThaMDMxMTAvBgNV BAMTKEVERkM5ODRBNTk1NjQ1QjMwQjY4NDk0MzlEOUREREQxNEFEN0MzNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNzMp3zqFXrHp6Fmn2XRLtYHNu DlTKQAun2aSrvjkxsNhhIknaG13mKg1HQA8p5LLlpFmrxMc/ll1MnxjDVXRe2I4e WCL5ZoGpMc3FEye+d5ohAkCxUMEpvxBRsEwnwFO5p15ejSiRwmwL7UvmStkJ27YF 7D0vbdP0lgOlStFDOf4eVeqiSR3p8YG7wqsNuaQJgxBXmKPZsJSGaEMatMJC0gqp i8lVz8HklNB/XfjMrz8JlorD6FtxYwI+75kX/c+/1EYIxLbJEex70nB/dSsc1nTZ 6qB8+iByngrFF4J3zxtk2rlmTiqmILk14lrml4d40CCepJuvW9y5dIrvr53jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7fyYSllWRbMLaElDnZ3d0UrXw3AwHwYDVR0j BBgwFoAUKga0KfcLhp+ecPs2lRZ099ikrE4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjVhNDdiNi01NTEzLTQ2MTAtOTRjZi0xZmVlYzRlZWVjZjMvMC8yQTA2QjQyOUY3 MEI4NjlGOUU3MEZCMzY5NTE2NzRGN0Q4QTRBQzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkEwNkI0MjlGNzBCODY5RjlFNzBGQjM2OTUxNjc0RjdEOEE0 QUM0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI1YTQ3YjYtNTUxMy00NjEwLTk0 Y2YtMWZlZWM0ZWVlY2YzLzAvMkEwNkI0MjlGNzBCODY5RjlFNzBGQjM2OTUxNjc0 RjdEOEE0QUM0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALO/d30+OYFpSGxGYmnA1zpU66S1ukvlmTet Or5XHCnLNpE3x42GQqI6pZx2MJDQJqNQuQg9BiDYhpJSV9AjGwrolXGHJ7jzbheA Pq7girj1kUOAzmEGREjXxnB8ziKRsRrvYEAh+cyFrGtpJzKH0uLQs63sIzA9ue1L KYd+NUDCi0t97dhjBBcm8SVkDFgaJG6+a87nePPfFEehCv8M0kq9/YOOlPDaiwpU cxAQEd5ESvS/raVCO1IXiKvk0UuTngOMnbvph8s2/bRPvkQJ8cplCfOFohgKywwp 98a8PSHog8NtyLVF64nUjJE9AwZ4FeDSxyDZLKGprHmhvK51Yoc= -----END CERTIFICATE-----Generated at Sun Aug 10 13:44:03 2025 by rpki-client