$ rpki-client -vvf repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft File: 2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft (raw, json) Hash identifier: MPFvwcMT5PPMHIupuU6YfpdOTi/Im16C/+9/QxRBPDQ= Subject key identifier: 82:00:CA:B7:AE:7C:22:2F:35:44:55:F5:D9:95:67:27:22:F7:02:21 Authority key identifier: 2A:F5:12:1C:D1:CF:A7:79:8C:C1:DD:77:7B:46:43:69:D1:DE:A6:C1 Certificate issuer: /CN=2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1 Certificate serial: 25EE2F86D359504F229F54C704BC960B1B9CD512 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft Manifest number: 0247 Signing time: Tue 05 Aug 2025 22:51:11 +0000 Manifest this update: Tue 05 Aug 2025 22:46:11 +0000 Manifest next update: Sat 09 Aug 2025 02:39:11 +0000 Files and hashes: 1: 2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl (hash: n0Mx73vyKVvLnJCVQFs+KuCvnz4cotgqDuXF4Pvf7Ak=) 2: 3130332e3134382e32342e302f32332d3234203d3e20313339393831.roa (hash: 6FLbYuy1S5qOt7tY0dfAZpELgfONO6cx6swxFm3099E=) 3: 323430353a633863303a3a2f33322d3332203d3e20313339393831.roa (hash: xAQ8nY4YiCbyThm1ahzRI7qCPhGk2b5venOiA8cHRk4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 02:39:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:ee:2f:86:d3:59:50:4f:22:9f:54:c7:04:bc:96:0b:1b:9c:d5:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1 Validity Not Before: Aug 5 22:46:11 2025 GMT Not After : Aug 9 02:39:11 2025 GMT Subject: CN=8200CAB7AE7C222F354455F5D995672722F70221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6a:2f:4e:de:d1:f2:7b:07:79:c3:85:88:3f: 0c:e1:93:7c:ef:6b:0f:a1:d4:30:40:9c:23:96:1e: 05:8a:0e:92:41:1e:4a:e4:29:92:2d:7e:5e:7d:ce: 5d:ba:7b:13:47:94:5d:ce:a3:bc:28:1f:84:83:6d: 06:2b:15:5b:a4:73:d1:86:2c:c1:20:db:37:49:bb: 84:07:28:71:55:fc:23:54:bf:6f:38:6b:19:68:fc: fd:c1:ea:3b:aa:ba:53:9e:55:c6:76:48:82:05:f8: 4d:e5:e5:84:12:bd:e6:ee:76:6c:2b:c7:2b:9a:f8: 0b:1a:d2:ef:26:97:48:fc:0f:e3:85:6c:62:da:dc: b0:88:cc:d2:ec:82:09:58:47:05:fb:c4:dc:95:6f: 96:1f:1a:e4:81:81:1b:0d:33:77:67:84:f4:6a:18: 69:67:5a:28:66:0a:bb:f5:3c:ae:69:65:b9:aa:b6: 18:2a:62:8e:70:48:d0:48:93:0d:35:7f:aa:53:23: c2:ed:b7:f3:9e:a9:e7:b0:39:8b:28:af:ff:95:49: ba:42:3e:a3:b4:d8:2a:df:11:cb:10:b2:ce:ca:66: 60:85:b5:e3:28:20:f3:ff:75:af:e7:34:b2:c6:12: 38:1b:4a:47:c9:93:40:05:13:2a:62:2d:1e:0b:43: dc:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:00:CA:B7:AE:7C:22:2F:35:44:55:F5:D9:95:67:27:22:F7:02:21 X509v3 Authority Key Identifier: keyid:2A:F5:12:1C:D1:CF:A7:79:8C:C1:DD:77:7B:46:43:69:D1:DE:A6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:6a:81:5c:a9:d7:85:b2:ea:24:f4:f4:3f:c6:2e:e9:20:73: ea:74:9d:08:de:23:06:fb:67:2f:cc:27:04:a5:4d:20:42:69: 11:a4:96:df:df:7c:f6:33:2f:e5:be:91:a2:28:02:ee:cc:08: 0a:87:92:3a:5f:25:b2:66:c9:8c:8a:b4:74:3f:19:5a:1d:54: 0f:67:6e:74:f5:e7:d1:51:82:14:28:fe:23:1f:b8:d1:de:ad: 64:b7:2b:1a:81:53:d9:98:48:39:32:05:41:f6:35:63:b5:51: 41:32:70:e9:97:6d:30:13:21:b1:e2:48:42:70:bf:21:44:37: c2:59:bd:05:f7:06:f9:30:9a:e3:00:a5:45:89:71:52:62:21: d5:56:2a:f4:79:7d:47:5d:c0:ad:5c:9c:86:dc:3d:1a:dd:a7: e7:a9:eb:44:47:09:7e:d3:54:49:03:92:b3:6c:76:6e:a4:72: c8:c2:aa:24:80:78:a2:6c:91:8a:06:30:f0:16:3e:dd:f1:a1: a7:c4:19:6c:26:3d:e5:ca:4b:54:35:81:af:a9:d2:79:67:11: 8c:bc:11:67:37:07:99:c0:8b:05:c7:72:6a:a1:2b:e4:4b:47: 76:1b:79:eb:44:d5:f0:af:55:db:57:b8:d6:7b:d1:48:a9:4c: fb:88:1b:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJe4vhtNZUE8in1THBLyWCxuc1RIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQzNjlE MURFQTZDMTAeFw0yNTA4MDUyMjQ2MTFaFw0yNTA4MDkwMjM5MTFaMDMxMTAvBgNV BAMTKDgyMDBDQUI3QUU3QzIyMkYzNTQ0NTVGNUQ5OTU2NzI3MjJGNzAyMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNai9O3tHyewd5w4WIPwzhk3zv aw+h1DBAnCOWHgWKDpJBHkrkKZItfl59zl26exNHlF3Oo7woH4SDbQYrFVukc9GG LMEg2zdJu4QHKHFV/CNUv284axlo/P3B6juqulOeVcZ2SIIF+E3l5YQSvebudmwr xyua+Asa0u8ml0j8D+OFbGLa3LCIzNLsgglYRwX7xNyVb5YfGuSBgRsNM3dnhPRq GGlnWihmCrv1PK5pZbmqthgqYo5wSNBIkw01f6pTI8Ltt/OeqeewOYsor/+VSbpC PqO02CrfEcsQss7KZmCFteMoIPP/da/nNLLGEjgbSkfJk0AFEypiLR4LQ9ybAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUggDKt658Ii81RFX12ZVnJyL3AiEwHwYDVR0j BBgwFoAUKvUSHNHPp3mMwd13e0ZDadHepsEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OTJlMDdmOC0xYTQ4LTQzOTEtYTZhNS04ZTRlMzljODU4OGEvMC8yQUY1MTIxQ0Qx Q0ZBNzc5OENDMURENzc3QjQ2NDM2OUQxREVBNkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQzNjlEMURF QTZDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTkyZTA3ZjgtMWE0OC00MzkxLWE2 YTUtOGU0ZTM5Yzg1ODhhLzAvMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQz NjlEMURFQTZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHVqgVyp14Wy6iT09D/GLukgc+p0nQjeIwb7 Zy/MJwSlTSBCaRGklt/ffPYzL+W+kaIoAu7MCAqHkjpfJbJmyYyKtHQ/GVodVA9n bnT159FRghQo/iMfuNHerWS3KxqBU9mYSDkyBUH2NWO1UUEycOmXbTATIbHiSEJw vyFEN8JZvQX3BvkwmuMApUWJcVJiIdVWKvR5fUddwK1cnIbcPRrdp+ep60RHCX7T VEkDkrNsdm6kcsjCqiSAeKJskYoGMPAWPt3xoafEGWwmPeXKS1Q1ga+p0nlnEYy8 EWc3B5nAiwXHcmqhK+RLR3YbeetE1fCvVdtXuNZ70UipTPuIGzw= -----END CERTIFICATE-----Generated at Wed Aug 6 18:48:14 2025 by rpki-client