$ rpki-client -vvf repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft File: 2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft (raw, json) Hash identifier: w/2kPq8pmOFztcjLht1jX/Vm2ECV+X0888i2OxLCIPU= Subject key identifier: E6:3E:E8:8C:63:BD:9E:2C:10:99:1C:35:58:FD:0A:CB:DC:89:C4:F8 Authority key identifier: 2B:0D:3D:70:A0:27:B5:3C:7A:D2:17:FE:22:CA:0E:D1:11:FD:F3:B0 Certificate issuer: /CN=2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0 Certificate serial: 045C4DE3943F0622EA3C095A57F5E3D3CF558D1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft Manifest number: 7D Signing time: Mon 04 Aug 2025 16:01:58 +0000 Manifest this update: Mon 04 Aug 2025 15:56:58 +0000 Manifest next update: Thu 07 Aug 2025 22:16:58 +0000 Files and hashes: 1: 2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.crl (hash: R7A/40zYtUSokq4gCspte0GtVUuXJLEGQ0AnCuMCbr8=) 2: 3130332e3232352e31372e302f32342d3234203d3e20313532303632.roa (hash: P8QCMdvNkcGuA4F0hmx15JmIaSEyGRAUfWjBJiusufQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.crl rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 22:16:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:5c:4d:e3:94:3f:06:22:ea:3c:09:5a:57:f5:e3:d3:cf:55:8d:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0 Validity Not Before: Aug 4 15:56:58 2025 GMT Not After : Aug 7 22:16:58 2025 GMT Subject: CN=E63EE88C63BD9E2C10991C3558FD0ACBDC89C4F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:60:46:1e:3c:42:7d:46:10:11:c8:f4:d6:56: 4c:f9:5d:96:aa:7c:ea:9e:e4:77:b0:e1:1b:d4:d0: 29:96:81:0f:5d:2c:2b:1d:0f:4f:94:b8:c4:10:cf: 9e:05:ea:07:01:a5:fa:cc:bd:29:01:66:eb:b7:a5: a7:61:25:fe:e1:0f:7d:78:a3:fd:a9:62:5c:e3:a6: a6:23:4c:4c:5e:4c:47:d7:53:af:ff:7a:31:46:9d: 30:b4:c3:0e:08:b1:15:b8:cb:b7:39:8a:e1:22:4d: 26:a4:0c:20:17:65:c1:b1:8a:de:c7:d0:ec:c0:b9: 02:68:8e:89:97:15:cd:00:76:a4:05:91:58:7e:e0: 47:0e:1a:f6:d5:9c:a0:25:1d:34:c6:12:4f:92:88: e5:a9:5e:dd:7c:0c:63:51:04:f7:65:0b:cf:e7:7d: 5b:d8:fd:87:5d:c8:f0:9d:8c:1e:e2:3f:bb:9c:8e: 95:49:7a:3e:64:e3:95:f6:29:d6:34:9b:7a:8f:60: 21:2e:20:e0:0b:ae:e0:ee:23:a4:63:d7:29:1f:47: 6d:ed:91:3a:8e:3f:cf:4f:7d:26:76:12:f3:2c:54: 4a:db:39:07:29:52:af:ea:4a:89:c9:18:63:f1:0b: 7f:9b:2f:1d:7f:3d:ef:06:97:47:50:58:79:79:d2: 49:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:3E:E8:8C:63:BD:9E:2C:10:99:1C:35:58:FD:0A:CB:DC:89:C4:F8 X509v3 Authority Key Identifier: keyid:2B:0D:3D:70:A0:27:B5:3C:7A:D2:17:FE:22:CA:0E:D1:11:FD:F3:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:48:45:20:0a:98:82:16:dd:bd:91:8d:d0:16:d7:df:b1:87: 2e:83:f0:62:74:b4:ce:1b:bc:d3:39:a1:55:bf:f5:a2:e6:bd: 16:1b:ee:34:a8:1b:3e:b5:fc:f5:d2:8f:a5:2c:48:7e:79:ee: d4:b7:5d:9d:a4:dd:fd:9a:34:16:67:d3:30:9c:94:16:4a:cc: 71:2e:64:7d:0e:1d:36:3c:ab:3e:3f:44:1c:4a:f1:17:32:6e: 85:90:d0:62:d0:4a:8c:6c:e3:2c:a5:9d:04:f0:bf:84:6b:15: d3:2d:13:d1:94:59:e4:dc:b8:87:8e:c9:f0:e4:95:35:70:3d: cb:82:9f:11:a7:c3:9b:70:d6:ce:f9:9f:30:a2:07:8b:18:17: de:18:0b:98:eb:ec:c2:30:be:e5:50:eb:b7:11:0d:a9:ae:4a: f1:d6:9c:91:f0:8b:a4:af:7e:7b:58:33:9c:70:aa:ae:05:50: 91:ad:75:c6:e7:8d:6c:c9:66:3a:2f:46:b1:62:e3:c8:a6:19: df:f5:e2:3e:ca:da:9d:95:ed:76:85:c5:d4:f5:34:be:f7:03: ae:6f:89:53:cc:63:84:20:75:a9:7f:24:3d:64:a8:3c:04:8f: 74:43:f9:e9:25:49:5a:0c:5f:4e:59:04:de:1f:f3:d6:d7:f7: b3:37:e7:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBFxN45Q/BiLqPAlaV/Xj089VjRowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIwRDNENzBBMDI3QjUzQzdBRDIxN0ZFMjJDQTBFRDEx MUZERjNCMDAeFw0yNTA4MDQxNTU2NThaFw0yNTA4MDcyMjE2NThaMDMxMTAvBgNV BAMTKEU2M0VFODhDNjNCRDlFMkMxMDk5MUMzNTU4RkQwQUNCREM4OUM0RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7YEYePEJ9RhARyPTWVkz5XZaq fOqe5Hew4RvU0CmWgQ9dLCsdD0+UuMQQz54F6gcBpfrMvSkBZuu3padhJf7hD314 o/2pYlzjpqYjTExeTEfXU6//ejFGnTC0ww4IsRW4y7c5iuEiTSakDCAXZcGxit7H 0OzAuQJojomXFc0AdqQFkVh+4EcOGvbVnKAlHTTGEk+SiOWpXt18DGNRBPdlC8/n fVvY/YddyPCdjB7iP7ucjpVJej5k45X2KdY0m3qPYCEuIOALruDuI6Rj1ykfR23t kTqOP89PfSZ2EvMsVErbOQcpUq/qSonJGGPxC3+bLx1/Pe8Gl0dQWHl50klNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5j7ojGO9niwQmRw1WP0Ky9yJxPgwHwYDVR0j BBgwFoAUKw09cKAntTx60hf+IsoO0RH987AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzcyZDNmNS1kZDUzLTRiNzQtOTQ3Yy02YmI1MTBmNGY1MDMvMC8yQjBEM0Q3MEEw MjdCNTNDN0FEMjE3RkUyMkNBMEVEMTExRkRGM0IwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkIwRDNENzBBMDI3QjUzQzdBRDIxN0ZFMjJDQTBFRDExMUZE RjNCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWM3MmQzZjUtZGQ1My00Yjc0LTk0 N2MtNmJiNTEwZjRmNTAzLzAvMkIwRDNENzBBMDI3QjUzQzdBRDIxN0ZFMjJDQTBF RDExMUZERjNCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALRIRSAKmIIW3b2RjdAW19+xhy6D8GJ0tM4b vNM5oVW/9aLmvRYb7jSoGz61/PXSj6UsSH557tS3XZ2k3f2aNBZn0zCclBZKzHEu ZH0OHTY8qz4/RBxK8RcyboWQ0GLQSoxs4yylnQTwv4RrFdMtE9GUWeTcuIeOyfDk lTVwPcuCnxGnw5tw1s75nzCiB4sYF94YC5jr7MIwvuVQ67cRDamuSvHWnJHwi6Sv fntYM5xwqq4FUJGtdcbnjWzJZjovRrFi48imGd/14j7K2p2V7XaFxdT1NL73A65v iVPMY4Qgdal/JD1kqDwEj3RD+eklSVoMX05ZBN4f89bX97M35/8= -----END CERTIFICATE-----Generated at Wed Aug 6 12:26:03 2025 by rpki-client