$ rpki-client -vvf repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft File: 2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft (raw, json) Hash identifier: X8a/jqzP+rlhrnw19Tups9IXAQWazamXz08UFqWhvIc= Subject key identifier: A2:44:E7:78:11:2A:75:4B:DB:B9:BB:37:65:36:6F:A9:72:DE:95:A1 Authority key identifier: 2A:A6:E6:5B:86:E4:42:3A:EC:7D:02:D8:5B:43:BA:00:80:12:D2:9D Certificate issuer: /CN=2AA6E65B86E4423AEC7D02D85B43BA008012D29D Certificate serial: 6723A4CF24166DD7CD8048412D6A99857876FE3B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft Manifest number: 019C Signing time: Tue 05 Aug 2025 17:01:05 +0000 Manifest this update: Tue 05 Aug 2025 16:56:05 +0000 Manifest next update: Fri 08 Aug 2025 17:41:05 +0000 Files and hashes: 1: 2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl (hash: wnYq8CxozyhTOZfB5f6GWIgMVnaW7FZpWplOj3h/t60=) 2: 3130332e3132392e35302e302f32332d3234203d3e20313335343738.roa (hash: RsQS9pXwEYaCDD5cA+PCEhqN7yNzqnOa8ujUnr88Njo=) 3: 3130332e3132392e34382e302f32332d3234203d3e20313335343738.roa (hash: nuG2thm0oiOwKnakW1lHLkXwPbpo6Y7ruJlmvamdekA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 17:41:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:23:a4:cf:24:16:6d:d7:cd:80:48:41:2d:6a:99:85:78:76:fe:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AA6E65B86E4423AEC7D02D85B43BA008012D29D Validity Not Before: Aug 5 16:56:05 2025 GMT Not After : Aug 8 17:41:05 2025 GMT Subject: CN=A244E778112A754BDBB9BB3765366FA972DE95A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:90:76:b2:1f:c6:23:d5:24:30:53:d7:40:d2: 5b:4b:bb:83:95:01:23:e4:ed:d2:6e:80:89:5b:c7: 67:b7:59:e2:3f:53:8f:9c:7f:dc:1a:dd:2f:7a:9e: 65:95:71:2e:6e:05:a2:49:c3:7e:93:70:a2:71:6a: 9b:b2:d1:2e:1f:11:7a:c0:eb:e7:c3:76:f2:73:f9: b7:1d:1a:ce:f4:51:1d:2b:73:9d:eb:30:8b:02:c9: fc:f8:3d:91:a4:e9:75:15:ea:18:39:80:36:05:f7: e2:7b:94:c6:c2:92:e3:73:cb:b8:b3:20:ca:1c:38: 63:1e:f3:c1:5a:dd:0b:1c:5c:87:ac:82:d5:67:a9: 84:74:48:31:21:5a:fb:5f:4d:27:c4:d2:fd:32:16: f4:d5:01:d2:4e:2e:34:90:71:85:60:e3:65:b9:67: 47:d7:ea:c6:0b:30:ac:3f:7a:78:e0:e4:2d:8b:36: 8f:0d:05:ad:92:26:dd:4d:0e:ca:fc:5e:a2:39:dc: a5:f5:2b:cb:86:58:36:a0:15:b3:44:cf:50:88:3d: b8:0a:9f:d9:5d:a5:27:81:5d:5a:0f:77:1e:47:0a: 3f:ba:91:3a:c2:70:77:a8:e8:84:fb:00:cf:50:f7: 0a:0c:19:79:78:4b:0a:af:0a:40:3b:82:67:97:1f: dc:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:44:E7:78:11:2A:75:4B:DB:B9:BB:37:65:36:6F:A9:72:DE:95:A1 X509v3 Authority Key Identifier: keyid:2A:A6:E6:5B:86:E4:42:3A:EC:7D:02:D8:5B:43:BA:00:80:12:D2:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:02:b3:21:6c:ad:c6:33:f4:ee:2b:ab:c5:4e:66:2a:66:34: 43:70:47:db:11:cd:27:40:63:00:30:31:40:ca:bf:b3:eb:33: aa:49:c5:f2:f4:cd:9c:50:30:c2:04:9a:fb:84:66:be:03:72: 7f:7b:cb:84:d5:64:94:01:e8:08:ee:18:92:ca:c8:72:8a:f0: 50:46:60:18:30:b0:6a:2d:b2:ce:12:b4:47:bb:2f:22:b5:75: f0:19:66:b6:ee:e9:08:27:06:9a:94:cd:cd:e0:ef:7c:e4:cc: 57:35:3f:47:e7:b3:c1:00:71:c1:b9:69:eb:8b:00:8b:dd:8d: 39:1b:53:51:e2:93:e1:09:0e:d3:6e:d5:22:8f:6f:78:e1:ad: 49:c9:c5:f8:75:b5:6e:a3:59:0a:8f:00:f0:d0:40:b1:26:8c: d5:70:61:70:aa:74:69:4d:55:87:8d:49:d5:85:57:96:f3:dd: 17:95:24:77:25:e0:4c:9b:03:3b:f0:7c:ed:b0:0d:df:5e:e1: 80:13:28:3e:4d:25:75:31:42:70:d3:73:f1:09:e1:c8:eb:57: 2d:28:bd:05:b5:e2:e5:3c:80:c1:d1:87:fc:01:6c:d4:28:32: 2a:c4:e1:54:47:2d:54:f3:24:77:dd:c7:12:52:27:d2:58:a5: 71:b8:0f:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZyOkzyQWbdfNgEhBLWqZhXh2/jswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBNkU2NUI4NkU0NDIzQUVDN0QwMkQ4NUI0M0JBMDA4 MDEyRDI5RDAeFw0yNTA4MDUxNjU2MDVaFw0yNTA4MDgxNzQxMDVaMDMxMTAvBgNV BAMTKEEyNDRFNzc4MTEyQTc1NEJEQkI5QkIzNzY1MzY2RkE5NzJERTk1QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3kHayH8Yj1SQwU9dA0ltLu4OV ASPk7dJugIlbx2e3WeI/U4+cf9wa3S96nmWVcS5uBaJJw36TcKJxapuy0S4fEXrA 6+fDdvJz+bcdGs70UR0rc53rMIsCyfz4PZGk6XUV6hg5gDYF9+J7lMbCkuNzy7iz IMocOGMe88Fa3QscXIesgtVnqYR0SDEhWvtfTSfE0v0yFvTVAdJOLjSQcYVg42W5 Z0fX6sYLMKw/enjg5C2LNo8NBa2SJt1NDsr8XqI53KX1K8uGWDagFbNEz1CIPbgK n9ldpSeBXVoPdx5HCj+6kTrCcHeo6IT7AM9Q9woMGXl4SwqvCkA7gmeXH9ydAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUokTneBEqdUvbubs3ZTZvqXLelaEwHwYDVR0j BBgwFoAUKqbmW4bkQjrsfQLYW0O6AIAS0p0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTZiZmY5ZC1mYjEzLTQ3YjktOWNjMC1kZDZhMDczMGExYzYvMC8yQUE2RTY1Qjg2 RTQ0MjNBRUM3RDAyRDg1QjQzQkEwMDgwMTJEMjlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkFBNkU2NUI4NkU0NDIzQUVDN0QwMkQ4NUI0M0JBMDA4MDEy RDI5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U2YmZmOWQtZmIxMy00N2I5LTlj YzAtZGQ2YTA3MzBhMWM2LzAvMkFBNkU2NUI4NkU0NDIzQUVDN0QwMkQ4NUI0M0JB MDA4MDEyRDI5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANoCsyFsrcYz9O4rq8VOZipmNENwR9sRzSdA YwAwMUDKv7PrM6pJxfL0zZxQMMIEmvuEZr4Dcn97y4TVZJQB6AjuGJLKyHKK8FBG YBgwsGotss4StEe7LyK1dfAZZrbu6QgnBpqUzc3g73zkzFc1P0fns8EAccG5aeuL AIvdjTkbU1Hik+EJDtNu1SKPb3jhrUnJxfh1tW6jWQqPAPDQQLEmjNVwYXCqdGlN VYeNSdWFV5bz3ReVJHcl4EybAzvwfO2wDd9e4YATKD5NJXUxQnDTc/EJ4cjrVy0o vQW14uU8gMHRh/wBbNQoMirE4VRHLVTzJHfdxxJSJ9JYpXG4D2U= -----END CERTIFICATE-----Generated at Wed Aug 6 05:51:21 2025 by rpki-client