$ rpki-client -vvf repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft File: 2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft (raw, json) Hash identifier: LdtZoC8Z0x/+P7Lpl9nfg0zuibkjDpGgfMaYK7stV7c= Subject key identifier: 8F:3B:75:84:F1:31:19:9F:C9:BF:E0:D2:13:A5:53:24:55:52:D4:FC Authority key identifier: 2A:A6:E6:5B:86:E4:42:3A:EC:7D:02:D8:5B:43:BA:00:80:12:D2:9D Certificate issuer: /CN=2AA6E65B86E4423AEC7D02D85B43BA008012D29D Certificate serial: 6682DB81C699793ADA8AA40DE78479A306BAAAC1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft Manifest number: 0185 Signing time: Sat 14 Jun 2025 21:51:04 +0000 Manifest this update: Sat 14 Jun 2025 21:46:04 +0000 Manifest next update: Wed 18 Jun 2025 06:13:04 +0000 Files and hashes: 1: 3130332e3132392e34382e302f32332d3234203d3e20313335343738.roa (hash: nuG2thm0oiOwKnakW1lHLkXwPbpo6Y7ruJlmvamdekA=) 2: 3130332e3132392e35302e302f32332d3234203d3e20313335343738.roa (hash: RsQS9pXwEYaCDD5cA+PCEhqN7yNzqnOa8ujUnr88Njo=) 3: 2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl (hash: XjYgQPbJKYJZMrvZiuAT37/2TcLGlxLnzOrBw3xfq9M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 06:13:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:82:db:81:c6:99:79:3a:da:8a:a4:0d:e7:84:79:a3:06:ba:aa:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AA6E65B86E4423AEC7D02D85B43BA008012D29D Validity Not Before: Jun 14 21:46:04 2025 GMT Not After : Jun 18 06:13:04 2025 GMT Subject: CN=8F3B7584F131199FC9BFE0D213A553245552D4FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:27:96:a2:87:0c:0d:d6:ec:72:47:57:65:ca: a0:02:c5:c4:b0:14:12:0d:71:35:27:4f:80:ad:90: ff:86:f5:11:9b:e6:4e:b6:13:f2:97:79:ea:dd:16: 3b:83:87:2c:dd:a2:25:7f:18:8e:09:d7:3d:7e:be: fe:68:96:41:65:80:01:dd:52:11:84:66:63:1a:f9: 57:87:4a:6d:8f:a5:91:4c:dc:45:1a:27:74:c6:4b: 83:1c:02:ac:f2:4e:c6:9b:f0:b7:46:13:1a:17:a8: 7e:39:3c:3b:95:23:46:da:89:99:be:ce:e1:cf:b6: 45:a4:09:9e:89:d6:1b:e4:73:76:56:5f:62:c2:eb: dd:c8:ee:b7:6e:c4:84:96:b0:25:78:eb:58:f9:b3: b2:a2:f0:1d:c9:5d:4f:57:e6:fa:1e:ac:8b:eb:21: 14:49:d2:18:26:3f:bb:9f:74:a3:0a:1d:d3:3f:05: 40:ac:b4:3a:d6:75:95:f4:ac:4c:24:1a:aa:4e:2e: 68:85:00:9d:28:b8:a1:50:c3:fb:c9:59:2c:01:59: f2:0b:d1:ae:b7:7a:6b:b2:70:79:81:8e:ff:b1:7c: 1e:b3:9e:56:d5:24:52:cb:46:8b:7d:46:32:62:69: 7a:d9:49:e6:f5:4c:1f:e0:6f:b0:96:5e:7e:34:17: c2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:3B:75:84:F1:31:19:9F:C9:BF:E0:D2:13:A5:53:24:55:52:D4:FC X509v3 Authority Key Identifier: keyid:2A:A6:E6:5B:86:E4:42:3A:EC:7D:02:D8:5B:43:BA:00:80:12:D2:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:5f:f2:ba:63:58:98:84:50:a5:fb:3c:2c:3c:9b:e3:7a:59: 44:84:06:2b:97:d1:2a:3d:de:28:b6:98:7b:c5:bc:52:68:1e: 45:69:18:23:57:0f:39:c9:35:ba:16:ef:7c:8d:9e:ce:4f:32: d1:a5:44:61:0b:bc:dc:83:61:3f:1d:af:b3:9c:6d:b7:f2:41: 43:06:63:5e:f4:56:ce:ca:04:14:56:27:01:88:8b:d9:aa:42: fc:5e:09:67:17:bc:24:6f:ab:0c:c8:65:f5:de:3d:7f:e4:25: f1:ce:30:13:2f:46:14:5c:9f:11:1e:08:16:f7:0d:eb:66:4c: 25:16:2e:b4:8b:9e:0a:1c:e1:49:54:1f:a7:06:90:fe:34:ec: 0a:f9:48:a5:5c:9b:82:01:a8:28:b2:fa:bf:cf:7b:fe:f7:27: 14:99:ba:72:ea:c9:76:30:b7:57:25:8e:2c:e8:26:38:70:92: b3:f8:64:fb:1a:e1:b7:0f:59:f5:ef:06:46:d5:3a:aa:b9:f5: d9:58:75:21:0d:73:09:67:2f:57:03:05:55:95:a1:3b:95:0b: 5b:6e:64:e1:aa:9b:55:05:7e:c4:53:bb:5a:04:83:ff:dc:b7: 87:99:18:35:90:95:47:e8:57:3d:83:00:5e:60:3f:3e:ca:4b: fa:88:21:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZoLbgcaZeTraiqQN54R5owa6qsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBNkU2NUI4NkU0NDIzQUVDN0QwMkQ4NUI0M0JBMDA4 MDEyRDI5RDAeFw0yNTA2MTQyMTQ2MDRaFw0yNTA2MTgwNjEzMDRaMDMxMTAvBgNV BAMTKDhGM0I3NTg0RjEzMTE5OUZDOUJGRTBEMjEzQTU1MzI0NTU1MkQ0RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxJ5aihwwN1uxyR1dlyqACxcSw FBINcTUnT4CtkP+G9RGb5k62E/KXeerdFjuDhyzdoiV/GI4J1z1+vv5olkFlgAHd UhGEZmMa+VeHSm2PpZFM3EUaJ3TGS4McAqzyTsab8LdGExoXqH45PDuVI0baiZm+ zuHPtkWkCZ6J1hvkc3ZWX2LC693I7rduxISWsCV461j5s7Ki8B3JXU9X5voerIvr IRRJ0hgmP7ufdKMKHdM/BUCstDrWdZX0rEwkGqpOLmiFAJ0ouKFQw/vJWSwBWfIL 0a63emuycHmBjv+xfB6znlbVJFLLRot9RjJiaXrZSeb1TB/gb7CWXn40F8IBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjzt1hPExGZ/Jv+DSE6VTJFVS1PwwHwYDVR0j BBgwFoAUKqbmW4bkQjrsfQLYW0O6AIAS0p0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTZiZmY5ZC1mYjEzLTQ3YjktOWNjMC1kZDZhMDczMGExYzYvMC8yQUE2RTY1Qjg2 RTQ0MjNBRUM3RDAyRDg1QjQzQkEwMDgwMTJEMjlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkFBNkU2NUI4NkU0NDIzQUVDN0QwMkQ4NUI0M0JBMDA4MDEy RDI5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U2YmZmOWQtZmIxMy00N2I5LTlj YzAtZGQ2YTA3MzBhMWM2LzAvMkFBNkU2NUI4NkU0NDIzQUVDN0QwMkQ4NUI0M0JB MDA4MDEyRDI5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMFf8rpjWJiEUKX7PCw8m+N6WUSEBiuX0So9 3ii2mHvFvFJoHkVpGCNXDznJNboW73yNns5PMtGlRGELvNyDYT8dr7OcbbfyQUMG Y170Vs7KBBRWJwGIi9mqQvxeCWcXvCRvqwzIZfXePX/kJfHOMBMvRhRcnxEeCBb3 DetmTCUWLrSLngoc4UlUH6cGkP407Ar5SKVcm4IBqCiy+r/Pe/73JxSZunLqyXYw t1cljizoJjhwkrP4ZPsa4bcPWfXvBkbVOqq59dlYdSENcwlnL1cDBVWVoTuVC1tu ZOGqm1UFfsRTu1oEg//ct4eZGDWQlUfoVz2DAF5gPz7KS/qIIYY= -----END CERTIFICATE-----Generated at Sun Jun 15 15:19:50 2025 by rpki-client