$ rpki-client -vvf repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft File: 2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft (raw, json) Hash identifier: dtagsNs8pCzNnjVKA1h+n2suWY1a7sfJBGAJhvknw5Y= Subject key identifier: AD:D2:4F:1F:B3:D9:23:98:6A:D9:78:E1:91:2A:A6:AB:63:66:6D:99 Authority key identifier: 2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6 Certificate issuer: /CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6 Certificate serial: 384B185C6EC7307B16865EF23381860E6C9F5E35 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft Manifest number: 035C Signing time: Tue 12 Aug 2025 03:41:26 +0000 Manifest this update: Tue 12 Aug 2025 03:36:26 +0000 Manifest next update: Fri 15 Aug 2025 06:12:26 +0000 Files and hashes: 1: 2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl (hash: sXZm3lVvUJFmUqNrjuy/D2wHQXOmrLLwvM3MtUkRHDI=) 2: 3130332e3233312e38332e302f32342d3234203d3e20313331373335.roa (hash: UN6dazoYFxgS6jdi8SmiPFiRAzrs0mSEhCBMn6iEnws=) 3: 3130332e3233312e38302e302f32342d3234203d3e20313331373335.roa (hash: etlEVL/G6ecv5pikZQs/QfSTGNp1Hz5OKi7d2dSKjks=) 4: 3130332e3233312e38322e302f32342d3234203d3e20313331373335.roa (hash: 8zUKTcgIM2YuD1hdzVzeO7drrLCkIVs9L0M7lsGNsV4=) 5: 3130332e3233312e38312e302f32342d3234203d3e20313331373335.roa (hash: cHq0w9NeVR2kphOoYMXZeSGQxfdQLrs5CAZ+diGk+MY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 15 Aug 2025 06:12:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:4b:18:5c:6e:c7:30:7b:16:86:5e:f2:33:81:86:0e:6c:9f:5e:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6 Validity Not Before: Aug 12 03:36:26 2025 GMT Not After : Aug 15 06:12:26 2025 GMT Subject: CN=ADD24F1FB3D923986AD978E1912AA6AB63666D99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e5:15:4c:de:8a:e2:40:fe:bd:24:90:7f:68: 22:82:3a:6f:b5:d9:3d:d7:d2:ff:9b:e7:2c:5b:12: 08:ad:dd:b7:63:09:85:2c:8b:46:fd:76:ae:53:68: cb:ae:94:5f:bf:5f:7d:b9:07:46:e6:04:0f:9d:ca: a4:ac:72:c1:ea:ad:22:cb:6a:a9:d9:64:92:f0:23: 2e:d0:77:ec:08:88:b8:cc:f8:4d:dd:ef:df:c6:40: 7e:25:c0:80:e1:9f:1f:ae:9e:98:67:99:5f:fa:69: 0b:6d:aa:20:7c:22:be:a2:40:29:43:8e:bf:04:80: c0:33:03:be:27:4c:d3:72:ad:d2:67:8a:76:2f:8b: 60:c4:66:be:84:d3:30:0f:a0:9a:93:b5:21:6f:a9: b8:67:ab:0d:01:ca:77:9d:6b:16:7e:e1:c5:ab:b1: 0a:89:1c:ce:1c:18:ca:b3:79:d4:b1:fe:30:09:4a: a5:e7:14:f2:a5:54:09:02:c3:8c:e6:e3:bd:24:38: 0b:a8:3d:f2:00:b5:05:3b:b1:59:6c:c4:45:1e:2b: 21:04:df:8c:db:af:2f:b0:91:71:8e:5a:a3:d6:3f: 9e:ee:06:a3:37:56:7d:fa:96:e5:a8:ee:fc:7d:12: 4d:68:4d:b9:bf:41:bf:f8:d3:13:72:5f:94:cf:d4: ea:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D2:4F:1F:B3:D9:23:98:6A:D9:78:E1:91:2A:A6:AB:63:66:6D:99 X509v3 Authority Key Identifier: keyid:2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:a2:8b:fa:25:26:6f:c4:f7:05:23:91:4b:a0:03:62:29:59: 11:3c:7c:6b:84:ee:77:00:f7:09:3c:cd:fe:04:d5:32:a3:25: 8d:b8:e6:e0:c0:ec:6c:b6:fb:c6:22:37:e0:be:0c:af:bf:f7: f7:01:e5:be:74:10:3d:9d:33:82:0a:b0:59:1e:56:f6:e5:18: 89:45:46:da:31:d1:ba:44:88:0f:ae:3b:77:92:fc:c9:bc:6f: b6:69:33:63:14:9e:9e:ad:a0:e1:8d:49:b1:32:73:09:4b:be: a5:3a:67:0b:f2:36:e1:0c:5d:54:9a:f1:15:95:d5:0a:18:c9: c6:59:af:48:e3:7d:33:c6:a9:41:8e:f0:8b:aa:86:d8:41:0a: 3b:1e:5e:6c:f5:55:d3:dd:7e:9c:9e:6a:c0:4f:8c:24:af:84: 5a:f7:99:ad:b7:38:40:70:d0:a6:0c:5b:b3:c4:ed:de:42:e6: d8:34:3e:f6:e0:44:75:57:1e:3a:5c:69:7e:d9:86:b9:bf:d1: 3a:f6:7f:b3:76:db:75:99:17:73:2d:60:24:57:e7:1a:42:ba: 35:bb:53:39:72:08:b6:2b:d9:b1:93:61:c3:d3:f1:29:c1:ab: 33:a0:92:c7:aa:09:39:8e:0a:68:6f:d9:a4:be:cd:a9:f5:dd: f9:8a:1b:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOEsYXG7HMHsWhl7yM4GGDmyfXjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3REU1 RDdBNjNBNjAeFw0yNTA4MTIwMzM2MjZaFw0yNTA4MTUwNjEyMjZaMDMxMTAvBgNV BAMTKEFERDI0RjFGQjNEOTIzOTg2QUQ5NzhFMTkxMkFBNkFCNjM2NjZEOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy5RVM3oriQP69JJB/aCKCOm+1 2T3X0v+b5yxbEgit3bdjCYUsi0b9dq5TaMuulF+/X325B0bmBA+dyqSscsHqrSLL aqnZZJLwIy7Qd+wIiLjM+E3d79/GQH4lwIDhnx+unphnmV/6aQttqiB8Ir6iQClD jr8EgMAzA74nTNNyrdJninYvi2DEZr6E0zAPoJqTtSFvqbhnqw0BynedaxZ+4cWr sQqJHM4cGMqzedSx/jAJSqXnFPKlVAkCw4zm470kOAuoPfIAtQU7sVlsxEUeKyEE 34zbry+wkXGOWqPWP57uBqM3Vn36luWo7vx9Ek1oTbm/Qb/40xNyX5TP1OonAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrdJPH7PZI5hq2XjhkSqmq2NmbZkwHwYDVR0j BBgwFoAUK7E4J0I1dRQdoPHFezPn3l16Y6YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTQ5M2JlMS1mMDY0LTQ5ZTYtOTQ5YS1jYjNlY2JmYzhmNDYvMC8yQkIxMzgyNzQy MzU3NTE0MURBMEYxQzU3QjMzRTdERTVEN0E2M0E2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3REU1RDdB NjNBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGE0OTNiZTEtZjA2NC00OWU2LTk0 OWEtY2IzZWNiZmM4ZjQ2LzAvMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3 REU1RDdBNjNBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADmii/olJm/E9wUjkUugA2IpWRE8fGuE7ncA 9wk8zf4E1TKjJY245uDA7Gy2+8YiN+C+DK+/9/cB5b50ED2dM4IKsFkeVvblGIlF Rtox0bpEiA+uO3eS/Mm8b7ZpM2MUnp6toOGNSbEycwlLvqU6ZwvyNuEMXVSa8RWV 1QoYycZZr0jjfTPGqUGO8IuqhthBCjseXmz1VdPdfpyeasBPjCSvhFr3ma23OEBw 0KYMW7PE7d5C5tg0PvbgRHVXHjpcaX7Zhrm/0Tr2f7N223WZF3MtYCRX5xpCujW7 UzlyCLYr2bGTYcPT8SnBqzOgkseqCTmOCmhv2aS+zan13fmKG/Q= -----END CERTIFICATE-----Generated at Wed Aug 13 07:37:05 2025 by rpki-client