$ rpki-client -vvf repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft File: 2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft (raw, json) Hash identifier: 4m3UK47jdj0wzonR9CqZepec4yu+FShThQBCtmQiR6U= Subject key identifier: B8:5B:0B:C0:E1:BB:3B:82:0A:AC:2D:1C:EB:AB:01:05:75:FF:9B:45 Authority key identifier: 2D:6F:96:FA:63:0E:A7:AE:0A:2B:12:2B:6F:04:CC:4F:5F:32:CE:B5 Certificate issuer: /CN=2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5 Certificate serial: 61718AFAFC8C9B37A9AD326346B40DE11E7643EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft Manifest number: 01FB Signing time: Tue 05 Aug 2025 17:20:54 +0000 Manifest this update: Tue 05 Aug 2025 17:15:54 +0000 Manifest next update: Fri 08 Aug 2025 23:41:54 +0000 Files and hashes: 1: 3130332e3139312e36302e302f32332d3234203d3e20313430343233.roa (hash: yYJNqR/G5sUAXMOF0IPap8wZFYolAZMC0i9H8SllRlI=) 2: 3130332e3139312e36302e302f32342d3234203d3e20313430343233.roa (hash: sSH+72BWEr4MQc7BgNlbk4H5MkWrjKvE4wSUUqHwmBM=) 3: 2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl (hash: 50ZfqkAeBE2ndgy39jtlSZOWBfP0jgHPI7F/10r8Hwk=) 4: 3130332e3139312e36312e302f32342d3234203d3e20313430343233.roa (hash: GKmBfpKDeFOAn/hth0t5+jc0CLfcCDiIkzuoYyGRF6A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 23:41:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:71:8a:fa:fc:8c:9b:37:a9:ad:32:63:46:b4:0d:e1:1e:76:43:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5 Validity Not Before: Aug 5 17:15:54 2025 GMT Not After : Aug 8 23:41:54 2025 GMT Subject: CN=B85B0BC0E1BB3B820AAC2D1CEBAB010575FF9B45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b0:ab:4b:0a:84:1c:61:a7:fb:fa:f5:41:13: b4:83:ce:3b:07:c2:a0:a1:d2:02:31:0f:e4:a0:43: 7c:0b:af:ec:37:78:97:d9:0f:da:f6:6f:03:8f:ff: ca:74:6e:14:76:44:42:9e:1b:49:f8:27:bc:34:70: 49:45:d9:c7:9d:a6:d1:82:a1:30:58:a9:89:46:8e: 89:70:32:4c:45:d5:ed:cd:84:8f:12:e4:a8:5d:65: 4d:54:15:0a:e7:35:b9:a4:a6:50:a1:b6:94:b6:a6: a4:c4:f7:65:0d:72:72:57:53:6b:0f:39:3a:90:a7: 21:9a:6d:7f:eb:76:73:07:8a:9e:06:42:91:16:0d: 97:b2:e2:df:e7:73:6e:67:4b:fd:79:f0:5c:c3:ef: d7:92:ef:8c:85:78:fc:bc:db:4c:ba:99:32:32:91: 04:3c:a6:fc:d2:29:15:2c:4d:a3:09:c3:4b:91:f1: 59:4f:37:11:06:a2:be:c2:8c:a1:c3:2f:78:71:a0: a1:f7:c5:32:2b:c2:97:ae:43:a6:c5:97:16:f5:78: 7d:19:6e:7a:ac:dc:3c:de:7d:ef:97:11:4f:ad:cd: fb:d3:c7:3f:a4:4f:ed:91:b8:7e:29:f2:bd:b6:e4: 23:1d:e8:f5:7f:94:5d:a2:7b:51:7a:92:6f:20:5d: 9d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:5B:0B:C0:E1:BB:3B:82:0A:AC:2D:1C:EB:AB:01:05:75:FF:9B:45 X509v3 Authority Key Identifier: keyid:2D:6F:96:FA:63:0E:A7:AE:0A:2B:12:2B:6F:04:CC:4F:5F:32:CE:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:29:8b:7e:73:c2:a9:be:62:f1:a1:4a:6d:9e:d8:c7:d9:0c: e8:af:5e:36:29:64:c3:f1:da:59:a5:49:7f:45:73:19:8b:5b: 21:e7:16:b1:ef:e8:a0:2c:7e:fd:ea:1b:e4:b4:8b:f0:5a:b8: 90:d0:13:ba:13:36:4b:b1:74:c7:5f:93:48:df:fe:16:2d:e6: 16:fb:91:8d:b6:bb:14:57:b1:db:71:17:ea:04:ab:77:ed:d4: a6:36:06:57:2c:ff:ea:d5:46:0f:10:9e:f6:9d:12:d4:79:e6: 63:36:0d:0d:a2:85:c5:99:c2:b4:f8:11:a8:74:54:27:8b:1c: f7:1f:b8:c7:10:e2:53:02:4a:d6:0d:71:18:da:9d:25:1a:34: 6b:f4:04:c7:f5:d9:8f:46:c8:ff:67:fa:63:8b:85:97:64:6f: c2:25:1b:4b:e3:0f:99:e6:2b:7f:ec:7c:e4:83:f1:41:17:3f: 02:95:59:b3:10:04:17:87:6f:9b:e2:02:68:c0:14:78:fd:e1: 39:2f:80:be:27:fe:42:e8:6d:58:9b:93:80:6c:e2:8b:e9:ac: c6:b3:39:e1:da:46:a9:ed:6d:53:8e:49:c9:57:5b:98:47:e0: e4:76:fb:93:35:02:9d:27:65:d4:9d:39:ac:ae:03:86:d6:fe: 29:c2:c6:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYXGK+vyMmzeprTJjRrQN4R52Q+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNENDNEY1 RjMyQ0VCNTAeFw0yNTA4MDUxNzE1NTRaFw0yNTA4MDgyMzQxNTRaMDMxMTAvBgNV BAMTKEI4NUIwQkMwRTFCQjNCODIwQUFDMkQxQ0VCQUIwMTA1NzVGRjlCNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXsKtLCoQcYaf7+vVBE7SDzjsH wqCh0gIxD+SgQ3wLr+w3eJfZD9r2bwOP/8p0bhR2REKeG0n4J7w0cElF2cedptGC oTBYqYlGjolwMkxF1e3NhI8S5KhdZU1UFQrnNbmkplChtpS2pqTE92UNcnJXU2sP OTqQpyGabX/rdnMHip4GQpEWDZey4t/nc25nS/158FzD79eS74yFePy820y6mTIy kQQ8pvzSKRUsTaMJw0uR8VlPNxEGor7CjKHDL3hxoKH3xTIrwpeuQ6bFlxb1eH0Z bnqs3Dzefe+XEU+tzfvTxz+kT+2RuH4p8r225CMd6PV/lF2ie1F6km8gXZ13AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuFsLwOG7O4IKrC0c66sBBXX/m0UwHwYDVR0j BBgwFoAULW+W+mMOp64KKxIrbwTMT18yzrUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTM0ZDJkOC0zNGFmLTQ3NTctOGFkOS05MmRhMzVkOTIxNjgvMC8yRDZGOTZGQTYz MEVBN0FFMEEyQjEyMkI2RjA0Q0M0RjVGMzJDRUI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNENDNEY1RjMy Q0VCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUzNGQyZDgtMzRhZi00NzU3LThh ZDktOTJkYTM1ZDkyMTY4LzAvMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNEND NEY1RjMyQ0VCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALYpi35zwqm+YvGhSm2e2MfZDOivXjYpZMPx 2lmlSX9FcxmLWyHnFrHv6KAsfv3qG+S0i/BauJDQE7oTNkuxdMdfk0jf/hYt5hb7 kY22uxRXsdtxF+oEq3ft1KY2Blcs/+rVRg8QnvadEtR55mM2DQ2ihcWZwrT4Eah0 VCeLHPcfuMcQ4lMCStYNcRjanSUaNGv0BMf12Y9GyP9n+mOLhZdkb8IlG0vjD5nm K3/sfOSD8UEXPwKVWbMQBBeHb5viAmjAFHj94TkvgL4n/kLobVibk4Bs4ovprMaz OeHaRqntbVOOSclXW5hH4OR2+5M1Ap0nZdSdOayuA4bW/inCxlw= -----END CERTIFICATE-----Generated at Thu Aug 7 03:15:27 2025 by rpki-client