$ rpki-client -vvf repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft File: 2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft (raw, json) Hash identifier: dk7lrBGjGadnObt/U2cwcVMvQBr/8qmKepHuSEPHkKc= Subject key identifier: 19:58:99:55:E5:46:20:13:1F:CC:E3:E7:A3:4C:11:7F:8E:4C:CC:91 Authority key identifier: 2E:29:F4:8B:C4:E2:FD:64:21:F1:2F:27:5B:FE:54:CB:5A:FC:4C:BF Certificate issuer: /CN=2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF Certificate serial: 489925BDC312D1CF737A4C14DA43D8190A9E12B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft Manifest number: 021E Signing time: Tue 05 Aug 2025 11:42:19 +0000 Manifest this update: Tue 05 Aug 2025 11:37:19 +0000 Manifest next update: Fri 08 Aug 2025 13:37:19 +0000 Files and hashes: 1: 2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.crl (hash: 2yEazNjUYF2s1ratv0Qec6B7mpCEov3g5p1hFuaNmhg=) 2: 3130332e3138342e3138322e302f32342d3234203d3e20313439363736.roa (hash: 1ohXfgQVLOVqfzLUY6nq2zHsOKGWcr19CJg3R6qlyZU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.crl rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 13:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:99:25:bd:c3:12:d1:cf:73:7a:4c:14:da:43:d8:19:0a:9e:12:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF Validity Not Before: Aug 5 11:37:19 2025 GMT Not After : Aug 8 13:37:19 2025 GMT Subject: CN=19589955E54620131FCCE3E7A34C117F8E4CCC91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:49:80:33:14:a2:e4:ea:68:a1:f9:47:02:94: c0:cc:2e:0e:3e:eb:66:fd:60:f6:70:92:38:b0:e7: 16:b3:9f:df:93:86:84:72:fb:ce:42:a8:ee:b3:c6: 47:e6:82:50:8c:db:06:a4:2f:61:01:2d:d0:0f:5d: 80:f2:6e:bd:a6:3d:74:c9:91:ec:2f:75:be:ff:b9: f8:1d:93:0f:ea:fa:3e:b0:fd:de:45:95:46:b8:62: 14:44:35:9e:53:48:a4:2c:b9:25:14:6d:4c:da:33: 80:57:0e:93:6b:89:bf:b5:54:85:cd:4b:d4:52:50: da:48:d8:82:cb:98:9b:9a:02:7e:c5:98:82:96:f1: 29:6b:52:e7:08:16:9a:8a:5c:3f:e1:e2:fb:17:68: 99:44:95:43:6d:f9:8b:93:5f:f6:26:19:f9:5f:56: 36:36:cc:ef:e0:39:51:42:f5:1d:c6:91:ea:52:0b: 09:25:7a:0e:2a:f7:c8:90:e9:47:b6:e5:2f:b6:7a: a5:3e:b3:11:e3:08:09:77:c8:f8:68:9f:62:60:98: 6d:31:4d:95:7c:3a:f4:31:60:88:a5:17:a9:f6:e1: ef:f3:8d:a0:22:0e:42:d4:e6:8f:18:0e:c2:c7:e4: 4f:26:63:73:2b:21:9d:44:6c:5c:38:95:b9:d8:7e: 73:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:58:99:55:E5:46:20:13:1F:CC:E3:E7:A3:4C:11:7F:8E:4C:CC:91 X509v3 Authority Key Identifier: keyid:2E:29:F4:8B:C4:E2:FD:64:21:F1:2F:27:5B:FE:54:CB:5A:FC:4C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:d6:b6:0e:b7:8e:b9:b6:e0:cd:f0:5d:ba:bb:20:1e:b7:34: 5d:4f:df:fb:6f:65:67:72:f9:81:6b:78:e8:13:a5:0a:ce:c1: 23:b1:19:f4:71:81:d0:23:2d:f8:46:64:bc:fb:3e:aa:50:c2: 23:16:6e:51:40:53:7b:84:4b:40:9f:86:c9:a8:cd:ab:a5:76: c6:d8:50:23:0a:a7:51:55:94:04:f2:2e:27:56:c7:8a:17:b8: c1:ee:59:19:27:2a:4b:9d:b3:8c:07:18:d6:a9:2d:b7:7a:8f: 2e:47:89:77:37:38:9a:f4:23:57:26:44:97:a5:f5:05:2e:ea: d3:61:a8:b9:42:66:b4:43:2f:60:22:6e:1f:0e:8b:f0:52:76: 3c:99:4b:07:8a:c5:fa:8a:37:ce:d7:d5:6b:37:b8:3c:c7:fc: 6f:0b:b5:e1:c2:88:65:03:83:f8:ad:39:87:91:5a:bc:92:2d: 82:72:f4:c8:13:69:49:a9:ab:c2:9a:2d:34:d6:eb:27:71:fa: 9c:65:d4:2b:5f:94:79:1c:c1:9d:77:c7:df:95:cf:a6:44:52: d4:9b:db:5c:31:4c:f9:73:7c:00:7f:b5:05:6e:c3:c5:d2:fd: 6f:bc:74:49:e4:96:75:c0:3d:fe:22:74:ee:31:6c:81:79:4a: 6a:5b:44:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSJklvcMS0c9zekwU2kPYGQqeErkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUyOUY0OEJDNEUyRkQ2NDIxRjEyRjI3NUJGRTU0Q0I1 QUZDNENCRjAeFw0yNTA4MDUxMTM3MTlaFw0yNTA4MDgxMzM3MTlaMDMxMTAvBgNV BAMTKDE5NTg5OTU1RTU0NjIwMTMxRkNDRTNFN0EzNEMxMTdGOEU0Q0NDOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeSYAzFKLk6mih+UcClMDMLg4+ 62b9YPZwkjiw5xazn9+ThoRy+85CqO6zxkfmglCM2wakL2EBLdAPXYDybr2mPXTJ kewvdb7/ufgdkw/q+j6w/d5FlUa4YhRENZ5TSKQsuSUUbUzaM4BXDpNrib+1VIXN S9RSUNpI2ILLmJuaAn7FmIKW8SlrUucIFpqKXD/h4vsXaJlElUNt+YuTX/YmGflf VjY2zO/gOVFC9R3GkepSCwkleg4q98iQ6Ue25S+2eqU+sxHjCAl3yPhon2JgmG0x TZV8OvQxYIilF6n24e/zjaAiDkLU5o8YDsLH5E8mY3MrIZ1EbFw4lbnYfnNlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGViZVeVGIBMfzOPno0wRf45MzJEwHwYDVR0j BBgwFoAULin0i8Ti/WQh8S8nW/5Uy1r8TL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YjI1ZjBlYi0zYzRkLTRmYzctYjNhNC1hZGIyMjk3ZGU2Y2YvMC8yRTI5RjQ4QkM0 RTJGRDY0MjFGMTJGMjc1QkZFNTRDQjVBRkM0Q0JGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUyOUY0OEJDNEUyRkQ2NDIxRjEyRjI3NUJGRTU0Q0I1QUZD NENCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmIyNWYwZWItM2M0ZC00ZmM3LWIz YTQtYWRiMjI5N2RlNmNmLzAvMkUyOUY0OEJDNEUyRkQ2NDIxRjEyRjI3NUJGRTU0 Q0I1QUZDNENCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJXWtg63jrm24M3wXbq7IB63NF1P3/tvZWdy +YFreOgTpQrOwSOxGfRxgdAjLfhGZLz7PqpQwiMWblFAU3uES0CfhsmozauldsbY UCMKp1FVlATyLidWx4oXuMHuWRknKkuds4wHGNapLbd6jy5HiXc3OJr0I1cmRJel 9QUu6tNhqLlCZrRDL2Aibh8Oi/BSdjyZSweKxfqKN87X1Ws3uDzH/G8LteHCiGUD g/itOYeRWrySLYJy9MgTaUmpq8KaLTTW6ydx+pxl1CtflHkcwZ13x9+Vz6ZEUtSb 21wxTPlzfAB/tQVuw8XS/W+8dEnklnXAPf4idO4xbIF5SmpbRK4= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:58 2025 by rpki-client