$ rpki-client -vvf repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft File: 2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft (raw, json) Hash identifier: 7xjT7GHDjR3KUZWadSGqgbD/cQ6vauR1cshDSkHCxkQ= Subject key identifier: AF:FC:3E:50:DE:A5:42:9D:E4:80:78:46:B7:47:43:FE:EE:DD:D7:4D Authority key identifier: 2A:2A:BC:86:29:3A:3D:A3:60:2C:0D:FB:CE:D7:D9:92:4F:E5:A5:8B Certificate issuer: /CN=2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B Certificate serial: 2F9BD2E31D9FAD280F5BAC1448A9FEA22AFBD4C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft Manifest number: 04F8 Signing time: Thu 07 Aug 2025 01:10:50 +0000 Manifest this update: Thu 07 Aug 2025 01:05:50 +0000 Manifest next update: Sun 10 Aug 2025 02:30:50 +0000 Files and hashes: 1: 3130332e3134352e3234322e302f32332d3234203d3e20313339343534.roa (hash: D2W67nt589wKu+2Bfg+V0s/E2/ZjISUp5pz9rbCWuK0=) 2: 2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.crl (hash: Rr2HkJp73vZj9qDamUff8M5U2hWj2okyrtJoAwMhQCk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.crl rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 02:30:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:9b:d2:e3:1d:9f:ad:28:0f:5b:ac:14:48:a9:fe:a2:2a:fb:d4:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B Validity Not Before: Aug 7 01:05:50 2025 GMT Not After : Aug 10 02:30:50 2025 GMT Subject: CN=AFFC3E50DEA5429DE4807846B74743FEEEDDD74D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:22:b5:46:81:fd:a1:30:62:52:05:c1:4b:cd: 75:66:8c:ea:9d:c0:98:4b:3d:8e:0b:8e:c0:83:66: db:ff:af:8e:d9:3f:0b:4e:d3:bd:9c:e7:54:d5:ec: f1:65:36:22:47:bf:de:bd:3d:ca:1b:eb:a6:de:b1: 63:3d:3a:bd:3f:e2:56:51:89:6b:27:68:7a:e3:bb: 40:d7:b5:99:ab:31:55:59:d5:7f:6a:79:78:00:10: 76:ee:54:92:ed:04:18:c6:83:1a:50:23:37:6f:06: 29:19:04:41:42:f1:48:7b:5c:17:9e:6f:ed:b3:89: 32:44:f8:ec:3b:83:59:7d:86:23:0e:15:73:8b:c2: d0:a0:2f:e1:a2:f8:c4:69:e2:9c:d9:a7:fa:09:6b: 7e:cb:1e:74:f0:42:32:83:00:5f:c8:e5:29:10:df: 57:44:94:fb:7b:ca:f1:07:2b:da:a2:72:15:7c:f8: 75:6a:fd:1f:6a:f6:b0:52:cd:45:c9:12:db:92:9d: b9:05:25:09:08:d2:38:14:f5:03:b5:7a:fb:b0:6a: b3:25:ca:fe:f4:b3:03:11:44:cb:a5:90:e6:ce:e5: c3:47:88:27:74:fa:22:3f:79:f5:84:ab:1a:e1:3e: a9:9e:f5:65:c6:81:ab:6d:7e:02:2f:7e:ba:5d:d2: 4a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:FC:3E:50:DE:A5:42:9D:E4:80:78:46:B7:47:43:FE:EE:DD:D7:4D X509v3 Authority Key Identifier: keyid:2A:2A:BC:86:29:3A:3D:A3:60:2C:0D:FB:CE:D7:D9:92:4F:E5:A5:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:14:5c:6a:15:c1:9f:03:d2:5e:a6:b8:74:a0:43:3d:34:7b: d7:ae:75:38:52:15:7d:4f:02:24:57:45:42:63:68:fe:39:7a: a1:4e:e8:b1:8e:63:0b:be:c4:c0:77:1f:ab:ae:5d:2c:2a:d6: 58:bc:53:7d:69:7e:71:b5:b9:f8:01:b7:a7:48:5b:24:3b:96: 53:f9:fa:a1:aa:a4:23:cb:47:ce:69:93:de:5d:31:6c:92:cb: b5:1d:bd:54:e7:98:95:82:c2:7d:54:11:b1:c2:aa:be:8c:dd: 8b:e9:3e:1d:c0:60:23:45:c9:10:00:d6:6e:01:c0:73:c4:02: 9d:3a:fd:cb:15:06:1a:d8:fc:0c:89:e5:e3:72:17:cb:12:b7: 01:d1:57:b8:86:cb:2d:42:3a:82:18:cc:fe:41:72:ef:15:92: 02:1e:a2:79:d8:d6:20:7e:dc:32:32:d9:b0:d1:c0:c8:52:77: 84:ac:c7:e1:a7:6a:3a:b4:71:25:8f:93:9c:28:39:ac:2c:c1: 0e:7b:c4:d8:23:11:68:2d:21:7d:f6:d9:e0:84:19:e3:35:22: ed:aa:ec:5f:20:58:48:03:a5:5a:f7:4d:43:9a:c5:be:90:10: f5:a0:7a:93:d6:71:df:5d:50:a3:6e:5f:2e:02:46:93:28:f6: 8d:5c:d1:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL5vS4x2frSgPW6wUSKn+oir71MUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyQUJDODYyOTNBM0RBMzYwMkMwREZCQ0VEN0Q5OTI0 RkU1QTU4QjAeFw0yNTA4MDcwMTA1NTBaFw0yNTA4MTAwMjMwNTBaMDMxMTAvBgNV BAMTKEFGRkMzRTUwREVBNTQyOURFNDgwNzg0NkI3NDc0M0ZFRUVEREQ3NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSIrVGgf2hMGJSBcFLzXVmjOqd wJhLPY4LjsCDZtv/r47ZPwtO072c51TV7PFlNiJHv969Pcob66besWM9Or0/4lZR iWsnaHrju0DXtZmrMVVZ1X9qeXgAEHbuVJLtBBjGgxpQIzdvBikZBEFC8Uh7XBee b+2ziTJE+Ow7g1l9hiMOFXOLwtCgL+Gi+MRp4pzZp/oJa37LHnTwQjKDAF/I5SkQ 31dElPt7yvEHK9qichV8+HVq/R9q9rBSzUXJEtuSnbkFJQkI0jgU9QO1evuwarMl yv70swMRRMulkObO5cNHiCd0+iI/efWEqxrhPqme9WXGgattfgIvfrpd0kqdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr/w+UN6lQp3kgHhGt0dD/u7d100wHwYDVR0j BBgwFoAUKiq8hik6PaNgLA37ztfZkk/lpYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzUwYTY1MS0xYTFhLTQ1MDEtYThiYy05NTkxZTExMDlhMjcvMC8yQTJBQkM4NjI5 M0EzREEzNjAyQzBERkJDRUQ3RDk5MjRGRTVBNThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkEyQUJDODYyOTNBM0RBMzYwMkMwREZCQ0VEN0Q5OTI0RkU1 QTU4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc1MGE2NTEtMWExYS00NTAxLWE4 YmMtOTU5MWUxMTA5YTI3LzAvMkEyQUJDODYyOTNBM0RBMzYwMkMwREZCQ0VEN0Q5 OTI0RkU1QTU4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACEUXGoVwZ8D0l6muHSgQz00e9eudThSFX1P AiRXRUJjaP45eqFO6LGOYwu+xMB3H6uuXSwq1li8U31pfnG1ufgBt6dIWyQ7llP5 +qGqpCPLR85pk95dMWySy7UdvVTnmJWCwn1UEbHCqr6M3YvpPh3AYCNFyRAA1m4B wHPEAp06/csVBhrY/AyJ5eNyF8sStwHRV7iGyy1COoIYzP5Bcu8VkgIeonnY1iB+ 3DIy2bDRwMhSd4Ssx+Gnajq0cSWPk5woOawswQ57xNgjEWgtIX322eCEGeM1Iu2q 7F8gWEgDpVr3TUOaxb6QEPWgepPWcd9dUKNuXy4CRpMo9o1c0TQ= -----END CERTIFICATE-----Generated at Thu Aug 7 03:29:39 2025 by rpki-client