$ rpki-client -vvf repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft File: 2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft (raw, json) Hash identifier: FOFIfnsTQbKpdgYxwSlkeaCebGRmKeP5n8tbj+p0d4I= Subject key identifier: A6:DE:21:34:14:FC:43:7C:54:2E:FB:25:F2:EC:5B:F6:30:43:7B:7F Authority key identifier: 2A:2A:BC:86:29:3A:3D:A3:60:2C:0D:FB:CE:D7:D9:92:4F:E5:A5:8B Certificate issuer: /CN=2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B Certificate serial: 494FBB14F40ABC6BF47E578071414C688F7AE72F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft Manifest number: 04E1 Signing time: Sun 15 Jun 2025 13:10:51 +0000 Manifest this update: Sun 15 Jun 2025 13:05:51 +0000 Manifest next update: Wed 18 Jun 2025 23:43:51 +0000 Files and hashes: 1: 2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.crl (hash: FOgQ9QS1bd7kyYmXqk0LIG6ufSRFB2pJfxqPID8l20c=) 2: 3130332e3134352e3234322e302f32332d3234203d3e20313339343534.roa (hash: D2W67nt589wKu+2Bfg+V0s/E2/ZjISUp5pz9rbCWuK0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.crl rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:4f:bb:14:f4:0a:bc:6b:f4:7e:57:80:71:41:4c:68:8f:7a:e7:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B Validity Not Before: Jun 15 13:05:51 2025 GMT Not After : Jun 18 23:43:51 2025 GMT Subject: CN=A6DE213414FC437C542EFB25F2EC5BF630437B7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c7:f5:7f:10:c2:9e:9e:33:c6:e9:62:a8:93: a7:46:6c:b8:a6:2c:3a:58:39:c1:bd:85:b3:f3:45: 81:94:ef:a9:09:82:98:f1:ec:c1:de:49:53:19:b4: 20:6b:9b:05:1f:0d:94:43:0b:26:93:53:c5:ba:91: d7:0e:83:b4:3b:e5:3d:a3:f4:db:7a:1c:ea:ac:7a: b4:7f:02:8a:0d:51:0f:11:d3:4e:56:79:47:ce:f6: e2:d0:40:d4:6e:2f:7f:1e:0e:7d:e7:47:5d:60:17: b6:9f:a2:9b:f8:06:0c:ad:5d:c9:19:a9:bf:6a:f3: e7:6b:80:b6:41:16:eb:03:f7:e1:67:78:f1:c3:f9: 19:54:f9:86:64:8c:36:2c:1b:f2:7e:2d:31:07:85: e8:01:a5:ca:1c:69:23:6e:c4:4b:ae:bd:3a:03:40: 3e:24:e4:13:15:41:bd:47:16:0a:74:ac:7a:62:bb: 57:c6:ee:54:6c:08:77:f7:3b:e2:a3:bb:9e:aa:cc: 5e:f8:8d:dd:c2:54:e3:15:7f:1c:84:8c:2b:c8:b5: be:07:fb:e3:f6:f7:6d:20:7b:0b:30:90:10:7d:64: 0b:3b:e5:ca:db:30:b6:f2:c1:55:a5:f5:c2:80:5c: d0:26:3f:36:93:dd:fe:84:de:67:da:f8:c2:75:c5: 1d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:DE:21:34:14:FC:43:7C:54:2E:FB:25:F2:EC:5B:F6:30:43:7B:7F X509v3 Authority Key Identifier: keyid:2A:2A:BC:86:29:3A:3D:A3:60:2C:0D:FB:CE:D7:D9:92:4F:E5:A5:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:67:4a:42:34:86:37:2a:69:92:de:aa:41:0c:a9:0c:de:fc: ff:d5:13:c6:c5:a4:ad:3a:88:8e:13:f7:37:7f:8e:e6:63:f8: 21:f8:1c:10:25:95:90:a0:67:ea:fc:6c:ed:ee:2e:db:cd:b5: cd:15:c3:76:7f:36:18:b9:2f:51:44:67:38:cd:8b:f1:de:0b: 2d:2b:30:0e:eb:bb:6b:67:a4:4b:35:f5:02:24:91:3f:ea:c1: 74:91:e3:44:55:3e:b8:f7:f3:c3:05:be:d9:b4:ac:11:2b:c9: 5a:60:64:a6:20:fb:01:3d:1a:37:54:84:ad:0c:c1:c4:9b:dc: 23:83:f5:64:ad:d2:f1:f7:7e:5b:7a:8b:60:81:be:54:cd:77: ee:79:22:57:9b:73:fa:cc:8b:21:d6:92:cc:9e:2d:21:7f:09: df:74:8f:6c:0b:10:ab:f9:a3:32:7b:e4:e7:79:a1:bc:33:f3: 80:de:67:b7:05:a3:41:84:37:65:e4:a8:da:97:ed:ea:cf:a3: de:d2:be:80:0a:6b:f2:d5:bd:c8:69:12:74:8c:a0:eb:35:d2: 9c:ce:72:5b:25:ff:fb:a9:d2:6b:ec:3d:15:36:a8:a5:c2:a8: d0:9f:13:dc:74:ad:c6:a2:d0:c4:97:89:5a:0f:26:a6:42:4f: f5:80:93:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSU+7FPQKvGv0fleAcUFMaI965y8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyQUJDODYyOTNBM0RBMzYwMkMwREZCQ0VEN0Q5OTI0 RkU1QTU4QjAeFw0yNTA2MTUxMzA1NTFaFw0yNTA2MTgyMzQzNTFaMDMxMTAvBgNV BAMTKEE2REUyMTM0MTRGQzQzN0M1NDJFRkIyNUYyRUM1QkY2MzA0MzdCN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxx/V/EMKenjPG6WKok6dGbLim LDpYOcG9hbPzRYGU76kJgpjx7MHeSVMZtCBrmwUfDZRDCyaTU8W6kdcOg7Q75T2j 9Nt6HOqserR/AooNUQ8R005WeUfO9uLQQNRuL38eDn3nR11gF7afopv4BgytXckZ qb9q8+drgLZBFusD9+FnePHD+RlU+YZkjDYsG/J+LTEHhegBpcocaSNuxEuuvToD QD4k5BMVQb1HFgp0rHpiu1fG7lRsCHf3O+Kju56qzF74jd3CVOMVfxyEjCvItb4H ++P2920gewswkBB9ZAs75crbMLbywVWl9cKAXNAmPzaT3f6E3mfa+MJ1xR33AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpt4hNBT8Q3xULvsl8uxb9jBDe38wHwYDVR0j BBgwFoAUKiq8hik6PaNgLA37ztfZkk/lpYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzUwYTY1MS0xYTFhLTQ1MDEtYThiYy05NTkxZTExMDlhMjcvMC8yQTJBQkM4NjI5 M0EzREEzNjAyQzBERkJDRUQ3RDk5MjRGRTVBNThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkEyQUJDODYyOTNBM0RBMzYwMkMwREZCQ0VEN0Q5OTI0RkU1 QTU4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc1MGE2NTEtMWExYS00NTAxLWE4 YmMtOTU5MWUxMTA5YTI3LzAvMkEyQUJDODYyOTNBM0RBMzYwMkMwREZCQ0VEN0Q5 OTI0RkU1QTU4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABVnSkI0hjcqaZLeqkEMqQze/P/VE8bFpK06 iI4T9zd/juZj+CH4HBAllZCgZ+r8bO3uLtvNtc0Vw3Z/Nhi5L1FEZzjNi/HeCy0r MA7ru2tnpEs19QIkkT/qwXSR40RVPrj388MFvtm0rBEryVpgZKYg+wE9GjdUhK0M wcSb3COD9WSt0vH3flt6i2CBvlTNd+55Ilebc/rMiyHWksyeLSF/Cd90j2wLEKv5 ozJ75Od5obwz84DeZ7cFo0GEN2XkqNqX7erPo97SvoAKa/LVvchpEnSMoOs10pzO clsl//up0mvsPRU2qKXCqNCfE9x0rcai0MSXiVoPJqZCT/WAkxc= -----END CERTIFICATE-----Generated at Mon Jun 16 00:44:21 2025 by rpki-client