$ rpki-client -vvf repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft File: 2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft (raw, json) Hash identifier: IlyxZvTcFYh8hMx/TpZyZFte/YsBFZMf8XunF3efvjo= Subject key identifier: 24:FA:06:11:43:76:CC:90:3D:9E:D4:05:5F:D8:AE:C3:41:B4:AD:C2 Authority key identifier: 2D:23:C6:29:ED:95:6F:17:36:B7:DA:EC:CD:2A:AF:31:C4:F1:7C:26 Certificate issuer: /CN=2D23C629ED956F1736B7DAECCD2AAF31C4F17C26 Certificate serial: 1B4CCBD3F992DE54991073B5EDF779EC360EE469 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft Manifest number: 01D9 Signing time: Wed 06 Aug 2025 07:30:58 +0000 Manifest this update: Wed 06 Aug 2025 07:25:58 +0000 Manifest next update: Sat 09 Aug 2025 18:15:58 +0000 Files and hashes: 1: 3130332e3133382e31302e302f32342d3234203d3e20313338383335.roa (hash: G/xb7tdZk9UZaq4hfvb/m2IU6lYeHr5mMwL3BOuVZMU=) 2: 2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl (hash: vdPKlB4lJLeGiphgvucw/sIAMBGn39iSjKeznohJfkA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 18:15:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:4c:cb:d3:f9:92:de:54:99:10:73:b5:ed:f7:79:ec:36:0e:e4:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D23C629ED956F1736B7DAECCD2AAF31C4F17C26 Validity Not Before: Aug 6 07:25:58 2025 GMT Not After : Aug 9 18:15:58 2025 GMT Subject: CN=24FA06114376CC903D9ED4055FD8AEC341B4ADC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bd:51:a1:c2:88:f5:4f:16:23:b3:0c:e1:63: ff:be:64:e8:7d:96:da:d2:6a:5b:da:c3:78:d5:03: 9b:61:e2:11:30:c1:d4:9f:8f:55:54:59:4c:09:cc: 61:88:af:7a:ac:6e:05:72:75:61:06:6b:78:58:3e: 45:46:0c:0b:f1:be:18:2c:03:1f:76:71:6a:d0:c3: a1:0c:7e:09:f9:4c:3f:b3:c9:7f:3e:5e:c0:a5:2e: 50:49:ec:58:21:33:a3:9a:23:c1:cc:2e:22:35:cd: 87:76:e7:2e:e9:07:39:52:cb:81:c4:28:ee:e7:25: e9:72:42:6f:04:02:7a:d7:e1:da:9a:92:a5:3d:01: ac:82:02:e9:a4:52:1e:f4:3f:01:ae:38:a4:d4:38: 8d:8c:97:d3:7e:dc:fb:38:38:24:3a:19:77:20:cf: ed:aa:da:3d:e4:aa:f8:8f:4d:2a:51:79:f8:e6:f6: f5:be:61:10:22:4a:20:62:4e:7d:6b:b7:39:eb:8f: f1:08:d1:d7:9a:2e:94:18:60:e0:80:8f:d6:df:16: bc:d5:23:65:09:36:12:7e:a5:02:34:6e:30:e7:21: 77:c9:bf:06:f5:c6:0e:ee:06:c8:37:a7:67:4a:e2: 89:ac:64:d7:ea:f8:af:13:9f:59:fa:d6:7b:e2:9d: 51:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:FA:06:11:43:76:CC:90:3D:9E:D4:05:5F:D8:AE:C3:41:B4:AD:C2 X509v3 Authority Key Identifier: keyid:2D:23:C6:29:ED:95:6F:17:36:B7:DA:EC:CD:2A:AF:31:C4:F1:7C:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:5c:2e:23:0e:f3:63:ad:fe:ff:fe:2a:5a:05:b3:53:15:86: a4:39:bc:a7:19:91:12:5c:7a:37:fb:3d:e6:a4:3e:6a:bc:a5: 16:12:21:3b:14:19:20:14:e6:ac:1b:cf:68:48:fd:45:f0:17: 3e:b8:e2:11:81:6c:4c:34:84:f8:d3:da:5b:15:67:92:38:c2: 34:0e:17:eb:94:37:f0:68:ab:99:2b:90:ec:a9:66:db:d0:a9: 1b:2a:40:72:eb:d8:d4:23:96:34:93:86:f3:95:61:5b:ac:27: b7:e7:9f:42:d1:1b:91:14:42:d3:51:2d:e8:ad:58:8a:50:ec: ea:9d:09:b0:be:13:6c:8b:12:40:2a:dd:34:c6:5c:eb:8a:3d: a2:b1:38:60:36:f9:07:a0:07:bc:d7:04:63:01:48:f1:3e:3f: a2:df:e7:e9:8d:9f:b5:1d:d0:9f:2d:f1:b3:e5:0c:de:89:e5: 4c:e5:54:52:62:bd:2f:cd:fb:30:44:e8:97:d9:41:35:7b:6f: bd:50:97:e0:04:ad:e6:40:8d:7f:1c:bc:39:25:b2:55:44:a2: eb:ad:7b:d5:51:fd:7d:d1:ad:23:98:3e:e7:1c:ce:b0:86:21: 20:58:8c:d4:ab:31:0f:70:0f:d9:a9:b2:f1:17:07:ec:dd:e9: cd:52:9f:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG0zL0/mS3lSZEHO17fd57DYO5GkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFGMzFD NEYxN0MyNjAeFw0yNTA4MDYwNzI1NThaFw0yNTA4MDkxODE1NThaMDMxMTAvBgNV BAMTKDI0RkEwNjExNDM3NkNDOTAzRDlFRDQwNTVGRDhBRUMzNDFCNEFEQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCvVGhwoj1TxYjswzhY/++ZOh9 ltrSalvaw3jVA5th4hEwwdSfj1VUWUwJzGGIr3qsbgVydWEGa3hYPkVGDAvxvhgs Ax92cWrQw6EMfgn5TD+zyX8+XsClLlBJ7FghM6OaI8HMLiI1zYd25y7pBzlSy4HE KO7nJelyQm8EAnrX4dqakqU9AayCAumkUh70PwGuOKTUOI2Ml9N+3Ps4OCQ6GXcg z+2q2j3kqviPTSpRefjm9vW+YRAiSiBiTn1rtznrj/EI0deaLpQYYOCAj9bfFrzV I2UJNhJ+pQI0bjDnIXfJvwb1xg7uBsg3p2dK4omsZNfq+K8Tn1n61nvinVFhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJPoGEUN2zJA9ntQFX9iuw0G0rcIwHwYDVR0j BBgwFoAULSPGKe2Vbxc2t9rszSqvMcTxfCYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODY4Y2YyMi1kMDI5LTQ1ZTItOWUyMS1kOTg5MmQzYWY3YTYvMC8yRDIzQzYyOUVE OTU2RjE3MzZCN0RBRUNDRDJBQUYzMUM0RjE3QzI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFGMzFDNEYx N0MyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDg2OGNmMjItZDAyOS00NWUyLTll MjEtZDk4OTJkM2FmN2E2LzAvMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFG MzFDNEYxN0MyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJlcLiMO82Ot/v/+KloFs1MVhqQ5vKcZkRJc ejf7PeakPmq8pRYSITsUGSAU5qwbz2hI/UXwFz644hGBbEw0hPjT2lsVZ5I4wjQO F+uUN/Boq5krkOypZtvQqRsqQHLr2NQjljSThvOVYVusJ7fnn0LRG5EUQtNRLeit WIpQ7OqdCbC+E2yLEkAq3TTGXOuKPaKxOGA2+QegB7zXBGMBSPE+P6Lf5+mNn7Ud 0J8t8bPlDN6J5UzlVFJivS/N+zBE6JfZQTV7b71Ql+AEreZAjX8cvDklslVEouut e9VR/X3RrSOYPucczrCGISBYjNSrMQ9wD9mpsvEXB+zd6c1Sn3U= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:59 2025 by rpki-client