$ rpki-client -vvf repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft File: 2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft (raw, json) Hash identifier: SnE3+MWJLriFjRlecdkG/pO1T8G1YJs+khH0YlsvUiI= Subject key identifier: D9:3F:83:65:71:89:B0:98:E8:E8:B7:FB:2E:07:43:C4:64:1C:A8:E9 Authority key identifier: 2D:EC:7D:B2:A5:C9:62:CF:A5:3D:57:8D:EA:7D:C8:43:83:A6:33:D4 Certificate issuer: /CN=2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4 Certificate serial: 4EF2BEABAD048A70F8DBF049FDA5FEA39ACB0D0B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft Manifest number: 04CD Signing time: Sat 09 Aug 2025 18:21:24 +0000 Manifest this update: Sat 09 Aug 2025 18:16:24 +0000 Manifest next update: Tue 12 Aug 2025 19:49:24 +0000 Files and hashes: 1: 323430343a613463303a666163653a3a2f34382d3438203d3e20313338383232.roa (hash: 8BcFapwe+X3BcAcYyUi0aKlB+9OoLNEUNoO57IgvOug=) 2: 323430343a613463303a3a2f33322d3438203d3e20313338383232.roa (hash: jd8RzIV4pb6xOSx8M2iJByCvMa7m6mddhFLRaUaFvoI=) 3: 3130332e3133372e33382e302f32332d3234203d3e20313338383232.roa (hash: mA/rP0hr8/EieVP2HKsGbfcjdkP2Kd8or4Jc67/Y7I0=) 4: 2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.crl (hash: mmcIW68aJUiSxsEznS4oDs2ewFvu4VawRpP/g3NpLJo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.crl rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 19:49:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:f2:be:ab:ad:04:8a:70:f8:db:f0:49:fd:a5:fe:a3:9a:cb:0d:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4 Validity Not Before: Aug 9 18:16:24 2025 GMT Not After : Aug 12 19:49:24 2025 GMT Subject: CN=D93F83657189B098E8E8B7FB2E0743C4641CA8E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:93:b6:34:d3:90:9c:31:d7:c4:9f:5d:35:6c: 81:5c:40:b8:aa:5b:ca:ae:ca:36:94:07:eb:f4:f4: bc:6a:f7:ec:58:2e:a4:42:39:89:25:2b:55:61:4c: 38:6d:80:dd:93:eb:fc:23:68:3b:1f:bf:a7:5d:c6: ce:19:7b:17:0a:12:45:fc:09:3b:d6:60:d4:fa:07: 7f:03:ac:27:db:a9:52:49:21:7b:e0:ee:be:73:96: 32:aa:16:1a:7a:72:b9:35:86:81:3c:71:23:4a:26: 6d:ec:49:60:1e:d3:44:83:13:2c:b9:31:92:8e:f7: 59:22:bf:70:15:8d:42:10:1f:f9:bb:87:7e:e6:f3: 22:b9:96:a1:91:9e:b7:84:de:bf:fb:37:ff:73:e6: 48:ad:fd:a0:64:da:07:ad:9f:46:ae:ce:98:d9:2b: d1:ad:34:c2:81:5b:7a:3a:ae:9a:2c:85:ef:46:c4: 6b:ad:3b:82:30:e1:66:47:25:9c:af:df:e0:95:a2: 23:b9:ec:30:a5:b4:13:56:d1:13:1e:37:04:5d:e1: 6c:44:ab:56:c2:97:19:ae:63:1b:b5:a3:a2:af:cc: 21:58:fd:fb:27:ce:df:c9:30:63:d5:12:3a:ce:37: a3:b8:4a:60:43:a2:16:13:fc:58:98:7e:e0:26:75: 71:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:3F:83:65:71:89:B0:98:E8:E8:B7:FB:2E:07:43:C4:64:1C:A8:E9 X509v3 Authority Key Identifier: keyid:2D:EC:7D:B2:A5:C9:62:CF:A5:3D:57:8D:EA:7D:C8:43:83:A6:33:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:e7:74:c7:15:66:01:5e:e0:5c:4c:92:4e:ed:a9:40:fe:b0: df:e9:ce:0c:b9:21:e2:72:2d:7d:ce:29:19:0a:45:97:4b:12: b3:69:59:bf:ea:36:d3:96:a7:ed:90:bc:eb:9f:bb:70:5f:93: 3c:95:ff:ed:4b:e1:f2:6b:29:1b:96:7b:25:b2:86:56:f9:b6: 4e:58:8b:3f:25:63:4b:fc:36:90:e1:3c:16:e1:d5:2b:5a:a1: 3c:06:09:7e:50:19:0d:58:d8:2b:1f:4f:a3:5d:48:c4:e9:39: f0:45:92:1f:de:b0:6e:0a:a8:69:17:13:4c:2a:2d:85:d6:f6: 89:fc:ae:10:fe:ca:82:f6:ec:b4:0a:30:cb:5c:84:22:6d:ee: e7:99:ba:c8:ca:93:7c:67:c4:01:6f:bd:80:ff:33:d8:5f:f2: 39:85:5e:bc:2f:37:9e:67:4d:cd:69:a6:a2:d7:30:3e:38:83: af:de:6c:69:53:9e:6b:32:7e:c8:3b:6f:38:a1:a9:e9:72:d7: bb:f9:94:27:40:8f:94:a1:37:53:92:ae:c6:bb:3a:06:f6:f9: 84:32:a9:86:2c:c6:92:dc:e2:67:81:53:ca:cf:9a:4b:1a:e9: 22:64:83:dc:9e:f0:c6:37:67:17:ec:0e:02:25:22:47:4c:55: 4b:bf:96:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTvK+q60EinD42/BJ/aX+o5rLDQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRFQzdEQjJBNUM5NjJDRkE1M0Q1NzhERUE3REM4NDM4 M0E2MzNENDAeFw0yNTA4MDkxODE2MjRaFw0yNTA4MTIxOTQ5MjRaMDMxMTAvBgNV BAMTKEQ5M0Y4MzY1NzE4OUIwOThFOEU4QjdGQjJFMDc0M0M0NjQxQ0E4RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEk7Y005CcMdfEn101bIFcQLiq W8quyjaUB+v09Lxq9+xYLqRCOYklK1VhTDhtgN2T6/wjaDsfv6ddxs4ZexcKEkX8 CTvWYNT6B38DrCfbqVJJIXvg7r5zljKqFhp6crk1hoE8cSNKJm3sSWAe00SDEyy5 MZKO91kiv3AVjUIQH/m7h37m8yK5lqGRnreE3r/7N/9z5kit/aBk2getn0auzpjZ K9GtNMKBW3o6rposhe9GxGutO4Iw4WZHJZyv3+CVoiO57DCltBNW0RMeNwRd4WxE q1bClxmuYxu1o6KvzCFY/fsnzt/JMGPVEjrON6O4SmBDohYT/FiYfuAmdXE7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2T+DZXGJsJjo6Lf7LgdDxGQcqOkwHwYDVR0j BBgwFoAULex9sqXJYs+lPVeN6n3IQ4OmM9QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l M2JiZjFkYS1lMzE3LTQ4ZWYtYWQ2ZC1mZThhOGJmMDg0MDAvMC8yREVDN0RCMkE1 Qzk2MkNGQTUzRDU3OERFQTdEQzg0MzgzQTYzM0Q0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkRFQzdEQjJBNUM5NjJDRkE1M0Q1NzhERUE3REM4NDM4M0E2 MzNENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTNiYmYxZGEtZTMxNy00OGVmLWFk NmQtZmU4YThiZjA4NDAwLzAvMkRFQzdEQjJBNUM5NjJDRkE1M0Q1NzhERUE3REM4 NDM4M0E2MzNENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC/ndMcVZgFe4FxMkk7tqUD+sN/pzgy5IeJy LX3OKRkKRZdLErNpWb/qNtOWp+2QvOufu3BfkzyV/+1L4fJrKRuWeyWyhlb5tk5Y iz8lY0v8NpDhPBbh1StaoTwGCX5QGQ1Y2CsfT6NdSMTpOfBFkh/esG4KqGkXE0wq LYXW9on8rhD+yoL27LQKMMtchCJt7ueZusjKk3xnxAFvvYD/M9hf8jmFXrwvN55n Tc1ppqLXMD44g6/ebGlTnmsyfsg7bzihqely17v5lCdAj5ShN1OSrsa7Ogb2+YQy qYYsxpLc4meBU8rPmksa6SJkg9ye8MY3ZxfsDgIlIkdMVUu/lnQ= -----END CERTIFICATE-----Generated at Sun Aug 10 18:13:24 2025 by rpki-client