$ rpki-client -vvf repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft File: 2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft (raw, json) Hash identifier: f7k+ZFtKBKR8KgSkNL0AjSkH53QxchydHfbmVsAXzdI= Subject key identifier: 9D:84:78:02:A6:20:A1:11:A8:77:83:3B:15:FA:34:C2:7C:4D:6A:EF Authority key identifier: 2B:15:30:AD:20:AC:1F:2F:7F:2E:A2:EB:AA:E7:07:D0:E1:28:A1:DC Certificate issuer: /CN=2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC Certificate serial: 6B5B32403775B6E0AB91BCE3CF246F473FB951E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft Manifest number: 0302 Signing time: Sun 15 Jun 2025 07:22:16 +0000 Manifest this update: Sun 15 Jun 2025 07:17:16 +0000 Manifest next update: Wed 18 Jun 2025 13:11:16 +0000 Files and hashes: 1: 3130332e3137322e31372e302f32342d3234203d3e20313432333831.roa (hash: DVIrghrEW7VwPIX0cx9PZe/9iJL/OmwC/t6EzXjRAD8=) 2: 2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl (hash: jIbilzYfNkdxH7pMScyhenBy4WplSJfw6sp7WPaKjQ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:5b:32:40:37:75:b6:e0:ab:91:bc:e3:cf:24:6f:47:3f:b9:51:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC Validity Not Before: Jun 15 07:17:16 2025 GMT Not After : Jun 18 13:11:16 2025 GMT Subject: CN=9D847802A620A111A877833B15FA34C27C4D6AEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b4:e3:a1:06:fa:8e:f7:7e:9a:c7:8a:c2:48: 77:0d:25:7d:5a:d7:a3:9a:5d:d0:77:63:90:28:fd: 43:ae:e8:21:9f:89:04:7b:96:29:3e:b3:e5:80:01: 55:2c:c0:56:3c:4b:9d:06:fe:ca:d0:16:24:ce:80: 47:29:31:a9:e6:12:89:aa:12:80:da:44:e8:b7:61: f5:e0:33:0c:cc:32:47:85:7c:36:03:60:2f:61:c8: 23:7d:e3:5a:4c:e6:26:b8:57:0d:14:45:4d:f3:79: e5:af:cf:5c:fe:b2:96:6f:fd:53:97:5b:49:9b:27: 94:8f:d9:16:6b:96:d2:1b:79:9e:02:23:4d:94:cb: 46:f8:6f:e0:b2:0b:d7:b7:ff:f5:e6:5c:e7:c1:a8: 5d:8d:32:48:cf:66:a2:1c:47:c9:15:65:a5:03:1a: aa:09:b2:34:43:a3:40:4b:12:8d:aa:11:b3:0c:b0: 62:16:47:ff:4a:39:9b:61:59:d6:10:d3:e2:b9:a0: 62:ee:49:2a:5a:f0:3f:1a:fa:34:69:fc:04:39:cd: 80:be:96:59:9d:f8:25:13:e3:e4:c0:1a:b6:14:40: 96:69:57:b6:7a:50:ae:cd:97:12:1a:bd:c5:d7:0f: f9:96:b0:4a:99:d5:dc:7f:0b:42:6e:40:8f:15:ca: e3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:84:78:02:A6:20:A1:11:A8:77:83:3B:15:FA:34:C2:7C:4D:6A:EF X509v3 Authority Key Identifier: keyid:2B:15:30:AD:20:AC:1F:2F:7F:2E:A2:EB:AA:E7:07:D0:E1:28:A1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:ed:b1:88:c2:09:06:e9:eb:63:e9:63:74:9b:1e:1a:49:b1: e8:e1:e0:4d:f4:2a:ab:84:e3:20:3c:e5:f6:9d:8f:28:04:e1: fd:bb:63:3b:e5:bf:34:ca:5f:c1:57:4c:b2:9e:81:7f:36:16: 09:eb:9a:f0:77:7a:86:81:ca:4d:e0:a9:65:46:27:f5:63:05: 21:8b:57:8a:07:d1:05:19:02:3b:ec:53:57:0c:77:28:1a:64: 0e:61:a6:b7:06:f8:4a:7f:94:c1:98:04:c4:67:90:e6:29:3e: b6:68:e0:b7:3b:4e:a1:25:76:51:86:62:61:2f:27:0c:a9:87: 9b:9a:08:70:9d:45:85:48:93:3f:43:dc:b5:33:32:4f:f0:95: 6c:c0:73:de:ea:3a:d7:8e:1b:f2:34:e7:7f:81:4c:84:76:55: b0:22:35:75:a1:a8:18:d0:97:cf:b8:4f:25:55:19:b7:25:06: 7e:61:51:46:64:38:95:65:be:0d:f3:89:21:ee:3d:9d:e9:4f: f6:2c:0f:e8:57:bb:98:79:45:35:e5:53:47:e8:86:ca:3d:41: 38:4e:ff:97:52:c2:b1:de:e5:a1:4c:0b:4f:33:22:4f:6a:dd: 45:fb:75:1e:b9:d5:e7:6f:e0:28:b8:02:17:ba:17:3a:ef:e3: 1b:7b:e4:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa1syQDd1tuCrkbzjzyRvRz+5UeAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3RDBF MTI4QTFEQzAeFw0yNTA2MTUwNzE3MTZaFw0yNTA2MTgxMzExMTZaMDMxMTAvBgNV BAMTKDlEODQ3ODAyQTYyMEExMTFBODc3ODMzQjE1RkEzNEMyN0M0RDZBRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCutOOhBvqO936ax4rCSHcNJX1a 16OaXdB3Y5Ao/UOu6CGfiQR7lik+s+WAAVUswFY8S50G/srQFiTOgEcpManmEomq EoDaROi3YfXgMwzMMkeFfDYDYC9hyCN941pM5ia4Vw0URU3zeeWvz1z+spZv/VOX W0mbJ5SP2RZrltIbeZ4CI02Uy0b4b+CyC9e3//XmXOfBqF2NMkjPZqIcR8kVZaUD GqoJsjRDo0BLEo2qEbMMsGIWR/9KOZthWdYQ0+K5oGLuSSpa8D8a+jRp/AQ5zYC+ llmd+CUT4+TAGrYUQJZpV7Z6UK7NlxIavcXXD/mWsEqZ1dx/C0JuQI8VyuN7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnYR4AqYgoRGod4M7Ffo0wnxNau8wHwYDVR0j BBgwFoAUKxUwrSCsHy9/LqLrqucH0OEoodwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NjY4ODU0YS0zZjI0LTQwYjEtODBjZC1lNjM2YWE3ZThiMWMvMC8yQjE1MzBBRDIw QUMxRjJGN0YyRUEyRUJBQUU3MDdEMEUxMjhBMURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3RDBFMTI4 QTFEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjY2ODg1NGEtM2YyNC00MGIxLTgw Y2QtZTYzNmFhN2U4YjFjLzAvMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3 RDBFMTI4QTFEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMXtsYjCCQbp62PpY3SbHhpJsejh4E30KquE 4yA85fadjygE4f27YzvlvzTKX8FXTLKegX82FgnrmvB3eoaByk3gqWVGJ/VjBSGL V4oH0QUZAjvsU1cMdygaZA5hprcG+Ep/lMGYBMRnkOYpPrZo4Lc7TqEldlGGYmEv Jwyph5uaCHCdRYVIkz9D3LUzMk/wlWzAc97qOteOG/I053+BTIR2VbAiNXWhqBjQ l8+4TyVVGbclBn5hUUZkOJVlvg3ziSHuPZ3pT/YsD+hXu5h5RTXlU0fohso9QThO /5dSwrHe5aFMC08zIk9q3UX7dR651edv4Ci4Ahe6Fzrv4xt75Jw= -----END CERTIFICATE-----Generated at Sun Jun 15 15:20:55 2025 by rpki-client