$ rpki-client -vvf repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft File: 2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft (raw, json) Hash identifier: 64c73/tPAUb3yxx2xZ0Kss+vPC2wEwuIyoRivj03fn8= Subject key identifier: 93:42:DB:25:81:51:F7:34:2D:93:66:DE:8C:70:C4:C9:7A:C7:2E:B5 Authority key identifier: 2B:15:30:AD:20:AC:1F:2F:7F:2E:A2:EB:AA:E7:07:D0:E1:28:A1:DC Certificate issuer: /CN=2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC Certificate serial: 362B145EC21328026FF308D91E30060A5A420B7C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft Manifest number: 0319 Signing time: Tue 05 Aug 2025 01:22:23 +0000 Manifest this update: Tue 05 Aug 2025 01:17:23 +0000 Manifest next update: Fri 08 Aug 2025 08:32:23 +0000 Files and hashes: 1: 2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl (hash: oNUFsVAa4IKtj4EqF5KIy4qsS/bS+wljpVtGyMF6wUU=) 2: 3130332e3137322e31372e302f32342d3234203d3e20313432333831.roa (hash: DVIrghrEW7VwPIX0cx9PZe/9iJL/OmwC/t6EzXjRAD8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 08:32:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:2b:14:5e:c2:13:28:02:6f:f3:08:d9:1e:30:06:0a:5a:42:0b:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC Validity Not Before: Aug 5 01:17:23 2025 GMT Not After : Aug 8 08:32:23 2025 GMT Subject: CN=9342DB258151F7342D9366DE8C70C4C97AC72EB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:81:c4:3f:81:00:4c:f2:2b:8e:b9:e3:08:3a: 75:cd:c1:7c:24:ba:bc:46:5d:8e:c4:97:ab:74:01: 34:2c:07:6f:00:0a:51:40:55:da:5b:47:77:a7:45: a1:b2:19:a8:38:98:b7:ad:4d:30:61:f8:5d:12:b9: c9:61:04:1e:43:a0:53:e5:17:94:77:07:91:7d:11: 19:b7:4e:14:8c:12:1a:2f:26:8f:e5:a6:bb:5f:df: 6c:1e:05:91:a4:58:2b:e4:8a:45:3a:c4:59:2c:27: df:b5:c0:bf:33:bd:d0:64:15:82:da:ef:a9:77:d5: 5e:51:a0:61:8c:00:bd:da:23:b0:88:91:62:ea:4b: b9:1d:ac:02:1c:c2:96:19:f7:ba:27:10:35:a9:84: f6:42:32:4d:d4:a3:86:69:8f:21:cb:ea:0f:45:58: 1e:f4:4d:c0:c3:c0:40:83:0f:87:2d:74:a9:cf:5d: 4f:1f:3b:3c:de:b6:dc:2a:51:4f:50:54:72:20:d7: ba:03:c5:a9:df:5c:9e:7d:43:2f:d1:de:27:11:c6: ec:26:45:3b:a1:10:b3:6c:9f:6c:31:b5:75:31:1b: f3:bf:bf:67:2b:ff:7c:91:4e:7c:ee:f6:de:3c:c0: 31:8c:3c:97:61:42:9b:41:6c:a7:a1:d5:d3:fe:ea: f1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:42:DB:25:81:51:F7:34:2D:93:66:DE:8C:70:C4:C9:7A:C7:2E:B5 X509v3 Authority Key Identifier: keyid:2B:15:30:AD:20:AC:1F:2F:7F:2E:A2:EB:AA:E7:07:D0:E1:28:A1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:fe:80:42:19:29:d1:e3:ec:ff:c7:a5:29:f2:53:d6:0e:76: 88:e9:2c:09:39:93:6d:2c:96:ab:a3:7c:5e:7d:cb:b7:4e:72: 60:bd:c5:b9:5f:38:e8:80:cf:60:40:28:94:57:e8:2f:71:27: c1:5c:f2:b9:9f:02:6f:e9:3e:42:14:05:59:f2:b9:b2:b0:72: e4:52:d2:8d:fa:b5:a8:7d:f1:70:b1:ed:f4:42:b1:d7:7e:e2: 64:7d:37:f0:af:31:82:ef:13:07:ca:c2:62:ad:80:6e:95:fe: 6e:3c:c3:36:a4:e3:aa:56:18:c2:77:9c:01:22:f1:6b:55:de: 92:9a:d5:b7:cc:a5:a6:2e:66:c2:e6:74:55:b7:ec:cf:df:84: 22:1f:22:f6:2d:06:b8:5d:0c:46:b6:2e:39:e1:88:73:b4:e6: f7:95:fb:2b:9e:a9:47:a5:8d:59:fa:a9:ae:74:87:2e:c6:ff: dd:3d:f6:b1:89:11:f2:2d:3b:6c:95:58:3f:51:3e:10:5e:40: 94:3b:03:29:8e:05:29:79:9a:2d:56:57:63:18:2a:14:26:72: 09:b0:7f:e5:47:8d:1b:bc:29:42:3a:e0:4f:d1:e4:a7:d8:f5: e1:d9:60:1d:38:61:c9:df:c5:45:3a:6b:de:55:5c:96:37:23: 16:51:09:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNisUXsITKAJv8wjZHjAGClpCC3wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3RDBF MTI4QTFEQzAeFw0yNTA4MDUwMTE3MjNaFw0yNTA4MDgwODMyMjNaMDMxMTAvBgNV BAMTKDkzNDJEQjI1ODE1MUY3MzQyRDkzNjZERThDNzBDNEM5N0FDNzJFQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCagcQ/gQBM8iuOueMIOnXNwXwk urxGXY7El6t0ATQsB28AClFAVdpbR3enRaGyGag4mLetTTBh+F0SuclhBB5DoFPl F5R3B5F9ERm3ThSMEhovJo/lprtf32weBZGkWCvkikU6xFksJ9+1wL8zvdBkFYLa 76l31V5RoGGMAL3aI7CIkWLqS7kdrAIcwpYZ97onEDWphPZCMk3Uo4ZpjyHL6g9F WB70TcDDwECDD4ctdKnPXU8fOzzettwqUU9QVHIg17oDxanfXJ59Qy/R3icRxuwm RTuhELNsn2wxtXUxG/O/v2cr/3yRTnzu9t48wDGMPJdhQptBbKeh1dP+6vGdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk0LbJYFR9zQtk2bejHDEyXrHLrUwHwYDVR0j BBgwFoAUKxUwrSCsHy9/LqLrqucH0OEoodwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NjY4ODU0YS0zZjI0LTQwYjEtODBjZC1lNjM2YWE3ZThiMWMvMC8yQjE1MzBBRDIw QUMxRjJGN0YyRUEyRUJBQUU3MDdEMEUxMjhBMURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3RDBFMTI4 QTFEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjY2ODg1NGEtM2YyNC00MGIxLTgw Y2QtZTYzNmFhN2U4YjFjLzAvMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3 RDBFMTI4QTFEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABP+gEIZKdHj7P/HpSnyU9YOdojpLAk5k20s lqujfF59y7dOcmC9xblfOOiAz2BAKJRX6C9xJ8Fc8rmfAm/pPkIUBVnyubKwcuRS 0o36tah98XCx7fRCsdd+4mR9N/CvMYLvEwfKwmKtgG6V/m48wzak46pWGMJ3nAEi 8WtV3pKa1bfMpaYuZsLmdFW37M/fhCIfIvYtBrhdDEa2LjnhiHO05veV+yueqUel jVn6qa50hy7G/9099rGJEfItO2yVWD9RPhBeQJQ7AymOBSl5mi1WV2MYKhQmcgmw f+VHjRu8KUI64E/R5KfY9eHZYB04YcnfxUU6a95VXJY3IxZRCZk= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:41 2025 by rpki-client