$ rpki-client -vvf repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft File: 2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft (raw, json) Hash identifier: npw3jdIMf7qoV8YVYYvEs+U9LbYWNImIFPimxI7eFWA= Subject key identifier: F9:34:AF:82:F0:16:67:B2:F4:1E:FB:E6:3A:E7:64:C9:15:60:47:D6 Authority key identifier: 2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10 Certificate issuer: /CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210 Certificate serial: 63B148BAC11CC76C0249EA649E9D024C25D3F110 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft Manifest number: CC Signing time: Fri 22 Aug 2025 03:43:38 +0000 Manifest this update: Fri 22 Aug 2025 03:38:38 +0000 Manifest next update: Mon 25 Aug 2025 13:12:38 +0000 Files and hashes: 1: 3136302e32322e36332e302f32342d3234203d3e20313439373138.roa (hash: FdD4yXGMsks45ng3y/QGMQ3cyOtlAzR9+CDLALaQ1/8=) 2: 3136302e32322e36322e302f32342d3234203d3e20313439373230.roa (hash: YoRi0wh2sw9GoYCOeEcjR9q///J9GRgGfI+RYp9E7Ao=) 3: 2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl (hash: 9lHpQxesvpudYm3yA7RwEEdeBxKChTIBBJuqgWkXBuA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 13:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:b1:48:ba:c1:1c:c7:6c:02:49:ea:64:9e:9d:02:4c:25:d3:f1:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210 Validity Not Before: Aug 22 03:38:38 2025 GMT Not After : Aug 25 13:12:38 2025 GMT Subject: CN=F934AF82F01667B2F41EFBE63AE764C9156047D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:26:db:f6:db:2d:c2:19:6c:d1:c8:85:aa:27: 6e:36:9b:e6:e1:1c:fd:0d:0c:74:c7:65:91:2a:cf: c0:0d:a4:51:7d:7a:10:36:7a:df:b1:2f:50:ba:fc: da:9d:18:d8:61:21:3b:e2:38:66:1f:91:3f:67:41: 06:1f:c9:08:75:bb:99:5c:40:d2:88:64:86:93:c8: d3:6d:0a:8c:3c:e3:a0:87:d6:25:c7:5f:d8:e6:a4: 59:89:db:7a:01:49:e1:6c:cb:13:93:82:b0:a7:6e: 94:98:3b:43:c1:88:1a:46:33:f0:d8:7b:86:ca:a4: fa:30:23:31:38:ae:af:22:63:68:69:93:c5:5d:06: 9a:2d:ed:d1:ef:d5:2d:bd:0a:59:39:0e:35:66:62: 90:92:06:98:c0:b7:d3:49:79:83:d7:19:41:18:3c: cf:86:41:80:1a:90:8f:b5:07:83:cd:22:f8:19:76: 26:1d:bd:39:98:4b:41:17:ce:35:50:f6:91:77:62: 63:07:60:02:a4:8b:a7:9a:1a:40:73:44:79:b0:d5: c4:ff:0f:4e:2d:f6:bd:83:78:1e:3a:43:5a:2c:67: 65:c9:37:51:43:15:18:95:24:55:8e:e3:9d:7f:e1: 5f:98:74:fa:e6:bb:cb:e3:e1:1b:dd:02:08:9a:ac: 2e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:34:AF:82:F0:16:67:B2:F4:1E:FB:E6:3A:E7:64:C9:15:60:47:D6 X509v3 Authority Key Identifier: keyid:2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:5f:55:0c:cb:5e:da:26:20:6e:1f:9d:3f:28:5b:de:5b:7f: 9d:a2:6d:e2:c0:6d:de:fc:8e:15:31:b3:23:4d:ec:89:b6:35: e5:c7:9b:44:fe:e3:6e:46:ad:77:9d:8a:5c:60:70:47:bf:08: 25:68:05:c8:15:b2:54:f6:5a:56:7d:93:19:c8:61:c3:1e:aa: 04:9a:ce:0f:c4:1a:55:6c:a7:82:14:26:45:5c:68:1b:7a:97: ea:0f:37:42:cd:67:4d:bb:9d:f6:15:c2:c5:15:e3:57:86:0b: d2:f0:a4:e0:96:d6:6d:cb:a3:8c:50:a2:32:dc:2f:3d:ba:94: f8:47:77:78:87:0d:d1:12:92:af:cf:e0:72:83:3d:2e:ee:5a: 78:0e:89:7b:c6:8b:a1:40:74:ca:b8:59:2a:c0:dd:80:ac:0c: 4b:f2:05:dc:a1:bd:db:63:02:35:e9:8f:78:62:db:ba:06:83: 9c:0f:ce:96:99:12:49:f4:9b:e8:3a:87:27:80:f7:97:c0:30: 9f:e6:8a:59:21:d1:65:e5:78:f9:2b:4a:16:c5:fb:5a:f7:20: 74:4f:d0:4f:6e:b3:4c:6d:7c:e9:c8:ed:dc:2c:5f:f3:c1:4d: ad:21:22:4b:6a:d9:7e:33:27:64:8a:b7:33:51:6a:22:4b:d7: 06:75:85:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY7FIusEcx2wCSepknp0CTCXT8RAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4Q0Iw RDU4MDIxMDAeFw0yNTA4MjIwMzM4MzhaFw0yNTA4MjUxMzEyMzhaMDMxMTAvBgNV BAMTKEY5MzRBRjgyRjAxNjY3QjJGNDFFRkJFNjNBRTc2NEM5MTU2MDQ3RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYJtv22y3CGWzRyIWqJ242m+bh HP0NDHTHZZEqz8ANpFF9ehA2et+xL1C6/NqdGNhhITviOGYfkT9nQQYfyQh1u5lc QNKIZIaTyNNtCow846CH1iXHX9jmpFmJ23oBSeFsyxOTgrCnbpSYO0PBiBpGM/DY e4bKpPowIzE4rq8iY2hpk8VdBpot7dHv1S29Clk5DjVmYpCSBpjAt9NJeYPXGUEY PM+GQYAakI+1B4PNIvgZdiYdvTmYS0EXzjVQ9pF3YmMHYAKki6eaGkBzRHmw1cT/ D04t9r2DeB46Q1osZ2XJN1FDFRiVJFWO451/4V+YdPrmu8vj4RvdAgiarC57AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+TSvgvAWZ7L0HvvmOudkyRVgR9YwHwYDVR0j BBgwFoAUKteJ6/xYwfDk+HOQeB04yw1YAhAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWM2NzdmZC1kNTY5LTRjYzUtYTU2My05YjBmMjQ4YjFhZjEvMC8yQUQ3ODlFQkZD NThDMUYwRTRGODczOTA3ODFEMzhDQjBENTgwMjEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4Q0IwRDU4 MDIxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVjNjc3ZmQtZDU2OS00Y2M1LWE1 NjMtOWIwZjI0OGIxYWYxLzAvMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4 Q0IwRDU4MDIxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJxfVQzLXtomIG4fnT8oW95bf52ibeLAbd78 jhUxsyNN7Im2NeXHm0T+425GrXedilxgcEe/CCVoBcgVslT2WlZ9kxnIYcMeqgSa zg/EGlVsp4IUJkVcaBt6l+oPN0LNZ027nfYVwsUV41eGC9LwpOCW1m3Lo4xQojLc Lz26lPhHd3iHDdESkq/P4HKDPS7uWngOiXvGi6FAdMq4WSrA3YCsDEvyBdyhvdtj AjXpj3hi27oGg5wPzpaZEkn0m+g6hyeA95fAMJ/milkh0WXlePkrShbF+1r3IHRP 0E9us0xtfOnI7dwsX/PBTa0hIktq2X4zJ2SKtzNRaiJL1wZ1heY= -----END CERTIFICATE-----Generated at Sun Aug 24 03:30:09 2025 by rpki-client