$ rpki-client -vvf repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft File: 2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft (raw, json) Hash identifier: +L0W1Hcl8LQHN/VJ7gEOiPEsbFXkl8cOej2pcaLQKE8= Subject key identifier: AB:15:3C:A6:C4:04:A2:49:ED:35:5B:EE:13:EB:38:97:2B:CF:56:E2 Authority key identifier: 2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10 Certificate issuer: /CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210 Certificate serial: 5F3A8AED92BCA1148FF47F04DF5B1747E048E53B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft Manifest number: B2 Signing time: Sat 28 Jun 2025 15:02:04 +0000 Manifest this update: Sat 28 Jun 2025 14:57:04 +0000 Manifest next update: Tue 01 Jul 2025 21:28:04 +0000 Files and hashes: 1: 3136302e32322e36322e302f32342d3234203d3e20313430343233.roa (hash: +BG+2fWbSUohG1Sg2J+GMAoluuqy8JwAmoV3ON6W7L0=) 2: 2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl (hash: f4dD5XC4UrTvR7BOLwcSynyyM5vvOzMHJkzvt9X9UiQ=) 3: 3136302e32322e36332e302f32342d3234203d3e20313439373138.roa (hash: FdD4yXGMsks45ng3y/QGMQ3cyOtlAzR9+CDLALaQ1/8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 21:28:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:3a:8a:ed:92:bc:a1:14:8f:f4:7f:04:df:5b:17:47:e0:48:e5:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210 Validity Not Before: Jun 28 14:57:04 2025 GMT Not After : Jul 1 21:28:04 2025 GMT Subject: CN=AB153CA6C404A249ED355BEE13EB38972BCF56E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a7:fe:ac:98:09:72:d9:ee:69:04:2d:7f:23: 24:ba:94:13:df:d6:b0:7d:cf:c9:cd:6a:a3:b5:69: 12:50:32:34:b4:d1:63:6b:de:69:bd:70:83:6d:97: 73:af:85:38:2e:ec:53:66:01:5c:cc:be:77:2c:13: 36:b9:c3:92:00:6e:5b:dc:89:f5:59:03:17:22:f9: 9c:10:fa:83:32:0a:53:c0:ca:56:df:d3:4b:f6:6e: 83:da:02:a0:ff:b3:81:e3:39:9c:60:46:4f:75:35: 01:c1:96:91:40:fd:a2:b5:dc:3f:7b:69:2d:3d:35: b4:41:9a:85:d9:91:d3:c9:2a:a8:7b:67:a0:e6:08: 67:af:94:c7:b4:b7:65:c6:e5:62:e9:80:a3:04:e2: 07:f5:b0:68:0d:6f:c9:60:ba:96:c0:a5:c4:5f:80: a1:65:18:43:08:ab:2a:22:80:ab:9a:a2:7e:d9:ff: ac:1d:e4:d2:85:29:9d:0f:bf:db:59:d4:dc:6f:e3: ab:0b:04:ca:0a:eb:7c:11:08:81:d9:b7:44:94:31: 23:99:8d:31:fd:8a:2c:5b:80:14:70:9d:c8:fd:3f: 7e:e0:5a:dc:22:8d:2d:e8:7f:ce:b4:86:ae:50:64: be:00:ec:c9:ac:e2:3b:2b:8a:5c:83:58:76:24:02: 31:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:15:3C:A6:C4:04:A2:49:ED:35:5B:EE:13:EB:38:97:2B:CF:56:E2 X509v3 Authority Key Identifier: keyid:2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:d8:24:81:7a:e1:60:f6:32:a1:cc:de:77:5c:39:d5:08:09: 5c:40:2e:2d:98:78:2d:af:8a:da:02:3a:81:d1:76:18:6f:b6: 0e:7a:6d:23:0d:d7:cb:32:16:cf:6a:b1:4f:7a:12:13:f1:b2: 8b:81:dd:2b:94:aa:70:5f:5a:20:6a:a4:66:1e:f2:0e:26:0a: d7:09:45:61:14:8d:40:04:12:9c:92:70:f7:14:30:42:a8:4e: 07:94:09:81:71:20:1b:09:85:97:3e:7a:42:f4:ce:2a:f7:de: 9a:bf:79:40:d5:82:ba:79:6f:3f:4b:85:77:4c:6d:06:7d:22: 27:2e:06:db:d7:27:c7:00:0a:e2:b9:81:61:c4:78:24:27:7e: 34:ba:43:18:0c:8a:63:c3:a1:ab:a0:1d:ed:27:e3:ca:c9:a6: c6:77:47:e5:c1:ac:e0:0b:38:c4:f0:ae:aa:ac:f8:20:cb:0f: 5e:75:35:6b:86:73:5b:0c:6c:e3:77:84:44:98:2d:9b:24:3c: f0:bc:5d:4b:2d:8c:5b:3f:23:31:21:33:2c:bb:87:92:40:fd: 7c:fd:6a:62:dd:29:f3:ea:c2:06:a8:7c:b0:d4:2e:6a:03:34: 9a:40:21:5e:a5:4c:60:f1:77:1f:04:7f:73:17:7a:5a:7e:ca: c3:69:20:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXzqK7ZK8oRSP9H8E31sXR+BI5TswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4Q0Iw RDU4MDIxMDAeFw0yNTA2MjgxNDU3MDRaFw0yNTA3MDEyMTI4MDRaMDMxMTAvBgNV BAMTKEFCMTUzQ0E2QzQwNEEyNDlFRDM1NUJFRTEzRUIzODk3MkJDRjU2RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTp/6smAly2e5pBC1/IyS6lBPf 1rB9z8nNaqO1aRJQMjS00WNr3mm9cINtl3OvhTgu7FNmAVzMvncsEza5w5IAblvc ifVZAxci+ZwQ+oMyClPAylbf00v2boPaAqD/s4HjOZxgRk91NQHBlpFA/aK13D97 aS09NbRBmoXZkdPJKqh7Z6DmCGevlMe0t2XG5WLpgKME4gf1sGgNb8lgupbApcRf gKFlGEMIqyoigKuaon7Z/6wd5NKFKZ0Pv9tZ1Nxv46sLBMoK63wRCIHZt0SUMSOZ jTH9iixbgBRwncj9P37gWtwijS3of860hq5QZL4A7Mms4jsrilyDWHYkAjE3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqxU8psQEokntNVvuE+s4lyvPVuIwHwYDVR0j BBgwFoAUKteJ6/xYwfDk+HOQeB04yw1YAhAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWM2NzdmZC1kNTY5LTRjYzUtYTU2My05YjBmMjQ4YjFhZjEvMC8yQUQ3ODlFQkZD NThDMUYwRTRGODczOTA3ODFEMzhDQjBENTgwMjEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4Q0IwRDU4 MDIxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVjNjc3ZmQtZDU2OS00Y2M1LWE1 NjMtOWIwZjI0OGIxYWYxLzAvMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4 Q0IwRDU4MDIxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAInYJIF64WD2MqHM3ndcOdUICVxALi2YeC2v itoCOoHRdhhvtg56bSMN18syFs9qsU96EhPxsouB3SuUqnBfWiBqpGYe8g4mCtcJ RWEUjUAEEpyScPcUMEKoTgeUCYFxIBsJhZc+ekL0zir33pq/eUDVgrp5bz9LhXdM bQZ9IicuBtvXJ8cACuK5gWHEeCQnfjS6QxgMimPDoaugHe0n48rJpsZ3R+XBrOAL OMTwrqqs+CDLD151NWuGc1sMbON3hESYLZskPPC8XUstjFs/IzEhMyy7h5JA/Xz9 amLdKfPqwgaofLDULmoDNJpAIV6lTGDxdx8Ef3MXelp+ysNpICU= -----END CERTIFICATE-----Generated at Mon Jun 30 08:43:10 2025 by rpki-client