$ rpki-client -vvf repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft File: 2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft (raw, json) Hash identifier: 8SHwOa2I1zVSEYwiGsHNcw+BHyptqkc0a1tptMR5MS8= Subject key identifier: 35:53:26:87:A8:35:CB:37:23:26:B5:11:CD:47:25:C0:DE:17:30:DB Authority key identifier: 2D:51:7D:C0:24:CE:FC:FA:F8:0C:F7:FD:39:22:46:89:4E:94:F1:2F Certificate issuer: /CN=2D517DC024CEFCFAF80CF7FD392246894E94F12F Certificate serial: 29E87EE824836B8B8F8A58B9A5B902F661C3832D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft Manifest number: EB Signing time: Fri 22 Aug 2025 09:20:53 +0000 Manifest this update: Fri 22 Aug 2025 09:15:53 +0000 Manifest next update: Mon 25 Aug 2025 18:46:53 +0000 Files and hashes: 1: 2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl (hash: wD2xHBvrtvhIH0EWoiW+jbFEHOA9r8P75kyTrMdSksk=) 2: 3130332e3135362e3131302e302f32342d3234203d3e20313431303839.roa (hash: oX2rRL4yj7u4AFId0yrPwmCzP4drZZYO3pu9upGhNCY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 18:46:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:e8:7e:e8:24:83:6b:8b:8f:8a:58:b9:a5:b9:02:f6:61:c3:83:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D517DC024CEFCFAF80CF7FD392246894E94F12F Validity Not Before: Aug 22 09:15:53 2025 GMT Not After : Aug 25 18:46:53 2025 GMT Subject: CN=35532687A835CB372326B511CD4725C0DE1730DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:de:36:6d:e9:44:70:8c:70:06:21:bc:da:f5: 95:3f:32:3c:bf:47:12:60:28:96:ac:48:96:3c:6d: 27:23:eb:c5:ed:4a:75:37:3c:48:f1:75:f4:d9:53: fe:d3:4f:1e:f9:28:31:ec:18:e3:d2:a5:96:60:2b: 5b:07:0e:82:4b:b0:20:32:6d:0e:ed:a9:61:9e:cd: fd:92:f6:d7:54:05:d2:07:6f:d2:5c:77:be:ac:d7: f0:ae:51:6a:bf:c3:12:64:52:19:3b:11:fd:b0:ea: e8:2a:3c:0d:bf:19:52:f5:40:5f:bf:f1:a9:3a:07: ec:38:94:bb:29:be:8b:f5:78:ba:99:f0:39:5a:10: 1b:1b:8b:79:95:d5:f0:7b:cb:9f:3c:26:c5:db:cc: 3e:df:f1:50:e2:41:a7:49:d4:38:db:8e:aa:a7:d7: 09:64:61:4c:e5:fd:49:0f:ca:b3:0d:43:e7:32:18: 44:70:a8:8f:a1:7d:5c:46:f3:3a:60:07:6d:e2:7f: 1b:26:27:2a:90:5d:03:68:8d:1c:1b:a2:15:cf:10: fb:7c:28:7e:d1:70:b8:08:cd:0e:de:05:b3:fa:85: 18:8f:cc:a2:62:3b:89:61:c7:61:5e:b3:6f:27:06: 04:e0:8b:d0:77:7c:b9:18:ef:78:86:ed:be:e8:5d: 28:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:53:26:87:A8:35:CB:37:23:26:B5:11:CD:47:25:C0:DE:17:30:DB X509v3 Authority Key Identifier: keyid:2D:51:7D:C0:24:CE:FC:FA:F8:0C:F7:FD:39:22:46:89:4E:94:F1:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:be:77:28:68:ec:c0:ec:c1:0c:66:26:a3:fd:b8:d2:ac:92: cb:3a:a0:72:e6:55:00:b1:ef:04:fd:a6:fb:1e:4c:5b:79:29: 73:7a:f4:ea:d3:2a:a9:84:61:04:db:85:7f:d4:fc:00:51:c0: 09:12:dc:a1:d7:f2:3e:b2:bf:70:8d:08:1f:5d:e1:75:fa:84: 5d:69:2c:74:29:d6:0a:ef:76:ea:89:ae:ca:85:19:fa:4b:dc: 87:ff:6a:1d:d5:ed:e1:3a:73:2e:b7:78:98:8b:cc:69:42:49: 5f:2d:8e:53:ce:06:4b:25:b2:4a:06:b9:17:ae:4f:ef:41:7c: 7f:79:87:20:0c:d2:81:e7:c2:69:6c:1f:cb:17:3b:02:de:f2: f4:60:40:5f:a9:60:f7:5a:ee:2f:ee:d7:91:42:19:6c:66:9c: 7d:4e:3f:8a:6e:7d:73:7e:80:e2:b3:d7:53:01:83:da:ff:86: 5b:3c:75:a6:f9:16:5f:02:a0:3e:7e:65:0e:e6:c1:b3:80:05: 32:bb:3c:41:e9:ad:a4:95:5c:d2:c8:13:95:fc:3d:9f:26:e7: 7f:3b:95:18:a8:c2:4b:42:78:e7:0e:62:d0:da:0b:1f:53:ad: ae:f4:ea:a6:16:c7:aa:60:00:e8:19:1b:af:7b:49:f9:96:6e: c7:49:4c:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKeh+6CSDa4uPili5pbkC9mHDgy0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2ODk0 RTk0RjEyRjAeFw0yNTA4MjIwOTE1NTNaFw0yNTA4MjUxODQ2NTNaMDMxMTAvBgNV BAMTKDM1NTMyNjg3QTgzNUNCMzcyMzI2QjUxMUNENDcyNUMwREUxNzMwREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN3jZt6URwjHAGIbza9ZU/Mjy/ RxJgKJasSJY8bScj68XtSnU3PEjxdfTZU/7TTx75KDHsGOPSpZZgK1sHDoJLsCAy bQ7tqWGezf2S9tdUBdIHb9Jcd76s1/CuUWq/wxJkUhk7Ef2w6ugqPA2/GVL1QF+/ 8ak6B+w4lLspvov1eLqZ8DlaEBsbi3mV1fB7y588JsXbzD7f8VDiQadJ1Djbjqqn 1wlkYUzl/UkPyrMNQ+cyGERwqI+hfVxG8zpgB23ifxsmJyqQXQNojRwbohXPEPt8 KH7RcLgIzQ7eBbP6hRiPzKJiO4lhx2Fes28nBgTgi9B3fLkY73iG7b7oXSjdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNVMmh6g1yzcjJrURzUclwN4XMNswHwYDVR0j BBgwFoAULVF9wCTO/Pr4DPf9OSJGiU6U8S8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDMzYTFjNi0wZjcwLTRjOTgtOTZiMC1jYWI1ODEyNmFiOTQvMC8yRDUxN0RDMDI0 Q0VGQ0ZBRjgwQ0Y3RkQzOTIyNDY4OTRFOTRGMTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2ODk0RTk0 RjEyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQzM2ExYzYtMGY3MC00Yzk4LTk2 YjAtY2FiNTgxMjZhYjk0LzAvMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2 ODk0RTk0RjEyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2+dyho7MDswQxmJqP9uNKskss6oHLmVQCx 7wT9pvseTFt5KXN69OrTKqmEYQTbhX/U/ABRwAkS3KHX8j6yv3CNCB9d4XX6hF1p LHQp1grvduqJrsqFGfpL3If/ah3V7eE6cy63eJiLzGlCSV8tjlPOBkslskoGuReu T+9BfH95hyAM0oHnwmlsH8sXOwLe8vRgQF+pYPda7i/u15FCGWxmnH1OP4pufXN+ gOKz11MBg9r/hls8dab5Fl8CoD5+ZQ7mwbOABTK7PEHpraSVXNLIE5X8PZ8m5387 lRiowktCeOcOYtDaCx9Tra706qYWx6pgAOgZG697SfmWbsdJTPY= -----END CERTIFICATE-----Generated at Sat Aug 23 18:35:32 2025 by rpki-client