$ rpki-client -vvf repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft File: 2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft (raw, json) Hash identifier: 9QKCwTYSkrSyvKhy7EYF+glba7ac6WuRPICLcHNJdAE= Subject key identifier: AF:A1:C2:8D:4E:5A:A5:D5:0F:47:A4:76:D1:DC:86:25:A3:8B:32:84 Authority key identifier: 2D:51:7D:C0:24:CE:FC:FA:F8:0C:F7:FD:39:22:46:89:4E:94:F1:2F Certificate issuer: /CN=2D517DC024CEFCFAF80CF7FD392246894E94F12F Certificate serial: 77EC1858CF3D5F036D2E23210A7625275CA841E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft Manifest number: D2 Signing time: Fri 27 Jun 2025 15:50:50 +0000 Manifest this update: Fri 27 Jun 2025 15:45:50 +0000 Manifest next update: Mon 30 Jun 2025 21:13:50 +0000 Files and hashes: 1: 3130332e3135362e3131302e302f32342d3234203d3e20313431303839.roa (hash: oX2rRL4yj7u4AFId0yrPwmCzP4drZZYO3pu9upGhNCY=) 2: 2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl (hash: MijqLPGmb9KKEx3JbKfKY7wDHerCCvk/MjC/Dfegt6c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 21:13:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:ec:18:58:cf:3d:5f:03:6d:2e:23:21:0a:76:25:27:5c:a8:41:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D517DC024CEFCFAF80CF7FD392246894E94F12F Validity Not Before: Jun 27 15:45:50 2025 GMT Not After : Jun 30 21:13:50 2025 GMT Subject: CN=AFA1C28D4E5AA5D50F47A476D1DC8625A38B3284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:eb:0c:f9:09:ce:9c:58:a6:39:13:e0:4f:db: 42:5e:d8:3c:2f:36:4a:9f:8b:ee:43:87:95:2a:ca: 59:16:e6:fb:6c:8e:27:5d:2d:29:02:1c:b1:3c:64: 8a:87:e5:06:70:f4:a3:23:97:ba:63:19:10:4a:6f: f8:a9:ec:29:8b:ca:77:d9:ce:90:f6:00:1b:9b:f4: 8b:20:27:b9:59:04:25:0e:3f:fd:0e:da:75:a1:c3: d2:41:31:aa:5b:63:3e:26:27:19:53:53:2f:86:55: 30:0f:c0:f4:50:ac:19:e0:f2:9e:86:d9:bd:b4:4b: c3:7a:71:ce:49:20:c2:71:33:be:75:7b:55:55:62: 63:fd:ee:03:ee:3c:9d:be:55:0d:73:ed:63:0c:84: 43:9f:88:1e:2e:1a:32:22:60:73:58:e4:f8:9b:78: f3:da:39:14:d7:5b:9e:1a:4e:ee:de:69:47:28:c3: 44:c8:a5:fd:7c:a5:81:7f:d9:bc:3a:d1:12:1a:4f: 04:8a:2d:01:8c:ed:32:44:98:39:e7:1a:e4:fe:93: a2:25:a8:85:a1:5f:bb:22:d4:5e:f7:39:a9:9f:74: cf:ae:3e:bf:28:00:57:cc:2a:44:b3:84:fc:f6:56: 1f:b1:b9:87:b8:1d:71:6e:f2:5d:ad:a4:c0:b9:ad: 1b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A1:C2:8D:4E:5A:A5:D5:0F:47:A4:76:D1:DC:86:25:A3:8B:32:84 X509v3 Authority Key Identifier: keyid:2D:51:7D:C0:24:CE:FC:FA:F8:0C:F7:FD:39:22:46:89:4E:94:F1:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:0f:ed:f5:03:89:d1:7f:fa:71:3b:99:60:1f:dd:a0:3e:7a: 5c:6b:e0:b0:0b:13:ec:bf:36:25:92:38:fc:94:b6:82:d1:82: 1e:d5:2a:4f:25:da:64:e5:cc:af:f0:ac:f0:34:8a:63:d6:09: 70:96:6b:81:50:50:f2:48:e1:a6:60:f4:52:74:a0:a8:5c:46: aa:7c:c4:39:b2:d6:25:29:b8:2e:c9:b5:6d:a5:ec:c3:59:14: e3:ab:f8:78:cd:b0:5e:f8:1e:cc:fb:40:b4:72:89:2b:9e:51: 64:ed:53:31:1c:ef:38:b5:29:33:5e:8c:28:23:79:26:c8:21: 29:3b:fe:c1:ce:27:4c:7d:57:42:d0:b1:74:93:38:e3:1e:38: 7f:53:9d:36:eb:73:1c:b9:8f:95:39:c5:eb:13:fd:1c:79:e8: 93:36:c8:48:30:09:a8:ee:26:e2:80:35:a7:61:e6:9a:30:12: 3b:e8:4a:c1:3d:6f:48:a7:e9:36:69:a6:99:d4:13:f0:47:2e: be:ea:66:54:d3:0b:7b:fa:62:23:4a:be:1a:0a:ab:23:74:e0: 6b:11:ea:3b:2f:e0:48:3b:11:14:69:66:49:74:80:3d:99:45: 90:92:2a:dd:e5:29:ce:bf:31:b6:bf:dd:1f:ab:7a:65:1c:b8: de:1d:2c:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd+wYWM89XwNtLiMhCnYlJ1yoQeQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2ODk0 RTk0RjEyRjAeFw0yNTA2MjcxNTQ1NTBaFw0yNTA2MzAyMTEzNTBaMDMxMTAvBgNV BAMTKEFGQTFDMjhENEU1QUE1RDUwRjQ3QTQ3NkQxREM4NjI1QTM4QjMyODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU6wz5Cc6cWKY5E+BP20Je2Dwv Nkqfi+5Dh5UqylkW5vtsjiddLSkCHLE8ZIqH5QZw9KMjl7pjGRBKb/ip7CmLynfZ zpD2ABub9IsgJ7lZBCUOP/0O2nWhw9JBMapbYz4mJxlTUy+GVTAPwPRQrBng8p6G 2b20S8N6cc5JIMJxM751e1VVYmP97gPuPJ2+VQ1z7WMMhEOfiB4uGjIiYHNY5Pib ePPaORTXW54aTu7eaUcow0TIpf18pYF/2bw60RIaTwSKLQGM7TJEmDnnGuT+k6Il qIWhX7si1F73OamfdM+uPr8oAFfMKkSzhPz2Vh+xuYe4HXFu8l2tpMC5rRuZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr6HCjU5apdUPR6R20dyGJaOLMoQwHwYDVR0j BBgwFoAULVF9wCTO/Pr4DPf9OSJGiU6U8S8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDMzYTFjNi0wZjcwLTRjOTgtOTZiMC1jYWI1ODEyNmFiOTQvMC8yRDUxN0RDMDI0 Q0VGQ0ZBRjgwQ0Y3RkQzOTIyNDY4OTRFOTRGMTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2ODk0RTk0 RjEyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQzM2ExYzYtMGY3MC00Yzk4LTk2 YjAtY2FiNTgxMjZhYjk0LzAvMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2 ODk0RTk0RjEyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADAP7fUDidF/+nE7mWAf3aA+elxr4LALE+y/ NiWSOPyUtoLRgh7VKk8l2mTlzK/wrPA0imPWCXCWa4FQUPJI4aZg9FJ0oKhcRqp8 xDmy1iUpuC7JtW2l7MNZFOOr+HjNsF74Hsz7QLRyiSueUWTtUzEc7zi1KTNejCgj eSbIISk7/sHOJ0x9V0LQsXSTOOMeOH9TnTbrcxy5j5U5xesT/Rx56JM2yEgwCaju JuKANadh5powEjvoSsE9b0in6TZpppnUE/BHLr7qZlTTC3v6YiNKvhoKqyN04GsR 6jsv4Eg7ERRpZkl0gD2ZRZCSKt3lKc6/Mba/3R+remUcuN4dLLY= -----END CERTIFICATE-----Generated at Sun Jun 29 19:37:46 2025 by rpki-client