$ rpki-client -vvf repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft File: 2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft (raw, json) Hash identifier: V9o8g3bhiH2CkojFNa38q1+5lPV52CE21j+ZorLah2U= Subject key identifier: 57:93:23:0A:DF:46:08:40:1B:CC:E8:2F:35:A0:78:0B:35:BC:78:5D Authority key identifier: 2A:06:B4:29:F7:0B:86:9F:9E:70:FB:36:95:16:74:F7:D8:A4:AC:4E Certificate issuer: /CN=2A06B429F70B869F9E70FB36951674F7D8A4AC4E Certificate serial: 33AE42B15C0F775DC5AC9E889A03947AB85E7EE4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft Manifest number: 010A Signing time: Tue 01 Jul 2025 21:32:11 +0000 Manifest this update: Tue 01 Jul 2025 21:27:11 +0000 Manifest next update: Sat 05 Jul 2025 00:28:11 +0000 Files and hashes: 1: 2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl (hash: csf3ayER1Z8KkWNUfC65MhhxzQFkWhWCBMUgMkYbBa8=) 2: 3130332e3135312e32342e302f32342d3234203d3e20313530353332.roa (hash: 3tho/NQEZ7clEuLXEou7D6b7IKWMhHVDrU5KgBLQwQM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 00:28:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:ae:42:b1:5c:0f:77:5d:c5:ac:9e:88:9a:03:94:7a:b8:5e:7e:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A06B429F70B869F9E70FB36951674F7D8A4AC4E Validity Not Before: Jul 1 21:27:11 2025 GMT Not After : Jul 5 00:28:11 2025 GMT Subject: CN=5793230ADF4608401BCCE82F35A0780B35BC785D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d8:12:e4:c4:7f:43:52:0c:9a:79:e9:d2:02: 7c:45:c3:29:c2:42:a3:e0:53:d4:d9:77:a6:90:46: f4:b7:20:4b:10:c2:1d:49:dd:c0:a6:4d:e0:d2:d5: 7c:28:aa:8b:d2:6a:33:20:b4:c7:56:0f:bc:a4:bc: 10:a8:fe:de:1e:31:8a:8a:ac:0e:c2:02:9d:7a:05: 55:f4:c9:cb:b6:b2:7e:8c:68:e4:3b:50:14:37:0d: ed:8f:08:94:9b:22:58:55:19:9c:2b:25:21:3d:83: 0f:a7:fd:aa:fa:4a:79:3a:a0:83:3b:d0:49:a3:05: 95:5a:97:07:4e:cf:74:b3:e2:ae:75:e9:ef:a0:9e: 73:fc:37:fe:14:be:2a:29:e8:d3:00:17:55:ac:1f: 1f:5e:e7:82:93:09:d4:e3:3d:e9:07:a2:d3:b3:81: f3:62:85:cc:5b:3e:84:33:94:b0:fe:17:2d:59:31: 83:64:e7:6d:03:1b:3c:70:eb:b3:26:b3:c1:73:84: 7d:03:e1:39:05:7c:a6:d6:77:24:d8:da:b4:ad:6b: 51:63:6e:a0:a3:67:62:13:e6:be:b7:7b:29:5a:a9: 1c:30:63:9c:e2:b7:36:f9:6e:b4:a8:b4:83:6a:81: 04:2e:75:ec:43:8e:ce:a5:c3:76:66:50:82:f2:5e: f8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:93:23:0A:DF:46:08:40:1B:CC:E8:2F:35:A0:78:0B:35:BC:78:5D X509v3 Authority Key Identifier: keyid:2A:06:B4:29:F7:0B:86:9F:9E:70:FB:36:95:16:74:F7:D8:A4:AC:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:67:b1:5e:2a:19:b0:29:26:dd:a3:0f:fb:fd:35:5e:2e:17: 31:04:5d:4a:a6:6f:20:54:02:e9:cf:01:f3:a1:e8:ef:52:fc: a4:10:7e:1f:91:59:a4:33:39:fb:af:5e:c8:c4:1d:7b:9e:98: 34:50:11:8b:f4:18:e2:e6:a1:cd:b7:26:94:38:40:8b:cc:80: 72:d0:35:c1:43:45:3d:e7:41:8b:c3:6f:d3:0d:81:21:1c:e5: e6:86:9b:65:f4:e7:8c:a5:e0:f8:50:7e:fb:ff:d8:f2:e7:b1: aa:ed:f0:d5:58:fa:50:95:5e:08:0f:53:ce:8c:64:f9:76:08: fe:1e:a8:48:cf:c3:43:4b:a0:5b:48:4d:f1:5f:e6:7f:7c:48: 33:70:b5:20:ea:be:7c:01:e9:e4:12:16:e5:59:04:fd:c6:c1: 79:ff:ce:d7:9d:46:62:c3:46:f5:da:b1:e5:63:76:91:fd:9c: de:9e:15:ed:54:aa:13:ff:41:7b:f0:bf:71:8c:9a:34:fc:e3: ca:8e:9b:c5:7c:16:dc:31:79:1b:27:45:af:63:75:d4:d3:46: f2:94:b4:39:28:24:ad:79:a8:d6:14:10:53:8d:23:2b:6b:7a: e9:9c:88:62:64:86:41:55:7c:a3:a7:82:f6:40:24:4c:cb:11: e6:95:12:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM65CsVwPd13FrJ6ImgOUerhefuQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEwNkI0MjlGNzBCODY5RjlFNzBGQjM2OTUxNjc0RjdE OEE0QUM0RTAeFw0yNTA3MDEyMTI3MTFaFw0yNTA3MDUwMDI4MTFaMDMxMTAvBgNV BAMTKDU3OTMyMzBBREY0NjA4NDAxQkNDRTgyRjM1QTA3ODBCMzVCQzc4NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ2BLkxH9DUgyaeenSAnxFwynC QqPgU9TZd6aQRvS3IEsQwh1J3cCmTeDS1XwoqovSajMgtMdWD7ykvBCo/t4eMYqK rA7CAp16BVX0ycu2sn6MaOQ7UBQ3De2PCJSbIlhVGZwrJSE9gw+n/ar6Snk6oIM7 0EmjBZValwdOz3Sz4q516e+gnnP8N/4Uviop6NMAF1WsHx9e54KTCdTjPekHotOz gfNihcxbPoQzlLD+Fy1ZMYNk520DGzxw67Mms8FzhH0D4TkFfKbWdyTY2rSta1Fj bqCjZ2IT5r63eylaqRwwY5zitzb5brSotINqgQQudexDjs6lw3ZmUILyXvi/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV5MjCt9GCEAbzOgvNaB4CzW8eF0wHwYDVR0j BBgwFoAUKga0KfcLhp+ecPs2lRZ099ikrE4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjVhNDdiNi01NTEzLTQ2MTAtOTRjZi0xZmVlYzRlZWVjZjMvMC8yQTA2QjQyOUY3 MEI4NjlGOUU3MEZCMzY5NTE2NzRGN0Q4QTRBQzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkEwNkI0MjlGNzBCODY5RjlFNzBGQjM2OTUxNjc0RjdEOEE0 QUM0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI1YTQ3YjYtNTUxMy00NjEwLTk0 Y2YtMWZlZWM0ZWVlY2YzLzAvMkEwNkI0MjlGNzBCODY5RjlFNzBGQjM2OTUxNjc0 RjdEOEE0QUM0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAINnsV4qGbApJt2jD/v9NV4uFzEEXUqmbyBU AunPAfOh6O9S/KQQfh+RWaQzOfuvXsjEHXuemDRQEYv0GOLmoc23JpQ4QIvMgHLQ NcFDRT3nQYvDb9MNgSEc5eaGm2X054yl4PhQfvv/2PLnsart8NVY+lCVXggPU86M ZPl2CP4eqEjPw0NLoFtITfFf5n98SDNwtSDqvnwB6eQSFuVZBP3GwXn/ztedRmLD RvXaseVjdpH9nN6eFe1UqhP/QXvwv3GMmjT848qOm8V8FtwxeRsnRa9jddTTRvKU tDkoJK15qNYUEFONIytreumciGJkhkFVfKOngvZAJEzLEeaVEio= -----END CERTIFICATE-----Generated at Thu Jul 3 06:49:51 2025 by rpki-client