$ rpki-client -vvf repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft File: 2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft (raw, json) Hash identifier: YQw8wFcNaQwoPfLzl/tK/39ZfNognjo3bNq0qu+Dbuc= Subject key identifier: 2E:3A:5D:DE:19:AF:15:56:C2:65:27:DB:11:35:26:29:56:AA:D6:BB Authority key identifier: 2A:06:B4:29:F7:0B:86:9F:9E:70:FB:36:95:16:74:F7:D8:A4:AC:4E Certificate issuer: /CN=2A06B429F70B869F9E70FB36951674F7D8A4AC4E Certificate serial: 02BB06C364162DB190253A04A19EDB632F4FD48B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft Manifest number: 0121 Signing time: Thu 21 Aug 2025 21:42:20 +0000 Manifest this update: Thu 21 Aug 2025 21:37:20 +0000 Manifest next update: Mon 25 Aug 2025 08:46:20 +0000 Files and hashes: 1: 2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl (hash: AKnYoMN6GuPYqAJ9LlA5EOW9jzJEce6UzTGoqDQcrZY=) 2: 3130332e3135312e32342e302f32342d3234203d3e20313530353332.roa (hash: 3tho/NQEZ7clEuLXEou7D6b7IKWMhHVDrU5KgBLQwQM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 08:46:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:bb:06:c3:64:16:2d:b1:90:25:3a:04:a1:9e:db:63:2f:4f:d4:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A06B429F70B869F9E70FB36951674F7D8A4AC4E Validity Not Before: Aug 21 21:37:20 2025 GMT Not After : Aug 25 08:46:20 2025 GMT Subject: CN=2E3A5DDE19AF1556C26527DB1135262956AAD6BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7d:c2:a1:9d:e7:79:e4:08:1e:67:87:ea:f1: 3a:1c:ba:3f:36:15:31:45:c9:3c:47:8a:56:b0:f1: 09:30:d6:33:79:64:7e:1d:fc:12:22:86:9e:1b:46: c7:42:d1:bb:b4:63:19:98:bb:7a:d9:a9:1a:dc:6f: da:e0:6c:84:32:fa:0e:a5:6e:c0:59:4f:50:bc:ef: 19:c0:f7:93:36:f5:33:7f:18:01:0a:d7:9d:75:86: 76:bc:7d:f4:d4:47:d3:bc:b5:a4:89:de:ef:d1:90: 12:fb:d5:ac:f6:aa:55:d5:01:ed:10:45:72:d7:2b: e6:cb:c5:37:c8:69:db:22:5b:24:1a:7e:2f:fc:cb: 0a:b3:9b:f0:dc:b5:17:c9:32:27:8d:b8:5d:c7:24: b7:ae:5c:96:c9:19:0b:dc:5c:96:d3:d1:6e:43:3e: 76:80:c1:dd:30:b1:43:b2:6b:55:3d:3c:42:75:62: 8c:54:34:b2:fe:f2:52:4f:b1:d4:5b:64:cf:d0:af: 90:81:df:3c:ab:9d:f9:fa:6c:fb:72:f9:7c:73:e1: 40:dc:72:cf:f6:f3:99:c1:07:2f:4b:9c:bd:f6:77: 65:6c:52:37:dc:39:e9:f3:a0:41:6a:27:2b:85:65: a9:a2:63:54:ee:6f:79:a6:9f:6c:f9:31:a5:70:f5: c4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:3A:5D:DE:19:AF:15:56:C2:65:27:DB:11:35:26:29:56:AA:D6:BB X509v3 Authority Key Identifier: keyid:2A:06:B4:29:F7:0B:86:9F:9E:70:FB:36:95:16:74:F7:D8:A4:AC:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:1b:00:f7:b7:2e:e3:68:b4:c2:61:19:fc:3d:df:d0:4f:87: 4e:19:23:ba:9e:40:11:e8:ee:04:e4:cb:06:ce:06:d4:a0:70: 78:9d:22:87:97:16:a5:a8:f5:1c:3a:d5:a7:12:60:3e:9d:7b: 1a:e6:48:8c:39:aa:2e:4d:fb:11:31:80:7d:7b:69:89:81:6b: 75:bd:84:62:37:dc:43:a1:03:32:9a:6e:95:b0:63:7e:c8:92: bc:1c:8b:c2:59:a2:5f:f5:ab:45:ca:b3:f2:f5:98:7c:21:31: c1:32:fc:bf:53:6f:91:3c:6e:18:95:a2:3a:e7:c6:49:d5:2d: 04:d2:9c:4b:54:79:ee:36:51:c0:85:e6:30:ec:df:85:36:20: 31:fd:68:86:8b:c3:4d:ba:58:50:8c:25:ba:6d:c2:69:c5:7a: 46:5e:8c:a1:25:df:9e:b8:a3:e1:42:3d:2d:35:a6:ca:dd:19: c0:47:7a:61:8d:7d:f6:3e:43:76:49:a5:d2:a1:c7:00:94:b3: 45:3e:7a:43:e5:94:2b:08:e2:c7:57:3a:fc:d6:d3:64:43:3c: 12:5c:8a:be:22:ab:cc:4a:64:b5:a7:b7:e3:5a:26:6f:9f:f4: 2d:a9:69:df:1c:b7:28:0f:18:41:21:09:01:77:b7:cc:eb:5c: 3b:4e:15:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUArsGw2QWLbGQJToEoZ7bYy9P1IswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEwNkI0MjlGNzBCODY5RjlFNzBGQjM2OTUxNjc0RjdE OEE0QUM0RTAeFw0yNTA4MjEyMTM3MjBaFw0yNTA4MjUwODQ2MjBaMDMxMTAvBgNV BAMTKDJFM0E1RERFMTlBRjE1NTZDMjY1MjdEQjExMzUyNjI5NTZBQUQ2QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4fcKhned55AgeZ4fq8Tocuj82 FTFFyTxHilaw8Qkw1jN5ZH4d/BIihp4bRsdC0bu0YxmYu3rZqRrcb9rgbIQy+g6l bsBZT1C87xnA95M29TN/GAEK1511hna8ffTUR9O8taSJ3u/RkBL71az2qlXVAe0Q RXLXK+bLxTfIadsiWyQafi/8ywqzm/DctRfJMieNuF3HJLeuXJbJGQvcXJbT0W5D PnaAwd0wsUOya1U9PEJ1YoxUNLL+8lJPsdRbZM/Qr5CB3zyrnfn6bPty+Xxz4UDc cs/285nBBy9LnL32d2VsUjfcOenzoEFqJyuFZamiY1Tub3mmn2z5MaVw9cR1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULjpd3hmvFVbCZSfbETUmKVaq1rswHwYDVR0j BBgwFoAUKga0KfcLhp+ecPs2lRZ099ikrE4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjVhNDdiNi01NTEzLTQ2MTAtOTRjZi0xZmVlYzRlZWVjZjMvMC8yQTA2QjQyOUY3 MEI4NjlGOUU3MEZCMzY5NTE2NzRGN0Q4QTRBQzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkEwNkI0MjlGNzBCODY5RjlFNzBGQjM2OTUxNjc0RjdEOEE0 QUM0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI1YTQ3YjYtNTUxMy00NjEwLTk0 Y2YtMWZlZWM0ZWVlY2YzLzAvMkEwNkI0MjlGNzBCODY5RjlFNzBGQjM2OTUxNjc0 RjdEOEE0QUM0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEUbAPe3LuNotMJhGfw939BPh04ZI7qeQBHo 7gTkywbOBtSgcHidIoeXFqWo9Rw61acSYD6dexrmSIw5qi5N+xExgH17aYmBa3W9 hGI33EOhAzKabpWwY37Ikrwci8JZol/1q0XKs/L1mHwhMcEy/L9Tb5E8bhiVojrn xknVLQTSnEtUee42UcCF5jDs34U2IDH9aIaLw026WFCMJbptwmnFekZejKEl3564 o+FCPS01psrdGcBHemGNffY+Q3ZJpdKhxwCUs0U+ekPllCsI4sdXOvzW02RDPBJc ir4iq8xKZLWnt+NaJm+f9C2pad8ctygPGEEhCQF3t8zrXDtOFaI= -----END CERTIFICATE-----Generated at Sat Aug 23 10:36:14 2025 by rpki-client