$ rpki-client -vvf repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft File: 2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft (raw, json) Hash identifier: awC0qoQMi134aFswNDPp8f5hHfyfd2btaav1rB2+jvo= Subject key identifier: 6E:1F:6A:7F:6E:74:8D:81:F9:5D:9D:5B:55:ED:09:D4:17:77:D7:E4 Authority key identifier: 2D:9D:91:37:D4:42:7A:9D:34:E1:B1:5F:16:C5:C6:89:A8:C5:49:D9 Certificate issuer: /CN=2D9D9137D4427A9D34E1B15F16C5C689A8C549D9 Certificate serial: 322B003A4DE483B1D87A3D8C3EAE226D2A67CB21 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft Manifest number: 0500 Signing time: Fri 22 Aug 2025 16:51:22 +0000 Manifest this update: Fri 22 Aug 2025 16:46:22 +0000 Manifest next update: Mon 25 Aug 2025 23:42:22 +0000 Files and hashes: 1: 3130332e3134342e3130332e302f32342d3234203d3e20313339343231.roa (hash: /ZqmuN0x+ZwpTTLsOK93bf5aWydgNNzXSi3NS4bqhi0=) 2: 2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.crl (hash: e36mKPwrvqXMVgpMJZavHqzqo1LJe6tdjcOKgKuD9E0=) 3: 3130332e3134342e3130322e302f32342d3234203d3e20313339343231.roa (hash: bV9xBqFWWdQNpl4xPPj/IRLaOQzWewk+JeafEOq6H8g=) 4: 3130332e3134342e3130322e302f32332d3234203d3e20313339343231.roa (hash: cdpLxSADx6mq88cWkf5UoxPyeajYM3Kq/Bc+NW2yaec=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.crl rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 23:42:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:2b:00:3a:4d:e4:83:b1:d8:7a:3d:8c:3e:ae:22:6d:2a:67:cb:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D9D9137D4427A9D34E1B15F16C5C689A8C549D9 Validity Not Before: Aug 22 16:46:22 2025 GMT Not After : Aug 25 23:42:22 2025 GMT Subject: CN=6E1F6A7F6E748D81F95D9D5B55ED09D41777D7E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9c:c1:2a:dd:f9:63:ff:95:ac:28:ac:84:7c: 8f:8c:fb:29:5b:bc:0e:ec:e0:23:49:9c:7d:78:6d: cc:2e:4e:b5:c5:66:4c:b2:d0:4b:5a:87:44:13:9b: fe:4a:6f:e9:55:9f:2f:87:71:d3:52:83:5f:aa:f4: 20:a1:d1:34:81:81:74:02:fc:c9:e9:fe:01:58:6d: ef:eb:75:53:48:5b:b6:45:c4:f0:b3:5d:df:d7:8d: b8:6f:0a:c8:a6:94:b5:cb:d0:f9:b7:d5:df:75:dc: b6:40:66:a1:bb:4a:d8:37:32:d7:60:80:26:f0:04: 55:ce:79:fc:61:ae:e2:33:89:88:dd:72:c5:2a:4f: 9a:c3:01:70:17:0b:47:a8:dd:57:4a:bb:c8:76:d1: 6a:db:d9:cc:0a:6e:d9:80:aa:ef:bf:36:0b:d6:f8: 40:5d:bf:7e:21:b1:42:14:49:aa:29:f0:60:92:d7: 21:71:50:7a:9f:c0:2a:74:e9:6a:55:fa:d9:56:b3: 02:f2:cb:f1:cc:d6:ba:9c:c9:67:e8:ce:ab:c4:21: 6d:3f:a8:15:35:1a:10:61:eb:df:c4:21:6e:4c:ce: 27:dd:69:0c:71:0b:2c:a6:bf:5e:ac:56:60:a3:e4: dd:2c:ab:95:ac:fe:19:6f:0e:ac:3c:4c:3a:f1:75: 6a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:1F:6A:7F:6E:74:8D:81:F9:5D:9D:5B:55:ED:09:D4:17:77:D7:E4 X509v3 Authority Key Identifier: keyid:2D:9D:91:37:D4:42:7A:9D:34:E1:B1:5F:16:C5:C6:89:A8:C5:49:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:9d:45:20:08:8d:18:54:56:d4:75:9e:ac:75:b6:3d:b3:22: e4:f8:de:96:a0:76:31:c2:23:a5:5f:3d:e4:7f:5c:8c:e2:ef: bd:90:ad:33:b8:d6:a7:76:ad:ca:3c:97:44:13:31:b1:30:03: db:55:05:63:97:30:fa:6f:35:d8:04:d2:55:36:3d:19:17:9c: 62:89:67:ce:1c:e3:43:b5:58:eb:c8:a0:01:0d:73:10:9a:69: fa:e7:72:93:3d:b0:14:df:a1:c3:be:bc:b6:f8:86:c8:24:fa: da:ec:5d:ed:25:51:26:1d:8d:e6:4f:36:82:3c:97:ad:87:39: 98:65:98:b1:2a:47:42:fe:e3:ed:05:7a:77:17:6c:d3:d7:da: d6:d3:d1:3b:27:0f:31:c6:6b:76:fb:ce:76:9f:17:b5:8f:e9: 77:24:46:76:8d:b3:2a:d8:c5:5c:c6:a5:cd:df:ef:3c:e3:ed: 99:53:84:5b:39:e9:5d:61:a2:13:77:77:16:08:9f:55:74:7a: 06:4e:e3:f4:ef:23:2b:c0:52:4d:5d:16:69:f7:b6:65:3f:78: 51:19:38:31:41:5d:98:4c:e9:c7:76:e3:b5:67:38:e2:d5:5a: 05:5b:aa:e3:3e:b6:90:80:b4:59:8c:be:f3:92:ba:ca:80:b7: bd:df:40:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMisAOk3kg7HYej2MPq4ibSpnyyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ5RDkxMzdENDQyN0E5RDM0RTFCMTVGMTZDNUM2ODlB OEM1NDlEOTAeFw0yNTA4MjIxNjQ2MjJaFw0yNTA4MjUyMzQyMjJaMDMxMTAvBgNV BAMTKDZFMUY2QTdGNkU3NDhEODFGOTVEOUQ1QjU1RUQwOUQ0MTc3N0Q3RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+nMEq3flj/5WsKKyEfI+M+ylb vA7s4CNJnH14bcwuTrXFZkyy0Etah0QTm/5Kb+lVny+HcdNSg1+q9CCh0TSBgXQC /Mnp/gFYbe/rdVNIW7ZFxPCzXd/XjbhvCsimlLXL0Pm31d913LZAZqG7Stg3Mtdg gCbwBFXOefxhruIziYjdcsUqT5rDAXAXC0eo3VdKu8h20Wrb2cwKbtmAqu+/NgvW +EBdv34hsUIUSaop8GCS1yFxUHqfwCp06WpV+tlWswLyy/HM1rqcyWfozqvEIW0/ qBU1GhBh69/EIW5MzifdaQxxCyymv16sVmCj5N0sq5Ws/hlvDqw8TDrxdWpZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbh9qf250jYH5XZ1bVe0J1Bd31+QwHwYDVR0j BBgwFoAULZ2RN9RCep004bFfFsXGiajFSdkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTUzNDFlOC0yMmQ4LTQ0OWMtYTc1My1lNDdiYmZjNDg1MzgvMC8yRDlEOTEzN0Q0 NDI3QTlEMzRFMUIxNUYxNkM1QzY4OUE4QzU0OUQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQ5RDkxMzdENDQyN0E5RDM0RTFCMTVGMTZDNUM2ODlBOEM1 NDlEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE1MzQxZTgtMjJkOC00NDljLWE3 NTMtZTQ3YmJmYzQ4NTM4LzAvMkQ5RDkxMzdENDQyN0E5RDM0RTFCMTVGMTZDNUM2 ODlBOEM1NDlEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGmdRSAIjRhUVtR1nqx1tj2zIuT43pagdjHC I6VfPeR/XIzi772QrTO41qd2rco8l0QTMbEwA9tVBWOXMPpvNdgE0lU2PRkXnGKJ Z84c40O1WOvIoAENcxCaafrncpM9sBTfocO+vLb4hsgk+trsXe0lUSYdjeZPNoI8 l62HOZhlmLEqR0L+4+0FencXbNPX2tbT0TsnDzHGa3b7znafF7WP6XckRnaNsyrY xVzGpc3f7zzj7ZlThFs56V1hohN3dxYIn1V0egZO4/TvIyvAUk1dFmn3tmU/eFEZ ODFBXZhM6cd247VnOOLVWgVbquM+tpCAtFmMvvOSusqAt73fQLY= -----END CERTIFICATE-----Generated at Sat Aug 23 17:42:23 2025 by rpki-client