$ rpki-client -vvf repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft File: 2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft (raw, json) Hash identifier: DqptsENZK/wFPbSIAEFxw0z3cnGyjcqa2gGBpJn8rfI= Subject key identifier: 93:C5:39:5F:36:51:BE:3E:64:0C:15:4B:18:6C:82:88:9C:7C:66:F1 Authority key identifier: 2D:9D:91:37:D4:42:7A:9D:34:E1:B1:5F:16:C5:C6:89:A8:C5:49:D9 Certificate issuer: /CN=2D9D9137D4427A9D34E1B15F16C5C689A8C549D9 Certificate serial: 1C10293F4952D8678547F273F9A8A30BE878550C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft Manifest number: 04E7 Signing time: Sat 28 Jun 2025 21:21:21 +0000 Manifest this update: Sat 28 Jun 2025 21:16:21 +0000 Manifest next update: Wed 02 Jul 2025 07:51:21 +0000 Files and hashes: 1: 2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.crl (hash: UaxcnkddnIaFvi03GvXZEu7oBzrJGLWmc+F84MeO2fs=) 2: 3130332e3134342e3130332e302f32342d3234203d3e20313339343231.roa (hash: LMahtEVFw1WQXjV2Jt5sgAVQZXkjGaxRYhPgCUjt0lU=) 3: 3130332e3134342e3130322e302f32342d3234203d3e20313339343231.roa (hash: vzSMLWMHxbHbmKZs1ww72s93hpXFUe/64ZqkfEBoPE8=) 4: 3130332e3134342e3130322e302f32332d3234203d3e20313339343231.roa (hash: cdpLxSADx6mq88cWkf5UoxPyeajYM3Kq/Bc+NW2yaec=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.crl rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:10:29:3f:49:52:d8:67:85:47:f2:73:f9:a8:a3:0b:e8:78:55:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D9D9137D4427A9D34E1B15F16C5C689A8C549D9 Validity Not Before: Jun 28 21:16:21 2025 GMT Not After : Jul 2 07:51:21 2025 GMT Subject: CN=93C5395F3651BE3E640C154B186C82889C7C66F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:93:3f:c0:30:ef:a7:70:76:f4:c5:81:4c:cb: 99:82:f0:26:2b:2e:8b:dc:63:ec:e4:b2:7f:f1:11: b3:4c:34:e8:40:c8:28:68:b7:b5:a0:6d:03:be:d8: ff:f9:d1:77:0a:f6:28:e4:7e:42:45:e5:63:70:a3: 72:65:ad:9b:ea:72:3b:cf:ec:d6:b5:bb:ee:04:ed: 1b:70:75:c7:5e:7b:f3:b7:f5:09:9e:c3:d8:fc:c3: 50:7b:d9:92:50:e1:0b:91:e5:ff:1d:6a:f6:8b:8a: a0:0b:57:33:18:d5:b1:c9:20:9b:6f:89:e3:a9:5f: c8:b9:8a:dd:c9:4c:09:91:44:20:31:ca:fe:77:f5: be:f9:a6:88:9c:6b:92:a3:b0:d3:8c:62:91:aa:8f: 1f:ff:81:91:3c:37:dd:f5:22:cb:37:8d:bf:fa:e4: 45:ec:c9:a2:ca:f3:9a:12:53:53:c5:2a:65:04:00: 95:23:3a:f3:eb:be:ec:53:d8:32:da:ad:d9:78:d7: fd:62:0e:62:f5:78:12:db:1c:0b:ab:79:0d:eb:f1: 2a:d1:15:3b:de:3f:c7:52:3a:6a:3c:f8:49:88:3b: ab:20:b1:be:b2:9f:61:cb:46:04:67:f0:c8:fd:97: b6:97:f1:26:61:76:1a:99:ea:79:8d:ac:f5:c5:67: 0e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C5:39:5F:36:51:BE:3E:64:0C:15:4B:18:6C:82:88:9C:7C:66:F1 X509v3 Authority Key Identifier: keyid:2D:9D:91:37:D4:42:7A:9D:34:E1:B1:5F:16:C5:C6:89:A8:C5:49:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:36:cd:28:a2:67:cb:c2:7c:a7:fd:1a:03:08:e3:a4:e7:43: a3:67:7a:36:56:3e:99:31:05:ae:52:a9:aa:7c:fd:99:dc:9e: d1:71:c9:a4:f5:b4:b7:e4:12:2c:02:3b:d4:32:ec:ea:eb:3c: 4a:c0:9a:7a:53:6e:e2:03:42:36:ca:67:4c:76:36:45:87:d9: 97:81:65:5e:7f:81:8c:22:db:f7:ff:13:e5:c5:0a:0e:d6:9b: 20:9e:4a:ac:f1:c2:fd:03:78:08:72:c7:f1:90:70:04:3e:72: e4:b4:e2:d8:f5:ad:83:78:64:79:dc:4f:bb:b5:df:81:8d:26: b7:a6:2c:b8:96:fa:97:bd:d6:48:b7:65:84:1b:72:d1:4f:90: ba:86:85:8b:98:8a:61:46:12:ea:53:73:be:ff:2c:fe:79:ae: 84:c1:e1:7a:30:53:25:4a:e4:db:0c:cf:3a:bf:5d:fb:25:9a: c7:ba:1d:eb:78:2e:74:2c:a7:86:db:ae:9c:e8:e7:a7:b9:63: d8:38:66:81:6a:de:94:25:77:6f:01:68:81:bc:dd:0f:e3:a1: 07:14:c4:1a:72:c6:49:2c:ec:d9:67:1b:8f:97:5f:3f:d5:e5: 5f:47:af:c0:5e:b1:80:c3:67:a7:8c:23:34:ad:f2:ff:4b:5e: 9f:45:9a:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHBApP0lS2GeFR/Jz+aijC+h4VQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ5RDkxMzdENDQyN0E5RDM0RTFCMTVGMTZDNUM2ODlB OEM1NDlEOTAeFw0yNTA2MjgyMTE2MjFaFw0yNTA3MDIwNzUxMjFaMDMxMTAvBgNV BAMTKDkzQzUzOTVGMzY1MUJFM0U2NDBDMTU0QjE4NkM4Mjg4OUM3QzY2RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDkz/AMO+ncHb0xYFMy5mC8CYr LovcY+zksn/xEbNMNOhAyChot7WgbQO+2P/50XcK9ijkfkJF5WNwo3JlrZvqcjvP 7Na1u+4E7Rtwdcdee/O39Qmew9j8w1B72ZJQ4QuR5f8davaLiqALVzMY1bHJIJtv ieOpX8i5it3JTAmRRCAxyv539b75poica5KjsNOMYpGqjx//gZE8N931Iss3jb/6 5EXsyaLK85oSU1PFKmUEAJUjOvPrvuxT2DLardl41/1iDmL1eBLbHAureQ3r8SrR FTveP8dSOmo8+EmIO6sgsb6yn2HLRgRn8Mj9l7aX8SZhdhqZ6nmNrPXFZw4XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk8U5XzZRvj5kDBVLGGyCiJx8ZvEwHwYDVR0j BBgwFoAULZ2RN9RCep004bFfFsXGiajFSdkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTUzNDFlOC0yMmQ4LTQ0OWMtYTc1My1lNDdiYmZjNDg1MzgvMC8yRDlEOTEzN0Q0 NDI3QTlEMzRFMUIxNUYxNkM1QzY4OUE4QzU0OUQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQ5RDkxMzdENDQyN0E5RDM0RTFCMTVGMTZDNUM2ODlBOEM1 NDlEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE1MzQxZTgtMjJkOC00NDljLWE3 NTMtZTQ3YmJmYzQ4NTM4LzAvMkQ5RDkxMzdENDQyN0E5RDM0RTFCMTVGMTZDNUM2 ODlBOEM1NDlEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALc2zSiiZ8vCfKf9GgMI46TnQ6NnejZWPpkx Ba5Sqap8/ZncntFxyaT1tLfkEiwCO9Qy7OrrPErAmnpTbuIDQjbKZ0x2NkWH2ZeB ZV5/gYwi2/f/E+XFCg7WmyCeSqzxwv0DeAhyx/GQcAQ+cuS04tj1rYN4ZHncT7u1 34GNJremLLiW+pe91ki3ZYQbctFPkLqGhYuYimFGEupTc77/LP55roTB4XowUyVK 5NsMzzq/Xfslmse6Het4LnQsp4bbrpzo56e5Y9g4ZoFq3pQld28BaIG83Q/joQcU xBpyxkks7NlnG4+XXz/V5V9Hr8BesYDDZ6eMIzSt8v9LXp9Fmss= -----END CERTIFICATE-----Generated at Mon Jun 30 00:41:07 2025 by rpki-client