$ rpki-client -vvf repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft File: 2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft (raw, json) Hash identifier: xq0t3nlG4VRZcVMSLoJBmrYYIyAF6PP+sZJTP3mslLw= Subject key identifier: B9:E9:B9:12:49:68:4F:75:B1:99:BB:56:88:05:0D:D1:C2:A2:49:9E Authority key identifier: 2E:19:B9:74:05:D4:98:D3:B0:67:A9:A1:00:9C:DC:1E:02:FB:11:CF Certificate issuer: /CN=2E19B97405D498D3B067A9A1009CDC1E02FB11CF Certificate serial: 7283324579BB5FABEAFA4A16882F85FB90F6DD05 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft Manifest number: 02FA Signing time: Fri 22 Aug 2025 15:41:56 +0000 Manifest this update: Fri 22 Aug 2025 15:36:56 +0000 Manifest next update: Mon 25 Aug 2025 21:25:56 +0000 Files and hashes: 1: 2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl (hash: o5fubs3ibmjPYVPvg6Qlgm8qVfzT6Yitn0nsvbyPxFc=) 2: 3130332e32352e3139322e302f32322d3234203d3e20313332363532.roa (hash: d+MQp3eqG/C/hSPziIw4OmNz4U3nA5FN+ZaHxiNIjvo=) 3: 3134362e3139362e34302e302f32322d3234203d3e20313332363532.roa (hash: n+xUq9a7n5f6ndT7big4scouCH78ut4B4QszfPAlm80=) 4: 323430313a313363303a3a2f33322d3336203d3e20313332363532.roa (hash: 0b7ns7LWe1lh+q97xLHcz0n7NxFtE+fPLuYQJ8QmqSI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 21:25:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:83:32:45:79:bb:5f:ab:ea:fa:4a:16:88:2f:85:fb:90:f6:dd:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E19B97405D498D3B067A9A1009CDC1E02FB11CF Validity Not Before: Aug 22 15:36:56 2025 GMT Not After : Aug 25 21:25:56 2025 GMT Subject: CN=B9E9B91249684F75B199BB5688050DD1C2A2499E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d8:ea:88:bc:16:dd:0f:82:c7:1d:69:a2:79: af:cf:ac:85:ea:b6:aa:73:ed:e9:d0:7f:8b:7b:c0: a3:86:ed:f6:f4:4b:53:45:c9:67:65:57:1f:14:9e: 77:c5:c6:f1:07:37:2e:d5:46:b4:bc:d7:36:fb:29: c4:41:8c:a7:05:bc:c1:14:82:cd:5a:66:38:88:02: 92:c1:26:79:d5:65:5c:5f:d3:68:55:f8:82:90:fe: 63:94:4e:44:67:2d:0f:b3:ae:10:cc:7d:f9:4f:8c: 80:8e:78:34:a2:83:71:23:17:38:99:82:23:2d:53: d6:51:b4:e1:8b:ba:7b:1f:f3:1f:97:4d:5e:88:22: 17:d7:0f:a7:80:88:94:12:32:00:13:23:1a:9e:a1: 62:d3:ca:2f:64:55:5d:4c:75:bb:bf:6f:a2:04:c9: cf:76:df:6d:c2:2d:44:8d:db:3e:a3:94:33:3e:40: 17:fe:04:98:ad:7c:ed:80:69:04:29:3e:1b:cf:b4: e2:d7:29:16:54:96:94:31:15:bf:e7:47:73:a8:5f: 6b:68:e1:bd:9d:40:1a:c7:94:fe:86:67:e3:71:d3: 72:cd:dd:51:d3:b7:11:51:db:4f:05:be:04:30:6a: f2:e8:d5:ec:b9:f7:a2:9f:ae:fd:8e:f6:dc:6d:36: 9a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E9:B9:12:49:68:4F:75:B1:99:BB:56:88:05:0D:D1:C2:A2:49:9E X509v3 Authority Key Identifier: keyid:2E:19:B9:74:05:D4:98:D3:B0:67:A9:A1:00:9C:DC:1E:02:FB:11:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:44:33:58:bf:ae:ac:72:6f:b5:8c:4e:6d:cf:ee:28:28:43: f1:7f:bf:a8:50:7c:f3:3e:9a:76:23:8a:a3:74:55:3a:c2:05: 08:07:9f:68:4c:09:16:10:63:18:66:cb:1c:48:15:c3:a0:07: f4:f5:16:e3:0b:d8:e7:69:14:fa:a6:41:87:c8:aa:e4:f7:8f: 2d:5f:4d:63:9e:8b:23:ca:a3:ac:fe:1b:bb:87:9b:37:18:a0: ec:22:95:72:6a:da:a1:e2:9f:b1:90:2a:16:6f:b9:67:2d:07: dd:63:6c:90:ad:ec:62:66:42:ba:fa:9a:f1:53:8b:d6:a2:5b: 56:59:15:5a:53:ad:bd:33:8c:1c:08:d1:78:d9:2e:45:30:63: 73:2b:27:4b:25:3b:4b:64:cb:e8:58:87:3a:e8:6e:b6:3e:a8: 7d:c9:2f:e6:5f:6d:4f:4c:c4:f5:3f:7d:88:c3:6d:c6:5f:c3: 4d:29:2c:e0:77:7e:b0:14:7d:ba:0d:30:8c:e4:13:b9:34:30: 40:26:8a:86:7a:5b:e5:0a:aa:b1:d1:f0:c0:c6:62:c4:5a:7a: 11:90:23:0d:1f:33:24:87:47:f7:b4:1d:83:17:bf:69:f1:36: 03:bb:48:cf:eb:9b:41:31:e1:aa:bd:cd:56:e2:75:2e:91:44: 7c:ff:20:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcoMyRXm7X6vq+koWiC+F+5D23QUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUxOUI5NzQwNUQ0OThEM0IwNjdBOUExMDA5Q0RDMUUw MkZCMTFDRjAeFw0yNTA4MjIxNTM2NTZaFw0yNTA4MjUyMTI1NTZaMDMxMTAvBgNV BAMTKEI5RTlCOTEyNDk2ODRGNzVCMTk5QkI1Njg4MDUwREQxQzJBMjQ5OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL2OqIvBbdD4LHHWmiea/PrIXq tqpz7enQf4t7wKOG7fb0S1NFyWdlVx8UnnfFxvEHNy7VRrS81zb7KcRBjKcFvMEU gs1aZjiIApLBJnnVZVxf02hV+IKQ/mOUTkRnLQ+zrhDMfflPjICOeDSig3EjFziZ giMtU9ZRtOGLunsf8x+XTV6IIhfXD6eAiJQSMgATIxqeoWLTyi9kVV1Mdbu/b6IE yc92323CLUSN2z6jlDM+QBf+BJitfO2AaQQpPhvPtOLXKRZUlpQxFb/nR3OoX2to 4b2dQBrHlP6GZ+Nx03LN3VHTtxFR208FvgQwavLo1ey596Kfrv2O9txtNprDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuem5EkloT3WxmbtWiAUN0cKiSZ4wHwYDVR0j BBgwFoAULhm5dAXUmNOwZ6mhAJzcHgL7Ec8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjYzMmEyYy00MDZlLTQ1ZDctYTAyOC0yNjA0NzRjNzcwMzgvMC8yRTE5Qjk3NDA1 RDQ5OEQzQjA2N0E5QTEwMDlDREMxRTAyRkIxMUNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUxOUI5NzQwNUQ0OThEM0IwNjdBOUExMDA5Q0RDMUUwMkZC MTFDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2I2MzJhMmMtNDA2ZS00NWQ3LWEw MjgtMjYwNDc0Yzc3MDM4LzAvMkUxOUI5NzQwNUQ0OThEM0IwNjdBOUExMDA5Q0RD MUUwMkZCMTFDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAApEM1i/rqxyb7WMTm3P7igoQ/F/v6hQfPM+ mnYjiqN0VTrCBQgHn2hMCRYQYxhmyxxIFcOgB/T1FuML2OdpFPqmQYfIquT3jy1f TWOeiyPKo6z+G7uHmzcYoOwilXJq2qHin7GQKhZvuWctB91jbJCt7GJmQrr6mvFT i9aiW1ZZFVpTrb0zjBwI0XjZLkUwY3MrJ0slO0tky+hYhzrobrY+qH3JL+ZfbU9M xPU/fYjDbcZfw00pLOB3frAUfboNMIzkE7k0MEAmioZ6W+UKqrHR8MDGYsRaehGQ Iw0fMySHR/e0HYMXv2nxNgO7SM/rm0Ex4aq9zVbidS6RRHz/IGU= -----END CERTIFICATE-----Generated at Sat Aug 23 10:11:55 2025 by rpki-client