$ rpki-client -vvf repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft File: 2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft (raw, json) Hash identifier: 2+/v+xkrd7IOwTOiH5NLqXILP8Xycn89AvaYol9LTfo= Subject key identifier: 3B:96:58:CF:AC:53:81:DA:D4:75:96:AE:81:D9:C6:6A:56:2D:B2:7D Authority key identifier: 2A:27:80:23:3B:F2:E0:6D:53:3E:C6:B0:5F:50:02:06:FB:B0:6D:6D Certificate issuer: /CN=2A2780233BF2E06D533EC6B05F500206FBB06D6D Certificate serial: 34D12B9D68BE02C802C3702F5AB466BBE3A76F14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2780233BF2E06D533EC6B05F500206FBB06D6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft Manifest number: 018B Signing time: Sat 28 Jun 2025 06:20:40 +0000 Manifest this update: Sat 28 Jun 2025 06:15:40 +0000 Manifest next update: Tue 01 Jul 2025 17:34:40 +0000 Files and hashes: 1: 3130332e3134312e3137302e302f32342d3234203d3e20313530353139.roa (hash: fbcGL1NLXeGrNrcBk/cYo3ucVVcH9bT5MeT1X/6RPlA=) 2: 2A2780233BF2E06D533EC6B05F500206FBB06D6D.crl (hash: g616zfpBMb18A57Bs9nSIhWSotKW31wQGAYgiJ2Pruo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.crl rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2780233BF2E06D533EC6B05F500206FBB06D6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 17:34:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:d1:2b:9d:68:be:02:c8:02:c3:70:2f:5a:b4:66:bb:e3:a7:6f:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2780233BF2E06D533EC6B05F500206FBB06D6D Validity Not Before: Jun 28 06:15:40 2025 GMT Not After : Jul 1 17:34:40 2025 GMT Subject: CN=3B9658CFAC5381DAD47596AE81D9C66A562DB27D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f0:02:e6:b2:79:ad:5b:21:7f:f0:a4:fb:11: 97:fe:b0:c0:1d:25:8d:b4:e0:a8:43:43:82:4c:1e: f0:0a:fc:93:9c:ee:60:60:29:74:73:e4:20:ce:55: 9c:88:46:c7:1d:07:34:8d:df:bf:a0:f8:d0:e7:ca: da:1e:1c:2e:34:ca:95:2d:e0:09:ce:d3:38:13:12: b5:2b:f6:05:fa:08:0d:ff:c0:55:0f:ff:2b:e3:03: ca:1e:b4:30:89:2f:f5:fb:42:f5:55:70:e0:1d:42: 4c:a6:58:55:cd:38:a4:b2:a6:ad:3a:8c:b5:e8:eb: 0c:ec:ed:35:94:70:cd:db:13:0d:79:3a:6a:1a:fd: 0c:ea:d1:e6:fe:6f:34:cc:37:73:a2:17:18:f9:96: 53:34:8a:43:7a:7f:d7:8a:79:f6:c3:56:d0:e9:80: 15:89:81:61:4d:33:d9:71:d4:b1:a0:65:b0:9b:65: 70:e4:36:f5:a0:ad:e0:33:58:a8:f1:80:ba:66:06: 10:39:7f:0a:3b:b6:37:33:67:0a:a1:af:54:a2:4f: 99:88:b7:94:11:d6:d5:28:32:3a:fc:1a:29:c4:6e: c3:b8:f0:56:65:c8:ec:43:e2:68:39:3c:b2:26:15: 41:ca:2a:b5:7e:3d:53:b2:cf:5c:33:aa:20:ea:65: 31:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:96:58:CF:AC:53:81:DA:D4:75:96:AE:81:D9:C6:6A:56:2D:B2:7D X509v3 Authority Key Identifier: keyid:2A:27:80:23:3B:F2:E0:6D:53:3E:C6:B0:5F:50:02:06:FB:B0:6D:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2780233BF2E06D533EC6B05F500206FBB06D6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:0e:5e:5f:1d:06:75:3c:1f:77:ec:54:6c:62:ad:03:f2:fe: c9:b2:66:5c:b3:ff:b7:60:74:a5:a4:94:85:56:9f:60:ef:93: e4:7e:b0:17:2f:11:2a:bb:35:37:9c:54:ea:2f:5a:d6:a7:75: de:32:d0:1d:12:84:1b:73:54:f2:3c:3a:f6:84:4a:7b:b4:8b: b9:c0:2b:cf:5d:fe:74:dc:b5:ee:ba:b1:07:ce:39:26:7c:51: b1:db:c2:17:00:17:16:ee:95:6d:82:4a:c3:33:3b:ad:42:9d: 6e:80:6b:ce:fa:d4:74:8a:32:9d:43:1f:4f:9f:12:1a:0b:09: 49:a7:83:03:59:dc:ae:c3:fb:50:70:d8:8a:3c:f1:0f:9e:21: a8:49:4e:3f:b7:c0:fe:d5:48:d2:b2:77:ba:08:62:27:51:28: e9:3d:a8:4a:ca:8a:e1:06:1a:97:b3:04:81:f3:79:ec:8c:61: 6d:b5:d8:c1:89:28:6a:1a:57:7f:cd:dc:a5:8e:3f:78:23:10: 58:db:cf:ce:87:0d:52:6a:12:55:b6:c1:59:c1:83:fc:54:17: 2b:29:d6:50:52:a4:8b:39:54:75:8d:8b:f9:0e:b1:a0:42:54: 8e:4b:54:b7:34:6a:31:5a:59:12:75:b3:5c:36:ac:40:11:a8: 95:01:c0:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNNErnWi+AsgCw3AvWrRmu+OnbxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyNzgwMjMzQkYyRTA2RDUzM0VDNkIwNUY1MDAyMDZG QkIwNkQ2RDAeFw0yNTA2MjgwNjE1NDBaFw0yNTA3MDExNzM0NDBaMDMxMTAvBgNV BAMTKDNCOTY1OENGQUM1MzgxREFENDc1OTZBRTgxRDlDNjZBNTYyREIyN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe8ALmsnmtWyF/8KT7EZf+sMAd JY204KhDQ4JMHvAK/JOc7mBgKXRz5CDOVZyIRscdBzSN37+g+NDnytoeHC40ypUt 4AnO0zgTErUr9gX6CA3/wFUP/yvjA8oetDCJL/X7QvVVcOAdQkymWFXNOKSypq06 jLXo6wzs7TWUcM3bEw15Omoa/Qzq0eb+bzTMN3OiFxj5llM0ikN6f9eKefbDVtDp gBWJgWFNM9lx1LGgZbCbZXDkNvWgreAzWKjxgLpmBhA5fwo7tjczZwqhr1SiT5mI t5QR1tUoMjr8GinEbsO48FZlyOxD4mg5PLImFUHKKrV+PVOyz1wzqiDqZTFHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO5ZYz6xTgdrUdZaugdnGalYtsn0wHwYDVR0j BBgwFoAUKieAIzvy4G1TPsawX1ACBvuwbW0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzZmOGMwYS1lMDNmLTQxNDAtYmExNi04MzNhYzIyNDFhZmIvMC8yQTI3ODAyMzNC RjJFMDZENTMzRUM2QjA1RjUwMDIwNkZCQjA2RDZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkEyNzgwMjMzQkYyRTA2RDUzM0VDNkIwNUY1MDAyMDZGQkIw NkQ2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M2ZjhjMGEtZTAzZi00MTQwLWJh MTYtODMzYWMyMjQxYWZiLzAvMkEyNzgwMjMzQkYyRTA2RDUzM0VDNkIwNUY1MDAy MDZGQkIwNkQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0OXl8dBnU8H3fsVGxirQPy/smyZlyz/7dg dKWklIVWn2Dvk+R+sBcvESq7NTecVOovWtandd4y0B0ShBtzVPI8OvaESnu0i7nA K89d/nTcte66sQfOOSZ8UbHbwhcAFxbulW2CSsMzO61CnW6Aa8761HSKMp1DH0+f EhoLCUmngwNZ3K7D+1Bw2Io88Q+eIahJTj+3wP7VSNKyd7oIYidRKOk9qErKiuEG GpezBIHzeeyMYW212MGJKGoaV3/N3KWOP3gjEFjbz86HDVJqElW2wVnBg/xUFysp 1lBSpIs5VHWNi/kOsaBCVI5LVLc0ajFaWRJ1s1w2rEARqJUBwJg= -----END CERTIFICATE-----Generated at Sun Jun 29 19:39:38 2025 by rpki-client