$ rpki-client -vvf repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft File: 2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft (raw, json) Hash identifier: Cq98pMAzWP9zSSqxSPCX3REwXrxG581zH7fi/ghv4rw= Subject key identifier: A1:B3:3F:DA:22:8D:2F:7D:45:E9:75:26:4D:89:A8:8C:1C:E2:1F:4D Authority key identifier: 2A:27:80:23:3B:F2:E0:6D:53:3E:C6:B0:5F:50:02:06:FB:B0:6D:6D Certificate issuer: /CN=2A2780233BF2E06D533EC6B05F500206FBB06D6D Certificate serial: 33FECE464CF318D561B7C4C5BFE4424A1F04AB43 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2780233BF2E06D533EC6B05F500206FBB06D6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft Manifest number: 01A3 Signing time: Thu 21 Aug 2025 18:10:40 +0000 Manifest this update: Thu 21 Aug 2025 18:05:40 +0000 Manifest next update: Sun 24 Aug 2025 23:49:40 +0000 Files and hashes: 1: 2A2780233BF2E06D533EC6B05F500206FBB06D6D.crl (hash: UxEoaKUf/JM563zIn4+fJ4qnUV5PgTwQvUlKAPDfOcE=) 2: 3130332e3134312e3137302e302f32342d3234203d3e20313530353139.roa (hash: fbcGL1NLXeGrNrcBk/cYo3ucVVcH9bT5MeT1X/6RPlA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.crl rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2780233BF2E06D533EC6B05F500206FBB06D6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 23:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:fe:ce:46:4c:f3:18:d5:61:b7:c4:c5:bf:e4:42:4a:1f:04:ab:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2780233BF2E06D533EC6B05F500206FBB06D6D Validity Not Before: Aug 21 18:05:40 2025 GMT Not After : Aug 24 23:49:40 2025 GMT Subject: CN=A1B33FDA228D2F7D45E975264D89A88C1CE21F4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d5:ab:92:31:07:e3:a2:c3:6a:87:df:f0:52: b3:6b:49:72:e2:71:89:70:89:e6:2b:b4:99:57:3b: 54:00:d5:e8:7b:2e:dd:4f:c8:eb:92:33:dc:1c:fc: b9:66:b0:cb:c0:25:f8:62:2c:84:16:11:be:85:79: 32:f5:3d:70:c5:15:04:97:19:d5:b8:ef:70:44:b0: 31:9c:ec:4f:75:0d:fc:e5:27:65:19:8a:bf:36:86: 95:b8:b5:99:9f:78:1b:ff:32:25:5b:b1:5a:21:c5: a7:fe:03:e7:1f:f2:4f:5f:1d:c3:a1:e6:f2:14:e5: 0f:a5:76:c6:e5:21:67:11:75:44:d2:46:53:db:0a: 87:59:16:62:e0:41:84:c9:8f:e5:14:6b:74:e0:43: b2:9b:49:d3:37:06:c1:e1:7c:cc:1c:ed:8d:52:d2: cd:32:42:3c:85:55:3a:fa:b5:41:60:fe:ad:a4:8f: 31:ac:7f:d6:27:f5:21:70:ea:7e:33:0e:64:11:69: 86:84:a5:f6:23:11:3b:73:c1:3a:7d:eb:c5:10:42: 5f:ee:fa:39:0b:a4:83:8e:15:34:26:81:08:05:73: 57:ea:0c:4d:e2:f6:18:8f:86:b5:fe:38:db:b7:9f: d3:a7:74:82:e8:46:3b:a2:f8:ec:5c:c2:f4:46:59: 99:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:B3:3F:DA:22:8D:2F:7D:45:E9:75:26:4D:89:A8:8C:1C:E2:1F:4D X509v3 Authority Key Identifier: keyid:2A:27:80:23:3B:F2:E0:6D:53:3E:C6:B0:5F:50:02:06:FB:B0:6D:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2780233BF2E06D533EC6B05F500206FBB06D6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:4d:18:4b:4f:d3:88:fd:cf:34:72:86:28:b0:e9:33:0f:cf: f9:e6:3e:e5:5b:1a:5f:bc:28:1f:06:f3:ba:66:2d:24:5a:e9: 1f:6a:db:8c:c4:15:90:59:e9:46:77:7b:1f:a7:14:84:a8:97: fb:e4:42:32:b5:7b:10:a7:80:1b:0b:e6:f7:64:1f:a0:73:17: 18:07:5f:38:65:55:29:e2:5c:74:4d:fc:6a:e7:14:97:b3:0b: 13:3b:ea:1b:8f:fd:bb:5b:d1:00:a6:cc:7e:e7:68:2f:83:f0: d6:5d:b3:16:3b:d4:59:16:ab:0e:60:50:6c:01:0d:77:4a:80: 1d:96:02:3f:3d:c2:20:7d:61:8c:c9:1a:88:78:c3:1b:e1:a1: a7:6b:90:e9:32:92:e4:bb:ca:7a:ed:36:3a:3a:20:9b:ca:5f: 2f:f0:9b:ff:9d:6b:19:3b:83:bd:e5:6a:16:df:f0:ea:b3:c7: 24:4f:5e:7c:e7:31:bf:33:6b:01:ea:e6:15:23:38:e3:17:df: 0d:12:54:f6:39:5f:f9:15:5e:02:b1:37:26:29:a0:c3:aa:7d: 73:bb:2d:14:1f:2b:32:99:51:43:49:e7:fd:2f:47:7a:bb:73: 30:88:09:ed:18:7f:5c:20:30:fa:1f:44:ca:bc:c3:09:8c:8f: 03:fc:c6:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM/7ORkzzGNVht8TFv+RCSh8Eq0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyNzgwMjMzQkYyRTA2RDUzM0VDNkIwNUY1MDAyMDZG QkIwNkQ2RDAeFw0yNTA4MjExODA1NDBaFw0yNTA4MjQyMzQ5NDBaMDMxMTAvBgNV BAMTKEExQjMzRkRBMjI4RDJGN0Q0NUU5NzUyNjREODlBODhDMUNFMjFGNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV1auSMQfjosNqh9/wUrNrSXLi cYlwieYrtJlXO1QA1eh7Lt1PyOuSM9wc/LlmsMvAJfhiLIQWEb6FeTL1PXDFFQSX GdW473BEsDGc7E91DfzlJ2UZir82hpW4tZmfeBv/MiVbsVohxaf+A+cf8k9fHcOh 5vIU5Q+ldsblIWcRdUTSRlPbCodZFmLgQYTJj+UUa3TgQ7KbSdM3BsHhfMwc7Y1S 0s0yQjyFVTr6tUFg/q2kjzGsf9Yn9SFw6n4zDmQRaYaEpfYjETtzwTp968UQQl/u +jkLpIOOFTQmgQgFc1fqDE3i9hiPhrX+ONu3n9OndILoRjui+OxcwvRGWZn1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUobM/2iKNL31F6XUmTYmojBziH00wHwYDVR0j BBgwFoAUKieAIzvy4G1TPsawX1ACBvuwbW0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzZmOGMwYS1lMDNmLTQxNDAtYmExNi04MzNhYzIyNDFhZmIvMC8yQTI3ODAyMzNC RjJFMDZENTMzRUM2QjA1RjUwMDIwNkZCQjA2RDZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkEyNzgwMjMzQkYyRTA2RDUzM0VDNkIwNUY1MDAyMDZGQkIw NkQ2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M2ZjhjMGEtZTAzZi00MTQwLWJh MTYtODMzYWMyMjQxYWZiLzAvMkEyNzgwMjMzQkYyRTA2RDUzM0VDNkIwNUY1MDAy MDZGQkIwNkQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAABNGEtP04j9zzRyhiiw6TMPz/nmPuVbGl+8 KB8G87pmLSRa6R9q24zEFZBZ6UZ3ex+nFISol/vkQjK1exCngBsL5vdkH6BzFxgH XzhlVSniXHRN/GrnFJezCxM76huP/btb0QCmzH7naC+D8NZdsxY71FkWqw5gUGwB DXdKgB2WAj89wiB9YYzJGoh4wxvhoadrkOkykuS7ynrtNjo6IJvKXy/wm/+daxk7 g73lahbf8OqzxyRPXnznMb8zawHq5hUjOOMX3w0SVPY5X/kVXgKxNyYpoMOqfXO7 LRQfKzKZUUNJ5/0vR3q7czCICe0Yf1wgMPofRMq8wwmMjwP8xi4= -----END CERTIFICATE-----Generated at Sat Aug 23 16:07:35 2025 by rpki-client