$ rpki-client -vvf repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft File: 2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft (raw, json) Hash identifier: zO4WavgiwU0sbCNu3GMC8xORiWIUb057gWGHrsRnccc= Subject key identifier: D6:C0:98:EF:B3:2E:E5:93:0E:A6:7C:9E:25:B4:4E:C5:41:A1:52:49 Authority key identifier: 2B:DF:AF:A7:0A:11:BF:BF:6C:98:2B:BF:2C:2C:08:4D:E8:0E:03:4E Certificate issuer: /CN=2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E Certificate serial: 211CC8F3896E53C9863FA039BEE44B72B67ED8CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft Manifest number: 0379 Signing time: Sat 23 Aug 2025 02:12:04 +0000 Manifest this update: Sat 23 Aug 2025 02:07:04 +0000 Manifest next update: Tue 26 Aug 2025 09:14:04 +0000 Files and hashes: 1: 2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl (hash: +Rb6mQK04gk8sDBefNwJjfntDHb87cqtRdWbpAoJGwE=) 2: 3130332e3136392e322e302f32332d3234203d3e203137393935.roa (hash: IRRwlFxdlw58Hq9FIW3eCT24cVIv6qhlkYjQet5GmTc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 09:14:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:1c:c8:f3:89:6e:53:c9:86:3f:a0:39:be:e4:4b:72:b6:7e:d8:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E Validity Not Before: Aug 23 02:07:04 2025 GMT Not After : Aug 26 09:14:04 2025 GMT Subject: CN=D6C098EFB32EE5930EA67C9E25B44EC541A15249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e8:23:1c:ea:24:3b:8e:51:6c:61:aa:75:e2: 7c:ee:0d:ee:c9:c8:f7:be:0a:9e:e9:5b:80:07:6d: 39:db:b6:8e:75:4c:9d:dc:13:8d:b4:e7:41:07:94: f2:76:49:ba:3e:1f:3a:d1:d7:d2:aa:5f:73:62:af: 49:b3:f5:0e:ce:58:d5:65:ab:ea:84:ab:fd:b9:7f: f8:20:70:dc:1d:43:ea:08:cc:e7:8e:bd:2d:8e:a6: 10:5c:2f:60:63:c7:f7:6c:56:18:ef:e9:5f:8d:23: a3:4d:93:86:ce:6a:e5:df:aa:a8:a1:82:34:d2:af: db:c6:bf:d4:e3:5f:a6:21:74:db:38:42:c3:eb:10: ac:f9:c2:c7:70:70:33:7b:d6:b6:52:6c:89:9f:1b: 07:3a:73:33:aa:09:a7:82:16:a1:ab:84:92:62:fc: 8b:4d:72:73:1a:8b:8c:ef:3a:ee:1a:1a:fc:28:f5: 4d:ce:4a:71:81:9f:17:e2:24:c2:8a:26:97:f2:77: 53:c4:8d:93:a5:ee:e4:ff:a2:d9:92:08:7f:02:b5: 5b:6c:01:67:5f:9c:ff:b3:d7:41:5f:06:7c:3b:82: df:f4:03:4c:d0:8e:ca:00:91:5e:df:07:d2:6c:22: 83:db:cc:f9:a5:28:8c:f7:06:69:8b:2c:c2:a0:a8: 17:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C0:98:EF:B3:2E:E5:93:0E:A6:7C:9E:25:B4:4E:C5:41:A1:52:49 X509v3 Authority Key Identifier: keyid:2B:DF:AF:A7:0A:11:BF:BF:6C:98:2B:BF:2C:2C:08:4D:E8:0E:03:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:05:1d:75:48:22:3c:52:32:e0:16:ec:cf:21:c0:ca:8f:bc: b5:c0:e7:7b:0b:00:43:a6:16:92:7b:8a:14:23:20:2b:5d:14: a6:31:ba:9b:21:7e:0b:b9:c5:fa:11:46:7d:ee:30:59:34:63: 49:6a:9d:c8:be:23:50:e7:81:2d:79:2f:2a:58:95:c9:25:61: cb:a2:f4:24:df:ff:34:8d:e3:8e:b1:a4:e9:4c:2f:a1:36:57: b4:8d:92:0b:5d:1b:91:e2:20:87:97:14:e4:9f:93:7b:01:99: 7d:52:9f:2d:bb:4f:74:c7:8c:f9:2f:ea:d7:29:d5:6c:64:08: 3e:9d:88:0e:08:a1:92:76:a0:ff:f4:ca:ec:0d:1c:7b:82:47: e9:07:9d:73:b7:aa:55:38:ff:f1:b6:4e:85:9f:62:1c:1e:de: 40:a4:f8:b6:43:8e:26:1a:48:9f:7f:e0:a0:c8:1a:89:7b:bf: 6b:12:e8:b1:5e:4d:ef:87:5f:cd:12:14:4c:8a:75:f5:a9:fa: 8c:0c:00:11:1a:df:4d:67:2d:24:25:2d:13:0f:b1:fe:e3:89: 0c:62:f9:f3:dc:c9:ef:e7:23:4e:92:83:c6:c3:16:de:bd:25: 25:1e:2a:8a:a4:41:6e:41:ae:51:32:8f:ed:64:63:f2:70:8e: f2:a6:c6:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIRzI84luU8mGP6A5vuRLcrZ+2M8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4NERF ODBFMDM0RTAeFw0yNTA4MjMwMjA3MDRaFw0yNTA4MjYwOTE0MDRaMDMxMTAvBgNV BAMTKEQ2QzA5OEVGQjMyRUU1OTMwRUE2N0M5RTI1QjQ0RUM1NDFBMTUyNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp6CMc6iQ7jlFsYap14nzuDe7J yPe+Cp7pW4AHbTnbto51TJ3cE42050EHlPJ2Sbo+HzrR19KqX3Nir0mz9Q7OWNVl q+qEq/25f/ggcNwdQ+oIzOeOvS2OphBcL2Bjx/dsVhjv6V+NI6NNk4bOauXfqqih gjTSr9vGv9TjX6YhdNs4QsPrEKz5wsdwcDN71rZSbImfGwc6czOqCaeCFqGrhJJi /ItNcnMai4zvOu4aGvwo9U3OSnGBnxfiJMKKJpfyd1PEjZOl7uT/otmSCH8CtVts AWdfnP+z10FfBnw7gt/0A0zQjsoAkV7fB9JsIoPbzPmlKIz3BmmLLMKgqBeHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1sCY77Mu5ZMOpnyeJbROxUGhUkkwHwYDVR0j BBgwFoAUK9+vpwoRv79smCu/LCwITegOA04wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmNkOWNlYS0zYmY0LTRhOWMtYWVlNi0wMDMzOWMwNjU1MGIvMC8yQkRGQUZBNzBB MTFCRkJGNkM5ODJCQkYyQzJDMDg0REU4MEUwMzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4NERFODBF MDM0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJjZDljZWEtM2JmNC00YTljLWFl ZTYtMDAzMzljMDY1NTBiLzAvMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4 NERFODBFMDM0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAMFHXVIIjxSMuAW7M8hwMqPvLXA53sLAEOm FpJ7ihQjICtdFKYxupshfgu5xfoRRn3uMFk0Y0lqnci+I1DngS15LypYlcklYcui 9CTf/zSN446xpOlML6E2V7SNkgtdG5HiIIeXFOSfk3sBmX1Sny27T3THjPkv6tcp 1WxkCD6diA4IoZJ2oP/0yuwNHHuCR+kHnXO3qlU4//G2ToWfYhwe3kCk+LZDjiYa SJ9/4KDIGol7v2sS6LFeTe+HX80SFEyKdfWp+owMABEa301nLSQlLRMPsf7jiQxi +fPcye/nI06Sg8bDFt69JSUeKoqkQW5BrlEyj+1kY/JwjvKmxrw= -----END CERTIFICATE-----Generated at Sat Aug 23 10:35:29 2025 by rpki-client