$ rpki-client -vvf repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft File: 2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft (raw, json) Hash identifier: P3IBbeTiS2g3E6+SvTiUaoG1aiW+tF2cGAn6KxPk01k= Subject key identifier: 16:8C:5E:69:10:05:07:49:99:FE:E7:6D:EA:D1:00:BE:EE:E4:B5:DD Authority key identifier: 2B:DF:AF:A7:0A:11:BF:BF:6C:98:2B:BF:2C:2C:08:4D:E8:0E:03:4E Certificate issuer: /CN=2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E Certificate serial: 2421B658C50B83795FFB157C24679F61ECCC516D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft Manifest number: 0361 Signing time: Tue 01 Jul 2025 07:41:56 +0000 Manifest this update: Tue 01 Jul 2025 07:36:56 +0000 Manifest next update: Fri 04 Jul 2025 16:03:56 +0000 Files and hashes: 1: 2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl (hash: 497HyVnOanxH3NYh0AobZwLraA52zkuLzvp+5AcsXKE=) 2: 3130332e3136392e322e302f32332d3234203d3e203137393935.roa (hash: +JB4xjkXbgweSU7X29CnYlRjnbB6M5XtdFb5z4Dimtg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 15:45:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:21:b6:58:c5:0b:83:79:5f:fb:15:7c:24:67:9f:61:ec:cc:51:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E Validity Not Before: Jul 1 07:36:56 2025 GMT Not After : Jul 4 16:03:56 2025 GMT Subject: CN=168C5E691005074999FEE76DEAD100BEEEE4B5DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:12:91:89:c0:13:18:8c:28:7e:84:50:96:3f: 11:61:1a:5f:2a:4d:26:bf:35:06:93:89:96:4b:2d: d3:48:00:08:7b:cd:18:cb:a3:8d:92:eb:ad:c7:54: a1:f2:89:bb:97:5d:3c:b0:cb:c6:2b:4b:8e:e9:83: 32:22:13:1a:41:31:db:38:2c:75:bf:76:7d:ff:bb: 7e:59:a8:14:e2:83:a9:d9:13:d2:61:32:62:1c:16: a7:75:c6:69:ab:d3:c8:11:02:d8:00:f1:7a:4a:c1: 0a:5a:2e:30:b9:03:fc:c8:4e:e9:11:0b:57:a3:62: 99:b2:d5:29:cd:58:af:21:74:4e:7c:4d:62:fb:00: 82:a8:de:ff:b5:d0:ba:f5:42:3c:0d:c2:eb:ac:59: fc:c3:3e:b6:31:cc:7d:13:2a:db:48:8f:3e:8a:85: 42:89:b7:7e:80:04:57:01:05:ad:fa:a0:1e:f1:8c: 04:fc:e8:06:a6:22:88:35:a9:f7:fc:fe:fe:d1:ba: 97:4f:3d:81:57:4e:6f:99:00:cb:3b:a1:f8:c0:9f: c0:69:13:0f:1f:d5:38:36:b8:8d:eb:ec:80:40:d8: 42:9c:07:54:9c:91:f0:c4:3b:df:f2:77:de:d2:f5: bc:a7:de:d4:6d:9e:36:2b:7c:f1:75:af:c5:7e:7c: 61:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:8C:5E:69:10:05:07:49:99:FE:E7:6D:EA:D1:00:BE:EE:E4:B5:DD X509v3 Authority Key Identifier: keyid:2B:DF:AF:A7:0A:11:BF:BF:6C:98:2B:BF:2C:2C:08:4D:E8:0E:03:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:7a:23:d2:b6:a1:df:e3:f6:6e:39:c8:34:98:58:cd:7d:17: 36:ee:c0:52:13:54:0b:a0:37:85:c6:a7:7b:eb:cd:04:e7:27: 9b:56:6a:f2:fa:27:fe:de:ab:b1:a9:97:8d:58:2e:a2:e7:36: 6a:fa:20:cc:3d:36:71:71:d2:a2:c5:d4:e0:76:91:49:ad:b2: e4:fd:b6:5e:79:4d:3d:c8:2f:1f:70:d4:07:65:a4:47:ff:9a: 25:ce:dc:3e:85:af:f5:2b:ed:a1:d2:76:9c:cb:fe:2d:d7:29: 7e:db:30:0c:4e:58:1f:5d:bf:ac:57:e7:eb:d1:00:3c:0d:1c: 85:fc:b2:cb:10:73:fc:e1:a6:2d:dc:70:02:15:3e:b6:d2:8a: f0:4b:b3:58:20:e7:2e:29:a5:ab:cb:f3:40:47:6a:46:6e:e7: cd:84:8a:11:19:25:21:75:de:fe:ed:83:24:b4:84:64:6a:ea: b1:6e:06:e0:54:6d:fa:5f:3b:5c:9c:1d:91:bc:c0:38:19:af: da:b7:18:9e:38:71:05:a9:25:9e:47:ee:92:d7:5b:4b:38:60: fb:74:35:8d:74:f7:55:ab:6c:31:7a:4a:f7:e2:21:bb:3c:5d: 5d:57:a4:65:2a:be:23:fc:5f:04:10:00:d6:83:58:75:60:15: e6:cc:f8:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJCG2WMULg3lf+xV8JGefYezMUW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4NERF ODBFMDM0RTAeFw0yNTA3MDEwNzM2NTZaFw0yNTA3MDQxNjAzNTZaMDMxMTAvBgNV BAMTKDE2OEM1RTY5MTAwNTA3NDk5OUZFRTc2REVBRDEwMEJFRUVFNEI1REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyEpGJwBMYjCh+hFCWPxFhGl8q TSa/NQaTiZZLLdNIAAh7zRjLo42S663HVKHyibuXXTywy8YrS47pgzIiExpBMds4 LHW/dn3/u35ZqBTig6nZE9JhMmIcFqd1xmmr08gRAtgA8XpKwQpaLjC5A/zITukR C1ejYpmy1SnNWK8hdE58TWL7AIKo3v+10Lr1QjwNwuusWfzDPrYxzH0TKttIjz6K hUKJt36ABFcBBa36oB7xjAT86AamIog1qff8/v7RupdPPYFXTm+ZAMs7ofjAn8Bp Ew8f1Tg2uI3r7IBA2EKcB1SckfDEO9/yd97S9byn3tRtnjYrfPF1r8V+fGFZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFoxeaRAFB0mZ/udt6tEAvu7ktd0wHwYDVR0j BBgwFoAUK9+vpwoRv79smCu/LCwITegOA04wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmNkOWNlYS0zYmY0LTRhOWMtYWVlNi0wMDMzOWMwNjU1MGIvMC8yQkRGQUZBNzBB MTFCRkJGNkM5ODJCQkYyQzJDMDg0REU4MEUwMzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4NERFODBF MDM0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJjZDljZWEtM2JmNC00YTljLWFl ZTYtMDAzMzljMDY1NTBiLzAvMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4 NERFODBFMDM0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMh6I9K2od/j9m45yDSYWM19FzbuwFITVAug N4XGp3vrzQTnJ5tWavL6J/7eq7Gpl41YLqLnNmr6IMw9NnFx0qLF1OB2kUmtsuT9 tl55TT3ILx9w1AdlpEf/miXO3D6Fr/Ur7aHSdpzL/i3XKX7bMAxOWB9dv6xX5+vR ADwNHIX8sssQc/zhpi3ccAIVPrbSivBLs1gg5y4ppavL80BHakZu582EihEZJSF1 3v7tgyS0hGRq6rFuBuBUbfpfO1ycHZG8wDgZr9q3GJ44cQWpJZ5H7pLXW0s4YPt0 NY1091WrbDF6SvfiIbs8XV1XpGUqviP8XwQQANaDWHVgFebM+B0= -----END CERTIFICATE-----Generated at Tue Jul 1 09:34:54 2025 by rpki-client