$ rpki-client -vvf repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft File: 2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft (raw, json) Hash identifier: 8I8bEKeI7WLYjYytWrXlhcXLBp1jMFT8EeQsf9XXh2w= Subject key identifier: 46:0A:BA:17:AD:7B:21:A9:BA:65:7A:1B:35:2C:BD:00:0E:82:1D:95 Authority key identifier: 2A:F5:12:1C:D1:CF:A7:79:8C:C1:DD:77:7B:46:43:69:D1:DE:A6:C1 Certificate issuer: /CN=2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1 Certificate serial: 77E8D2C24BD065F921EED5BB5FAD5C904EC7CB99 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft Manifest number: 0236 Signing time: Sun 29 Jun 2025 02:21:11 +0000 Manifest this update: Sun 29 Jun 2025 02:16:11 +0000 Manifest next update: Wed 02 Jul 2025 10:53:11 +0000 Files and hashes: 1: 2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl (hash: djAZX7F5ZPkQvIi04OgputpKcDjSsqS3dAQ5x2kUdlU=) 2: 323430353a633863303a3a2f33322d3332203d3e20313339393831.roa (hash: xAQ8nY4YiCbyThm1ahzRI7qCPhGk2b5venOiA8cHRk4=) 3: 3130332e3134382e32342e302f32332d3234203d3e20313339393831.roa (hash: 6FLbYuy1S5qOt7tY0dfAZpELgfONO6cx6swxFm3099E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 10:53:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:e8:d2:c2:4b:d0:65:f9:21:ee:d5:bb:5f:ad:5c:90:4e:c7:cb:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1 Validity Not Before: Jun 29 02:16:11 2025 GMT Not After : Jul 2 10:53:11 2025 GMT Subject: CN=460ABA17AD7B21A9BA657A1B352CBD000E821D95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:61:cd:94:4e:a9:d7:13:17:a6:31:8f:8b:a0: 0a:99:42:ce:ee:36:b3:46:11:20:99:f3:46:96:d8: 98:c3:d0:58:b6:13:e5:51:93:9b:c7:55:31:03:07: 0b:06:ab:df:6e:62:7a:6c:4e:c4:5c:a9:69:dc:4b: 3f:3f:a2:d4:40:56:ef:2c:2f:e9:38:4c:98:2f:99: 48:82:28:90:75:8e:3f:0d:86:5e:ab:c7:6e:d0:c1: 0e:b0:89:a7:8d:ae:49:e0:d3:29:a8:31:35:bd:f3: f8:a5:f7:35:b2:fc:11:33:34:85:d8:26:3e:f7:28: 89:19:a0:7b:2f:d3:89:8d:23:6e:cb:67:30:1b:1d: 02:75:08:8b:94:f4:88:21:26:c2:ec:7c:ab:42:f1: d9:cf:39:45:63:f6:ee:ea:63:a7:fd:6f:c0:30:a5: 6a:a3:87:08:57:7c:dd:bd:8c:50:ef:86:44:3b:72: e9:95:aa:5b:ec:11:72:77:75:29:33:c9:e1:39:be: 8c:02:67:59:51:12:40:91:8f:db:62:80:07:32:6a: 10:80:ab:69:b2:2c:04:e3:25:03:7a:10:94:95:4a: d9:6d:92:c4:f4:d3:64:02:ca:ad:c6:d0:7f:2a:f5: 5e:53:48:10:30:40:2e:24:57:3c:90:fd:2a:db:7c: 96:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:0A:BA:17:AD:7B:21:A9:BA:65:7A:1B:35:2C:BD:00:0E:82:1D:95 X509v3 Authority Key Identifier: keyid:2A:F5:12:1C:D1:CF:A7:79:8C:C1:DD:77:7B:46:43:69:D1:DE:A6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:b7:22:fe:b0:93:21:b9:ad:19:d7:5c:99:2d:ba:28:36:eb: a2:3a:f5:8b:27:ca:78:e4:53:52:1d:17:84:e9:c5:2c:e6:71: d9:a2:0c:f3:95:7f:57:d6:0e:e0:26:89:84:83:f5:4e:10:91: 3b:01:87:78:7a:30:8c:ee:3a:72:4b:da:dd:21:d1:f9:47:f5: e5:94:b4:1b:7b:8d:ad:ce:99:52:89:65:87:46:56:a4:fc:57: 94:2f:7a:56:05:0b:c3:7f:51:d7:95:9a:72:78:51:a9:28:a3: 4c:19:4d:a4:15:5e:09:ab:82:90:4e:b9:db:9c:13:da:a1:3a: 79:ef:69:a5:06:cd:e5:07:69:07:4c:e3:6b:96:38:d9:31:3c: 88:1d:39:d2:a6:41:1f:94:1e:a0:88:7d:b9:b4:b7:d4:91:66: ed:33:46:ee:be:8e:12:15:66:1a:c9:71:6d:7e:2c:f6:64:51: 7a:7c:53:a8:79:1e:91:9f:d4:87:0d:73:77:18:92:30:48:96: 87:6c:76:2f:5a:85:a1:1c:79:46:b3:de:be:46:97:0e:c7:8d: 2f:91:b0:99:58:34:d1:74:e5:dc:ce:b7:f6:d1:a3:c7:43:99: 09:ea:cb:79:79:c8:fc:fa:08:16:21:c6:ab:84:7c:63:36:0c: 20:02:01:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd+jSwkvQZfkh7tW7X61ckE7Hy5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQzNjlE MURFQTZDMTAeFw0yNTA2MjkwMjE2MTFaFw0yNTA3MDIxMDUzMTFaMDMxMTAvBgNV BAMTKDQ2MEFCQTE3QUQ3QjIxQTlCQTY1N0ExQjM1MkNCRDAwMEU4MjFEOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Yc2UTqnXExemMY+LoAqZQs7u NrNGESCZ80aW2JjD0Fi2E+VRk5vHVTEDBwsGq99uYnpsTsRcqWncSz8/otRAVu8s L+k4TJgvmUiCKJB1jj8Nhl6rx27QwQ6wiaeNrkng0ymoMTW98/il9zWy/BEzNIXY Jj73KIkZoHsv04mNI27LZzAbHQJ1CIuU9IghJsLsfKtC8dnPOUVj9u7qY6f9b8Aw pWqjhwhXfN29jFDvhkQ7cumVqlvsEXJ3dSkzyeE5vowCZ1lREkCRj9tigAcyahCA q2myLATjJQN6EJSVStltksT002QCyq3G0H8q9V5TSBAwQC4kVzyQ/SrbfJavAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURgq6F617Iam6ZXobNSy9AA6CHZUwHwYDVR0j BBgwFoAUKvUSHNHPp3mMwd13e0ZDadHepsEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OTJlMDdmOC0xYTQ4LTQzOTEtYTZhNS04ZTRlMzljODU4OGEvMC8yQUY1MTIxQ0Qx Q0ZBNzc5OENDMURENzc3QjQ2NDM2OUQxREVBNkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQzNjlEMURF QTZDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTkyZTA3ZjgtMWE0OC00MzkxLWE2 YTUtOGU0ZTM5Yzg1ODhhLzAvMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQz NjlEMURFQTZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADG3Iv6wkyG5rRnXXJktuig266I69Ysnynjk U1IdF4TpxSzmcdmiDPOVf1fWDuAmiYSD9U4QkTsBh3h6MIzuOnJL2t0h0flH9eWU tBt7ja3OmVKJZYdGVqT8V5QvelYFC8N/UdeVmnJ4Uakoo0wZTaQVXgmrgpBOuduc E9qhOnnvaaUGzeUHaQdM42uWONkxPIgdOdKmQR+UHqCIfbm0t9SRZu0zRu6+jhIV ZhrJcW1+LPZkUXp8U6h5HpGf1IcNc3cYkjBIlodsdi9ahaEceUaz3r5Glw7HjS+R sJlYNNF05dzOt/bRo8dDmQnqy3l5yPz6CBYhxquEfGM2DCACAcE= -----END CERTIFICATE-----Generated at Mon Jun 30 10:23:25 2025 by rpki-client