$ rpki-client -vvf repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft File: 2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft (raw, json) Hash identifier: tmACYJjnhEhCW9e95EgWPXryDKx6oOizj+lv5+1BpXE= Subject key identifier: FE:4B:13:52:68:B4:D4:6B:5C:A0:99:24:96:3F:0E:BB:00:9B:BE:17 Authority key identifier: 2A:F5:12:1C:D1:CF:A7:79:8C:C1:DD:77:7B:46:43:69:D1:DE:A6:C1 Certificate issuer: /CN=2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1 Certificate serial: 07C688B9B7F0960EA97B722C6A5B9C9472CA6B59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft Manifest number: 024F Signing time: Sat 23 Aug 2025 07:21:11 +0000 Manifest this update: Sat 23 Aug 2025 07:16:11 +0000 Manifest next update: Tue 26 Aug 2025 11:34:11 +0000 Files and hashes: 1: 2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl (hash: 76Wdrs9sA2NrQjqDVdfjbChlcucYm0aeNBsUz6qd6lk=) 2: 3130332e3134382e32342e302f32332d3234203d3e20313339393831.roa (hash: 6FLbYuy1S5qOt7tY0dfAZpELgfONO6cx6swxFm3099E=) 3: 323430353a633863303a3a2f33322d3332203d3e20313339393831.roa (hash: xAQ8nY4YiCbyThm1ahzRI7qCPhGk2b5venOiA8cHRk4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:c6:88:b9:b7:f0:96:0e:a9:7b:72:2c:6a:5b:9c:94:72:ca:6b:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1 Validity Not Before: Aug 23 07:16:11 2025 GMT Not After : Aug 26 11:34:11 2025 GMT Subject: CN=FE4B135268B4D46B5CA09924963F0EBB009BBE17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:12:07:64:9d:48:a7:5c:51:cc:9a:5e:a9:8a: 75:c4:62:db:96:fe:f2:1d:4a:24:41:4e:9f:ea:81: af:16:52:44:34:72:ec:ec:96:9c:43:4a:0e:eb:5a: 95:28:19:bd:ca:9b:5d:ea:ba:f7:aa:4c:7f:99:c4: b8:fa:d1:0c:19:ff:b7:35:b8:db:1a:13:5d:a5:52: 79:bc:53:8f:f2:a2:67:a7:f9:9a:56:0d:48:13:3c: e0:0f:83:14:da:26:83:61:30:eb:9b:c2:78:59:c3: 76:d7:e3:5e:78:80:2e:22:4a:73:f1:3a:3c:23:f6: d9:25:e3:18:5a:dd:da:ee:66:6d:1d:da:16:60:a3: bc:8a:d4:b0:8a:0f:a8:b8:9e:95:9b:6e:de:ee:8f: b5:2a:6d:d1:3b:44:05:bb:19:36:9f:a8:45:84:81: ee:59:e1:e3:19:6a:33:f0:2e:ef:95:78:9d:2e:d8: 4c:ec:08:cc:1f:71:93:78:47:73:36:7a:d6:19:db: c3:a9:f7:56:ce:e9:99:b9:36:35:6b:5b:ea:d4:f4: f9:6c:57:2d:f9:ff:87:67:2e:f7:e8:2c:fa:12:51: 91:18:30:40:70:90:ac:d0:ff:d8:27:dc:4d:65:d7: ee:a6:9f:61:b0:77:6d:c8:79:ee:27:e1:ee:51:86: dd:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:4B:13:52:68:B4:D4:6B:5C:A0:99:24:96:3F:0E:BB:00:9B:BE:17 X509v3 Authority Key Identifier: keyid:2A:F5:12:1C:D1:CF:A7:79:8C:C1:DD:77:7B:46:43:69:D1:DE:A6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:23:4b:11:0d:ba:43:1b:9a:d0:fe:8e:cd:fb:df:4f:52:8e: 3a:3f:2b:2f:e7:16:64:cc:50:e9:17:1f:9c:e3:4e:c0:62:aa: 33:bb:a9:31:bf:ac:57:c9:6e:e7:43:77:2a:77:a3:c1:7c:2a: ce:89:7b:3b:80:fb:b2:cd:22:4c:a9:22:fc:7a:f4:4b:8a:32: 39:2a:c6:42:da:e8:ce:fb:13:a5:65:1e:3c:cc:68:93:5a:74: dc:86:01:80:f9:e2:e4:44:9d:32:98:99:da:d3:92:34:2b:b9: 32:57:dc:00:d1:d6:a8:3d:3a:18:41:c0:54:73:95:7b:16:de: 93:4d:89:c3:b7:e7:cf:8b:98:03:3a:02:3f:df:72:2c:5b:1a: 2f:ed:a7:17:e0:aa:ca:d7:b9:75:16:57:8a:c4:ab:00:09:44: a5:32:ac:b2:a1:46:49:e6:79:2e:eb:ea:01:28:36:6a:63:1d: 79:af:9d:32:86:36:81:b0:c5:47:fe:c0:1c:f8:36:1c:27:7f: a9:24:6d:12:ac:d4:8e:0f:71:89:4b:8f:31:bb:67:bc:ac:df: 4e:96:3a:a3:74:f9:da:ad:6f:e2:c2:69:82:c5:1f:cd:71:ca: 5f:f1:1c:6c:b4:72:63:f2:76:6d:84:38:f9:51:c6:79:f2:38: 8b:1d:d5:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB8aIubfwlg6pe3IsaluclHLKa1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQzNjlE MURFQTZDMTAeFw0yNTA4MjMwNzE2MTFaFw0yNTA4MjYxMTM0MTFaMDMxMTAvBgNV BAMTKEZFNEIxMzUyNjhCNEQ0NkI1Q0EwOTkyNDk2M0YwRUJCMDA5QkJFMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUEgdknUinXFHMml6pinXEYtuW /vIdSiRBTp/qga8WUkQ0cuzslpxDSg7rWpUoGb3Km13quveqTH+ZxLj60QwZ/7c1 uNsaE12lUnm8U4/yomen+ZpWDUgTPOAPgxTaJoNhMOubwnhZw3bX4154gC4iSnPx Ojwj9tkl4xha3druZm0d2hZgo7yK1LCKD6i4npWbbt7uj7UqbdE7RAW7GTafqEWE ge5Z4eMZajPwLu+VeJ0u2EzsCMwfcZN4R3M2etYZ28Op91bO6Zm5NjVrW+rU9Pls Vy35/4dnLvfoLPoSUZEYMEBwkKzQ/9gn3E1l1+6mn2Gwd23Iee4n4e5Rht1VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/ksTUmi01GtcoJkklj8OuwCbvhcwHwYDVR0j BBgwFoAUKvUSHNHPp3mMwd13e0ZDadHepsEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OTJlMDdmOC0xYTQ4LTQzOTEtYTZhNS04ZTRlMzljODU4OGEvMC8yQUY1MTIxQ0Qx Q0ZBNzc5OENDMURENzc3QjQ2NDM2OUQxREVBNkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQzNjlEMURF QTZDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTkyZTA3ZjgtMWE0OC00MzkxLWE2 YTUtOGU0ZTM5Yzg1ODhhLzAvMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQz NjlEMURFQTZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJEjSxENukMbmtD+js37309Sjjo/Ky/nFmTM UOkXH5zjTsBiqjO7qTG/rFfJbudDdyp3o8F8Ks6JezuA+7LNIkypIvx69EuKMjkq xkLa6M77E6VlHjzMaJNadNyGAYD54uREnTKYmdrTkjQruTJX3ADR1qg9OhhBwFRz lXsW3pNNicO358+LmAM6Aj/fcixbGi/tpxfgqsrXuXUWV4rEqwAJRKUyrLKhRknm eS7r6gEoNmpjHXmvnTKGNoGwxUf+wBz4Nhwnf6kkbRKs1I4PcYlLjzG7Z7ys306W OqN0+dqtb+LCaYLFH81xyl/xHGy0cmPydm2EOPlRxnnyOIsd1bY= -----END CERTIFICATE-----Generated at Sat Aug 23 12:10:44 2025 by rpki-client