$ rpki-client -vvf repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft File: 2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft (raw, json) Hash identifier: 8RGr5ldebuQAkjvwvSZ8s/4i0OsU6DkaZHbEOdf975k= Subject key identifier: 84:5D:87:6D:03:9D:04:85:CD:4A:3B:37:AC:8D:6B:59:F3:DD:23:4D Authority key identifier: 2A:A6:E6:5B:86:E4:42:3A:EC:7D:02:D8:5B:43:BA:00:80:12:D2:9D Certificate issuer: /CN=2AA6E65B86E4423AEC7D02D85B43BA008012D29D Certificate serial: 63AE0A9407BE1B344598EDB401BDC81136FCAECA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft Manifest number: 01A4 Signing time: Fri 22 Aug 2025 23:21:04 +0000 Manifest this update: Fri 22 Aug 2025 23:16:04 +0000 Manifest next update: Tue 26 Aug 2025 09:18:04 +0000 Files and hashes: 1: 2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl (hash: eb+AmBF2O7ecbWBgPsKpcMF2cxiS5+lcptsBMDoFrgk=) 2: 3130332e3132392e34382e302f32332d3234203d3e20313335343738.roa (hash: nuG2thm0oiOwKnakW1lHLkXwPbpo6Y7ruJlmvamdekA=) 3: 3130332e3132392e35302e302f32332d3234203d3e20313335343738.roa (hash: RsQS9pXwEYaCDD5cA+PCEhqN7yNzqnOa8ujUnr88Njo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 09:18:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:ae:0a:94:07:be:1b:34:45:98:ed:b4:01:bd:c8:11:36:fc:ae:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AA6E65B86E4423AEC7D02D85B43BA008012D29D Validity Not Before: Aug 22 23:16:04 2025 GMT Not After : Aug 26 09:18:04 2025 GMT Subject: CN=845D876D039D0485CD4A3B37AC8D6B59F3DD234D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:53:b5:eb:7e:64:3e:10:68:ce:09:c8:be:08: 01:b5:6a:6b:f1:50:ed:d9:27:ad:3c:1a:99:d7:ef: 49:b8:7b:79:1a:4b:60:00:03:58:fa:53:93:8a:b1: 56:b4:f6:09:1a:6f:fd:82:cd:4a:99:df:f8:a7:5b: 76:c0:48:7c:41:3b:f1:92:b7:2f:7b:ba:61:85:95: 8f:cf:c2:24:74:17:8f:56:aa:34:c1:dd:7b:28:1a: 87:36:21:1e:c1:52:37:37:19:86:94:f2:84:95:09: 0f:19:d3:2d:92:82:17:c0:f2:b6:9e:50:7c:ff:d2: e9:a3:1a:a4:7c:23:49:ee:8e:ed:97:e4:a1:39:93: c4:41:67:9d:44:21:36:33:d0:7d:44:51:b7:99:f3: 5c:e3:d6:f1:66:ce:a6:35:97:4c:52:45:13:eb:f7: 32:85:4b:35:c3:c8:41:5b:5f:3e:85:60:27:e9:8e: a6:48:82:82:82:ee:a4:16:f9:44:d5:0e:5c:da:ee: ac:ae:25:76:ae:97:0b:37:6b:89:8c:19:f9:cf:8a: 58:d4:6e:1b:d5:19:0f:db:e9:86:0d:e9:16:76:22: cb:b8:ee:a1:f9:22:65:2a:03:89:de:12:a9:dc:04: ee:20:73:1d:a1:fd:05:a7:2a:a8:f4:ca:c8:a5:b9: 74:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:5D:87:6D:03:9D:04:85:CD:4A:3B:37:AC:8D:6B:59:F3:DD:23:4D X509v3 Authority Key Identifier: keyid:2A:A6:E6:5B:86:E4:42:3A:EC:7D:02:D8:5B:43:BA:00:80:12:D2:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:5a:c0:88:ee:6a:e8:9f:c7:79:4a:25:30:3d:11:31:b6:3c: e7:6c:34:ea:ba:f2:62:d1:a9:52:1f:9e:99:bd:1c:4b:a6:55: 05:cd:f2:64:10:d7:06:c4:b2:11:ba:cb:5d:31:94:91:f7:13: 95:44:a9:ad:57:67:60:53:1e:54:7e:a8:0a:d7:2b:cc:df:41: 93:f0:52:a7:e5:c1:21:f2:a7:0e:16:fa:ad:58:de:f0:c7:62: df:af:27:67:53:dc:eb:a2:c7:27:7d:3b:ef:97:a8:a4:03:96: 22:90:bc:d4:35:7c:34:b7:f8:5b:60:d2:69:f7:be:e5:72:88: 1d:cb:d0:1a:25:86:06:27:b5:12:a1:a2:56:cc:89:e3:90:aa: f1:2e:4c:fd:f1:83:40:d0:e6:d9:99:96:23:3e:35:84:56:d8: 26:e6:3e:78:c4:b4:2e:b8:8a:ed:6b:52:95:34:b3:4b:1a:e0: 19:37:33:7e:83:68:f5:4b:79:60:c2:31:d9:0a:1a:22:20:76: 69:42:c6:0e:b1:67:46:3b:49:94:4c:98:a3:bf:83:37:d4:de: 0a:bf:9f:ee:f3:46:63:91:22:b5:0f:3b:4d:db:2b:b3:83:fc: 0a:15:52:6f:d3:20:69:ec:52:f7:01:57:85:de:52:02:d0:65: c5:c5:ad:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY64KlAe+GzRFmO20Ab3IETb8rsowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBNkU2NUI4NkU0NDIzQUVDN0QwMkQ4NUI0M0JBMDA4 MDEyRDI5RDAeFw0yNTA4MjIyMzE2MDRaFw0yNTA4MjYwOTE4MDRaMDMxMTAvBgNV BAMTKDg0NUQ4NzZEMDM5RDA0ODVDRDRBM0IzN0FDOEQ2QjU5RjNERDIzNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8U7XrfmQ+EGjOCci+CAG1amvx UO3ZJ608GpnX70m4e3kaS2AAA1j6U5OKsVa09gkab/2CzUqZ3/inW3bASHxBO/GS ty97umGFlY/PwiR0F49WqjTB3XsoGoc2IR7BUjc3GYaU8oSVCQ8Z0y2SghfA8rae UHz/0umjGqR8I0nuju2X5KE5k8RBZ51EITYz0H1EUbeZ81zj1vFmzqY1l0xSRRPr 9zKFSzXDyEFbXz6FYCfpjqZIgoKC7qQW+UTVDlza7qyuJXaulws3a4mMGfnPiljU bhvVGQ/b6YYN6RZ2Isu47qH5ImUqA4neEqncBO4gcx2h/QWnKqj0ysiluXQ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhF2HbQOdBIXNSjs3rI1rWfPdI00wHwYDVR0j BBgwFoAUKqbmW4bkQjrsfQLYW0O6AIAS0p0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTZiZmY5ZC1mYjEzLTQ3YjktOWNjMC1kZDZhMDczMGExYzYvMC8yQUE2RTY1Qjg2 RTQ0MjNBRUM3RDAyRDg1QjQzQkEwMDgwMTJEMjlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkFBNkU2NUI4NkU0NDIzQUVDN0QwMkQ4NUI0M0JBMDA4MDEy RDI5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U2YmZmOWQtZmIxMy00N2I5LTlj YzAtZGQ2YTA3MzBhMWM2LzAvMkFBNkU2NUI4NkU0NDIzQUVDN0QwMkQ4NUI0M0JB MDA4MDEyRDI5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADpawIjuauifx3lKJTA9ETG2POdsNOq68mLR qVIfnpm9HEumVQXN8mQQ1wbEshG6y10xlJH3E5VEqa1XZ2BTHlR+qArXK8zfQZPw UqflwSHypw4W+q1Y3vDHYt+vJ2dT3Ouixyd9O++XqKQDliKQvNQ1fDS3+Ftg0mn3 vuVyiB3L0BolhgYntRKholbMieOQqvEuTP3xg0DQ5tmZliM+NYRW2CbmPnjEtC64 iu1rUpU0s0sa4Bk3M36DaPVLeWDCMdkKGiIgdmlCxg6xZ0Y7SZRMmKO/gzfU3gq/ n+7zRmORIrUPO03bK7OD/AoVUm/TIGnsUvcBV4XeUgLQZcXFrS4= -----END CERTIFICATE-----Generated at Sat Aug 23 10:07:47 2025 by rpki-client