$ rpki-client -vvf repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft File: 2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft (raw, json) Hash identifier: 2EZ+SnN4CcM18qrfqCRC3KG7EqUzDvZEnWXALXY90Tc= Subject key identifier: 72:24:71:69:EC:13:6E:85:91:60:76:61:11:DC:1A:4A:C8:92:47:1D Authority key identifier: 2A:A6:E6:5B:86:E4:42:3A:EC:7D:02:D8:5B:43:BA:00:80:12:D2:9D Certificate issuer: /CN=2AA6E65B86E4423AEC7D02D85B43BA008012D29D Certificate serial: 4848C248D3D374E8FA530D9470F9337084ACDE41 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft Manifest number: 01BD Signing time: Sat 18 Oct 2025 08:01:07 +0000 Manifest this update: Sat 18 Oct 2025 07:56:07 +0000 Manifest next update: Tue 21 Oct 2025 17:34:07 +0000 Files and hashes: 1: 3130332e3132392e35302e302f32332d3234203d3e20313335343738.roa (hash: RsQS9pXwEYaCDD5cA+PCEhqN7yNzqnOa8ujUnr88Njo=) 2: 2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl (hash: ydZFExIslkwe+B76g4jHpVyYQzvlT48Magsv/IFw24Y=) 3: 3130332e3132392e34382e302f32332d3234203d3e20313335343738.roa (hash: nuG2thm0oiOwKnakW1lHLkXwPbpo6Y7ruJlmvamdekA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 17:34:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:48:c2:48:d3:d3:74:e8:fa:53:0d:94:70:f9:33:70:84:ac:de:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AA6E65B86E4423AEC7D02D85B43BA008012D29D Validity Not Before: Oct 18 07:56:07 2025 GMT Not After : Oct 21 17:34:07 2025 GMT Subject: CN=72247169EC136E859160766111DC1A4AC892471D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5d:96:60:98:00:ff:21:54:17:ac:ee:2c:3a: 8a:79:53:dd:fd:2a:15:f3:d9:1a:b7:75:b7:74:1c: ff:d7:24:30:a2:ca:b8:c7:50:eb:4c:44:a5:d7:4f: e0:84:47:74:5f:97:0f:ee:4d:8a:1e:bd:8e:e8:ec: 80:c8:bc:95:b9:8d:50:43:65:d1:68:83:95:37:6a: ca:e9:47:8b:65:05:d4:d6:83:33:cb:8a:ac:35:58: 04:5d:bb:5d:ff:05:55:26:a5:d1:e3:c6:a0:92:ac: c8:23:a9:6f:4d:cb:e8:c3:b2:2d:6e:62:ac:b5:39: af:cb:6d:5f:92:a0:72:29:8d:dc:ab:4c:f4:dc:39: f6:51:20:8d:09:44:36:2a:3f:82:db:f1:20:d8:58: 13:d4:9d:44:b4:b9:a4:92:38:fd:5d:03:c0:54:2e: 3d:26:40:88:10:3d:9d:52:a5:07:51:73:76:e1:3b: d4:79:9a:f1:c3:55:1c:30:ba:46:31:f3:40:58:8c: 38:e4:9c:3f:fa:39:e9:a1:1e:0b:9d:e0:ac:17:80: 5c:41:a3:e5:28:f5:37:d0:b7:5b:f5:08:3c:5a:d7: e7:11:cf:60:69:15:66:61:26:f4:bc:b9:42:bd:05: 20:ac:5f:62:5c:43:36:62:26:c7:4a:c5:58:3f:87: 44:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:24:71:69:EC:13:6E:85:91:60:76:61:11:DC:1A:4A:C8:92:47:1D X509v3 Authority Key Identifier: keyid:2A:A6:E6:5B:86:E4:42:3A:EC:7D:02:D8:5B:43:BA:00:80:12:D2:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:a5:cf:14:27:dc:58:ed:9d:fa:2f:00:7c:80:1b:ed:8f:6d: 36:8e:86:51:45:27:28:17:4a:00:04:34:4e:b3:32:60:e1:ef: f2:04:5d:9a:0b:b3:69:cb:bc:31:7e:72:d2:61:22:b2:7a:c2: bb:27:56:66:fc:5c:d3:f3:34:1f:10:56:a5:03:cb:53:fb:05: 5a:4b:67:f1:5b:ee:6e:0c:d3:89:66:d3:7c:b3:86:e0:cb:41: aa:9e:a0:6e:3b:10:c2:c0:e5:3a:a6:7b:a9:2e:e6:df:e6:92: 2e:70:f7:cd:4f:f8:6d:f5:72:e6:48:5e:32:11:33:ad:6e:9a: 9d:ec:83:b4:54:3f:87:f8:c1:3d:e9:c3:ea:38:2d:23:e3:41: de:ba:27:1a:6b:d9:80:47:61:3e:21:41:3d:76:bb:2e:0b:aa: b3:71:ed:2b:41:e5:b5:e0:39:af:0d:ae:5a:80:51:46:61:a4: 53:aa:04:5b:13:02:0c:cd:0c:ef:ca:ca:a5:0f:37:4b:af:12: f1:94:8c:1d:ed:4a:26:82:b5:b9:71:61:7f:59:4d:36:f8:70: c3:ba:cd:6e:05:d9:13:cb:22:d2:74:a2:fc:fc:fc:96:02:06: 97:5b:2d:39:59:f5:de:c5:be:b5:06:e4:8c:99:e8:9a:52:77: 0a:e0:b0:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSEjCSNPTdOj6Uw2UcPkzcISs3kEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBNkU2NUI4NkU0NDIzQUVDN0QwMkQ4NUI0M0JBMDA4 MDEyRDI5RDAeFw0yNTEwMTgwNzU2MDdaFw0yNTEwMjExNzM0MDdaMDMxMTAvBgNV BAMTKDcyMjQ3MTY5RUMxMzZFODU5MTYwNzY2MTExREMxQTRBQzg5MjQ3MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0XZZgmAD/IVQXrO4sOop5U939 KhXz2Rq3dbd0HP/XJDCiyrjHUOtMRKXXT+CER3Rflw/uTYoevY7o7IDIvJW5jVBD ZdFog5U3asrpR4tlBdTWgzPLiqw1WARdu13/BVUmpdHjxqCSrMgjqW9Ny+jDsi1u Yqy1Oa/LbV+SoHIpjdyrTPTcOfZRII0JRDYqP4Lb8SDYWBPUnUS0uaSSOP1dA8BU Lj0mQIgQPZ1SpQdRc3bhO9R5mvHDVRwwukYx80BYjDjknD/6OemhHgud4KwXgFxB o+Uo9TfQt1v1CDxa1+cRz2BpFWZhJvS8uUK9BSCsX2JcQzZiJsdKxVg/h0QbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUciRxaewTboWRYHZhEdwaSsiSRx0wHwYDVR0j BBgwFoAUKqbmW4bkQjrsfQLYW0O6AIAS0p0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTZiZmY5ZC1mYjEzLTQ3YjktOWNjMC1kZDZhMDczMGExYzYvMC8yQUE2RTY1Qjg2 RTQ0MjNBRUM3RDAyRDg1QjQzQkEwMDgwMTJEMjlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkFBNkU2NUI4NkU0NDIzQUVDN0QwMkQ4NUI0M0JBMDA4MDEy RDI5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U2YmZmOWQtZmIxMy00N2I5LTlj YzAtZGQ2YTA3MzBhMWM2LzAvMkFBNkU2NUI4NkU0NDIzQUVDN0QwMkQ4NUI0M0JB MDA4MDEyRDI5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAelzxQn3FjtnfovAHyAG+2PbTaOhlFFJygX SgAENE6zMmDh7/IEXZoLs2nLvDF+ctJhIrJ6wrsnVmb8XNPzNB8QVqUDy1P7BVpL Z/Fb7m4M04lm03yzhuDLQaqeoG47EMLA5Tqme6ku5t/mki5w981P+G31cuZIXjIR M61ump3sg7RUP4f4wT3pw+o4LSPjQd66Jxpr2YBHYT4hQT12uy4LqrNx7StB5bXg Oa8NrlqAUUZhpFOqBFsTAgzNDO/KyqUPN0uvEvGUjB3tSiaCtblxYX9ZTTb4cMO6 zW4F2RPLItJ0ovz8/JYCBpdbLTlZ9d7FvrUG5IyZ6JpSdwrgsLs= -----END CERTIFICATE-----Generated at Mon Oct 20 12:25:09 2025 by rpki-client