$ rpki-client -vvf repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft File: 2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft (raw, json) Hash identifier: Iba9PMfDrjp3SQEfmhZDUFMp/czB85ad0kXka/V5Duc= Subject key identifier: BB:DB:F2:7C:1E:0A:5F:55:02:A0:A0:F4:B6:CE:0B:E4:3E:7B:07:62 Authority key identifier: 2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6 Certificate issuer: /CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6 Certificate serial: 57E36FC2F09C1703DD53AEA145C1E3498EA4EF21 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft Manifest number: 034A Signing time: Wed 02 Jul 2025 08:31:23 +0000 Manifest this update: Wed 02 Jul 2025 08:26:23 +0000 Manifest next update: Sat 05 Jul 2025 15:13:23 +0000 Files and hashes: 1: 2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl (hash: jxYjGMfVhSutPG0zj6jZSzuwVp3M2I1QFTQwf851+Ik=) 2: 3130332e3233312e38302e302f32342d3234203d3e20313331373335.roa (hash: etlEVL/G6ecv5pikZQs/QfSTGNp1Hz5OKi7d2dSKjks=) 3: 3130332e3233312e38322e302f32342d3234203d3e20313331373335.roa (hash: 8zUKTcgIM2YuD1hdzVzeO7drrLCkIVs9L0M7lsGNsV4=) 4: 3130332e3233312e38332e302f32342d3234203d3e20313331373335.roa (hash: UN6dazoYFxgS6jdi8SmiPFiRAzrs0mSEhCBMn6iEnws=) 5: 3130332e3233312e38312e302f32342d3234203d3e20313331373335.roa (hash: cHq0w9NeVR2kphOoYMXZeSGQxfdQLrs5CAZ+diGk+MY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 15:13:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:e3:6f:c2:f0:9c:17:03:dd:53:ae:a1:45:c1:e3:49:8e:a4:ef:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6 Validity Not Before: Jul 2 08:26:23 2025 GMT Not After : Jul 5 15:13:23 2025 GMT Subject: CN=BBDBF27C1E0A5F5502A0A0F4B6CE0BE43E7B0762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:8e:93:fc:0e:1c:53:97:fb:13:3a:10:cc:81: 51:c3:cb:83:cb:b1:eb:f7:06:f9:19:d3:b2:90:11: 06:69:c0:6e:78:8a:8f:ad:56:f4:40:a8:7f:a5:b0: 2b:44:c3:62:83:12:11:1b:30:54:d9:58:a5:1b:48: f0:b1:40:0e:86:f4:71:9b:cd:d0:34:b0:60:17:ad: 80:77:56:a0:d9:2a:33:cf:b0:5f:bd:ec:e2:a3:90: 74:9c:ce:90:7e:b2:e5:f1:b3:b9:3a:d2:c0:b8:9b: 50:18:0e:69:de:a9:7b:e6:14:09:93:e9:50:c0:63: 82:b8:9d:f7:9b:63:26:c1:bc:b2:6c:a0:4a:e9:bb: 9e:56:92:00:9e:17:ab:d0:e6:b6:4c:8a:01:7b:cf: f3:d8:58:8c:29:49:a6:4f:1d:43:3d:74:d6:21:0d: 5f:7c:4b:dd:58:80:4f:61:36:0f:d5:2d:8d:82:19: b8:f5:c7:e4:0a:8a:c9:10:50:e5:6a:ce:38:97:b0: 7c:29:f4:bb:bf:56:e3:2c:0a:ae:5d:b6:2f:00:bf: d1:ca:25:42:51:a9:67:4d:a1:80:91:9d:51:ee:74: 33:6f:ca:07:3c:24:9a:bf:4c:3b:1a:d2:51:85:4d: 2e:d3:ea:b0:26:0b:8f:6a:e8:12:a9:09:99:dc:49: 5f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:DB:F2:7C:1E:0A:5F:55:02:A0:A0:F4:B6:CE:0B:E4:3E:7B:07:62 X509v3 Authority Key Identifier: keyid:2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:74:14:8c:72:db:fb:0e:f9:5a:01:2f:3b:c1:33:af:76:ee: 11:71:35:a8:b3:92:57:97:f9:f0:a3:94:e0:53:4d:67:c5:16: 7b:ab:60:20:42:0d:82:dc:bb:9d:ce:c5:cc:00:ad:66:b2:de: c0:a6:95:61:c8:b3:36:45:33:e4:fd:9e:28:bc:1f:4f:58:c2: 97:3c:c8:55:8a:31:74:60:e8:b4:2f:49:0d:c8:b2:f7:42:5b: 56:4a:0e:b3:3e:6b:72:9a:29:c4:89:41:5a:45:67:1b:54:07: a3:76:bf:1b:9f:25:67:a7:30:ae:dd:4a:36:7f:20:d4:59:53: de:cb:2e:6f:c8:f2:21:24:ac:f4:4f:5d:25:4a:58:7d:c0:12: 2b:11:da:67:03:20:52:18:46:fc:76:11:4c:f8:94:9b:49:c1: a8:03:3a:81:f7:5d:f4:64:36:7f:c4:45:ae:29:9b:64:c2:a0: 01:3f:7f:30:90:d9:f3:f8:5a:28:d5:28:06:07:5c:14:fb:7b: d0:f9:db:2a:77:57:0c:db:c0:98:0d:2f:17:2e:6b:b8:24:25: 84:78:39:47:95:ff:30:35:c4:22:f1:55:1c:0a:4f:17:dd:b8: 0c:c0:8f:f3:54:aa:da:cb:bf:0f:c1:5e:97:32:3c:ce:8f:40: 08:fc:98:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV+NvwvCcFwPdU66hRcHjSY6k7yEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3REU1 RDdBNjNBNjAeFw0yNTA3MDIwODI2MjNaFw0yNTA3MDUxNTEzMjNaMDMxMTAvBgNV BAMTKEJCREJGMjdDMUUwQTVGNTUwMkEwQTBGNEI2Q0UwQkU0M0U3QjA3NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpjpP8DhxTl/sTOhDMgVHDy4PL sev3BvkZ07KQEQZpwG54io+tVvRAqH+lsCtEw2KDEhEbMFTZWKUbSPCxQA6G9HGb zdA0sGAXrYB3VqDZKjPPsF+97OKjkHSczpB+suXxs7k60sC4m1AYDmneqXvmFAmT 6VDAY4K4nfebYybBvLJsoErpu55WkgCeF6vQ5rZMigF7z/PYWIwpSaZPHUM9dNYh DV98S91YgE9hNg/VLY2CGbj1x+QKiskQUOVqzjiXsHwp9Lu/VuMsCq5dti8Av9HK JUJRqWdNoYCRnVHudDNvygc8JJq/TDsa0lGFTS7T6rAmC49q6BKpCZncSV8lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu9vyfB4KX1UCoKD0ts4L5D57B2IwHwYDVR0j BBgwFoAUK7E4J0I1dRQdoPHFezPn3l16Y6YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTQ5M2JlMS1mMDY0LTQ5ZTYtOTQ5YS1jYjNlY2JmYzhmNDYvMC8yQkIxMzgyNzQy MzU3NTE0MURBMEYxQzU3QjMzRTdERTVEN0E2M0E2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3REU1RDdB NjNBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGE0OTNiZTEtZjA2NC00OWU2LTk0 OWEtY2IzZWNiZmM4ZjQ2LzAvMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3 REU1RDdBNjNBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC10FIxy2/sO+VoBLzvBM6927hFxNaizkleX +fCjlOBTTWfFFnurYCBCDYLcu53OxcwArWay3sCmlWHIszZFM+T9nii8H09Ywpc8 yFWKMXRg6LQvSQ3IsvdCW1ZKDrM+a3KaKcSJQVpFZxtUB6N2vxufJWenMK7dSjZ/ INRZU97LLm/I8iEkrPRPXSVKWH3AEisR2mcDIFIYRvx2EUz4lJtJwagDOoH3XfRk Nn/ERa4pm2TCoAE/fzCQ2fP4WijVKAYHXBT7e9D52yp3VwzbwJgNLxcua7gkJYR4 OUeV/zA1xCLxVRwKTxfduAzAj/NUqtrLvw/BXpcyPM6PQAj8mAk= -----END CERTIFICATE-----Generated at Wed Jul 2 15:59:53 2025 by rpki-client