$ rpki-client -vvf repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft File: 2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft (raw, json) Hash identifier: ml6VAiKrIi5pKlynLqFu2GQMU3lyjMja9Lv2lX4ZHgg= Subject key identifier: AC:9F:99:69:80:51:B5:C2:55:F4:45:94:EF:9A:37:E8:5E:57:1D:A0 Authority key identifier: 2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6 Certificate issuer: /CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6 Certificate serial: 27CC50EBBC7A819CD5514FCE852C47EFF0BDFD61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft Manifest number: 0360 Signing time: Wed 20 Aug 2025 23:41:28 +0000 Manifest this update: Wed 20 Aug 2025 23:36:28 +0000 Manifest next update: Sun 24 Aug 2025 09:34:28 +0000 Files and hashes: 1: 3130332e3233312e38302e302f32342d3234203d3e20313331373335.roa (hash: etlEVL/G6ecv5pikZQs/QfSTGNp1Hz5OKi7d2dSKjks=) 2: 2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl (hash: l1c9U6J6EjAvNgDeJsItTtmH5mit1oQZ8qBYuBunYow=) 3: 3130332e3233312e38322e302f32342d3234203d3e20313331373335.roa (hash: 8zUKTcgIM2YuD1hdzVzeO7drrLCkIVs9L0M7lsGNsV4=) 4: 3130332e3233312e38312e302f32342d3234203d3e20313331373335.roa (hash: cHq0w9NeVR2kphOoYMXZeSGQxfdQLrs5CAZ+diGk+MY=) 5: 3130332e3233312e38332e302f32342d3234203d3e20313331373335.roa (hash: UN6dazoYFxgS6jdi8SmiPFiRAzrs0mSEhCBMn6iEnws=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 09:34:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:cc:50:eb:bc:7a:81:9c:d5:51:4f:ce:85:2c:47:ef:f0:bd:fd:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6 Validity Not Before: Aug 20 23:36:28 2025 GMT Not After : Aug 24 09:34:28 2025 GMT Subject: CN=AC9F99698051B5C255F44594EF9A37E85E571DA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:54:3d:2b:4f:a4:ad:7f:bc:cb:8b:58:29:2a: 63:a9:e2:77:87:f1:1a:74:df:3d:34:37:2c:87:a0: bf:b6:c1:a9:54:07:73:3f:48:6c:ea:35:9d:df:26: b0:21:6a:d9:ca:68:37:45:78:e7:bf:5a:1b:de:87: bf:59:49:09:22:97:23:15:4a:09:fd:f4:8b:18:12: 95:3f:6c:74:67:e4:37:9e:39:7d:d0:47:0b:73:26: 91:de:a3:af:97:23:65:a4:83:4f:b2:a7:eb:c6:1e: 4e:15:86:2d:83:d6:3f:15:77:2b:e5:f2:ff:1e:91: 13:a7:57:61:0a:74:69:ef:a6:fb:16:0b:6e:52:31: 9f:0c:bd:76:48:a2:be:bc:28:8c:79:90:08:c2:65: ee:11:d6:7d:f2:df:b4:bb:88:79:49:53:c7:23:33: 89:64:c0:80:33:46:72:54:c4:0a:06:01:ee:2e:76: 16:24:56:3d:12:8f:70:cd:53:ce:89:d1:33:c9:c8: 15:51:82:31:8b:9f:48:6d:ef:67:5d:d6:2e:12:19: db:7d:81:3f:e8:5c:c2:a0:63:3b:23:ca:30:d9:42: 22:11:60:1c:14:f1:11:5d:53:db:2c:b4:c6:fc:34: c0:39:f9:b6:66:46:3c:df:ca:11:3e:1c:25:17:e9: 0c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:9F:99:69:80:51:B5:C2:55:F4:45:94:EF:9A:37:E8:5E:57:1D:A0 X509v3 Authority Key Identifier: keyid:2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:ef:14:54:b1:3c:56:a1:93:e1:59:67:0a:ed:2d:b3:65:53: 91:ec:cd:77:6b:e0:ad:0b:2c:e4:ab:c2:71:6b:33:47:1f:73: 16:ff:4c:a6:80:5f:20:25:c3:e8:42:05:a1:a3:fd:97:40:cd: 87:f1:6c:17:df:0b:bb:db:68:06:14:d6:a5:61:c9:b5:ea:3a: dd:17:cf:65:45:0e:65:71:83:5b:1f:23:f9:69:e5:7e:7a:52: 74:5f:1e:d7:dd:e0:b6:92:89:5d:cd:ec:fb:7d:9a:95:66:45: a4:6a:fb:e6:e3:5d:f6:07:7d:04:5f:40:39:e5:aa:e2:8d:b2: 1e:fe:d0:19:76:c8:61:2b:b0:59:39:ff:a6:cb:0b:59:8c:db: 38:09:f6:1d:61:66:49:c5:6e:b0:44:9a:ca:a0:09:71:60:3b: 1e:fa:05:6d:e9:26:8a:ee:34:30:1c:7e:7e:24:99:b3:08:c8: 12:55:32:0d:2b:63:d1:49:a8:34:29:ff:c5:0d:43:1a:81:02: e9:f7:aa:b0:27:1c:ac:c8:c6:01:8c:f0:62:ce:df:f0:dd:f7: 27:1d:d3:98:19:1d:3a:a3:aa:37:e6:4b:6d:75:06:69:cb:43: ed:c3:02:57:11:07:36:17:c4:d3:2e:0f:8e:24:af:24:bb:69: c6:f7:f8:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ8xQ67x6gZzVUU/OhSxH7/C9/WEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3REU1 RDdBNjNBNjAeFw0yNTA4MjAyMzM2MjhaFw0yNTA4MjQwOTM0MjhaMDMxMTAvBgNV BAMTKEFDOUY5OTY5ODA1MUI1QzI1NUY0NDU5NEVGOUEzN0U4NUU1NzFEQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpVD0rT6Stf7zLi1gpKmOp4neH 8Rp03z00NyyHoL+2walUB3M/SGzqNZ3fJrAhatnKaDdFeOe/Whveh79ZSQkilyMV Sgn99IsYEpU/bHRn5DeeOX3QRwtzJpHeo6+XI2Wkg0+yp+vGHk4Vhi2D1j8Vdyvl 8v8ekROnV2EKdGnvpvsWC25SMZ8MvXZIor68KIx5kAjCZe4R1n3y37S7iHlJU8cj M4lkwIAzRnJUxAoGAe4udhYkVj0Sj3DNU86J0TPJyBVRgjGLn0ht72dd1i4SGdt9 gT/oXMKgYzsjyjDZQiIRYBwU8RFdU9sstMb8NMA5+bZmRjzfyhE+HCUX6QxVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrJ+ZaYBRtcJV9EWU75o36F5XHaAwHwYDVR0j BBgwFoAUK7E4J0I1dRQdoPHFezPn3l16Y6YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTQ5M2JlMS1mMDY0LTQ5ZTYtOTQ5YS1jYjNlY2JmYzhmNDYvMC8yQkIxMzgyNzQy MzU3NTE0MURBMEYxQzU3QjMzRTdERTVEN0E2M0E2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3REU1RDdB NjNBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGE0OTNiZTEtZjA2NC00OWU2LTk0 OWEtY2IzZWNiZmM4ZjQ2LzAvMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3 REU1RDdBNjNBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIzvFFSxPFahk+FZZwrtLbNlU5HszXdr4K0L LOSrwnFrM0cfcxb/TKaAXyAlw+hCBaGj/ZdAzYfxbBffC7vbaAYU1qVhybXqOt0X z2VFDmVxg1sfI/lp5X56UnRfHtfd4LaSiV3N7Pt9mpVmRaRq++bjXfYHfQRfQDnl quKNsh7+0Bl2yGErsFk5/6bLC1mM2zgJ9h1hZknFbrBEmsqgCXFgOx76BW3pJoru NDAcfn4kmbMIyBJVMg0rY9FJqDQp/8UNQxqBAun3qrAnHKzIxgGM8GLO3/Dd9ycd 05gZHTqjqjfmS211BmnLQ+3DAlcRBzYXxNMuD44kryS7acb3+KQ= -----END CERTIFICATE-----Generated at Sat Aug 23 10:37:04 2025 by rpki-client