$ rpki-client -vvf repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft File: 2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft (raw, json) Hash identifier: v04X4/gkF1EIlsZFNHkLlpdCsJ3+JMtdoifWErJV7Qc= Subject key identifier: 16:64:DC:F5:87:CB:95:EB:B0:2B:8D:6A:84:CC:E8:5B:D8:0D:7E:BF Authority key identifier: 2D:6F:96:FA:63:0E:A7:AE:0A:2B:12:2B:6F:04:CC:4F:5F:32:CE:B5 Certificate issuer: /CN=2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5 Certificate serial: 438A88106889257554363281C15ED0F4DEB66C71 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft Manifest number: 01EA Signing time: Sun 29 Jun 2025 07:40:51 +0000 Manifest this update: Sun 29 Jun 2025 07:35:51 +0000 Manifest next update: Wed 02 Jul 2025 19:23:51 +0000 Files and hashes: 1: 3130332e3139312e36302e302f32342d3234203d3e20313430343233.roa (hash: sSH+72BWEr4MQc7BgNlbk4H5MkWrjKvE4wSUUqHwmBM=) 2: 2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl (hash: QqA4pSkX0AIRZYUJ/4CXzVO++XJbVLmpP/FW+jbsCtU=) 3: 3130332e3139312e36312e302f32342d3234203d3e20313430343233.roa (hash: GKmBfpKDeFOAn/hth0t5+jc0CLfcCDiIkzuoYyGRF6A=) 4: 3130332e3139312e36302e302f32332d3234203d3e20313430343233.roa (hash: B7I4pT8xixNUOiX63bEN83in57afrlzmDDKwQ4/5sls=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 19:23:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:8a:88:10:68:89:25:75:54:36:32:81:c1:5e:d0:f4:de:b6:6c:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5 Validity Not Before: Jun 29 07:35:51 2025 GMT Not After : Jul 2 19:23:51 2025 GMT Subject: CN=1664DCF587CB95EBB02B8D6A84CCE85BD80D7EBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:77:60:60:d2:fa:47:13:f0:2c:ea:7c:70:b2: 5b:08:66:d3:91:ed:51:5b:2f:95:27:ee:a9:47:a6: fd:5f:18:7a:f2:a3:ed:a5:0f:a5:ce:ea:99:6b:cd: e9:e1:00:04:15:b2:19:db:f7:75:fc:b7:95:ed:87: d8:ae:95:1e:f3:09:fb:cd:36:ac:a1:51:e1:48:32: 4a:a6:e0:8b:22:f5:55:e7:19:f1:9b:55:55:e8:b4: 14:a6:ab:d4:29:c6:dd:a2:dd:c1:e9:2c:49:ee:a7: 2a:db:9d:e6:4f:c4:9a:a6:33:a0:56:15:7b:61:1b: 07:0b:af:d3:c2:f1:0a:28:82:87:7b:1e:88:0c:1d: 0e:12:f9:78:58:ea:71:07:a4:f5:61:12:fc:ab:a9: 60:82:f0:22:e8:51:20:21:f7:ed:67:84:97:c4:3f: 56:97:11:3e:06:44:ad:36:94:fc:5b:63:9d:d5:6a: a8:84:0d:43:63:71:9c:91:4e:d9:af:77:b1:16:8d: 5c:a7:22:c8:5b:ff:45:87:5d:a6:35:c6:63:1d:be: c3:a7:3e:1b:be:b9:84:7f:ad:53:99:6c:4b:0c:d3: 10:ad:66:5d:45:21:d2:9d:7b:94:9e:23:35:2a:c3: af:cc:02:69:16:90:b7:f0:a2:1c:55:be:5b:a8:60: d6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:64:DC:F5:87:CB:95:EB:B0:2B:8D:6A:84:CC:E8:5B:D8:0D:7E:BF X509v3 Authority Key Identifier: keyid:2D:6F:96:FA:63:0E:A7:AE:0A:2B:12:2B:6F:04:CC:4F:5F:32:CE:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:49:75:bb:2f:59:e5:99:83:3d:fe:19:bf:4e:cb:ff:f2:da: 98:02:1b:6e:70:c4:fb:9f:80:cc:eb:9e:1e:9a:a3:3b:ea:72: 79:97:17:b1:57:09:b0:e3:a8:6a:70:b7:4d:d2:43:4b:0b:4b: a7:8c:c2:be:7b:29:d5:2b:1b:a2:dd:0d:40:c9:03:eb:af:c2: 7b:93:28:36:98:00:b0:64:f2:33:e8:47:33:ac:68:ce:c6:5e: 19:04:cd:17:ad:22:1d:f1:36:3a:90:96:75:cd:25:dc:1a:62: e9:a0:9d:1b:2f:99:70:f0:bd:1e:ae:7a:6a:cc:40:ff:13:f1: 09:f8:0f:7d:8a:04:5f:7b:93:c4:88:49:8e:be:fc:3a:8e:62: 4b:bf:c7:a6:dd:69:6e:76:bf:53:56:3b:f6:36:aa:f7:95:5c: 8f:5a:80:84:28:f3:37:a3:dc:d7:21:41:29:94:a7:a3:a8:db: 45:9b:7c:4e:07:b5:b9:d3:16:c2:18:7f:bc:13:2f:46:7c:41: f9:a1:fc:89:86:c7:f0:33:ba:0e:75:79:8b:f8:9a:7e:29:6a: b5:a7:0d:ad:aa:49:91:af:64:3c:70:b4:9d:69:9c:80:e7:7a: d5:84:bb:d8:af:35:cb:98:a1:fb:9b:e9:93:3b:42:36:5b:e2: 55:ac:91:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ4qIEGiJJXVUNjKBwV7Q9N62bHEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNENDNEY1 RjMyQ0VCNTAeFw0yNTA2MjkwNzM1NTFaFw0yNTA3MDIxOTIzNTFaMDMxMTAvBgNV BAMTKDE2NjREQ0Y1ODdDQjk1RUJCMDJCOEQ2QTg0Q0NFODVCRDgwRDdFQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2d2Bg0vpHE/As6nxwslsIZtOR 7VFbL5Un7qlHpv1fGHryo+2lD6XO6plrzenhAAQVshnb93X8t5Xth9iulR7zCfvN NqyhUeFIMkqm4Isi9VXnGfGbVVXotBSmq9Qpxt2i3cHpLEnupyrbneZPxJqmM6BW FXthGwcLr9PC8Qoogod7HogMHQ4S+XhY6nEHpPVhEvyrqWCC8CLoUSAh9+1nhJfE P1aXET4GRK02lPxbY53VaqiEDUNjcZyRTtmvd7EWjVynIshb/0WHXaY1xmMdvsOn Phu+uYR/rVOZbEsM0xCtZl1FIdKde5SeIzUqw6/MAmkWkLfwohxVvluoYNYhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFmTc9YfLleuwK41qhMzoW9gNfr8wHwYDVR0j BBgwFoAULW+W+mMOp64KKxIrbwTMT18yzrUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTM0ZDJkOC0zNGFmLTQ3NTctOGFkOS05MmRhMzVkOTIxNjgvMC8yRDZGOTZGQTYz MEVBN0FFMEEyQjEyMkI2RjA0Q0M0RjVGMzJDRUI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNENDNEY1RjMy Q0VCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUzNGQyZDgtMzRhZi00NzU3LThh ZDktOTJkYTM1ZDkyMTY4LzAvMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNEND NEY1RjMyQ0VCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA5JdbsvWeWZgz3+Gb9Oy//y2pgCG25wxPuf gMzrnh6aozvqcnmXF7FXCbDjqGpwt03SQ0sLS6eMwr57KdUrG6LdDUDJA+uvwnuT KDaYALBk8jPoRzOsaM7GXhkEzRetIh3xNjqQlnXNJdwaYumgnRsvmXDwvR6uemrM QP8T8Qn4D32KBF97k8SISY6+/DqOYku/x6bdaW52v1NWO/Y2qveVXI9agIQo8zej 3NchQSmUp6Oo20WbfE4HtbnTFsIYf7wTL0Z8Qfmh/ImGx/Azug51eYv4mn4parWn Da2qSZGvZDxwtJ1pnIDnetWEu9ivNcuYofub6ZM7QjZb4lWskfk= -----END CERTIFICATE-----Generated at Mon Jun 30 07:41:58 2025 by rpki-client