$ rpki-client -vvf repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft File: 2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft (raw, json) Hash identifier: h1A1a4bSmX9lu7FqheIYZFts0AkWU/2S9IWb9KHXV88= Subject key identifier: C8:F0:B0:33:9F:B1:36:81:96:2D:24:7E:4C:AC:28:3A:10:4C:71:DF Authority key identifier: 2D:6F:96:FA:63:0E:A7:AE:0A:2B:12:2B:6F:04:CC:4F:5F:32:CE:B5 Certificate issuer: /CN=2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5 Certificate serial: 52CF32A791B1A1B2B038F862DC7AB5A238EFAC4C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft Manifest number: 0203 Signing time: Sat 23 Aug 2025 01:10:54 +0000 Manifest this update: Sat 23 Aug 2025 01:05:54 +0000 Manifest next update: Tue 26 Aug 2025 03:52:54 +0000 Files and hashes: 1: 3130332e3139312e36302e302f32332d3234203d3e20313430343233.roa (hash: yYJNqR/G5sUAXMOF0IPap8wZFYolAZMC0i9H8SllRlI=) 2: 3130332e3139312e36302e302f32342d3234203d3e20313430343233.roa (hash: sSH+72BWEr4MQc7BgNlbk4H5MkWrjKvE4wSUUqHwmBM=) 3: 2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl (hash: YLGHi0kcI/3ZNzLP6iVw/JTGHunP9Vp6Ph1mKGtQqK4=) 4: 3130332e3139312e36312e302f32342d3234203d3e20313430343233.roa (hash: GKmBfpKDeFOAn/hth0t5+jc0CLfcCDiIkzuoYyGRF6A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 03:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:cf:32:a7:91:b1:a1:b2:b0:38:f8:62:dc:7a:b5:a2:38:ef:ac:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5 Validity Not Before: Aug 23 01:05:54 2025 GMT Not After : Aug 26 03:52:54 2025 GMT Subject: CN=C8F0B0339FB13681962D247E4CAC283A104C71DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6c:c9:02:75:3b:da:c4:e2:7e:dc:96:a1:62: 1d:d8:a9:d9:79:81:46:10:66:30:a5:b7:34:5c:b8: d9:54:f0:4c:2f:ae:95:af:f9:34:10:ad:af:87:78: 7f:98:24:ec:a0:7d:92:7d:1f:1d:78:53:88:56:2a: 74:f3:25:11:cd:d7:da:e9:28:c0:31:f4:7f:c2:9e: a0:e9:ff:4f:9b:19:82:3a:1f:c8:90:c9:c1:b8:ed: b5:12:c7:3a:83:d7:99:7f:58:05:5c:a8:a0:43:ce: 2e:9d:1a:ea:57:eb:e3:9d:b9:e0:cf:11:e8:51:af: 27:fb:49:bd:30:b2:ed:b6:53:06:41:50:58:ef:65: 36:1e:db:0e:e4:1a:4a:5d:1f:cf:48:b4:d9:ed:f7: ac:92:fc:ff:18:0e:0f:af:b5:cb:a4:2a:4e:fe:57: 0f:85:9e:42:09:b4:b3:83:ee:e1:79:66:24:e8:26: e2:b6:d7:53:b1:ef:5a:3f:f1:e5:6f:de:d1:ee:c1: 0c:f3:19:47:4b:10:4a:db:4c:cd:8f:46:7c:c4:7a: c5:fe:bc:ee:a4:b3:b4:01:60:b4:76:82:42:23:c4: 14:13:d7:0a:e3:b1:4c:44:51:dd:b9:77:7b:83:53: 26:3d:b1:c9:59:4d:8c:ed:75:cf:2e:06:47:3e:91: 7a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F0:B0:33:9F:B1:36:81:96:2D:24:7E:4C:AC:28:3A:10:4C:71:DF X509v3 Authority Key Identifier: keyid:2D:6F:96:FA:63:0E:A7:AE:0A:2B:12:2B:6F:04:CC:4F:5F:32:CE:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:d6:33:c2:f5:7d:ae:26:d2:f2:0e:ca:54:4c:9a:e4:27:11: 8b:a2:bd:52:35:7c:c9:ef:3b:9f:55:46:93:07:d9:9d:c8:46: 10:d3:21:5c:8f:c6:d8:95:37:c1:7b:bc:70:d5:84:2d:15:a0: a2:a7:f2:61:70:40:4b:f4:88:51:72:ec:a6:09:26:7b:da:4d: 67:fc:89:83:a8:e0:be:68:e0:d5:8e:dc:ff:f3:11:b2:36:22: 60:d3:ca:d6:ec:aa:1e:f9:70:2e:07:69:7c:5a:1b:5e:6a:97: 7e:fe:6c:82:59:b9:7f:90:03:89:ce:f4:83:08:37:0b:f0:b9: a2:a5:eb:8b:5b:30:24:74:2d:5f:fd:be:78:32:c2:07:a3:ae: 42:c5:0f:ed:37:9c:a3:a2:0a:66:11:b7:28:f4:b6:e4:32:1f: cf:8d:1d:a8:7b:cd:d0:71:88:cd:fe:5d:d4:e8:bf:9b:66:fa: 8b:cc:47:9c:56:05:3d:83:99:d9:02:51:7d:72:cb:e3:1f:b8: 94:60:7e:84:80:82:74:aa:4c:33:23:5c:98:0e:42:d8:2d:0d: 41:99:05:33:d1:34:ec:66:47:61:14:39:80:4d:8b:8a:e5:c6: a8:82:5c:e1:76:11:db:8e:0f:00:74:0a:d6:dc:ef:50:92:bd: ad:a9:d2:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUs8yp5GxobKwOPhi3Hq1ojjvrEwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNENDNEY1 RjMyQ0VCNTAeFw0yNTA4MjMwMTA1NTRaFw0yNTA4MjYwMzUyNTRaMDMxMTAvBgNV BAMTKEM4RjBCMDMzOUZCMTM2ODE5NjJEMjQ3RTRDQUMyODNBMTA0QzcxREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDbMkCdTvaxOJ+3JahYh3Yqdl5 gUYQZjCltzRcuNlU8EwvrpWv+TQQra+HeH+YJOygfZJ9Hx14U4hWKnTzJRHN19rp KMAx9H/CnqDp/0+bGYI6H8iQycG47bUSxzqD15l/WAVcqKBDzi6dGupX6+OdueDP EehRryf7Sb0wsu22UwZBUFjvZTYe2w7kGkpdH89ItNnt96yS/P8YDg+vtcukKk7+ Vw+FnkIJtLOD7uF5ZiToJuK211Ox71o/8eVv3tHuwQzzGUdLEErbTM2PRnzEesX+ vO6ks7QBYLR2gkIjxBQT1wrjsUxEUd25d3uDUyY9sclZTYztdc8uBkc+kXoVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyPCwM5+xNoGWLSR+TKwoOhBMcd8wHwYDVR0j BBgwFoAULW+W+mMOp64KKxIrbwTMT18yzrUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTM0ZDJkOC0zNGFmLTQ3NTctOGFkOS05MmRhMzVkOTIxNjgvMC8yRDZGOTZGQTYz MEVBN0FFMEEyQjEyMkI2RjA0Q0M0RjVGMzJDRUI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNENDNEY1RjMy Q0VCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUzNGQyZDgtMzRhZi00NzU3LThh ZDktOTJkYTM1ZDkyMTY4LzAvMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNEND NEY1RjMyQ0VCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAHWM8L1fa4m0vIOylRMmuQnEYuivVI1fMnv O59VRpMH2Z3IRhDTIVyPxtiVN8F7vHDVhC0VoKKn8mFwQEv0iFFy7KYJJnvaTWf8 iYOo4L5o4NWO3P/zEbI2ImDTytbsqh75cC4HaXxaG15ql37+bIJZuX+QA4nO9IMI NwvwuaKl64tbMCR0LV/9vngywgejrkLFD+03nKOiCmYRtyj0tuQyH8+NHah7zdBx iM3+XdTov5tm+ovMR5xWBT2DmdkCUX1yy+MfuJRgfoSAgnSqTDMjXJgOQtgtDUGZ BTPRNOxmR2EUOYBNi4rlxqiCXOF2EduODwB0Ctbc71CSva2p0oI= -----END CERTIFICATE-----Generated at Sat Aug 23 10:12:33 2025 by rpki-client