$ rpki-client -vvf repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft File: 2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft (raw, json) Hash identifier: RfQ0Aqi55xd/2GXlh7+3taAgWgWFKZVNhgCUgbNQN0I= Subject key identifier: C7:63:A4:4C:72:12:B8:29:C4:B2:45:D4:D1:C4:86:AF:51:38:F5:80 Authority key identifier: 2D:23:11:F5:63:DF:0A:F8:EB:EF:DA:21:87:16:26:B5:DD:78:C5:BD Certificate issuer: /CN=2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD Certificate serial: 4C753541B9F64A608216F08C3E083CB45E3DCED5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft Manifest number: 04D1 Signing time: Sat 23 Aug 2025 08:02:01 +0000 Manifest this update: Sat 23 Aug 2025 07:57:01 +0000 Manifest next update: Tue 26 Aug 2025 12:38:01 +0000 Files and hashes: 1: 323430323a363938303a343030303a3a2f34382d3438203d3e203539323738.roa (hash: LrRa5/YbMQIirnwavEqQmjlSXIv4GPDAL8XSH/RPz2k=) 2: 323430323a363938303a333030303a3a2f34382d3438203d3e203539323738.roa (hash: 1MuWl4R2LfAc9czxG6/QjtCE9g5QKK5BETiXC4FMLHs=) 3: 323430323a363938303a323030303a3a2f34382d3438203d3e203539323738.roa (hash: D6GCo3ceVvJhAX1b+afxEUHTBD9rmTcpfSp7SCURViA=) 4: 323430323a363938303a313030303a3a2f34382d3438203d3e203539323738.roa (hash: Cf4F1dHsLMAEwRXj/sLvggNAyN9aUktmarNyz8vl8uk=) 5: 323430323a363938303a3a2f33322d3438203d3e203539323738.roa (hash: IyTH+iDrZwcYpQjVq5OAN4r5uvDjzNsSK7r7mWOE79s=) 6: 3130332e35382e3136302e302f32322d3234203d3e203539323738.roa (hash: 3p6KpA6/uKsXu1iiVTHxP1H1aKBvRxURT7LJ3HzRuNw=) 7: 2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.crl (hash: EjLt/cBhr4fnLLoSe6MfzdPh6yIzGCwoD1bjmBu+3Hw=) 8: 3130332e3232372e3234302e302f32322d3234203d3e203539323738.roa (hash: pAsXLpsnvtFY9CiLQfO4MgBTQXdXjfq9fjmjjZL7V7Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.crl rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:75:35:41:b9:f6:4a:60:82:16:f0:8c:3e:08:3c:b4:5e:3d:ce:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD Validity Not Before: Aug 23 07:57:01 2025 GMT Not After : Aug 26 12:38:01 2025 GMT Subject: CN=C763A44C7212B829C4B245D4D1C486AF5138F580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9c:86:e2:2a:d6:3d:ab:49:55:8e:6c:ac:79: f8:62:09:b5:86:51:69:0d:68:67:11:de:84:be:af: 58:32:66:0a:76:fb:30:ff:32:30:26:9b:15:06:16: 62:e0:e1:b6:e9:a6:36:6c:b2:32:e9:6e:87:90:a7: 98:db:e0:3f:25:6e:f2:1d:fe:c8:a1:e5:26:a5:87: e9:47:36:ff:1a:36:af:fe:e9:a3:b6:18:65:12:95: e6:c4:ed:5b:cc:d5:43:a4:3f:6e:b0:f0:79:7c:cf: 18:e9:06:d7:51:27:0a:a5:ec:b9:ca:bb:b0:b9:e2: 94:b7:8f:ef:31:51:3c:c1:1a:e4:45:9f:b2:c0:27: f9:67:3c:f1:33:c4:af:08:11:b4:53:92:78:03:cf: 63:13:ac:fd:33:fe:0f:8d:b7:c6:78:42:b0:03:04: 92:54:57:c1:cf:05:02:84:33:b4:77:78:57:f6:96: 47:af:c2:0c:a9:5f:23:69:dc:2c:18:5d:94:4e:cb: 67:af:95:12:36:20:fb:3b:0d:05:0c:0a:bf:6f:ca: 3f:5a:5a:e3:ad:84:f1:64:bd:65:85:8f:27:3b:aa: 8a:78:3b:c5:47:bd:5a:91:76:40:2f:bd:d1:50:05: 13:fa:8e:26:c5:75:52:55:21:cd:b6:15:a3:f0:b9: 5c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:63:A4:4C:72:12:B8:29:C4:B2:45:D4:D1:C4:86:AF:51:38:F5:80 X509v3 Authority Key Identifier: keyid:2D:23:11:F5:63:DF:0A:F8:EB:EF:DA:21:87:16:26:B5:DD:78:C5:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:b5:88:b4:41:3c:94:5a:d2:65:08:11:50:b0:0b:33:20:4a: 27:2b:f5:e9:d4:5b:14:4e:b7:ef:8f:4a:99:29:3a:cb:8a:7b: 9b:30:c2:ce:1c:62:9c:9d:77:ca:a5:38:ae:f2:1c:13:2e:56: 75:9e:86:ed:76:0b:f9:47:e4:75:fd:47:f4:07:a1:36:87:07: d9:b4:a3:7d:d9:5b:d6:64:80:83:50:e0:b4:39:d7:74:65:04: 76:04:fe:02:72:cb:f2:dc:29:20:d8:62:75:02:1d:d5:b3:32: 96:31:c2:67:a3:40:50:6d:cd:ae:96:66:48:1f:59:3e:c0:b8: b0:20:87:4d:22:35:cc:30:ee:dd:55:4b:85:77:73:a1:3e:85: e2:c1:bd:8c:76:23:84:5f:85:a2:79:4c:92:79:f6:3c:e2:89: 17:bb:88:ef:6c:13:23:b6:12:e5:b9:5b:d8:78:a6:eb:40:81: 69:fa:1c:53:44:14:24:b2:a2:e8:dd:29:9d:6e:ed:61:53:27: 17:ba:b6:cc:35:0d:d0:2e:86:cf:33:c6:ea:3b:08:f2:c8:bb: 48:ae:bd:ea:7e:eb:95:7c:e3:b3:4c:3b:e6:79:b6:ff:d9:f1: 5d:55:c0:6e:f9:fd:9b:36:35:8b:57:aa:a5:f1:5a:0a:e0:e0: 31:48:1a:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTHU1Qbn2SmCCFvCMPgg8tF49ztUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQyMzExRjU2M0RGMEFGOEVCRUZEQTIxODcxNjI2QjVE RDc4QzVCRDAeFw0yNTA4MjMwNzU3MDFaFw0yNTA4MjYxMjM4MDFaMDMxMTAvBgNV BAMTKEM3NjNBNDRDNzIxMkI4MjlDNEIyNDVENEQxQzQ4NkFGNTEzOEY1ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8nIbiKtY9q0lVjmysefhiCbWG UWkNaGcR3oS+r1gyZgp2+zD/MjAmmxUGFmLg4bbppjZssjLpboeQp5jb4D8lbvId /sih5Salh+lHNv8aNq/+6aO2GGUSlebE7VvM1UOkP26w8Hl8zxjpBtdRJwql7LnK u7C54pS3j+8xUTzBGuRFn7LAJ/lnPPEzxK8IEbRTkngDz2MTrP0z/g+Nt8Z4QrAD BJJUV8HPBQKEM7R3eFf2lkevwgypXyNp3CwYXZROy2evlRI2IPs7DQUMCr9vyj9a WuOthPFkvWWFjyc7qop4O8VHvVqRdkAvvdFQBRP6jibFdVJVIc22FaPwuVyHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx2OkTHISuCnEskXU0cSGr1E49YAwHwYDVR0j BBgwFoAULSMR9WPfCvjr79ohhxYmtd14xb0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjFjNzlmMS0yNjRlLTQyM2YtOWUwOC0wYjI5MDBkYTY5NDkvMC8yRDIzMTFGNTYz REYwQUY4RUJFRkRBMjE4NzE2MjZCNURENzhDNUJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQyMzExRjU2M0RGMEFGOEVCRUZEQTIxODcxNjI2QjVERDc4 QzVCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWYxYzc5ZjEtMjY0ZS00MjNmLTll MDgtMGIyOTAwZGE2OTQ5LzAvMkQyMzExRjU2M0RGMEFGOEVCRUZEQTIxODcxNjI2 QjVERDc4QzVCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD61iLRBPJRa0mUIEVCwCzMgSicr9enUWxRO t++PSpkpOsuKe5swws4cYpydd8qlOK7yHBMuVnWehu12C/lH5HX9R/QHoTaHB9m0 o33ZW9ZkgINQ4LQ513RlBHYE/gJyy/LcKSDYYnUCHdWzMpYxwmejQFBtza6WZkgf WT7AuLAgh00iNcww7t1VS4V3c6E+heLBvYx2I4RfhaJ5TJJ59jziiRe7iO9sEyO2 EuW5W9h4putAgWn6HFNEFCSyoujdKZ1u7WFTJxe6tsw1DdAuhs8zxuo7CPLIu0iu vep+65V847NMO+Z5tv/Z8V1VwG75/Zs2NYtXqqXxWgrg4DFIGqw= -----END CERTIFICATE-----Generated at Sat Aug 23 12:03:40 2025 by rpki-client