$ rpki-client -vvf repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft File: 2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft (raw, json) Hash identifier: TonWr9YRh6dcN5l2n3pdbv5glhEAwI7GoDnNdDYePSY= Subject key identifier: C0:C7:7A:90:FD:59:10:58:58:ED:DD:9E:2A:05:70:38:CD:10:0E:87 Authority key identifier: 2A:62:B9:64:EC:86:44:7D:C2:2D:DE:70:DC:35:17:F0:CF:7C:9A:CD Certificate issuer: /CN=2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD Certificate serial: 0D05DCD5D1AF60D1A6FD4B4557153DC96283A041 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft Manifest number: C5 Signing time: Fri 22 Aug 2025 04:20:36 +0000 Manifest this update: Fri 22 Aug 2025 04:15:36 +0000 Manifest next update: Mon 25 Aug 2025 12:07:36 +0000 Files and hashes: 1: 3135372e36362e3132332e302f32342d3234203d3e20313532373731.roa (hash: U13ray6Q2sSoKG3Sl/JF9ePon4W14X24dzQnJX7hj3o=) 2: 2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.crl (hash: j39D+K9kx4sKek/pDj1QbXZDpavKYq3VNQPSLD3Oilc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.crl rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 12:07:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:05:dc:d5:d1:af:60:d1:a6:fd:4b:45:57:15:3d:c9:62:83:a0:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD Validity Not Before: Aug 22 04:15:36 2025 GMT Not After : Aug 25 12:07:36 2025 GMT Subject: CN=C0C77A90FD59105858EDDD9E2A057038CD100E87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a9:e4:94:52:06:1c:52:f5:2f:cd:33:9b:3c: b5:00:85:2a:52:a1:1f:b4:7e:85:ca:b0:f6:04:99: 2e:b4:59:a2:a8:f7:d3:60:66:84:26:70:93:9d:90: 68:d3:93:ad:e9:2d:82:ec:fa:24:44:68:4d:69:16: 78:36:50:59:d9:76:92:ad:b0:a4:f8:db:fc:49:8f: b2:58:f8:ae:50:56:45:d7:f1:eb:f7:2c:0b:1c:fb: a6:03:ea:cf:b7:ff:87:19:b8:cb:4e:ae:db:8e:53: a5:1a:20:8b:66:10:b1:56:9d:e0:38:c4:ea:7c:4c: e7:10:d5:5a:26:45:36:14:3a:aa:0c:c6:ef:0c:0d: 5c:6e:2e:d7:9c:50:aa:88:f8:69:52:0a:ce:60:5b: ad:fe:0a:b5:56:cb:8e:04:1a:ac:49:71:f9:2f:53: 77:51:4e:97:39:8e:9d:16:73:3c:23:44:99:64:31: 8b:aa:f5:0e:88:f8:b2:34:b1:67:7b:f5:ab:10:4e: 6d:22:54:e9:74:a4:d6:44:84:cc:f4:73:92:1c:43: 78:3d:87:16:30:ca:86:59:e0:77:65:55:41:d5:4a: a1:64:0a:50:64:43:27:95:d3:28:c7:56:a0:4d:09: 96:43:0e:ab:a6:37:04:d3:8d:31:1c:cd:76:fb:1e: 10:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:C7:7A:90:FD:59:10:58:58:ED:DD:9E:2A:05:70:38:CD:10:0E:87 X509v3 Authority Key Identifier: keyid:2A:62:B9:64:EC:86:44:7D:C2:2D:DE:70:DC:35:17:F0:CF:7C:9A:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:77:6d:e6:af:96:58:13:32:af:1a:58:ce:8c:2e:71:4d:f6: 11:c2:60:95:c3:18:5d:cb:97:95:da:89:07:f2:05:69:fb:b9: 3d:d8:2f:2f:f2:8c:96:b7:35:9d:d2:20:b7:cc:68:48:a7:0d: 8c:67:fe:0f:7c:78:37:c6:f0:15:2b:7d:23:f1:02:ed:c6:ac: 17:51:2d:6f:9f:ec:9a:f0:5d:00:ee:a4:c1:13:1a:45:76:09: 09:23:66:33:23:9a:91:07:e2:63:fe:a1:97:4e:8e:b3:26:4b: 2e:b6:1b:26:c8:4e:ed:44:be:aa:3e:66:55:76:55:a8:3e:4a: b7:07:01:4f:46:e5:e3:88:f4:77:2e:05:d5:48:de:08:4e:95: 8d:c5:64:47:5d:9b:bc:83:9d:5f:72:43:ef:45:be:ad:bc:00: 79:e3:81:6e:8a:6f:b8:ea:54:9d:21:ac:a1:e7:32:01:63:ce: f6:ef:bd:b4:15:24:7d:30:d3:8d:d5:c8:27:80:08:91:70:4f: 8c:e4:2c:07:95:e7:56:74:96:7c:e7:11:9c:15:68:3d:c4:07: 7a:69:e7:3d:dc:dd:a2:96:97:7b:09:07:52:f7:ae:da:2b:cf: eb:ca:19:74:65:19:57:3c:3c:21:14:63:60:f4:59:54:a8:6d: 24:fd:5a:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDQXc1dGvYNGm/UtFVxU9yWKDoEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE2MkI5NjRFQzg2NDQ3REMyMkRERTcwREMzNTE3RjBD RjdDOUFDRDAeFw0yNTA4MjIwNDE1MzZaFw0yNTA4MjUxMjA3MzZaMDMxMTAvBgNV BAMTKEMwQzc3QTkwRkQ1OTEwNTg1OEVEREQ5RTJBMDU3MDM4Q0QxMDBFODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtqeSUUgYcUvUvzTObPLUAhSpS oR+0foXKsPYEmS60WaKo99NgZoQmcJOdkGjTk63pLYLs+iREaE1pFng2UFnZdpKt sKT42/xJj7JY+K5QVkXX8ev3LAsc+6YD6s+3/4cZuMtOrtuOU6UaIItmELFWneA4 xOp8TOcQ1VomRTYUOqoMxu8MDVxuLtecUKqI+GlSCs5gW63+CrVWy44EGqxJcfkv U3dRTpc5jp0WczwjRJlkMYuq9Q6I+LI0sWd79asQTm0iVOl0pNZEhMz0c5IcQ3g9 hxYwyoZZ4HdlVUHVSqFkClBkQyeV0yjHVqBNCZZDDqumNwTTjTEczXb7HhB3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwMd6kP1ZEFhY7d2eKgVwOM0QDocwHwYDVR0j BBgwFoAUKmK5ZOyGRH3CLd5w3DUX8M98ms0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWIwODg0NS1kZjgyLTQ0YzItOTc2ZC02ZDc0YjgxMTY2ZjQvMC8yQTYyQjk2NEVD ODY0NDdEQzIyRERFNzBEQzM1MTdGMENGN0M5QUNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkE2MkI5NjRFQzg2NDQ3REMyMkRERTcwREMzNTE3RjBDRjdD OUFDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFiMDg4NDUtZGY4Mi00NGMyLTk3 NmQtNmQ3NGI4MTE2NmY0LzAvMkE2MkI5NjRFQzg2NDQ3REMyMkRERTcwREMzNTE3 RjBDRjdDOUFDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACh3beavllgTMq8aWM6MLnFN9hHCYJXDGF3L l5XaiQfyBWn7uT3YLy/yjJa3NZ3SILfMaEinDYxn/g98eDfG8BUrfSPxAu3GrBdR LW+f7JrwXQDupMETGkV2CQkjZjMjmpEH4mP+oZdOjrMmSy62GybITu1Evqo+ZlV2 Vag+SrcHAU9G5eOI9HcuBdVI3ghOlY3FZEddm7yDnV9yQ+9Fvq28AHnjgW6Kb7jq VJ0hrKHnMgFjzvbvvbQVJH0w043VyCeACJFwT4zkLAeV51Z0lnznEZwVaD3EB3pp 5z3c3aKWl3sJB1L3rtorz+vKGXRlGVc8PCEUY2D0WVSobST9WuM= -----END CERTIFICATE-----Generated at Sat Aug 23 21:46:05 2025 by rpki-client