$ rpki-client -vvf repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft File: 2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft (raw, json) Hash identifier: CbJvkBxG1BtPqcVoeT71LSb1jOGS9ZZXkTyARnT+SZU= Subject key identifier: 28:A8:4E:1C:F5:3B:FA:A1:85:71:47:CD:D0:6A:83:AD:AE:C0:B0:74 Authority key identifier: 2A:62:B9:64:EC:86:44:7D:C2:2D:DE:70:DC:35:17:F0:CF:7C:9A:CD Certificate issuer: /CN=2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD Certificate serial: 3ACE10B16C7BF62A581B9A45E931FB904E49D71F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft Manifest number: AD Signing time: Sun 29 Jun 2025 14:10:34 +0000 Manifest this update: Sun 29 Jun 2025 14:05:34 +0000 Manifest next update: Wed 02 Jul 2025 15:32:34 +0000 Files and hashes: 1: 3135372e36362e3132332e302f32342d3234203d3e20313532373731.roa (hash: U13ray6Q2sSoKG3Sl/JF9ePon4W14X24dzQnJX7hj3o=) 2: 2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.crl (hash: 7C81IwmqKSoQhEWkiKlqMuAoR2o0QsRgpvjWtWTLxXk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.crl rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 15:32:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:ce:10:b1:6c:7b:f6:2a:58:1b:9a:45:e9:31:fb:90:4e:49:d7:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD Validity Not Before: Jun 29 14:05:34 2025 GMT Not After : Jul 2 15:32:34 2025 GMT Subject: CN=28A84E1CF53BFAA1857147CDD06A83ADAEC0B074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:23:2d:39:27:c3:4d:b1:e5:7a:7a:f3:7b:ee: 30:af:e2:9e:0a:01:a5:ed:27:7f:e4:4f:33:03:84: 3e:59:35:16:49:ab:cf:c1:54:f9:a1:ac:77:4c:69: 99:e9:ca:37:82:c0:07:51:35:03:2a:b0:51:44:7b: 24:c1:3e:3e:c0:b6:f3:1e:3a:72:59:50:01:4b:44: d5:3b:9e:8b:cb:50:b1:e6:9d:ed:f8:07:66:e6:03: 81:61:08:c8:16:23:46:e7:da:94:92:b1:c6:66:89: a2:d1:d3:e6:96:1b:dc:4a:00:f5:9c:a3:4f:14:f5: 0f:2b:5c:20:87:07:6b:bc:d1:e4:ae:95:1f:33:0b: 44:27:90:5c:7c:67:39:f4:6b:26:77:05:11:7e:f1: 37:e4:9e:3b:6f:1c:e0:15:24:f9:5a:a3:b9:2b:50: f1:eb:98:ae:9e:af:bd:b3:34:ec:fc:ff:23:32:ac: 09:98:5b:76:4b:6e:ea:fe:e5:50:a3:97:78:b9:72: a7:b9:7c:a0:fc:65:1d:54:c2:c2:9d:32:d0:5f:8e: 40:ac:ca:8c:c7:2d:f6:e0:c6:ee:f0:10:e8:e9:4e: 5f:a0:c0:d6:fe:5f:29:a4:3f:a9:fb:b5:a1:55:30: ad:55:90:6a:23:77:51:2a:0e:5c:c9:d0:27:0c:2e: dc:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A8:4E:1C:F5:3B:FA:A1:85:71:47:CD:D0:6A:83:AD:AE:C0:B0:74 X509v3 Authority Key Identifier: keyid:2A:62:B9:64:EC:86:44:7D:C2:2D:DE:70:DC:35:17:F0:CF:7C:9A:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:df:88:07:9a:54:b4:4e:fe:0d:49:e7:82:3a:ec:b1:ef:fd: 73:0d:a1:33:6b:7b:45:06:23:65:1f:dc:7f:74:26:5e:e7:83: f7:1f:57:64:03:ee:f5:39:33:bd:52:fb:c5:5d:58:10:53:3e: 45:c7:f0:ab:a1:7d:ee:f4:c2:00:05:eb:40:16:ba:03:94:bb: a8:95:92:29:4f:d1:2c:89:49:2c:52:31:c5:60:d8:b8:ad:b8: 97:c0:87:cb:66:4d:b3:e0:a2:e9:85:8e:73:c3:3e:d0:90:64: 58:a2:cb:dc:a8:af:d9:3e:bb:63:c0:f7:3f:af:0b:df:dd:3c: 72:0c:14:5d:6a:29:a6:68:39:8f:4b:cd:13:bc:4e:49:c6:89: 8a:46:19:57:d0:ab:66:7a:c7:5e:08:76:93:03:fc:b2:94:16: d7:46:64:94:d9:a3:52:aa:9d:8c:82:61:eb:f9:88:43:29:65: 77:20:8f:fa:70:77:2d:77:0e:b3:94:ba:cf:f8:bc:21:24:ea: 9b:ad:5b:8f:c2:f7:ef:28:38:d7:18:36:26:44:32:60:7e:db: 86:77:8b:6e:fe:67:6b:48:1e:b8:5d:ff:47:92:a4:2b:86:5d: c8:24:63:87:3b:48:34:00:93:57:27:88:51:2d:14:06:19:a3: 93:3a:36:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOs4QsWx79ipYG5pF6TH7kE5J1x8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE2MkI5NjRFQzg2NDQ3REMyMkRERTcwREMzNTE3RjBD RjdDOUFDRDAeFw0yNTA2MjkxNDA1MzRaFw0yNTA3MDIxNTMyMzRaMDMxMTAvBgNV BAMTKDI4QTg0RTFDRjUzQkZBQTE4NTcxNDdDREQwNkE4M0FEQUVDMEIwNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzIy05J8NNseV6evN77jCv4p4K AaXtJ3/kTzMDhD5ZNRZJq8/BVPmhrHdMaZnpyjeCwAdRNQMqsFFEeyTBPj7AtvMe OnJZUAFLRNU7novLULHmne34B2bmA4FhCMgWI0bn2pSSscZmiaLR0+aWG9xKAPWc o08U9Q8rXCCHB2u80eSulR8zC0QnkFx8Zzn0ayZ3BRF+8TfknjtvHOAVJPlao7kr UPHrmK6er72zNOz8/yMyrAmYW3ZLbur+5VCjl3i5cqe5fKD8ZR1UwsKdMtBfjkCs yozHLfbgxu7wEOjpTl+gwNb+XymkP6n7taFVMK1VkGojd1EqDlzJ0CcMLtyzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKKhOHPU7+qGFcUfN0GqDra7AsHQwHwYDVR0j BBgwFoAUKmK5ZOyGRH3CLd5w3DUX8M98ms0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWIwODg0NS1kZjgyLTQ0YzItOTc2ZC02ZDc0YjgxMTY2ZjQvMC8yQTYyQjk2NEVD ODY0NDdEQzIyRERFNzBEQzM1MTdGMENGN0M5QUNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkE2MkI5NjRFQzg2NDQ3REMyMkRERTcwREMzNTE3RjBDRjdD OUFDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFiMDg4NDUtZGY4Mi00NGMyLTk3 NmQtNmQ3NGI4MTE2NmY0LzAvMkE2MkI5NjRFQzg2NDQ3REMyMkRERTcwREMzNTE3 RjBDRjdDOUFDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKffiAeaVLRO/g1J54I67LHv/XMNoTNre0UG I2Uf3H90Jl7ng/cfV2QD7vU5M71S+8VdWBBTPkXH8Kuhfe70wgAF60AWugOUu6iV kilP0SyJSSxSMcVg2LituJfAh8tmTbPgoumFjnPDPtCQZFiiy9yor9k+u2PA9z+v C9/dPHIMFF1qKaZoOY9LzRO8TknGiYpGGVfQq2Z6x14IdpMD/LKUFtdGZJTZo1Kq nYyCYev5iEMpZXcgj/pwdy13DrOUus/4vCEk6putW4/C9+8oONcYNiZEMmB+24Z3 i27+Z2tIHrhd/0eSpCuGXcgkY4c7SDQAk1cniFEtFAYZo5M6Nr0= -----END CERTIFICATE-----Generated at Mon Jun 30 16:22:34 2025 by rpki-client