$ rpki-client -vvf repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft File: 2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft (raw, json) Hash identifier: 58UtUAc4GjuwyYcabllyC73cQ8z9VfWaPXzoi80dIW0= Subject key identifier: 00:C1:40:A5:59:47:77:9B:92:D7:FE:15:2C:B4:3E:24:38:BB:F7:CB Authority key identifier: 2A:2A:BC:86:29:3A:3D:A3:60:2C:0D:FB:CE:D7:D9:92:4F:E5:A5:8B Certificate issuer: /CN=2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B Certificate serial: 44F4C83EDCF4439E297403B3FF7A741B13DAD5E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft Manifest number: 04E7 Signing time: Sun 29 Jun 2025 08:20:49 +0000 Manifest this update: Sun 29 Jun 2025 08:15:49 +0000 Manifest next update: Wed 02 Jul 2025 19:55:49 +0000 Files and hashes: 1: 2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.crl (hash: yaAWS5DVRRhEOP0m3+ay98XShDgAlTPp1qOFYbuuREw=) 2: 3130332e3134352e3234322e302f32332d3234203d3e20313339343534.roa (hash: D2W67nt589wKu+2Bfg+V0s/E2/ZjISUp5pz9rbCWuK0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.crl rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:f4:c8:3e:dc:f4:43:9e:29:74:03:b3:ff:7a:74:1b:13:da:d5:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B Validity Not Before: Jun 29 08:15:49 2025 GMT Not After : Jul 2 19:55:49 2025 GMT Subject: CN=00C140A55947779B92D7FE152CB43E2438BBF7CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cb:59:48:e5:5e:0f:ae:0d:5c:5e:ad:3d:5e: ca:39:a3:a1:18:35:6d:4e:ba:0a:97:ca:38:10:76: 71:d1:ff:3e:1e:ea:10:10:e4:14:84:ef:d4:ab:d5: 11:37:23:68:c3:2c:68:a7:3a:19:11:37:4c:77:0a: 2f:6c:c6:f5:03:08:f9:45:38:bc:a4:a4:04:16:75: d9:4c:fd:ee:c6:d3:f5:4b:8d:f9:f1:8c:ec:d1:81: 5a:55:86:b3:e7:b5:5b:ef:60:67:37:12:71:7c:e8: b1:57:42:77:ca:17:5a:d6:ba:ab:72:33:50:04:3a: ae:ec:02:54:b1:6a:b6:c5:bc:7f:fd:50:35:48:a7: 43:51:dc:f2:ff:bd:ac:17:42:f8:e4:22:62:7e:00: 21:42:be:30:ff:38:0a:9a:dc:91:69:6f:fb:c8:1b: 23:0e:48:a2:de:26:b4:0d:d6:c7:d2:32:0a:a2:ad: f0:c0:66:4a:75:ba:f0:3f:ea:8a:4d:bf:7a:75:46: 9d:aa:3a:b2:0b:fc:26:f3:14:5c:60:43:ba:71:dc: 35:05:e7:ec:40:70:77:6d:a7:49:16:78:ca:18:01: c2:3c:aa:e4:42:11:b9:8f:f6:bd:95:72:ed:a1:f3: 78:da:99:18:f8:bd:5f:16:49:84:d5:3b:07:bf:a3: d5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C1:40:A5:59:47:77:9B:92:D7:FE:15:2C:B4:3E:24:38:BB:F7:CB X509v3 Authority Key Identifier: keyid:2A:2A:BC:86:29:3A:3D:A3:60:2C:0D:FB:CE:D7:D9:92:4F:E5:A5:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:1d:89:f1:62:b0:52:44:b0:40:ec:c4:02:08:7b:c9:28:92: ea:98:be:bb:c6:3f:a6:ea:b7:16:e0:46:68:fc:12:78:fb:e3: e8:fe:84:0e:10:cd:e8:41:0f:7a:b2:d8:07:66:93:45:dc:2d: 90:c4:ad:b9:68:d1:6e:63:13:89:27:c9:e1:49:e4:71:e3:45: 8c:e5:c7:56:d6:76:9b:c0:ba:a7:04:c4:be:ef:c4:87:06:e0: 06:85:e7:ce:a1:3a:ef:5e:6c:b8:e1:b5:e5:15:2c:c6:66:9e: 9d:17:ad:66:0c:ef:e6:44:c4:07:c7:38:7c:9d:5f:51:15:c2: a3:cc:bf:16:80:83:9f:f0:c7:d0:70:c4:42:6e:8c:42:9b:71: 34:d7:05:f1:38:23:6f:c8:17:2d:75:4b:03:a1:e9:90:ed:1e: 1a:e7:f8:53:f1:3f:85:f7:ed:6c:da:2b:4d:8c:6d:8c:14:08: cc:fa:4b:ff:90:c4:78:24:02:c3:39:9a:1a:a9:be:c2:66:97: 8a:76:2c:20:fb:fd:3b:47:4f:ec:39:c6:15:58:8c:4e:a3:5b: 22:63:15:9e:c4:18:ef:e3:3c:0c:da:02:80:47:e0:08:15:10: 56:86:14:b5:03:dc:10:f8:b6:0e:2d:b6:d8:8d:5a:e6:4a:6a: 50:7d:0a:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURPTIPtz0Q54pdAOz/3p0GxPa1eQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyQUJDODYyOTNBM0RBMzYwMkMwREZCQ0VEN0Q5OTI0 RkU1QTU4QjAeFw0yNTA2MjkwODE1NDlaFw0yNTA3MDIxOTU1NDlaMDMxMTAvBgNV BAMTKDAwQzE0MEE1NTk0Nzc3OUI5MkQ3RkUxNTJDQjQzRTI0MzhCQkY3Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8y1lI5V4Prg1cXq09Xso5o6EY NW1OugqXyjgQdnHR/z4e6hAQ5BSE79Sr1RE3I2jDLGinOhkRN0x3Ci9sxvUDCPlF OLykpAQWddlM/e7G0/VLjfnxjOzRgVpVhrPntVvvYGc3EnF86LFXQnfKF1rWuqty M1AEOq7sAlSxarbFvH/9UDVIp0NR3PL/vawXQvjkImJ+ACFCvjD/OAqa3JFpb/vI GyMOSKLeJrQN1sfSMgqirfDAZkp1uvA/6opNv3p1Rp2qOrIL/CbzFFxgQ7px3DUF 5+xAcHdtp0kWeMoYAcI8quRCEbmP9r2Vcu2h83jamRj4vV8WSYTVOwe/o9UvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAMFApVlHd5uS1/4VLLQ+JDi798swHwYDVR0j BBgwFoAUKiq8hik6PaNgLA37ztfZkk/lpYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzUwYTY1MS0xYTFhLTQ1MDEtYThiYy05NTkxZTExMDlhMjcvMC8yQTJBQkM4NjI5 M0EzREEzNjAyQzBERkJDRUQ3RDk5MjRGRTVBNThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkEyQUJDODYyOTNBM0RBMzYwMkMwREZCQ0VEN0Q5OTI0RkU1 QTU4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc1MGE2NTEtMWExYS00NTAxLWE4 YmMtOTU5MWUxMTA5YTI3LzAvMkEyQUJDODYyOTNBM0RBMzYwMkMwREZCQ0VEN0Q5 OTI0RkU1QTU4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALQdifFisFJEsEDsxAIIe8kokuqYvrvGP6bq txbgRmj8Enj74+j+hA4QzehBD3qy2Admk0XcLZDErblo0W5jE4knyeFJ5HHjRYzl x1bWdpvAuqcExL7vxIcG4AaF586hOu9ebLjhteUVLMZmnp0XrWYM7+ZExAfHOHyd X1EVwqPMvxaAg5/wx9BwxEJujEKbcTTXBfE4I2/IFy11SwOh6ZDtHhrn+FPxP4X3 7WzaK02MbYwUCMz6S/+QxHgkAsM5mhqpvsJml4p2LCD7/TtHT+w5xhVYjE6jWyJj FZ7EGO/jPAzaAoBH4AgVEFaGFLUD3BD4tg4tttiNWuZKalB9Cmo= -----END CERTIFICATE-----Generated at Sun Jun 29 19:07:19 2025 by rpki-client