$ rpki-client -vvf repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft File: 2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft (raw, json) Hash identifier: RCa05R0U1NjUVeQxx4QrCyjv5ERWRGRRTUqFNRtlsrU= Subject key identifier: C6:71:F6:B2:E9:66:19:9A:16:B6:CF:03:5E:01:55:E7:D2:71:56:73 Authority key identifier: 2D:23:C6:29:ED:95:6F:17:36:B7:DA:EC:CD:2A:AF:31:C4:F1:7C:26 Certificate issuer: /CN=2D23C629ED956F1736B7DAECCD2AAF31C4F17C26 Certificate serial: 7110A82ACC79D3621482A2D1F34219A9E4697699 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft Manifest number: 01E0 Signing time: Fri 22 Aug 2025 07:40:55 +0000 Manifest this update: Fri 22 Aug 2025 07:35:55 +0000 Manifest next update: Mon 25 Aug 2025 15:43:55 +0000 Files and hashes: 1: 2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl (hash: D6MQPEEHD6zLvw2yf7nyrZxtBg+9zPoKD8DE6RZiyl8=) 2: 3130332e3133382e31302e302f32342d3234203d3e20313338383335.roa (hash: G/xb7tdZk9UZaq4hfvb/m2IU6lYeHr5mMwL3BOuVZMU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 15:43:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:10:a8:2a:cc:79:d3:62:14:82:a2:d1:f3:42:19:a9:e4:69:76:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D23C629ED956F1736B7DAECCD2AAF31C4F17C26 Validity Not Before: Aug 22 07:35:55 2025 GMT Not After : Aug 25 15:43:55 2025 GMT Subject: CN=C671F6B2E966199A16B6CF035E0155E7D2715673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:89:88:84:64:e0:6c:a4:bd:40:5c:58:a9:39: 80:e5:9f:3d:e0:c2:0e:aa:88:b1:25:b8:7f:1f:32: f7:23:58:cd:a6:52:b9:31:bd:42:35:84:93:f4:53: f5:ed:0d:83:f6:f1:b1:9c:6b:93:84:49:c4:f2:2a: 6b:9f:79:3c:c0:63:1f:ee:45:d7:4e:1a:d0:1b:4d: a0:7c:0f:cf:c9:52:9b:b2:32:00:5e:f7:6c:f4:20: e9:80:67:7d:aa:dc:dd:c7:d1:5d:89:f4:28:fd:33: 9e:07:dc:e7:e0:6f:2a:b1:fe:21:aa:c6:0f:e2:8e: d9:f7:a3:9d:38:ed:0d:44:f0:f3:39:f9:94:e4:5c: 8b:1a:74:d7:d3:79:85:a7:c2:12:20:17:0c:a9:df: 97:41:1d:e8:5a:9e:55:d1:6c:96:6a:69:f6:56:80: 6e:89:46:02:c9:a7:a7:a0:03:5e:a2:bf:67:30:01: a0:2b:b5:0e:d9:ab:7f:b2:08:b9:42:f7:c1:7f:84: b4:81:82:72:28:db:64:54:86:ef:1a:98:40:a2:08: df:a2:a1:93:7f:56:da:30:a4:aa:ba:e8:38:4f:a2: 06:ea:99:cd:f4:4d:6e:b1:11:4f:34:a8:45:b1:5c: 89:a1:b4:5e:60:af:6b:82:94:1a:8f:51:09:a4:ee: bf:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:71:F6:B2:E9:66:19:9A:16:B6:CF:03:5E:01:55:E7:D2:71:56:73 X509v3 Authority Key Identifier: keyid:2D:23:C6:29:ED:95:6F:17:36:B7:DA:EC:CD:2A:AF:31:C4:F1:7C:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:80:44:b2:aa:0a:70:64:2a:c7:c2:26:2d:23:92:d1:99:5a: e4:9a:6d:59:e3:5a:38:23:f4:48:63:5b:0e:ab:00:9e:28:62: e8:af:c4:f4:21:ec:7a:ca:6a:93:88:80:a6:83:cc:4e:de:45: 63:a7:66:ca:2c:a9:cd:a0:26:a7:ad:da:0d:f9:d8:d9:cf:20: fc:72:52:60:b5:82:be:11:ab:8d:e8:92:6c:cb:22:60:93:32: ab:eb:3d:a0:59:0c:1e:6e:83:fc:f6:f9:1b:08:aa:bf:87:cf: d0:32:0f:99:81:50:d9:84:51:ff:e3:63:16:ba:d3:5f:0e:8d: 6f:9b:ca:74:36:c8:e8:53:27:74:83:1d:52:67:a7:17:ac:13: 93:81:8a:ec:74:5e:19:30:e5:65:8f:0d:bb:40:35:d7:ec:7d: a9:c0:f9:4d:e3:c0:8e:cf:4e:71:88:5c:f4:84:fa:99:18:da: 53:ef:7e:06:bf:ba:aa:f6:6d:aa:23:68:c6:ce:9f:9a:7e:57: b8:e8:c7:62:8e:42:cf:79:cd:03:b1:42:2c:78:80:2f:29:8f: 83:4f:1d:aa:45:00:fa:f0:14:ce:6e:74:5d:b3:37:54:05:c2: a2:76:fd:ca:f1:ce:a8:83:eb:f9:b9:74:3e:6f:46:9c:d2:89: 28:cb:96:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcRCoKsx502IUgqLR80IZqeRpdpkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFGMzFD NEYxN0MyNjAeFw0yNTA4MjIwNzM1NTVaFw0yNTA4MjUxNTQzNTVaMDMxMTAvBgNV BAMTKEM2NzFGNkIyRTk2NjE5OUExNkI2Q0YwMzVFMDE1NUU3RDI3MTU2NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYiYiEZOBspL1AXFipOYDlnz3g wg6qiLEluH8fMvcjWM2mUrkxvUI1hJP0U/XtDYP28bGca5OEScTyKmufeTzAYx/u RddOGtAbTaB8D8/JUpuyMgBe92z0IOmAZ32q3N3H0V2J9Cj9M54H3Ofgbyqx/iGq xg/ijtn3o5047Q1E8PM5+ZTkXIsadNfTeYWnwhIgFwyp35dBHehanlXRbJZqafZW gG6JRgLJp6egA16iv2cwAaArtQ7Zq3+yCLlC98F/hLSBgnIo22RUhu8amECiCN+i oZN/VtowpKq66DhPogbqmc30TW6xEU80qEWxXImhtF5gr2uClBqPUQmk7r8pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxnH2sulmGZoWts8DXgFV59JxVnMwHwYDVR0j BBgwFoAULSPGKe2Vbxc2t9rszSqvMcTxfCYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODY4Y2YyMi1kMDI5LTQ1ZTItOWUyMS1kOTg5MmQzYWY3YTYvMC8yRDIzQzYyOUVE OTU2RjE3MzZCN0RBRUNDRDJBQUYzMUM0RjE3QzI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFGMzFDNEYx N0MyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDg2OGNmMjItZDAyOS00NWUyLTll MjEtZDk4OTJkM2FmN2E2LzAvMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFG MzFDNEYxN0MyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB6ARLKqCnBkKsfCJi0jktGZWuSabVnjWjgj 9EhjWw6rAJ4oYuivxPQh7HrKapOIgKaDzE7eRWOnZsosqc2gJqet2g352NnPIPxy UmC1gr4Rq43okmzLImCTMqvrPaBZDB5ug/z2+RsIqr+Hz9AyD5mBUNmEUf/jYxa6 018OjW+bynQ2yOhTJ3SDHVJnpxesE5OBiux0Xhkw5WWPDbtANdfsfanA+U3jwI7P TnGIXPSE+pkY2lPvfga/uqr2baojaMbOn5p+V7jox2KOQs95zQOxQix4gC8pj4NP HapFAPrwFM5udF2zN1QFwqJ2/crxzqiD6/m5dD5vRpzSiSjLllk= -----END CERTIFICATE-----Generated at Sat Aug 23 20:01:09 2025 by rpki-client