$ rpki-client -vvf repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft File: 2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft (raw, json) Hash identifier: e62dbeP2ZJ3eFeYyGOOFdCtrAE2JClz48XSD42zAuDM= Subject key identifier: 55:51:05:25:7F:55:1B:61:A0:8B:8C:74:70:8F:7C:E6:0D:76:08:24 Authority key identifier: 2E:2D:92:69:32:C5:C7:E2:96:93:1D:88:19:08:A4:BB:1E:98:EB:6D Certificate issuer: /CN=2E2D926932C5C7E296931D881908A4BB1E98EB6D Certificate serial: 7A1347CB84A868574C43E6106C35D6BCFA6B0836 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft Manifest number: 0247 Signing time: Sat 23 Aug 2025 09:51:55 +0000 Manifest this update: Sat 23 Aug 2025 09:46:55 +0000 Manifest next update: Tue 26 Aug 2025 13:30:55 +0000 Files and hashes: 1: 3130332e3138312e3235312e302f32342d3234203d3e2039333431.roa (hash: HM/zqihNRtDQE+DnhG8b5XIeNqQOzvMA43WJGWaoV58=) 2: 2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl (hash: OJ1W1gcSxUGhSu7Wj1cof4A5Bal43fla7a/v6QLYcTY=) 3: 3130332e3138312e3235302e302f32342d3234203d3e2039333431.roa (hash: Kh7pHFYHeApzfjYgrJNd5I2iP4JAPgnfkCfLUW4wIPU=) 4: 3130332e3138312e3235302e302f32332d3233203d3e2039333431.roa (hash: VX04EL/wbd2do7GkgjsMSku0mt+fGXzZJka0o80KEQo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:13:47:cb:84:a8:68:57:4c:43:e6:10:6c:35:d6:bc:fa:6b:08:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E2D926932C5C7E296931D881908A4BB1E98EB6D Validity Not Before: Aug 23 09:46:55 2025 GMT Not After : Aug 26 13:30:55 2025 GMT Subject: CN=555105257F551B61A08B8C74708F7CE60D760824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:9d:ca:e1:28:d8:04:fe:fe:22:b1:78:19:4e: 8c:cf:d1:92:a2:c0:5b:fd:65:87:07:55:05:58:be: f6:ac:45:40:40:5b:93:55:07:6a:92:b1:68:02:65: 77:f3:4c:aa:ac:ec:bd:ac:78:cd:d8:d1:a8:86:bc: 61:21:2f:9c:34:a3:87:be:40:70:8a:83:21:6e:69: 99:33:de:ca:23:67:54:cc:c1:58:bb:58:89:9c:d5: d4:1c:0e:95:92:6c:3c:26:bb:a4:1f:67:77:15:2e: c1:40:ca:98:bd:4c:fb:d2:36:13:78:37:79:ab:03: c5:de:72:f0:87:68:21:cb:19:f6:11:eb:99:12:67: c4:5b:32:56:ae:04:49:b0:96:67:2d:47:e7:04:34: ea:27:47:e2:49:b6:08:db:49:bd:3b:ef:19:0f:5d: e5:6d:a9:ad:ec:33:1a:93:20:e0:0c:91:44:0f:56: 9f:c2:0f:6d:f5:23:da:4d:e2:0c:9a:5e:19:94:50: 5d:8e:35:ce:e2:c2:a7:ce:b4:97:a9:3e:58:06:b8: cb:3a:bb:78:b4:ea:00:e0:31:3b:94:6c:71:3b:c2: b8:56:ae:9b:aa:85:eb:25:ed:ef:ca:18:41:c8:de: 60:ba:af:aa:fa:b8:76:cb:84:4b:2c:d7:c3:d4:36: a9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:51:05:25:7F:55:1B:61:A0:8B:8C:74:70:8F:7C:E6:0D:76:08:24 X509v3 Authority Key Identifier: keyid:2E:2D:92:69:32:C5:C7:E2:96:93:1D:88:19:08:A4:BB:1E:98:EB:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:c8:19:ba:c5:17:a5:e2:41:5f:30:30:f5:ec:31:6c:53:9f: 97:b2:d8:72:39:00:de:e5:72:14:c2:9a:cf:2f:15:02:ff:46: 6e:8a:71:ca:1f:0d:bf:35:ac:1f:f4:3d:fb:52:89:d4:7d:57: 34:1a:5a:93:26:97:8a:3f:f3:05:b8:22:9f:36:ef:d2:15:32: 29:39:87:91:b9:70:39:91:2a:16:6d:74:4c:8a:d8:9e:c0:12: 27:7c:6a:9c:4c:78:f7:25:16:2a:8c:46:0d:80:8e:b1:46:22: 18:f4:5c:b2:58:4e:70:f8:cf:ef:7a:e5:f5:71:e9:44:cd:6e: be:66:e8:5c:f0:6d:01:bb:47:b0:76:af:5b:03:74:33:35:b3: b3:b3:66:a9:6e:63:63:69:b7:a6:04:cb:7c:3d:49:ea:a9:d2: fd:7b:92:eb:63:12:a1:ae:63:d6:57:f2:ce:f8:01:d8:77:f2: d0:8f:36:2f:7e:50:45:6a:8f:79:a6:c8:04:d4:65:4d:f1:69: ca:1b:b1:af:77:bc:27:44:65:64:8c:4e:c7:93:10:ff:6a:a3: cf:17:06:a5:93:f7:ca:4a:d9:a1:e8:0f:31:9c:f4:0a:6b:56: 06:4e:2b:8b:1a:c7:0e:4b:69:16:b6:8a:52:b3:4d:b0:09:04: c5:79:99:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUehNHy4SoaFdMQ+YQbDXWvPprCDYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0QkIx RTk4RUI2RDAeFw0yNTA4MjMwOTQ2NTVaFw0yNTA4MjYxMzMwNTVaMDMxMTAvBgNV BAMTKDU1NTEwNTI1N0Y1NTFCNjFBMDhCOEM3NDcwOEY3Q0U2MEQ3NjA4MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqncrhKNgE/v4isXgZTozP0ZKi wFv9ZYcHVQVYvvasRUBAW5NVB2qSsWgCZXfzTKqs7L2seM3Y0aiGvGEhL5w0o4e+ QHCKgyFuaZkz3sojZ1TMwVi7WImc1dQcDpWSbDwmu6QfZ3cVLsFAypi9TPvSNhN4 N3mrA8XecvCHaCHLGfYR65kSZ8RbMlauBEmwlmctR+cENOonR+JJtgjbSb077xkP XeVtqa3sMxqTIOAMkUQPVp/CD231I9pN4gyaXhmUUF2ONc7iwqfOtJepPlgGuMs6 u3i06gDgMTuUbHE7wrhWrpuqhesl7e/KGEHI3mC6r6r6uHbLhEss18PUNqkLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVVEFJX9VG2Ggi4x0cI985g12CCQwHwYDVR0j BBgwFoAULi2SaTLFx+KWkx2IGQikux6Y620wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmE1ODllZi05ZjNkLTQzYmMtYmEzMC1mYTMyNmI3MWY3ODcvMC8yRTJEOTI2OTMy QzVDN0UyOTY5MzFEODgxOTA4QTRCQjFFOThFQjZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0QkIxRTk4 RUI2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZhNTg5ZWYtOWYzZC00M2JjLWJh MzAtZmEzMjZiNzFmNzg3LzAvMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0 QkIxRTk4RUI2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFrIGbrFF6XiQV8wMPXsMWxTn5ey2HI5AN7l chTCms8vFQL/Rm6KccofDb81rB/0PftSidR9VzQaWpMml4o/8wW4Ip8279IVMik5 h5G5cDmRKhZtdEyK2J7AEid8apxMePclFiqMRg2AjrFGIhj0XLJYTnD4z+965fVx 6UTNbr5m6FzwbQG7R7B2r1sDdDM1s7OzZqluY2Npt6YEy3w9Seqp0v17kutjEqGu Y9ZX8s74Adh38tCPNi9+UEVqj3mmyATUZU3xacobsa93vCdEZWSMTseTEP9qo88X BqWT98pK2aHoDzGc9AprVgZOK4saxw5LaRa2ilKzTbAJBMV5mSs= -----END CERTIFICATE-----Generated at Sat Aug 23 13:30:29 2025 by rpki-client