$ rpki-client -vvf repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.mft File: 2ADCBF290A98776E6F59353351C879A1502B884A.mft (raw, json) Hash identifier: thMT12CdqPKRsI4P8ZCyOvvqwjf7GshsHPbT7lpTexc= Subject key identifier: 05:DA:6B:58:F7:4F:94:7E:6D:FD:3E:9D:C2:A1:06:F5:32:32:13:58 Authority key identifier: 2A:DC:BF:29:0A:98:77:6E:6F:59:35:33:51:C8:79:A1:50:2B:88:4A Certificate issuer: /CN=2ADCBF290A98776E6F59353351C879A1502B884A Certificate serial: 675748606BE51A10483DFD0885555A4433A7A608 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2ADCBF290A98776E6F59353351C879A1502B884A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.mft Manifest number: 01A4 Signing time: Sat 23 Aug 2025 05:30:48 +0000 Manifest this update: Sat 23 Aug 2025 05:25:48 +0000 Manifest next update: Tue 26 Aug 2025 07:07:48 +0000 Files and hashes: 1: 3130332e35342e38332e302f32342d3234203d3e20313530353132.roa (hash: TNPPWguy+EG+YXVjh98k8HLbiPmnDYSLszixyMOhlSg=) 2: 2ADCBF290A98776E6F59353351C879A1502B884A.crl (hash: et+cxJ4f4JyDB/zGG4oZScjX9HxxODSm3JpQs1Qv7WA=) 3: 3130332e35342e38322e302f32332d3233203d3e20313530353132.roa (hash: FjkCQEbxTkTrmju7umuTXr3UC7Hk/PD5qd4yUNE4PfI=) 4: 3130332e35342e38322e302f32342d3234203d3e20313530353132.roa (hash: Bn094jjpTmS3GhwwJiONFucK7tyqAYJ6uENssiFFaws=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.crl rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2ADCBF290A98776E6F59353351C879A1502B884A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 07:07:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:57:48:60:6b:e5:1a:10:48:3d:fd:08:85:55:5a:44:33:a7:a6:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ADCBF290A98776E6F59353351C879A1502B884A Validity Not Before: Aug 23 05:25:48 2025 GMT Not After : Aug 26 07:07:48 2025 GMT Subject: CN=05DA6B58F74F947E6DFD3E9DC2A106F532321358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:77:46:8f:2a:69:a7:31:3a:35:ad:47:a3:4a: 6a:7a:71:0e:b7:fb:94:7b:8c:6d:b2:9f:e0:ae:57: cb:bf:6f:c0:e6:cb:ff:b5:2b:80:58:b8:a0:2e:28: da:4e:4b:02:d0:cc:d8:54:82:d7:f3:6f:43:ea:82: 09:71:0e:9d:8d:f1:3a:ea:0b:1a:b2:97:e6:84:5b: df:f0:23:7a:a7:a2:c1:ea:84:99:6f:51:b9:07:50: 37:24:dd:42:d7:99:ae:a5:5d:e1:b3:fa:6c:8a:35: f2:ec:96:04:82:70:cf:06:9b:17:27:5d:2c:57:5e: f5:d6:78:15:38:bd:9d:1a:20:1c:38:b7:a3:0f:62: fb:5c:0d:04:cc:a3:bd:1c:0b:0d:ed:ab:13:6e:45: bc:c1:cd:d2:f0:8b:3c:c3:39:fc:81:29:91:15:51: f6:7b:f0:cb:82:a3:87:7f:05:84:a7:46:4d:b6:95: 00:67:15:38:c9:3f:d4:e3:7c:12:96:47:8e:55:cd: 01:87:78:a4:07:82:19:57:79:09:e9:7b:81:61:09: 8f:9f:86:10:35:0e:7c:20:14:fa:59:0c:07:96:e3: 91:f7:c1:1a:11:46:66:6b:ef:3f:d3:66:02:2a:b2: 2d:ab:27:d4:c7:68:fd:28:08:d3:b8:82:73:93:fd: b2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:DA:6B:58:F7:4F:94:7E:6D:FD:3E:9D:C2:A1:06:F5:32:32:13:58 X509v3 Authority Key Identifier: keyid:2A:DC:BF:29:0A:98:77:6E:6F:59:35:33:51:C8:79:A1:50:2B:88:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2ADCBF290A98776E6F59353351C879A1502B884A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:cc:41:6e:72:31:b0:e2:17:8d:5b:0b:11:d8:ae:e9:35:0c: 88:ff:9a:6b:4c:c6:f4:25:b2:ef:d2:bd:46:9e:51:0d:7a:f8: fe:19:b5:6b:e4:af:8b:d7:a9:73:90:eb:b2:45:1d:75:91:92: 2b:6e:f9:e1:2f:95:ef:60:c0:48:22:7c:31:b2:ae:b7:43:50: 17:9b:0c:a8:77:02:ec:3a:4d:23:91:a5:8b:b0:4a:cc:61:9c: 24:e6:03:77:cf:78:a6:09:b6:6b:c1:07:66:db:ea:94:14:69: e3:25:db:0e:91:69:d4:4a:49:78:36:15:c5:9b:d9:e4:21:d6: 65:13:76:71:58:4f:32:ad:6a:a6:02:5d:56:cc:1a:19:0f:d6: 20:2b:21:a3:cc:f9:c5:b2:56:85:ef:51:28:07:a5:3c:cc:08: 39:68:1f:e9:40:3f:b6:42:79:5a:92:b9:de:55:81:14:4d:fc: 8a:8d:56:59:ff:35:4b:33:0a:dd:2c:50:74:be:26:40:10:61: f2:ba:fc:1d:b0:d6:c1:c8:90:db:0c:95:bf:5e:9f:45:88:29: c2:ae:13:61:4c:ea:61:6b:eb:7b:d0:22:fd:f6:b5:78:6e:83: f1:25:ee:73:bb:d2:87:1b:2c:a0:74:eb:7c:51:9f:11:67:6e: 8e:b7:2f:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ1dIYGvlGhBIPf0IhVVaRDOnpggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFEQ0JGMjkwQTk4Nzc2RTZGNTkzNTMzNTFDODc5QTE1 MDJCODg0QTAeFw0yNTA4MjMwNTI1NDhaFw0yNTA4MjYwNzA3NDhaMDMxMTAvBgNV BAMTKDA1REE2QjU4Rjc0Rjk0N0U2REZEM0U5REMyQTEwNkY1MzIzMjEzNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnd0aPKmmnMTo1rUejSmp6cQ63 +5R7jG2yn+CuV8u/b8Dmy/+1K4BYuKAuKNpOSwLQzNhUgtfzb0PqgglxDp2N8Trq Cxqyl+aEW9/wI3qnosHqhJlvUbkHUDck3ULXma6lXeGz+myKNfLslgSCcM8Gmxcn XSxXXvXWeBU4vZ0aIBw4t6MPYvtcDQTMo70cCw3tqxNuRbzBzdLwizzDOfyBKZEV UfZ78MuCo4d/BYSnRk22lQBnFTjJP9TjfBKWR45VzQGHeKQHghlXeQnpe4FhCY+f hhA1DnwgFPpZDAeW45H3wRoRRmZr7z/TZgIqsi2rJ9THaP0oCNO4gnOT/bKfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBdprWPdPlH5t/T6dwqEG9TIyE1gwHwYDVR0j BBgwFoAUKty/KQqYd25vWTUzUch5oVAriEowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGRlOTQ2My02OGE3LTQ2MmQtOTQwOC1hN2MzOWNlNmU4ZmYvMC8yQURDQkYyOTBB OTg3NzZFNkY1OTM1MzM1MUM4NzlBMTUwMkI4ODRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkFEQ0JGMjkwQTk4Nzc2RTZGNTkzNTMzNTFDODc5QTE1MDJC ODg0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThkZTk0NjMtNjhhNy00NjJkLTk0 MDgtYTdjMzljZTZlOGZmLzAvMkFEQ0JGMjkwQTk4Nzc2RTZGNTkzNTMzNTFDODc5 QTE1MDJCODg0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA7MQW5yMbDiF41bCxHYruk1DIj/mmtMxvQl su/SvUaeUQ16+P4ZtWvkr4vXqXOQ67JFHXWRkitu+eEvle9gwEgifDGyrrdDUBeb DKh3Auw6TSORpYuwSsxhnCTmA3fPeKYJtmvBB2bb6pQUaeMl2w6RadRKSXg2FcWb 2eQh1mUTdnFYTzKtaqYCXVbMGhkP1iArIaPM+cWyVoXvUSgHpTzMCDloH+lAP7ZC eVqSud5VgRRN/IqNVln/NUszCt0sUHS+JkAQYfK6/B2w1sHIkNsMlb9en0WIKcKu E2FM6mFr63vQIv32tXhug/El7nO70ocbLKB063xRnxFnbo63L+M= -----END CERTIFICATE-----Generated at Sat Aug 23 17:52:27 2025 by rpki-client