$ rpki-client -vvf repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft File: 2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft (raw, json) Hash identifier: PiTy2TLup9CFxGooDdEIfa89zi01WnQMlGeCi1ugruE= Subject key identifier: 90:72:D3:E8:AA:7F:D2:0D:BD:01:81:12:10:9F:E9:84:7B:1F:24:8A Authority key identifier: 2B:15:30:AD:20:AC:1F:2F:7F:2E:A2:EB:AA:E7:07:D0:E1:28:A1:DC Certificate issuer: /CN=2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC Certificate serial: 20D5DAA65704E19FE25D9AF2D266D606F8982316 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft Manifest number: 0320 Signing time: Thu 21 Aug 2025 09:52:20 +0000 Manifest this update: Thu 21 Aug 2025 09:47:20 +0000 Manifest next update: Sun 24 Aug 2025 21:44:20 +0000 Files and hashes: 1: 3130332e3137322e31372e302f32342d3234203d3e20313432333831.roa (hash: DVIrghrEW7VwPIX0cx9PZe/9iJL/OmwC/t6EzXjRAD8=) 2: 2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl (hash: qp67ufJ7+CXdvPA/eHcxxibTpvvQ08xFuBTXjUErnj8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 21:44:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:d5:da:a6:57:04:e1:9f:e2:5d:9a:f2:d2:66:d6:06:f8:98:23:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC Validity Not Before: Aug 21 09:47:20 2025 GMT Not After : Aug 24 21:44:20 2025 GMT Subject: CN=9072D3E8AA7FD20DBD018112109FE9847B1F248A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:19:ac:e1:48:3d:19:93:fb:c0:f9:3e:d0:d7: 0a:c4:47:5b:a8:29:ce:ee:6e:e5:1b:ff:89:5a:fd: 78:36:db:7a:2f:01:b5:a5:41:84:e6:b3:35:55:db: 7c:ce:92:85:b0:f1:18:09:4d:7b:fa:b5:8d:13:38: 31:3a:a6:21:a0:e9:97:b7:a8:a6:a7:1f:e1:5e:e0: d9:50:a1:1a:d6:5a:d7:e0:fe:59:87:0d:93:b4:aa: 3e:70:c8:af:e1:46:14:3a:6f:16:26:96:a2:ff:fe: 63:20:af:de:81:e7:02:3f:f2:c7:aa:01:d2:05:40: 06:35:ce:70:c3:5e:fe:be:f0:c4:27:f7:8e:d5:5d: c8:bb:64:a5:2c:71:29:f9:7d:e3:f0:28:bb:ed:71: f5:6a:0f:3f:e5:4e:f1:31:5a:8d:17:19:d2:91:c3: 7e:e3:82:db:c5:e0:1d:22:33:95:af:58:05:67:95: b3:fc:94:d0:84:ca:7b:38:7c:68:4b:ca:80:8d:36: 93:67:67:6d:29:3f:32:b2:e3:4e:6d:b7:05:46:87: 80:70:f9:d9:a2:9b:6f:9d:a2:9f:d1:38:d6:91:a4: 4e:91:dd:e2:03:49:86:50:a8:ba:3e:55:25:66:45: 1d:65:18:b3:ed:0f:b7:92:79:25:42:9c:05:77:ff: f5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:72:D3:E8:AA:7F:D2:0D:BD:01:81:12:10:9F:E9:84:7B:1F:24:8A X509v3 Authority Key Identifier: keyid:2B:15:30:AD:20:AC:1F:2F:7F:2E:A2:EB:AA:E7:07:D0:E1:28:A1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:f5:28:bc:1f:99:2b:a4:8b:5c:f7:0e:f2:fd:e8:f6:ca:b9: c7:b4:d7:3e:14:a0:9a:4b:d9:ac:55:d5:b2:d3:bc:87:17:f5: 81:42:45:53:0d:c1:66:26:3f:f9:8f:73:1e:b4:a0:76:90:09: c0:12:46:e9:0a:7a:01:05:59:46:27:cb:fe:e3:65:00:c0:7b: 14:82:13:26:e9:ee:76:f9:6e:31:95:6e:e8:37:8b:60:2f:9a: ec:2a:c7:de:63:de:6a:9e:fe:a7:d2:4f:83:c1:dc:57:b6:7c: 0b:79:4a:48:9d:f5:f0:f0:ee:a2:d8:f7:06:7a:64:ac:ca:2c: b3:e4:21:76:4b:36:15:ee:27:4f:a5:fc:ef:cb:43:c7:cc:9f: 00:c2:d0:8d:8c:39:ba:d4:c1:39:99:c8:cb:3c:2d:94:22:1f: 8c:0c:ca:24:a9:83:9d:e6:16:99:90:d4:f7:f0:73:ae:fa:78: d4:51:59:cd:c8:53:7a:10:d8:84:ff:a3:17:e3:79:7e:aa:38: a0:0e:50:02:1f:f8:1f:2c:25:84:be:20:45:5a:4e:b7:46:d9: 48:80:60:1b:be:f7:1b:a5:91:b4:85:26:c6:79:d3:31:52:d6: 65:63:61:13:1b:18:1a:f4:14:8f:d5:eb:5d:56:68:a9:54:4b: 48:60:be:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUINXaplcE4Z/iXZry0mbWBviYIxYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3RDBF MTI4QTFEQzAeFw0yNTA4MjEwOTQ3MjBaFw0yNTA4MjQyMTQ0MjBaMDMxMTAvBgNV BAMTKDkwNzJEM0U4QUE3RkQyMERCRDAxODExMjEwOUZFOTg0N0IxRjI0OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoGazhSD0Zk/vA+T7Q1wrER1uo Kc7ubuUb/4la/Xg223ovAbWlQYTmszVV23zOkoWw8RgJTXv6tY0TODE6piGg6Ze3 qKanH+Fe4NlQoRrWWtfg/lmHDZO0qj5wyK/hRhQ6bxYmlqL//mMgr96B5wI/8seq AdIFQAY1znDDXv6+8MQn947VXci7ZKUscSn5fePwKLvtcfVqDz/lTvExWo0XGdKR w37jgtvF4B0iM5WvWAVnlbP8lNCEyns4fGhLyoCNNpNnZ20pPzKy405ttwVGh4Bw +dmim2+dop/RONaRpE6R3eIDSYZQqLo+VSVmRR1lGLPtD7eSeSVCnAV3//VRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkHLT6Kp/0g29AYESEJ/phHsfJIowHwYDVR0j BBgwFoAUKxUwrSCsHy9/LqLrqucH0OEoodwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NjY4ODU0YS0zZjI0LTQwYjEtODBjZC1lNjM2YWE3ZThiMWMvMC8yQjE1MzBBRDIw QUMxRjJGN0YyRUEyRUJBQUU3MDdEMEUxMjhBMURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3RDBFMTI4 QTFEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjY2ODg1NGEtM2YyNC00MGIxLTgw Y2QtZTYzNmFhN2U4YjFjLzAvMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3 RDBFMTI4QTFEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMj1KLwfmSuki1z3DvL96PbKuce01z4UoJpL 2axV1bLTvIcX9YFCRVMNwWYmP/mPcx60oHaQCcASRukKegEFWUYny/7jZQDAexSC Eybp7nb5bjGVbug3i2Avmuwqx95j3mqe/qfST4PB3Fe2fAt5Skid9fDw7qLY9wZ6 ZKzKLLPkIXZLNhXuJ0+l/O/LQ8fMnwDC0I2MObrUwTmZyMs8LZQiH4wMyiSpg53m FpmQ1Pfwc676eNRRWc3IU3oQ2IT/oxfjeX6qOKAOUAIf+B8sJYS+IEVaTrdG2UiA YBu+9xulkbSFJsZ50zFS1mVjYRMbGBr0FI/V611WaKlUS0hgviU= -----END CERTIFICATE-----Generated at Sat Aug 23 17:40:46 2025 by rpki-client