$ rpki-client -vvf repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft File: 2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft (raw, json) Hash identifier: tTd9YVF/PZmPcLxNepgM4Y9mfHpAz3jUUcIs5kxGOS0= Subject key identifier: C1:93:AB:F1:54:44:3A:BF:63:60:B7:F4:DC:74:93:74:13:47:0B:5F Authority key identifier: 2B:15:30:AD:20:AC:1F:2F:7F:2E:A2:EB:AA:E7:07:D0:E1:28:A1:DC Certificate issuer: /CN=2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC Certificate serial: 06862D9A289D2C74CB4D30700C1C7C7032CBE362 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft Manifest number: 0308 Signing time: Sat 28 Jun 2025 15:02:18 +0000 Manifest this update: Sat 28 Jun 2025 14:57:18 +0000 Manifest next update: Tue 01 Jul 2025 15:34:18 +0000 Files and hashes: 1: 3130332e3137322e31372e302f32342d3234203d3e20313432333831.roa (hash: DVIrghrEW7VwPIX0cx9PZe/9iJL/OmwC/t6EzXjRAD8=) 2: 2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl (hash: JSmA7jYomlMsLd1rNN8VXM4+oorcTlsBxrblX8Mj3Es=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 15:34:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:86:2d:9a:28:9d:2c:74:cb:4d:30:70:0c:1c:7c:70:32:cb:e3:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC Validity Not Before: Jun 28 14:57:18 2025 GMT Not After : Jul 1 15:34:18 2025 GMT Subject: CN=C193ABF154443ABF6360B7F4DC74937413470B5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a7:72:0d:15:1d:4a:f3:bc:2a:ca:4d:86:b9: 55:8d:c4:03:56:f6:d3:da:31:9c:63:ca:06:ee:a7: dd:de:53:f1:de:fd:d0:03:d9:4f:27:a1:e3:a1:61: 93:c8:fb:fe:93:39:79:73:e4:7c:7e:c9:a9:26:b8: c9:43:6b:28:84:b7:42:2c:d2:e6:55:de:20:e5:db: 55:1e:18:a1:13:3d:b6:00:3a:59:f6:96:9f:a3:09: 3c:1f:77:40:66:a9:2b:f2:6f:82:9d:39:9d:f3:bc: b3:c2:67:b9:9c:01:c1:e6:94:1a:9b:4b:a2:7c:34: 47:29:96:e7:f9:33:fc:4d:ab:08:8d:d4:b8:8d:15: 88:25:98:bc:2c:c1:2a:68:44:df:b1:5f:ca:a1:d3: 84:74:2b:eb:80:ae:1c:c8:56:55:dd:fd:55:21:78: a8:ed:17:48:7c:fd:28:71:a3:aa:3e:de:f6:9e:d3: ac:e8:fa:40:68:fc:9c:35:a4:11:b2:2e:c8:ad:c5: b7:6a:35:0f:80:7d:de:04:9e:ae:c9:97:5e:77:ea: 0b:ee:4e:e6:ed:ff:f2:bb:ea:10:33:d0:31:5f:a1: d1:1b:45:88:14:7f:42:2f:67:48:d4:04:90:85:54: ae:8c:f2:c3:23:34:d1:a9:49:f1:6c:91:6d:18:66: 13:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:93:AB:F1:54:44:3A:BF:63:60:B7:F4:DC:74:93:74:13:47:0B:5F X509v3 Authority Key Identifier: keyid:2B:15:30:AD:20:AC:1F:2F:7F:2E:A2:EB:AA:E7:07:D0:E1:28:A1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:a7:ad:fd:25:da:b6:ba:01:cc:77:2c:90:26:dc:f6:a6:b1: a1:8b:c0:28:c9:3e:1e:13:e2:e3:be:ab:c4:ad:52:f1:3e:dc: 0a:cf:72:1a:c9:1b:89:ac:98:58:31:3f:70:7e:ae:d1:7c:f9: 72:bd:ba:08:f8:a7:b0:08:e9:eb:db:a4:8f:d1:98:49:dd:1e: 41:ca:66:38:17:98:a7:6e:c5:9e:86:a3:a7:32:59:12:c3:50: 7d:13:ad:1f:06:49:60:ea:c6:ff:69:d4:ea:9c:ea:30:41:6e: 31:f7:2b:aa:1a:38:00:bb:66:ed:e6:88:cd:8a:ef:cd:34:95: 82:b1:95:b7:9e:18:91:d5:8a:da:79:00:97:e5:99:db:f0:eb: 9a:34:c7:1e:24:e7:cd:a3:be:68:9e:be:8d:b8:e0:54:65:dd: ae:1a:f7:b8:26:a2:af:4e:94:0a:72:fd:2a:9a:c6:f7:06:b5: e9:23:bc:fe:82:bd:f9:f0:0e:33:30:a0:ab:90:c0:45:45:97: 23:0d:56:61:7b:56:bd:37:26:72:65:5a:88:e5:cb:38:60:92: 07:76:58:a6:fe:ef:30:3c:a7:3b:f0:56:be:7f:44:f7:84:54: 8f:a3:96:a6:94:21:9d:0d:34:a1:e0:2a:c1:42:76:3d:d4:9a: 13:51:68:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBoYtmiidLHTLTTBwDBx8cDLL42IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3RDBF MTI4QTFEQzAeFw0yNTA2MjgxNDU3MThaFw0yNTA3MDExNTM0MThaMDMxMTAvBgNV BAMTKEMxOTNBQkYxNTQ0NDNBQkY2MzYwQjdGNERDNzQ5Mzc0MTM0NzBCNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbp3INFR1K87wqyk2GuVWNxANW 9tPaMZxjygbup93eU/He/dAD2U8noeOhYZPI+/6TOXlz5Hx+yakmuMlDayiEt0Is 0uZV3iDl21UeGKETPbYAOln2lp+jCTwfd0BmqSvyb4KdOZ3zvLPCZ7mcAcHmlBqb S6J8NEcpluf5M/xNqwiN1LiNFYglmLwswSpoRN+xX8qh04R0K+uArhzIVlXd/VUh eKjtF0h8/Shxo6o+3vae06zo+kBo/Jw1pBGyLsitxbdqNQ+Afd4Enq7Jl1536gvu Tubt//K76hAz0DFfodEbRYgUf0IvZ0jUBJCFVK6M8sMjNNGpSfFskW0YZhPxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwZOr8VREOr9jYLf03HSTdBNHC18wHwYDVR0j BBgwFoAUKxUwrSCsHy9/LqLrqucH0OEoodwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NjY4ODU0YS0zZjI0LTQwYjEtODBjZC1lNjM2YWE3ZThiMWMvMC8yQjE1MzBBRDIw QUMxRjJGN0YyRUEyRUJBQUU3MDdEMEUxMjhBMURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3RDBFMTI4 QTFEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjY2ODg1NGEtM2YyNC00MGIxLTgw Y2QtZTYzNmFhN2U4YjFjLzAvMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3 RDBFMTI4QTFEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADunrf0l2ra6Acx3LJAm3PamsaGLwCjJPh4T 4uO+q8StUvE+3ArPchrJG4msmFgxP3B+rtF8+XK9ugj4p7AI6evbpI/RmEndHkHK ZjgXmKduxZ6Go6cyWRLDUH0TrR8GSWDqxv9p1Oqc6jBBbjH3K6oaOAC7Zu3miM2K 7800lYKxlbeeGJHVitp5AJflmdvw65o0xx4k582jvmievo244FRl3a4a97gmoq9O lApy/SqaxvcGtekjvP6CvfnwDjMwoKuQwEVFlyMNVmF7Vr03JnJlWojlyzhgkgd2 WKb+7zA8pzvwVr5/RPeEVI+jlqaUIZ0NNKHgKsFCdj3UmhNRaFs= -----END CERTIFICATE-----Generated at Sun Jun 29 21:35:34 2025 by rpki-client