$ rpki-client -vvf repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft File: 2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft (raw, json) Hash identifier: 4H3JCaF3TuzTwrsWe8SCWRRNr8cpluCwS3k4ZlTp4BY= Subject key identifier: CD:F6:F4:05:54:20:59:0C:E1:52:3C:A3:EA:05:FC:C8:33:5D:2A:D9 Authority key identifier: 2E:19:B9:74:05:D4:98:D3:B0:67:A9:A1:00:9C:DC:1E:02:FB:11:CF Certificate issuer: /CN=2E19B97405D498D3B067A9A1009CDC1E02FB11CF Certificate serial: 25AE24ACF16CF6E3C8AAD99939BF741694385B70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft Manifest number: 02CB Signing time: Fri 09 May 2025 13:21:55 +0000 Manifest this update: Fri 09 May 2025 13:16:55 +0000 Manifest next update: Mon 12 May 2025 20:55:55 +0000 Files and hashes: 1: 3130332e32352e3139322e302f32322d3234203d3e20313332363532.roa (hash: uishawwbIWA59fc6E2EnmmHu56G13qCCnCUtoDK7S+I=) 2: 323430313a313363303a3a2f33322d3336203d3e20313332363532.roa (hash: 0b7ns7LWe1lh+q97xLHcz0n7NxFtE+fPLuYQJ8QmqSI=) 3: 2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl (hash: uwHoUcQAaxGQEIY1a6r8z/IHkiyy9yW5BxO15Ij3NJg=) 4: 3134362e3139362e34302e302f32322d3234203d3e20313332363532.roa (hash: plzShTny50kIRVpKPuAFTM+py4IIAUYkLzBiUxnyTJ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 20:55:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:ae:24:ac:f1:6c:f6:e3:c8:aa:d9:99:39:bf:74:16:94:38:5b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E19B97405D498D3B067A9A1009CDC1E02FB11CF Validity Not Before: May 9 13:16:55 2025 GMT Not After : May 12 20:55:55 2025 GMT Subject: CN=CDF6F4055420590CE1523CA3EA05FCC8335D2AD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b9:04:79:27:65:48:bf:42:cb:ce:5f:12:ec: cc:94:00:75:e5:66:6b:e9:c8:2e:a8:67:92:74:93: 68:af:68:f6:82:89:7b:50:b0:ef:47:43:a0:a9:81: b5:97:82:f4:d6:80:75:81:3b:cc:3f:d7:93:a2:cf: 00:4c:e2:33:23:ec:20:4a:ad:09:a2:d4:85:5b:2d: 3d:88:2f:25:4a:f0:47:6f:0b:26:dc:a2:4e:2c:a1: 57:2b:f4:62:e5:17:9b:27:cb:8f:32:f1:3e:9a:06: 20:b7:98:a8:ad:20:12:e6:e7:c1:98:bd:5a:dc:62: 75:ea:ce:a2:9d:a6:7f:a2:d0:28:9d:83:76:94:10: 49:c8:be:19:2c:6a:dc:16:c5:24:82:38:f4:c5:96: 4b:ed:69:7d:cd:2b:a1:cb:c1:cb:cd:f9:d9:9d:b3: cb:43:59:cc:1c:62:1b:c0:32:57:6a:ca:6f:41:16: cf:12:49:ee:ff:6e:ae:d6:08:50:aa:3c:00:1a:68: 9d:ff:b0:ed:18:2f:31:73:d1:93:5f:34:85:dd:5e: bb:a4:85:da:cd:47:0f:63:3f:70:00:69:49:03:cd: 37:a0:29:a5:95:9c:e7:67:27:3d:eb:7a:f4:22:25: e9:a3:d2:1a:f4:63:d2:69:16:f2:57:cb:8b:9f:56: 58:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F6:F4:05:54:20:59:0C:E1:52:3C:A3:EA:05:FC:C8:33:5D:2A:D9 X509v3 Authority Key Identifier: keyid:2E:19:B9:74:05:D4:98:D3:B0:67:A9:A1:00:9C:DC:1E:02:FB:11:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:3e:8e:49:4b:b0:4b:02:ee:f3:86:e9:12:ba:6e:1a:85:b1: 5e:dc:7e:c8:75:b4:e5:fd:c9:56:f5:9b:a5:4a:3a:91:89:43: 2e:88:0f:e6:8e:9f:ea:4e:9f:62:81:fe:c9:bb:c7:8f:c7:01: 30:76:ca:32:c0:d7:81:fd:ff:76:4a:0b:5a:7a:87:d2:c1:dc: 9a:38:95:cf:62:2b:eb:e5:b3:96:3a:4c:76:9e:89:17:e8:bc: c1:47:1e:f2:f6:94:1b:34:e7:ca:ba:c5:37:15:35:5a:08:64: 98:61:d7:76:7d:45:e9:69:49:8e:e8:cf:56:ca:a6:6b:bc:3c: 18:9c:d4:b9:cf:ad:1c:57:9c:4e:65:ce:d2:e3:08:bf:4e:cf: 38:4b:19:a9:88:35:fa:e7:4b:70:c6:6b:d3:f2:dd:9e:4b:50: cb:73:28:7b:fc:a9:80:07:1a:6b:7b:00:c7:dd:bc:f3:f5:1f: e2:2f:91:2e:93:c2:1f:82:49:d9:36:30:12:6d:e3:d9:d9:7b: 06:1e:42:e5:41:e3:1f:67:8a:22:76:4e:14:65:9f:60:db:5c: ad:f5:09:9c:3b:29:f4:54:41:33:76:d7:50:13:3b:33:eb:89: cd:e0:88:19:7a:26:f3:d1:48:c7:36:64:3a:70:95:65:68:40: 21:d0:52:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJa4krPFs9uPIqtmZOb90FpQ4W3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUxOUI5NzQwNUQ0OThEM0IwNjdBOUExMDA5Q0RDMUUw MkZCMTFDRjAeFw0yNTA1MDkxMzE2NTVaFw0yNTA1MTIyMDU1NTVaMDMxMTAvBgNV BAMTKENERjZGNDA1NTQyMDU5MENFMTUyM0NBM0VBMDVGQ0M4MzM1RDJBRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAuQR5J2VIv0LLzl8S7MyUAHXl ZmvpyC6oZ5J0k2ivaPaCiXtQsO9HQ6CpgbWXgvTWgHWBO8w/15OizwBM4jMj7CBK rQmi1IVbLT2ILyVK8EdvCybcok4soVcr9GLlF5sny48y8T6aBiC3mKitIBLm58GY vVrcYnXqzqKdpn+i0Cidg3aUEEnIvhksatwWxSSCOPTFlkvtaX3NK6HLwcvN+dmd s8tDWcwcYhvAMldqym9BFs8SSe7/bq7WCFCqPAAaaJ3/sO0YLzFz0ZNfNIXdXruk hdrNRw9jP3AAaUkDzTegKaWVnOdnJz3revQiJemj0hr0Y9JpFvJXy4ufVlitAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzfb0BVQgWQzhUjyj6gX8yDNdKtkwHwYDVR0j BBgwFoAULhm5dAXUmNOwZ6mhAJzcHgL7Ec8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjYzMmEyYy00MDZlLTQ1ZDctYTAyOC0yNjA0NzRjNzcwMzgvMC8yRTE5Qjk3NDA1 RDQ5OEQzQjA2N0E5QTEwMDlDREMxRTAyRkIxMUNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUxOUI5NzQwNUQ0OThEM0IwNjdBOUExMDA5Q0RDMUUwMkZC MTFDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2I2MzJhMmMtNDA2ZS00NWQ3LWEw MjgtMjYwNDc0Yzc3MDM4LzAvMkUxOUI5NzQwNUQ0OThEM0IwNjdBOUExMDA5Q0RD MUUwMkZCMTFDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJM+jklLsEsC7vOG6RK6bhqFsV7cfsh1tOX9 yVb1m6VKOpGJQy6ID+aOn+pOn2KB/sm7x4/HATB2yjLA14H9/3ZKC1p6h9LB3Jo4 lc9iK+vls5Y6THaeiRfovMFHHvL2lBs058q6xTcVNVoIZJhh13Z9RelpSY7oz1bK pmu8PBic1LnPrRxXnE5lztLjCL9OzzhLGamINfrnS3DGa9Py3Z5LUMtzKHv8qYAH Gmt7AMfdvPP1H+IvkS6Twh+CSdk2MBJt49nZewYeQuVB4x9niiJ2ThRln2DbXK31 CZw7KfRUQTN211ATOzPric3giBl6JvPRSMc2ZDpwlWVoQCHQUtU= -----END CERTIFICATE-----Generated at Sun May 11 11:19:50 2025 by rpki-client