$ rpki-client -vvf repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft File: 26425B70294F98035D38788E597A4A6CEB9C9CE5.mft (raw, json) Hash identifier: m68gYGVZQb2sj0IDXp50bQA3gukPuBM8jhahr0ylrDU= Subject key identifier: 99:2F:8A:B9:94:D7:E8:0F:F5:6D:F1:93:9D:E5:8E:6A:F8:80:AA:7F Authority key identifier: 26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5 Certificate issuer: /CN=26425B70294F98035D38788E597A4A6CEB9C9CE5 Certificate serial: 45B42D424D9CF2A1B45EE54BCD22AE301D5F9082 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft Manifest number: 04CF Signing time: Sun 11 May 2025 04:10:01 +0000 Manifest this update: Sun 11 May 2025 04:05:01 +0000 Manifest next update: Wed 14 May 2025 11:38:01 +0000 Files and hashes: 1: 35382e3134352e3136382e302f32342d3234203d3e203436303534.roa (hash: poWV1SmxZOV82NJAx11/DVCuVnOVWtTUoFxKct51ClQ=) 2: 35382e3134352e3136392e302f32342d3234203d3e203436303534.roa (hash: 9/RRwI5l/NtYziLvL1Tovl6lPdp6toGo7gvjHA/JNLU=) 3: 26425B70294F98035D38788E597A4A6CEB9C9CE5.crl (hash: NliM4ZRjLVcliHbUWZtbFxZm3hPggGvfKzF09CJHj24=) 4: 35382e3134352e3136382e302f32312d3231203d3e203436303534.roa (hash: m+q7ZgpD2GbDgHvxK3Mi9rcFamM0AOK41baaZkFJd+o=) 5: 35382e3134352e3137312e302f32342d3234203d3e203436303534.roa (hash: x6HUjSxF1Hesr3n3pxIOWyMuhd/gV3tPQ4S5VvjGCt4=) 6: 35382e3134352e3137302e302f32342d3234203d3e203436303534.roa (hash: U6ziSuUpUkVdqXRSHe0CewbD/X71rI71q8SILZolHDo=) 7: 35382e3134352e3137332e302f32342d3234203d3e203436303534.roa (hash: nL0LSsh/K4F6n/0vBenQ8E/fDc1hwgkktfBtKNqqfSs=) 8: 35382e3134352e3137322e302f32342d3234203d3e203436303534.roa (hash: loxHv0+F3ZLNQEYmkghwWbkz+YGFFT2QGW5V6emi7YY=) 9: 35382e3134352e3137352e302f32342d3234203d3e203436303534.roa (hash: Rlel+43pEirvrfeffHgQ7cuDwzepsYOgj+qpnAyZmJg=) 10: 35382e3134352e3137342e302f32342d3234203d3e203436303534.roa (hash: jiBUWbPw0O2a3brcntkLSXcufEsvlRQsB7AoiBmO/Ec=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 02:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:b4:2d:42:4d:9c:f2:a1:b4:5e:e5:4b:cd:22:ae:30:1d:5f:90:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26425B70294F98035D38788E597A4A6CEB9C9CE5 Validity Not Before: May 11 04:05:01 2025 GMT Not After : May 14 11:38:01 2025 GMT Subject: CN=992F8AB994D7E80FF56DF1939DE58E6AF880AA7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1f:e0:4c:1f:85:43:f9:9b:9e:a6:29:88:ab: e6:75:51:c2:69:ae:90:55:8c:56:7e:72:b9:2c:f8: fd:32:fa:d2:ac:a4:b0:9f:94:3a:d9:c0:bd:6d:03: 53:23:0b:0f:9f:87:65:99:3f:c5:52:09:23:0e:8b: 75:58:51:47:59:41:49:78:c0:8a:f2:16:63:33:eb: 7d:69:c5:37:70:e7:df:0f:ca:c6:2e:40:53:87:73: 31:01:67:8a:0c:01:25:bd:61:5f:4e:cf:75:d5:3d: 9c:ce:e7:a6:54:08:85:14:4f:0c:ee:bd:14:06:84: dc:13:5a:65:72:19:8a:f9:22:87:04:36:49:0f:8a: 63:31:00:6a:d0:1d:52:fe:a2:41:ca:28:e7:26:33: f6:21:27:31:17:bb:ef:ef:63:85:ac:3c:41:c1:d0: 38:fe:54:2a:0a:f7:cc:f1:2e:8b:b4:a0:36:e7:e8: 9e:e4:8b:7c:45:4e:54:5c:9e:fb:43:22:ab:e0:ef: c1:ea:c7:59:8f:08:40:07:6c:75:99:81:31:c0:ee: c7:91:c8:a1:56:0c:14:79:ee:d5:85:e3:76:a7:cb: 05:8c:fc:d1:ed:9a:0b:b7:06:e2:21:53:bf:a3:7c: cf:ba:09:c5:0a:29:27:3c:30:e9:d3:b5:02:39:28: 09:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:2F:8A:B9:94:D7:E8:0F:F5:6D:F1:93:9D:E5:8E:6A:F8:80:AA:7F X509v3 Authority Key Identifier: keyid:26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:b9:ac:8e:99:a3:bb:33:54:c6:ca:f3:5a:58:8e:6a:f8:d9: 5a:e9:f1:a5:3f:d9:92:e4:3b:6a:13:3d:17:7a:7c:06:94:db: 8d:ad:dc:8b:b8:16:0e:bf:25:40:dd:72:de:2b:23:3b:82:c6: 17:a0:8f:0c:35:01:c3:f9:cf:a0:2a:85:b8:0e:70:f5:fa:36: 1a:f0:20:f9:93:cb:05:d1:74:c5:3c:4d:75:62:e8:16:ba:08: 94:97:18:cd:df:8c:3c:78:47:8c:63:37:42:9d:75:92:16:88: 03:87:9b:58:50:5e:d0:b8:2a:64:98:2b:f0:1b:7b:42:7d:67: 36:ab:4c:98:3a:ce:20:9a:8f:d1:b2:fd:bc:1c:69:bc:d5:90: 1f:56:9f:5c:09:25:2d:3b:84:a4:6c:42:d1:39:3e:b1:8b:72: 76:14:56:8b:86:4b:dc:d4:0f:3e:60:07:c6:a1:81:38:b4:9b: 17:c1:38:c2:fa:cc:91:4f:78:fe:6d:eb:5d:10:6c:c2:f1:42: 0b:e2:86:ca:ce:14:cd:cb:80:7f:bd:a4:90:d2:71:da:30:07: be:ba:70:e9:d1:22:bb:de:8a:ab:54:72:f4:45:0f:4f:2b:4d: d4:8f:44:a3:21:3c:de:01:a1:b2:7b:f4:73:96:b9:f8:13:46: 34:66:bf:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURbQtQk2c8qG0XuVLzSKuMB1fkIIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjY0MjVCNzAyOTRGOTgwMzVEMzg3ODhFNTk3QTRBNkNF QjlDOUNFNTAeFw0yNTA1MTEwNDA1MDFaFw0yNTA1MTQxMTM4MDFaMDMxMTAvBgNV BAMTKDk5MkY4QUI5OTREN0U4MEZGNTZERjE5MzlERTU4RTZBRjg4MEFBN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyH+BMH4VD+ZuepimIq+Z1UcJp rpBVjFZ+crks+P0y+tKspLCflDrZwL1tA1MjCw+fh2WZP8VSCSMOi3VYUUdZQUl4 wIryFmMz631pxTdw598PysYuQFOHczEBZ4oMASW9YV9Oz3XVPZzO56ZUCIUUTwzu vRQGhNwTWmVyGYr5IocENkkPimMxAGrQHVL+okHKKOcmM/YhJzEXu+/vY4WsPEHB 0Dj+VCoK98zxLou0oDbn6J7ki3xFTlRcnvtDIqvg78Hqx1mPCEAHbHWZgTHA7seR yKFWDBR57tWF43anywWM/NHtmgu3BuIhU7+jfM+6CcUKKSc8MOnTtQI5KAn/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmS+KuZTX6A/1bfGTneWOaviAqn8wHwYDVR0j BBgwFoAUJkJbcClPmANdOHiOWXpKbOucnOUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2YzMDkzNi1jNzUwLTQzM2ItOWMyYS04ZmY1ZjM4ZTYzZDQvMC8yNjQyNUI3MDI5 NEY5ODAzNUQzODc4OEU1OTdBNEE2Q0VCOUM5Q0U1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjY0MjVCNzAyOTRGOTgwMzVEMzg3ODhFNTk3QTRBNkNFQjlD OUNFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NmMzA5MzYtYzc1MC00MzNiLTlj MmEtOGZmNWYzOGU2M2Q0LzAvMjY0MjVCNzAyOTRGOTgwMzVEMzg3ODhFNTk3QTRB NkNFQjlDOUNFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGS5rI6Zo7szVMbK81pYjmr42Vrp8aU/2ZLk O2oTPRd6fAaU242t3Iu4Fg6/JUDdct4rIzuCxhegjww1AcP5z6AqhbgOcPX6Nhrw IPmTywXRdMU8TXVi6Ba6CJSXGM3fjDx4R4xjN0KddZIWiAOHm1hQXtC4KmSYK/Ab e0J9ZzarTJg6ziCaj9Gy/bwcabzVkB9Wn1wJJS07hKRsQtE5PrGLcnYUVouGS9zU Dz5gB8ahgTi0mxfBOML6zJFPeP5t610QbMLxQgvihsrOFM3LgH+9pJDScdowB766 cOnRIrveiqtUcvRFD08rTdSPRKMhPN4BobJ79HOWufgTRjRmv9g= -----END CERTIFICATE-----Generated at Sun May 11 09:15:39 2025 by rpki-client