$ rpki-client -vvf repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft File: 26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft (raw, json) Hash identifier: k14SV9igSB1K4Tx26pNF5L0eAR7PZ5byOdki5/Y+f1I= Subject key identifier: 71:00:E1:A2:83:5B:23:EB:23:D8:E8:D7:20:33:E5:20:AB:71:8C:EA Authority key identifier: 26:C0:12:47:69:3F:68:CF:DA:1F:8C:B6:B8:8F:7A:37:00:D3:00:01 Certificate issuer: /CN=26C01247693F68CFDA1F8CB6B88F7A3700D30001 Certificate serial: 68DB064429BD94F59063D857C012F76F5F7457B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26C01247693F68CFDA1F8CB6B88F7A3700D30001.cer Subject info access: rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft Manifest number: 0249 Signing time: Sun 29 Jun 2025 15:22:07 +0000 Manifest this update: Sun 29 Jun 2025 15:17:07 +0000 Manifest next update: Wed 02 Jul 2025 16:42:07 +0000 Files and hashes: 1: 3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa (hash: d1iOOjv6qaBSXhMhm+Csiy2EgfiQomEVVv4AskXzPBg=) 2: 3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa (hash: sGDel48okAqvaV/rcb1x3ACW4s1s006aJg3vUEaDkGw=) 3: 26C01247693F68CFDA1F8CB6B88F7A3700D30001.crl (hash: 7U+ur9fcroEcAedUPsknXEF6lhrLP0afAFFkID8Ra7w=) 4: 323030313a6466373a376438303a3a2f34382d3438203d3e20313431393039.roa (hash: 1ypZTh1uqX7Kh/HgM6WUDlwDLRHdZ90Km18x/Ynnn+Y=) 5: 3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa (hash: 74TGkae1+QCuTSaWAZ/1dR0+kJTY94tmxgSufeIPFe8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.crl rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26C01247693F68CFDA1F8CB6B88F7A3700D30001.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:db:06:44:29:bd:94:f5:90:63:d8:57:c0:12:f7:6f:5f:74:57:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26C01247693F68CFDA1F8CB6B88F7A3700D30001 Validity Not Before: Jun 29 15:17:07 2025 GMT Not After : Jul 2 16:42:07 2025 GMT Subject: CN=7100E1A2835B23EB23D8E8D72033E520AB718CEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:18:98:d9:ca:48:3b:61:9e:46:97:2e:73:e7: 62:b5:cc:da:19:9d:0b:d9:e4:30:41:a1:c6:f6:9f: 6d:39:dc:9d:26:aa:16:13:aa:76:de:2b:bc:7e:f6: 36:44:c0:05:5c:d2:b3:7d:44:b3:4e:36:3e:09:01: cc:19:8e:e9:ff:36:45:92:71:b3:68:7c:f6:cb:69: 52:39:03:df:68:5c:f4:36:5d:63:11:3e:a0:0a:73: bc:65:c2:bb:d4:10:4a:4f:bc:b6:10:aa:b6:45:49: 9c:00:de:ed:7b:db:83:33:6f:c1:bd:e8:9b:17:9a: 8c:df:97:34:71:38:14:87:d4:f6:ed:af:b7:0f:4a: 44:f0:f4:aa:f6:f7:9f:a6:cc:67:f4:36:e8:d8:b2: 98:06:e0:79:57:b3:e7:46:40:51:1a:76:bf:c7:d5: 5e:50:30:f0:46:ba:8d:ca:ef:2f:71:75:43:7a:8e: a1:1f:42:1c:66:8f:64:a6:4b:88:89:87:8f:db:9a: 6e:4a:f8:10:a1:e9:9f:1a:84:14:26:5d:51:18:19: b0:68:38:1c:23:a9:3a:7b:a6:b3:27:55:9a:95:39: a2:ce:b9:90:de:20:78:2d:e0:9f:1d:bf:c0:a4:2f: ef:7b:4e:14:7f:93:f9:96:bd:68:7b:02:65:fe:f0: 8e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:00:E1:A2:83:5B:23:EB:23:D8:E8:D7:20:33:E5:20:AB:71:8C:EA X509v3 Authority Key Identifier: keyid:26:C0:12:47:69:3F:68:CF:DA:1F:8C:B6:B8:8F:7A:37:00:D3:00:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26C01247693F68CFDA1F8CB6B88F7A3700D30001.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:1b:6e:56:b3:70:c0:ff:29:59:72:d8:85:0b:21:02:8d:8a: a6:a7:16:40:41:3f:6c:4d:59:35:eb:32:7c:75:b0:bd:f8:20: fc:5c:57:54:64:51:a8:f1:7b:aa:ae:d4:44:a4:f2:ea:d1:ad: 30:92:59:e8:63:ad:72:c3:3e:d0:32:ed:27:d4:c5:f5:79:ea: e5:ed:92:3d:9f:a3:a8:d6:b0:cb:78:4f:34:45:13:ab:89:bb: fe:57:c9:95:0f:fa:db:79:07:a1:ca:ce:74:bf:bd:28:87:99: 42:69:82:15:55:95:61:a6:02:70:3c:ea:32:19:aa:f5:c0:19: 12:84:1b:74:27:2b:09:c6:a4:36:97:29:16:1c:b1:9e:05:40: ce:57:fc:12:93:52:b6:a4:d5:eb:58:53:82:14:13:4c:33:7e: 8a:eb:ba:07:ff:7c:bc:4a:46:4b:9e:4e:7d:b4:fb:c9:90:33: fb:e6:5b:6e:fd:3f:f9:d2:9c:4f:23:d7:14:11:23:ed:19:f5: cb:4b:62:42:b9:d3:f3:33:1e:c5:19:1e:21:3d:b7:e8:6c:5d: d2:e3:a5:c2:88:46:96:3e:84:c9:5f:0d:87:fa:94:fc:99:f1: 9b:48:5b:20:db:fa:6f:29:87:85:60:c6:a8:a4:93:14:75:e6: da:40:06:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaNsGRCm9lPWQY9hXwBL3b190V7AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjZDMDEyNDc2OTNGNjhDRkRBMUY4Q0I2Qjg4RjdBMzcw MEQzMDAwMTAeFw0yNTA2MjkxNTE3MDdaFw0yNTA3MDIxNjQyMDdaMDMxMTAvBgNV BAMTKDcxMDBFMUEyODM1QjIzRUIyM0Q4RThENzIwMzNFNTIwQUI3MThDRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuGJjZykg7YZ5Gly5z52K1zNoZ nQvZ5DBBocb2n2053J0mqhYTqnbeK7x+9jZEwAVc0rN9RLNONj4JAcwZjun/NkWS cbNofPbLaVI5A99oXPQ2XWMRPqAKc7xlwrvUEEpPvLYQqrZFSZwA3u1724Mzb8G9 6JsXmozflzRxOBSH1Pbtr7cPSkTw9Kr295+mzGf0NujYspgG4HlXs+dGQFEadr/H 1V5QMPBGuo3K7y9xdUN6jqEfQhxmj2SmS4iJh4/bmm5K+BCh6Z8ahBQmXVEYGbBo OBwjqTp7prMnVZqVOaLOuZDeIHgt4J8dv8CkL+97ThR/k/mWvWh7AmX+8I7pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcQDhooNbI+sj2OjXIDPlIKtxjOowHwYDVR0j BBgwFoAUJsASR2k/aM/aH4y2uI96NwDTAAEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDFjNGQ2MS1kY2VmLTRhMjAtYmQ0Yy1hMjgyYTM3YWE2OWUvMC8yNkMwMTI0NzY5 M0Y2OENGREExRjhDQjZCODhGN0EzNzAwRDMwMDAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjZDMDEyNDc2OTNGNjhDRkRBMUY4Q0I2Qjg4RjdBMzcwMEQz MDAwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAxYzRkNjEtZGNlZi00YTIwLWJk NGMtYTI4MmEzN2FhNjllLzAvMjZDMDEyNDc2OTNGNjhDRkRBMUY4Q0I2Qjg4RjdB MzcwMEQzMDAwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAUbblazcMD/KVly2IULIQKNiqanFkBBP2xN WTXrMnx1sL34IPxcV1RkUajxe6qu1ESk8urRrTCSWehjrXLDPtAy7SfUxfV56uXt kj2fo6jWsMt4TzRFE6uJu/5XyZUP+tt5B6HKznS/vSiHmUJpghVVlWGmAnA86jIZ qvXAGRKEG3QnKwnGpDaXKRYcsZ4FQM5X/BKTUrak1etYU4IUE0wzforrugf/fLxK RkueTn20+8mQM/vmW279P/nSnE8j1xQRI+0Z9ctLYkK50/MzHsUZHiE9t+hsXdLj pcKIRpY+hMlfDYf6lPyZ8ZtIWyDb+m8ph4VgxqikkxR15tpABkk= -----END CERTIFICATE-----Generated at Sun Jun 29 22:08:39 2025 by rpki-client