$ rpki-client -vvf repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft File: 26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft (raw, json) Hash identifier: K5FyjBXtHc6eU220PP1M5XlaLCFUjvrBcwPDYjFkZk4= Subject key identifier: BB:63:9E:AC:73:1B:48:7E:B1:64:DE:D3:D6:4C:0F:15:6C:7D:35:FC Authority key identifier: 26:C0:12:47:69:3F:68:CF:DA:1F:8C:B6:B8:8F:7A:37:00:D3:00:01 Certificate issuer: /CN=26C01247693F68CFDA1F8CB6B88F7A3700D30001 Certificate serial: 54AD856FC536A5BDB0340010939C7A63488A09EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26C01247693F68CFDA1F8CB6B88F7A3700D30001.cer Subject info access: rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft Manifest number: 0230 Signing time: Sun 04 May 2025 22:22:07 +0000 Manifest this update: Sun 04 May 2025 22:17:07 +0000 Manifest next update: Thu 08 May 2025 00:26:07 +0000 Files and hashes: 1: 3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa (hash: sGDel48okAqvaV/rcb1x3ACW4s1s006aJg3vUEaDkGw=) 2: 3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa (hash: d1iOOjv6qaBSXhMhm+Csiy2EgfiQomEVVv4AskXzPBg=) 3: 26C01247693F68CFDA1F8CB6B88F7A3700D30001.crl (hash: zdBc+iR5i+c23PgModQlHpe2cxDs7cQSgm8QaT0R+sM=) 4: 323030313a6466373a376438303a3a2f34382d3438203d3e20313431393039.roa (hash: 1ypZTh1uqX7Kh/HgM6WUDlwDLRHdZ90Km18x/Ynnn+Y=) 5: 3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa (hash: 74TGkae1+QCuTSaWAZ/1dR0+kJTY94tmxgSufeIPFe8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.crl rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26C01247693F68CFDA1F8CB6B88F7A3700D30001.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 00:26:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:ad:85:6f:c5:36:a5:bd:b0:34:00:10:93:9c:7a:63:48:8a:09:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26C01247693F68CFDA1F8CB6B88F7A3700D30001 Validity Not Before: May 4 22:17:07 2025 GMT Not After : May 8 00:26:07 2025 GMT Subject: CN=BB639EAC731B487EB164DED3D64C0F156C7D35FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:07:8e:1e:68:2b:67:15:4a:e4:dd:46:25:6a: fa:e5:9e:c6:66:08:c1:3d:bf:97:b0:3e:9c:7e:6d: 41:da:14:73:b5:3b:31:d1:78:a7:03:c0:57:e3:ea: c7:f0:f9:8c:e5:9a:92:b0:77:9e:49:4a:ed:3a:b9: f5:9f:c3:a4:f0:16:22:50:89:51:43:e0:48:85:d4: 6e:5e:68:31:6c:5d:ec:14:be:e8:e2:f7:88:05:03: 5a:54:2e:2c:b7:b9:85:89:ab:d3:84:d2:78:93:02: 31:96:8a:4e:dd:40:e2:05:5a:fd:b6:d3:7a:3f:87: 75:56:8d:6f:b4:09:cf:65:1e:67:ac:fe:99:1b:d3: 5f:5c:4e:64:2a:f4:b7:1e:0e:cf:3a:05:72:bd:8b: fb:57:7a:fd:89:32:27:9b:f7:4d:e8:b9:8a:c9:f8: 95:06:7d:5e:e0:4a:49:45:24:97:2a:4c:e5:ee:b8: b0:a3:51:79:87:d5:f0:1e:e2:12:64:bd:d2:57:4c: f8:fe:2c:29:7a:71:ab:93:90:db:f1:50:df:63:ba: 44:27:a4:30:21:07:dd:bb:a9:c1:49:f4:50:69:90: fb:dd:a5:83:6a:f5:25:71:9f:d0:25:71:1c:24:09: 0b:90:ca:85:e4:1b:c0:df:8f:c4:64:55:af:84:b7: db:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:63:9E:AC:73:1B:48:7E:B1:64:DE:D3:D6:4C:0F:15:6C:7D:35:FC X509v3 Authority Key Identifier: keyid:26:C0:12:47:69:3F:68:CF:DA:1F:8C:B6:B8:8F:7A:37:00:D3:00:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26C01247693F68CFDA1F8CB6B88F7A3700D30001.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:73:e2:45:24:9a:46:fb:61:86:de:0e:8e:3a:16:47:71:14: 07:42:09:cf:3f:9a:b0:29:e8:9b:fd:56:21:30:4c:9f:22:a2: 6d:22:6a:d3:95:5a:45:79:ba:80:2a:1a:15:d8:e8:89:b7:6b: 8e:39:9d:c9:9d:e2:4b:27:35:75:a5:7c:7f:c2:f4:3c:4f:01: df:9d:a0:1e:e0:75:56:12:00:19:03:5d:9e:df:32:0d:0c:d2: e4:2f:ee:68:78:51:76:52:c1:25:aa:9c:aa:73:25:1a:ee:73: 36:16:e0:78:14:22:3b:da:08:2e:ee:58:ee:d7:5d:7e:86:6d: bd:5b:08:a6:6c:dd:b9:fd:cb:78:75:65:a5:3f:2e:ae:95:0b: 23:ac:93:15:ce:31:ec:fd:76:d6:dc:89:a9:c6:c4:42:9c:fb: 2d:5c:32:e7:26:42:84:f8:7d:26:3d:dd:88:c0:61:d9:ae:0b: 43:13:28:31:d9:22:23:6b:18:27:a9:49:b1:82:d3:62:3c:83: 8b:6c:6c:d4:e1:ff:7e:74:55:ea:bf:0b:d5:43:03:1a:fa:87: f6:b3:e3:e7:3e:a3:a4:c2:6b:f1:63:e5:ff:57:9e:44:6e:d5: e3:dc:be:6e:36:5e:58:c6:28:9b:14:c2:68:98:91:1b:83:57: f4:bf:86:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVK2Fb8U2pb2wNAAQk5x6Y0iKCeswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjZDMDEyNDc2OTNGNjhDRkRBMUY4Q0I2Qjg4RjdBMzcw MEQzMDAwMTAeFw0yNTA1MDQyMjE3MDdaFw0yNTA1MDgwMDI2MDdaMDMxMTAvBgNV BAMTKEJCNjM5RUFDNzMxQjQ4N0VCMTY0REVEM0Q2NEMwRjE1NkM3RDM1RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLB44eaCtnFUrk3UYlavrlnsZm CME9v5ewPpx+bUHaFHO1OzHReKcDwFfj6sfw+YzlmpKwd55JSu06ufWfw6TwFiJQ iVFD4EiF1G5eaDFsXewUvuji94gFA1pULiy3uYWJq9OE0niTAjGWik7dQOIFWv22 03o/h3VWjW+0Cc9lHmes/pkb019cTmQq9LceDs86BXK9i/tXev2JMieb903ouYrJ +JUGfV7gSklFJJcqTOXuuLCjUXmH1fAe4hJkvdJXTPj+LCl6cauTkNvxUN9jukQn pDAhB927qcFJ9FBpkPvdpYNq9SVxn9AlcRwkCQuQyoXkG8Dfj8RkVa+Et9snAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu2OerHMbSH6xZN7T1kwPFWx9NfwwHwYDVR0j BBgwFoAUJsASR2k/aM/aH4y2uI96NwDTAAEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDFjNGQ2MS1kY2VmLTRhMjAtYmQ0Yy1hMjgyYTM3YWE2OWUvMC8yNkMwMTI0NzY5 M0Y2OENGREExRjhDQjZCODhGN0EzNzAwRDMwMDAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjZDMDEyNDc2OTNGNjhDRkRBMUY4Q0I2Qjg4RjdBMzcwMEQz MDAwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAxYzRkNjEtZGNlZi00YTIwLWJk NGMtYTI4MmEzN2FhNjllLzAvMjZDMDEyNDc2OTNGNjhDRkRBMUY4Q0I2Qjg4RjdB MzcwMEQzMDAwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJJz4kUkmkb7YYbeDo46FkdxFAdCCc8/mrAp 6Jv9ViEwTJ8iom0iatOVWkV5uoAqGhXY6Im3a445ncmd4ksnNXWlfH/C9DxPAd+d oB7gdVYSABkDXZ7fMg0M0uQv7mh4UXZSwSWqnKpzJRruczYW4HgUIjvaCC7uWO7X XX6Gbb1bCKZs3bn9y3h1ZaU/Lq6VCyOskxXOMez9dtbcianGxEKc+y1cMucmQoT4 fSY93YjAYdmuC0MTKDHZIiNrGCepSbGC02I8g4tsbNTh/350Veq/C9VDAxr6h/az 4+c+o6TCa/Fj5f9XnkRu1ePcvm42XljGKJsUwmiYkRuDV/S/hhc= -----END CERTIFICATE-----Generated at Tue May 6 17:56:39 2025 by rpki-client