$ rpki-client -vvf repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft File: 2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft (raw, json) Hash identifier: 5G5FGwqUZIY4QUfB/vx0Qr//st6H1m2lUcTt+pLUGv4= Subject key identifier: CE:C9:18:18:21:17:E1:CF:14:A3:19:09:5D:75:23:35:59:3B:C8:47 Authority key identifier: 2B:0D:3D:70:A0:27:B5:3C:7A:D2:17:FE:22:CA:0E:D1:11:FD:F3:B0 Certificate issuer: /CN=2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0 Certificate serial: 66351A4F6DA78978254E428381D83FC1759D3B6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft Manifest number: 6C Signing time: Fri 27 Jun 2025 15:11:49 +0000 Manifest this update: Fri 27 Jun 2025 15:06:49 +0000 Manifest next update: Mon 30 Jun 2025 19:04:49 +0000 Files and hashes: 1: 3130332e3232352e31372e302f32342d3234203d3e20313532303632.roa (hash: P8QCMdvNkcGuA4F0hmx15JmIaSEyGRAUfWjBJiusufQ=) 2: 2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.crl (hash: RD9ZtWfzGMt3+iC2NsvKEgNvLo1+YldvfAe00szOtDA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.crl rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 19:04:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:35:1a:4f:6d:a7:89:78:25:4e:42:83:81:d8:3f:c1:75:9d:3b:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0 Validity Not Before: Jun 27 15:06:49 2025 GMT Not After : Jun 30 19:04:49 2025 GMT Subject: CN=CEC918182117E1CF14A319095D752335593BC847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ee:0c:03:67:40:c4:1d:49:d9:98:46:89:0a: 10:54:ad:7a:5d:5a:e7:d1:8e:62:13:1c:eb:fa:c1: cb:04:ba:83:45:54:99:0a:99:f4:80:72:99:be:55: ce:2e:f9:4a:3c:e1:c9:f3:c0:64:c6:85:bd:d2:c7: f6:6c:75:12:da:0d:2c:bb:e9:03:fc:99:05:1c:fb: 46:41:f1:bc:76:67:39:3a:66:80:af:f1:21:3c:34: d3:82:67:00:51:bd:2b:78:a7:5c:af:db:8a:28:b0: 8b:d6:22:41:56:8b:c0:d1:b6:c3:6a:fe:45:a0:d6: 08:43:62:09:08:32:72:6a:7f:3e:96:34:c5:7e:0a: 8e:67:fd:ff:6f:7d:d5:93:6c:86:06:b8:27:ab:cf: 21:0a:d6:47:dd:22:d3:b8:3e:f5:5e:fd:e6:48:b9: ac:9e:f3:ab:6e:8e:2a:13:94:d5:b7:9b:c8:35:e5: ec:de:b5:e7:b7:e9:48:9a:6a:27:5a:c2:f7:82:9d: 60:ac:32:a3:b4:42:34:a7:5a:bc:90:e8:4e:a0:c2: 16:b9:6d:a3:64:55:97:35:90:15:9f:4c:cc:b0:28: 6e:54:b1:1d:05:7e:3d:51:76:44:5d:29:c6:96:0c: 3e:44:2e:22:e4:c0:1a:20:4d:33:ed:fa:b2:0e:61: e7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:C9:18:18:21:17:E1:CF:14:A3:19:09:5D:75:23:35:59:3B:C8:47 X509v3 Authority Key Identifier: keyid:2B:0D:3D:70:A0:27:B5:3C:7A:D2:17:FE:22:CA:0E:D1:11:FD:F3:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:b4:27:22:ba:d1:3e:4a:b5:46:35:fb:ef:91:be:6a:24:6e: 84:6b:16:8a:ec:d8:80:8a:2d:94:02:21:e1:86:e1:0e:ad:35: b3:c5:33:c0:bc:08:27:4f:d2:59:b9:1c:98:72:b2:66:6a:0e: 1f:b0:f2:f7:03:b2:00:ab:35:b5:27:90:53:90:a8:8c:52:f8: dd:40:d0:c1:ee:0b:99:f6:b1:a2:b0:42:af:8d:68:b3:13:ab: 4d:93:0e:1c:fe:fb:af:6c:b6:b8:df:c7:92:1a:f5:b1:64:26: 08:5a:fb:95:fe:21:b0:8a:44:ee:06:08:01:a0:c3:47:c7:2f: e6:30:77:c3:8a:7f:f8:4c:77:6c:71:51:69:f7:e6:7e:17:1f: 15:55:94:a8:f8:1e:36:80:0c:03:7a:15:c4:b8:97:36:6c:58: 66:47:0e:5e:5c:8b:6e:8c:aa:f3:17:2f:ff:51:0e:cf:e0:f0: cf:56:66:e0:56:94:92:83:d2:a0:c7:69:87:96:6d:d0:66:bd: d1:16:06:24:7a:4e:0e:3f:62:55:52:44:24:0f:05:75:c6:8b: e2:73:3c:b3:0d:ec:f3:bb:13:98:06:26:a1:9d:eb:63:b2:2b: a8:68:18:32:d1:37:ca:94:a0:31:6f:7f:fc:9e:59:d1:32:24: a1:ff:e3:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZjUaT22niXglTkKDgdg/wXWdO2owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIwRDNENzBBMDI3QjUzQzdBRDIxN0ZFMjJDQTBFRDEx MUZERjNCMDAeFw0yNTA2MjcxNTA2NDlaFw0yNTA2MzAxOTA0NDlaMDMxMTAvBgNV BAMTKENFQzkxODE4MjExN0UxQ0YxNEEzMTkwOTVENzUyMzM1NTkzQkM4NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC67gwDZ0DEHUnZmEaJChBUrXpd WufRjmITHOv6wcsEuoNFVJkKmfSAcpm+Vc4u+Uo84cnzwGTGhb3Sx/ZsdRLaDSy7 6QP8mQUc+0ZB8bx2Zzk6ZoCv8SE8NNOCZwBRvSt4p1yv24oosIvWIkFWi8DRtsNq /kWg1ghDYgkIMnJqfz6WNMV+Co5n/f9vfdWTbIYGuCerzyEK1kfdItO4PvVe/eZI uaye86tujioTlNW3m8g15ezetee36UiaaidawveCnWCsMqO0QjSnWryQ6E6gwha5 baNkVZc1kBWfTMywKG5UsR0Ffj1RdkRdKcaWDD5ELiLkwBogTTPt+rIOYefBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzskYGCEX4c8UoxkJXXUjNVk7yEcwHwYDVR0j BBgwFoAUKw09cKAntTx60hf+IsoO0RH987AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzcyZDNmNS1kZDUzLTRiNzQtOTQ3Yy02YmI1MTBmNGY1MDMvMC8yQjBEM0Q3MEEw MjdCNTNDN0FEMjE3RkUyMkNBMEVEMTExRkRGM0IwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkIwRDNENzBBMDI3QjUzQzdBRDIxN0ZFMjJDQTBFRDExMUZE RjNCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWM3MmQzZjUtZGQ1My00Yjc0LTk0 N2MtNmJiNTEwZjRmNTAzLzAvMkIwRDNENzBBMDI3QjUzQzdBRDIxN0ZFMjJDQTBF RDExMUZERjNCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALK0JyK60T5KtUY1+++RvmokboRrFors2ICK LZQCIeGG4Q6tNbPFM8C8CCdP0lm5HJhysmZqDh+w8vcDsgCrNbUnkFOQqIxS+N1A 0MHuC5n2saKwQq+NaLMTq02TDhz++69strjfx5Ia9bFkJgha+5X+IbCKRO4GCAGg w0fHL+Ywd8OKf/hMd2xxUWn35n4XHxVVlKj4HjaADAN6FcS4lzZsWGZHDl5ci26M qvMXL/9RDs/g8M9WZuBWlJKD0qDHaYeWbdBmvdEWBiR6Tg4/YlVSRCQPBXXGi+Jz PLMN7PO7E5gGJqGd62OyK6hoGDLRN8qUoDFvf/yeWdEyJKH/41w= -----END CERTIFICATE-----Generated at Sun Jun 29 18:15:59 2025 by rpki-client