$ rpki-client -vvf repo-rpki.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.mft File: 26AE16DF2BF0FD5184FEC655250D244739FA9FC4.mft (raw, json) Hash identifier: lrFhSvBr7ecROaAUqUH+cneNksiHuzE1p6310lEAWmA= Subject key identifier: 1F:2E:52:DF:3E:94:06:C0:99:0A:5E:70:95:C0:72:A8:97:8F:0F:0A Authority key identifier: 26:AE:16:DF:2B:F0:FD:51:84:FE:C6:55:25:0D:24:47:39:FA:9F:C4 Certificate issuer: /CN=26AE16DF2BF0FD5184FEC655250D244739FA9FC4 Certificate serial: 6B2CF9CDB033CDD108438ED61E6FFA481386751E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.mft Manifest number: 02F8 Signing time: Sat 28 Jun 2025 08:00:48 +0000 Manifest this update: Sat 28 Jun 2025 07:55:48 +0000 Manifest next update: Tue 01 Jul 2025 11:23:48 +0000 Files and hashes: 1: 26AE16DF2BF0FD5184FEC655250D244739FA9FC4.crl (hash: 4jQdyzO5NLcu4Uta3wdRwVkobNqvEZGMhdZe0D6van8=) 2: 3130332e3137332e3133332e302f32342d3234203d3e20313437303834.roa (hash: RhPETTtt6gaQ4OMJ7F1vFmkR8a1hA84ISSi5ZYyEB1o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.crl rsync://repo-rpki.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 11:23:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:2c:f9:cd:b0:33:cd:d1:08:43:8e:d6:1e:6f:fa:48:13:86:75:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26AE16DF2BF0FD5184FEC655250D244739FA9FC4 Validity Not Before: Jun 28 07:55:48 2025 GMT Not After : Jul 1 11:23:48 2025 GMT Subject: CN=1F2E52DF3E9406C0990A5E7095C072A8978F0F0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2e:ca:4f:0b:9b:51:e0:a3:d4:c2:ca:5d:f8: 07:b3:90:0a:a1:a3:f1:5f:36:a5:aa:b2:ec:32:a6: 6a:8f:73:ef:b5:c5:c4:d8:7d:e7:02:79:b0:5c:18: 92:b6:9f:fc:10:e7:88:d5:3f:3a:40:0c:85:02:1e: d9:01:8a:f3:58:14:58:9a:ff:4f:67:95:b1:dd:a8: a8:91:94:92:fb:14:71:f3:5c:41:76:23:ae:6f:59: 00:f5:dd:66:4f:d4:46:ce:93:7f:8e:7d:ee:5d:32: 22:3c:a5:d7:49:ff:92:1f:0b:18:e0:fd:47:70:56: c0:67:f8:0e:ad:f0:5f:43:79:93:20:d1:58:40:6b: 38:5d:96:30:ce:43:ae:8e:24:43:73:0c:e1:0f:47: 06:9d:a2:d8:47:00:eb:ab:e1:6e:14:60:3e:74:16: f9:3f:7d:e9:50:3f:d1:c5:81:31:1b:c7:4e:a1:dc: 58:01:b2:ff:75:34:0d:32:16:4f:61:81:51:3a:84: 2f:65:46:06:5e:b3:6a:21:2c:a6:65:af:16:51:e7: 9e:3b:37:b5:55:31:5c:1b:24:37:b5:23:4a:0b:b1: 55:05:92:bf:e1:07:da:58:9c:62:93:94:c0:23:a0: f0:fd:5a:dc:da:de:49:12:9b:3c:67:67:2a:a3:6a: 6a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:2E:52:DF:3E:94:06:C0:99:0A:5E:70:95:C0:72:A8:97:8F:0F:0A X509v3 Authority Key Identifier: keyid:26:AE:16:DF:2B:F0:FD:51:84:FE:C6:55:25:0D:24:47:39:FA:9F:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:3a:ff:01:67:fc:22:a2:b4:bc:d9:65:1b:6f:36:69:24:06: 5d:a1:a5:61:d0:c4:4b:7d:52:20:9b:48:28:89:32:a7:44:c3: 49:cc:2c:d8:84:36:e9:55:f8:b2:84:b0:53:70:f3:08:80:60: 10:ee:36:a5:69:cb:49:ed:d4:ce:5a:59:1e:41:b7:ad:f7:1d: b3:ce:af:ce:ba:8c:98:7e:a1:69:65:18:db:d6:90:84:8e:c2: ca:8e:fd:a8:9c:7a:12:a9:6d:a9:55:a5:76:00:46:d5:29:02: 53:00:68:b9:b3:fd:d2:65:9b:ce:91:51:7a:d6:6e:14:77:b7: a7:2e:8a:40:c4:cc:ef:05:d2:81:18:02:38:8e:e4:4f:bf:54: 56:66:48:35:68:6d:bb:e3:c2:87:1c:f9:f3:28:5d:b1:5d:bc: 66:d0:2c:bb:1c:f3:f3:2a:88:d3:9b:15:42:97:46:81:f2:da: e7:4f:99:bc:f6:10:e7:fe:13:52:c9:be:ca:91:b2:9d:16:cb: ba:a2:04:19:57:eb:bc:86:be:c7:50:7e:e0:07:94:22:cb:58: 13:28:25:8b:2e:9e:4e:c3:75:af:e6:88:81:4b:9f:ce:d3:0e: 69:f6:1f:cd:3b:53:36:b2:24:19:39:7b:7c:f9:b4:47:58:a7: c5:6f:6d:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUayz5zbAzzdEIQ47WHm/6SBOGdR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjZBRTE2REYyQkYwRkQ1MTg0RkVDNjU1MjUwRDI0NDcz OUZBOUZDNDAeFw0yNTA2MjgwNzU1NDhaFw0yNTA3MDExMTIzNDhaMDMxMTAvBgNV BAMTKDFGMkU1MkRGM0U5NDA2QzA5OTBBNUU3MDk1QzA3MkE4OTc4RjBGMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDULspPC5tR4KPUwspd+AezkAqh o/FfNqWqsuwypmqPc++1xcTYfecCebBcGJK2n/wQ54jVPzpADIUCHtkBivNYFFia /09nlbHdqKiRlJL7FHHzXEF2I65vWQD13WZP1EbOk3+Ofe5dMiI8pddJ/5IfCxjg /UdwVsBn+A6t8F9DeZMg0VhAazhdljDOQ66OJENzDOEPRwadothHAOur4W4UYD50 Fvk/felQP9HFgTEbx06h3FgBsv91NA0yFk9hgVE6hC9lRgZes2ohLKZlrxZR5547 N7VVMVwbJDe1I0oLsVUFkr/hB9pYnGKTlMAjoPD9Wtza3kkSmzxnZyqjampPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHy5S3z6UBsCZCl5wlcByqJePDwowHwYDVR0j BBgwFoAUJq4W3yvw/VGE/sZVJQ0kRzn6n8QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OGM0YmExMi02M2JiLTQ1NTAtYWMwZi01M2YwOGM0NjM1MTEvMC8yNkFFMTZERjJC RjBGRDUxODRGRUM2NTUyNTBEMjQ0NzM5RkE5RkM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjZBRTE2REYyQkYwRkQ1MTg0RkVDNjU1MjUwRDI0NDczOUZB OUZDNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOThjNGJhMTItNjNiYi00NTUwLWFj MGYtNTNmMDhjNDYzNTExLzAvMjZBRTE2REYyQkYwRkQ1MTg0RkVDNjU1MjUwRDI0 NDczOUZBOUZDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF46/wFn/CKitLzZZRtvNmkkBl2hpWHQxEt9 UiCbSCiJMqdEw0nMLNiENulV+LKEsFNw8wiAYBDuNqVpy0nt1M5aWR5Bt633HbPO r866jJh+oWllGNvWkISOwsqO/aicehKpbalVpXYARtUpAlMAaLmz/dJlm86RUXrW bhR3t6cuikDEzO8F0oEYAjiO5E+/VFZmSDVobbvjwocc+fMoXbFdvGbQLLsc8/Mq iNObFUKXRoHy2udPmbz2EOf+E1LJvsqRsp0Wy7qiBBlX67yGvsdQfuAHlCLLWBMo JYsunk7Dda/miIFLn87TDmn2H807UzayJBk5e3z5tEdYp8VvbR0= -----END CERTIFICATE-----Generated at Sun Jun 29 20:03:49 2025 by rpki-client