$ rpki-client -vvf repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.mft File: 2E55483B906244D2DA357F014F9AFA606D95C345.mft (raw, json) Hash identifier: 0yUPOCiNq0dzexwtWFlmti19t+BCbW7v2hPtJEznlDI= Subject key identifier: 2B:89:F2:4F:0F:56:ED:A8:8B:5A:54:FB:CD:6E:DC:7A:3F:DA:B6:95 Authority key identifier: 2E:55:48:3B:90:62:44:D2:DA:35:7F:01:4F:9A:FA:60:6D:95:C3:45 Certificate issuer: /CN=2E55483B906244D2DA357F014F9AFA606D95C345 Certificate serial: 23B4C280DF744312DC0D5BA2ABEDE3E7D0009CA5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E55483B906244D2DA357F014F9AFA606D95C345.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.mft Manifest number: BA Signing time: Sat 28 Jun 2025 14:01:11 +0000 Manifest this update: Sat 28 Jun 2025 13:56:11 +0000 Manifest next update: Tue 01 Jul 2025 14:27:11 +0000 Files and hashes: 1: 3230322e35322e35392e302f32342d3234203d3e203436303538.roa (hash: Du41YA1NCiK2HlEV88F/QDnyK1sLmVF33xCMfe54rMI=) 2: 2E55483B906244D2DA357F014F9AFA606D95C345.crl (hash: M+MlSRUrmoOfZbeCivY1hTQpKevSMHaZA9FVuVchyBU=) 3: 3230322e35322e35382e302f32342d3234203d3e203436303538.roa (hash: UMm8CVytUz3mnXPaURu9cvBWCMEG+/Kh9q1dvGzVdN0=) 4: 3230322e35322e35382e302f32332d3233203d3e203436303538.roa (hash: d6+MpeOwnH/agtVVZkfqBxwK6cPDeJjFB6fgvTWTTwY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.crl rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E55483B906244D2DA357F014F9AFA606D95C345.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 14:27:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:b4:c2:80:df:74:43:12:dc:0d:5b:a2:ab:ed:e3:e7:d0:00:9c:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E55483B906244D2DA357F014F9AFA606D95C345 Validity Not Before: Jun 28 13:56:11 2025 GMT Not After : Jul 1 14:27:11 2025 GMT Subject: CN=2B89F24F0F56EDA88B5A54FBCD6EDC7A3FDAB695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f9:60:14:04:5b:f7:fc:41:08:10:ca:aa:e6: aa:4a:3e:b2:83:f1:f2:c7:40:23:34:cc:60:ee:d5: ba:94:21:98:3b:3c:e9:29:69:82:2a:f0:0b:83:4a: 6a:ad:81:e3:2d:56:19:94:d7:00:bc:65:b9:13:90: 3a:97:74:59:d5:9f:63:9c:95:a1:38:77:b5:f7:3e: eb:f0:d2:fa:ee:b0:97:d5:e2:62:3e:66:f8:a4:d5: 30:bc:ba:ac:31:84:3d:d4:8b:3f:92:bd:85:12:d9: 7d:70:ec:70:d6:d6:19:46:26:98:bb:27:1d:e1:56: f4:8a:a7:90:31:fc:ee:08:d4:f1:28:0d:28:3e:fb: 02:dd:53:21:09:18:7b:35:f3:62:10:0e:34:7e:c6: 30:6d:de:d2:88:8a:12:ac:f7:67:7f:39:63:26:b9: d5:a8:3a:9a:1b:cd:c0:bb:3d:76:6b:91:bf:32:c4: 59:f9:8c:ba:1c:72:ae:d1:fe:2b:13:24:7a:e3:4f: 98:4c:ea:dd:de:67:40:32:a4:e5:e5:75:3b:80:63: e3:b1:24:8f:28:20:99:cb:ee:6d:38:fe:02:1c:e9: 47:47:04:92:84:d9:12:94:3d:cd:08:61:42:70:37: c0:ba:97:ef:f6:2c:7b:87:81:c2:2c:7e:d2:d0:5a: 17:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:89:F2:4F:0F:56:ED:A8:8B:5A:54:FB:CD:6E:DC:7A:3F:DA:B6:95 X509v3 Authority Key Identifier: keyid:2E:55:48:3B:90:62:44:D2:DA:35:7F:01:4F:9A:FA:60:6D:95:C3:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E55483B906244D2DA357F014F9AFA606D95C345.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:28:99:13:0d:b0:fa:90:45:3d:e8:7b:b4:47:f6:af:78:d3: 24:24:3b:dd:1d:aa:e9:fc:a4:9f:a3:b7:83:fd:31:d8:e8:5e: a1:f8:b1:ef:ba:c9:1b:78:42:d2:f3:ad:6f:3a:61:fc:34:95: 41:c3:ab:13:a0:99:ca:11:b3:c3:eb:10:17:b4:48:3a:e4:15: 6e:c2:f6:d5:96:41:ea:bc:24:a4:4f:36:ce:bc:2d:bc:40:09: fd:24:0b:f5:b3:b0:c2:fa:e7:9a:c7:7a:5e:b2:c4:f4:ab:55: 26:cf:86:e8:61:23:34:51:b0:a5:5c:2c:f0:d7:cf:86:f1:ec: 5d:fa:16:84:b4:eb:94:e2:f0:6a:59:38:9d:bd:9f:5a:5d:d8: 9c:58:bf:ad:cf:e6:02:e8:f4:a6:67:1e:fc:76:e2:c3:42:f2: 8a:27:c1:7e:ae:fe:29:1d:2b:2d:06:ad:7a:d8:d9:e2:de:94: 4d:d1:97:e0:ac:4a:13:9d:43:94:2d:24:d7:ac:ed:bb:ea:5e: ed:53:b1:ca:55:92:4d:75:a4:d8:a2:fe:da:02:c9:32:36:13: fd:00:f8:b1:e1:85:0e:07:94:63:35:e3:7b:ea:01:0e:01:76: 09:e3:74:8b:0d:7c:a2:95:ab:9a:27:35:78:8d:69:65:95:b5: 02:49:66:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI7TCgN90QxLcDVuiq+3j59AAnKUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU1NTQ4M0I5MDYyNDREMkRBMzU3RjAxNEY5QUZBNjA2 RDk1QzM0NTAeFw0yNTA2MjgxMzU2MTFaFw0yNTA3MDExNDI3MTFaMDMxMTAvBgNV BAMTKDJCODlGMjRGMEY1NkVEQTg4QjVBNTRGQkNENkVEQzdBM0ZEQUI2OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/+WAUBFv3/EEIEMqq5qpKPrKD 8fLHQCM0zGDu1bqUIZg7POkpaYIq8AuDSmqtgeMtVhmU1wC8ZbkTkDqXdFnVn2Oc laE4d7X3Puvw0vrusJfV4mI+Zvik1TC8uqwxhD3Uiz+SvYUS2X1w7HDW1hlGJpi7 Jx3hVvSKp5Ax/O4I1PEoDSg++wLdUyEJGHs182IQDjR+xjBt3tKIihKs92d/OWMm udWoOpobzcC7PXZrkb8yxFn5jLoccq7R/isTJHrjT5hM6t3eZ0AypOXldTuAY+Ox JI8oIJnL7m04/gIc6UdHBJKE2RKUPc0IYUJwN8C6l+/2LHuHgcIsftLQWhdHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK4nyTw9W7aiLWlT7zW7cej/atpUwHwYDVR0j BBgwFoAULlVIO5BiRNLaNX8BT5r6YG2Vw0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MmUyM2RjNC00ZmQ1LTQzZTItYmI2YS00ZmRjMzg3ZWJjNTgvMC8yRTU1NDgzQjkw NjI0NEQyREEzNTdGMDE0RjlBRkE2MDZEOTVDMzQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkU1NTQ4M0I5MDYyNDREMkRBMzU3RjAxNEY5QUZBNjA2RDk1 QzM0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTJlMjNkYzQtNGZkNS00M2UyLWJi NmEtNGZkYzM4N2ViYzU4LzAvMkU1NTQ4M0I5MDYyNDREMkRBMzU3RjAxNEY5QUZB NjA2RDk1QzM0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIEomRMNsPqQRT3oe7RH9q940yQkO90dqun8 pJ+jt4P9MdjoXqH4se+6yRt4QtLzrW86Yfw0lUHDqxOgmcoRs8PrEBe0SDrkFW7C 9tWWQeq8JKRPNs68LbxACf0kC/WzsML655rHel6yxPSrVSbPhuhhIzRRsKVcLPDX z4bx7F36FoS065Ti8GpZOJ29n1pd2JxYv63P5gLo9KZnHvx24sNC8oonwX6u/ikd Ky0GrXrY2eLelE3Rl+CsShOdQ5QtJNes7bvqXu1TscpVkk11pNii/toCyTI2E/0A +LHhhQ4HlGM143vqAQ4BdgnjdIsNfKKVq5onNXiNaWWVtQJJZuA= -----END CERTIFICATE-----Generated at Mon Jun 30 07:43:46 2025 by rpki-client