$ rpki-client -vvf repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft File: 2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft (raw, json) Hash identifier: nz1MXDs60VTUM3GLd8U7624+ghsM0ZcrQItMfr9Onb8= Subject key identifier: 2F:B3:73:F7:95:C5:37:56:E2:85:BA:F0:14:B8:03:49:4A:41:EC:19 Authority key identifier: 2B:69:EA:50:8D:C6:2D:34:C2:B3:CA:4F:BA:57:BF:3A:FF:FD:49:94 Certificate issuer: /CN=2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994 Certificate serial: 27A3CB211A070C697530ADC767B3028FEA2630BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft Manifest number: 0449 Signing time: Mon 30 Jun 2025 03:11:08 +0000 Manifest this update: Mon 30 Jun 2025 03:06:08 +0000 Manifest next update: Thu 03 Jul 2025 04:30:08 +0000 Files and hashes: 1: 2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.crl (hash: 4SOGzmWUGBR2n71uJYqzrmSiZd3lCXtQAMZyWOD8HZ4=) 2: 3130332e3136322e31392e302f32342d3234203d3e20313431363430.roa (hash: dsIKfbnR+pN9Hwy4NZz2+3xuPhAknppnbWGiA908HyE=) 3: 323030313a6466353a653238303a3a2f34382d3438203d3e20313431363430.roa (hash: +ZHphLOhvruOuJkUwXhmKIA/kEZXmDLtlpGcK4ZlSQI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.crl rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 04:30:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:a3:cb:21:1a:07:0c:69:75:30:ad:c7:67:b3:02:8f:ea:26:30:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994 Validity Not Before: Jun 30 03:06:08 2025 GMT Not After : Jul 3 04:30:08 2025 GMT Subject: CN=2FB373F795C53756E285BAF014B803494A41EC19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a4:67:d1:c4:6e:9f:63:90:f2:92:5d:d9:00: aa:90:16:63:99:e8:a1:2e:d2:7d:1a:66:05:e8:06: d1:a4:6e:9f:88:c9:21:68:87:41:ea:d6:84:b2:52: 49:74:53:2d:dc:8f:0c:b2:ae:30:f2:55:ca:e7:b8: 73:84:54:2b:48:90:c5:ad:37:ed:0d:9f:52:d1:bf: e8:59:08:ad:23:80:fc:60:29:50:e7:63:21:b7:88: 1a:75:19:10:10:e5:79:d7:dc:36:43:05:f0:20:92: 83:47:31:06:08:ba:ab:73:96:d6:91:70:2d:12:e7: 3b:8a:83:37:21:3b:0f:d4:68:d1:cd:7c:f6:71:c5: 33:3b:a5:79:df:fc:02:6c:63:db:a9:91:87:99:0f: ba:4b:dd:6f:99:6b:73:ca:bd:10:92:91:ca:33:be: e1:85:99:ad:9e:b5:5e:0c:c4:4a:34:48:91:91:20: 05:8a:ca:ce:a2:a8:42:74:a3:16:08:8f:cd:f5:4c: 3a:1e:0f:34:46:b2:62:5d:b1:5e:cb:68:ef:a0:ae: 4b:8f:d0:32:d0:3f:1a:3b:58:41:1a:d6:b1:ce:97: f0:ac:ed:c3:c1:83:2a:e5:a6:62:93:e4:ac:fe:5c: 13:7e:7e:37:ac:0d:d8:c4:e8:e2:fa:14:26:7a:39: b2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:B3:73:F7:95:C5:37:56:E2:85:BA:F0:14:B8:03:49:4A:41:EC:19 X509v3 Authority Key Identifier: keyid:2B:69:EA:50:8D:C6:2D:34:C2:B3:CA:4F:BA:57:BF:3A:FF:FD:49:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:43:a3:b4:4c:ef:52:f2:ba:f8:f6:6f:6a:86:fe:a7:e8:98: da:5f:8a:5c:14:3d:de:77:99:4f:38:01:c1:f6:5f:18:d9:48: b9:ef:b5:a1:ef:d8:ed:bf:99:fe:64:92:37:1a:49:7a:0b:5d: 0f:ea:82:3a:cd:f3:ac:3b:7b:e8:dc:df:3e:35:c6:92:bd:63: 33:62:fe:40:63:60:b7:fa:09:73:34:1c:c4:98:8a:bc:25:fc: a7:3b:da:ce:3b:7a:81:8f:bb:c9:8d:1e:15:4a:41:76:8d:d5: 48:14:f2:bf:a0:56:d1:d7:4b:cb:df:a0:59:9d:1c:7b:ff:78: 01:24:4d:66:7d:57:5f:74:a1:2f:fc:07:73:b2:cf:9d:8f:61: 76:f1:fc:ae:32:25:41:f0:73:e6:89:dc:a0:3a:d4:aa:98:d8: f3:a7:aa:2d:dc:36:c2:c6:d9:80:77:9f:d2:2c:92:05:e8:c5: 08:ac:ae:84:59:da:00:75:9f:14:08:4a:0a:df:fa:2d:c8:32: 30:8a:c3:6f:17:1b:e0:3d:af:4b:f0:a3:bd:b6:74:db:c6:7d: 0b:30:63:ec:50:ef:5b:fb:52:ad:31:7d:82:ee:f8:cf:af:2d: 1d:b6:a2:bc:04:df:7f:ab:52:ee:76:1f:00:ab:5b:f1:f9:8e: ab:ba:44:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ6PLIRoHDGl1MK3HZ7MCj+omMLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI2OUVBNTA4REM2MkQzNEMyQjNDQTRGQkE1N0JGM0FG RkZENDk5NDAeFw0yNTA2MzAwMzA2MDhaFw0yNTA3MDMwNDMwMDhaMDMxMTAvBgNV BAMTKDJGQjM3M0Y3OTVDNTM3NTZFMjg1QkFGMDE0QjgwMzQ5NEE0MUVDMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDpGfRxG6fY5Dykl3ZAKqQFmOZ 6KEu0n0aZgXoBtGkbp+IySFoh0Hq1oSyUkl0Uy3cjwyyrjDyVcrnuHOEVCtIkMWt N+0Nn1LRv+hZCK0jgPxgKVDnYyG3iBp1GRAQ5XnX3DZDBfAgkoNHMQYIuqtzltaR cC0S5zuKgzchOw/UaNHNfPZxxTM7pXnf/AJsY9upkYeZD7pL3W+Za3PKvRCSkcoz vuGFma2etV4MxEo0SJGRIAWKys6iqEJ0oxYIj831TDoeDzRGsmJdsV7LaO+grkuP 0DLQPxo7WEEa1rHOl/Cs7cPBgyrlpmKT5Kz+XBN+fjesDdjE6OL6FCZ6ObIhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL7Nz95XFN1bihbrwFLgDSUpB7BkwHwYDVR0j BBgwFoAUK2nqUI3GLTTCs8pPule/Ov/9SZQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2M2MzdiZC01OTcxLTQyNjQtOTk3YS03NDlkODA0YTY4NTgvMC8yQjY5RUE1MDhE QzYyRDM0QzJCM0NBNEZCQTU3QkYzQUZGRkQ0OTk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkI2OUVBNTA4REM2MkQzNEMyQjNDQTRGQkE1N0JGM0FGRkZE NDk5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWNjNjM3YmQtNTk3MS00MjY0LTk5 N2EtNzQ5ZDgwNGE2ODU4LzAvMkI2OUVBNTA4REM2MkQzNEMyQjNDQTRGQkE1N0JG M0FGRkZENDk5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIlDo7RM71Lyuvj2b2qG/qfomNpfilwUPd53 mU84AcH2XxjZSLnvtaHv2O2/mf5kkjcaSXoLXQ/qgjrN86w7e+jc3z41xpK9YzNi /kBjYLf6CXM0HMSYirwl/Kc72s47eoGPu8mNHhVKQXaN1UgU8r+gVtHXS8vfoFmd HHv/eAEkTWZ9V190oS/8B3Oyz52PYXbx/K4yJUHwc+aJ3KA61KqY2POnqi3cNsLG 2YB3n9IskgXoxQisroRZ2gB1nxQISgrf+i3IMjCKw28XG+A9r0vwo722dNvGfQsw Y+xQ71v7Uq0xfYLu+M+vLR22orwE33+rUu52HwCrW/H5jqu6RDQ= -----END CERTIFICATE-----Generated at Tue Jul 1 15:08:07 2025 by rpki-client