$ rpki-client -vvf repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft File: 2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft (raw, json) Hash identifier: OmjWeyyWLAIVGsNOkCgP9NdMvDEhBun7s3ALuR+tYnQ= Subject key identifier: 56:D8:D0:51:42:33:F2:DB:46:F8:AF:F2:13:26:A0:5C:EA:55:0C:AE Authority key identifier: 2D:23:11:F5:63:DF:0A:F8:EB:EF:DA:21:87:16:26:B5:DD:78:C5:BD Certificate issuer: /CN=2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD Certificate serial: 31AEEB1CBDB4CB5C47D3691692EB8785B77DD8ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft Manifest number: 04B8 Signing time: Sat 28 Jun 2025 19:52:10 +0000 Manifest this update: Sat 28 Jun 2025 19:47:10 +0000 Manifest next update: Tue 01 Jul 2025 20:45:10 +0000 Files and hashes: 1: 323430323a363938303a333030303a3a2f34382d3438203d3e203539323738.roa (hash: mAylxMr8+d8mR8LWIKVq/3AjBIk2gwxyYbF7kLOA17c=) 2: 323430323a363938303a313030303a3a2f34382d3438203d3e203539323738.roa (hash: nGOhkS+SCCrJt9wmjNL7Gorc9U1h3Xuifw+uaNxyRl4=) 3: 3130332e35382e3136302e302f32322d3234203d3e203539323738.roa (hash: KC/48KyBK866tyRqnFAk104o6NtYIjI9BYH4NY1WGf4=) 4: 3130332e3232372e3234302e302f32322d3234203d3e203539323738.roa (hash: h7IiV0kh9O/RK06uMG1rhN5D8mRuZrUlThAbqSxDils=) 5: 323430323a363938303a3a2f33322d3438203d3e203539323738.roa (hash: IyTH+iDrZwcYpQjVq5OAN4r5uvDjzNsSK7r7mWOE79s=) 6: 2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.crl (hash: dc2shwOGkz9QTVqFDg2uVLPJC22qyoe/IlKqkLFuDII=) 7: 323430323a363938303a323030303a3a2f34382d3438203d3e203539323738.roa (hash: BuvczQEbe/bdskV+ebbMfwgi2QgHhXaT52MUJAQ4Uu4=) 8: 323430323a363938303a343030303a3a2f34382d3438203d3e203539323738.roa (hash: b3QtB4OgqdRWfaRrhbvsm6gH1TsKPXL5Yz9+wyHqUXg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.crl rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 20:45:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:ae:eb:1c:bd:b4:cb:5c:47:d3:69:16:92:eb:87:85:b7:7d:d8:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD Validity Not Before: Jun 28 19:47:10 2025 GMT Not After : Jul 1 20:45:10 2025 GMT Subject: CN=56D8D0514233F2DB46F8AFF21326A05CEA550CAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:cd:a0:7e:c3:10:81:aa:bd:3d:f8:21:c3:65: 5c:61:f3:94:67:85:84:93:64:c9:29:cb:92:7b:5a: d4:b0:a7:07:86:80:8d:eb:ab:75:ff:62:0d:8c:d1: c8:79:69:22:db:8f:2e:84:70:98:4e:37:3f:30:aa: ab:3e:b0:30:50:81:72:c9:a7:3b:2a:e8:fe:b9:59: c4:07:3b:50:53:e9:50:5f:92:77:c3:e5:54:60:1d: 44:1e:7e:33:d9:7e:53:c2:47:ba:f8:47:4d:13:83: 9f:fc:26:75:6e:d9:28:42:3d:eb:db:8f:97:75:21: a2:82:e1:77:2d:78:21:0e:77:6e:31:1b:a5:f8:5c: 79:52:5a:67:85:1a:2e:4e:c2:67:fb:05:e4:5c:12: df:6f:8d:89:e8:67:04:70:9f:c2:09:0c:45:22:b9: 30:1f:93:1a:12:8e:87:7e:4a:bc:6d:28:9a:ac:ed: df:2e:cb:5c:53:6c:61:96:39:74:3e:e9:8c:23:9a: 6e:6d:3d:9a:30:2d:be:a5:f6:85:ea:40:b9:2c:be: 42:c1:b7:b3:7b:1d:d8:6b:a7:99:74:16:9d:65:53: e5:fc:20:18:89:89:de:c3:90:3b:fb:9e:34:5c:0b: 74:a0:20:64:b7:26:d8:f0:06:8a:5b:22:8a:7e:4c: 82:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D8:D0:51:42:33:F2:DB:46:F8:AF:F2:13:26:A0:5C:EA:55:0C:AE X509v3 Authority Key Identifier: keyid:2D:23:11:F5:63:DF:0A:F8:EB:EF:DA:21:87:16:26:B5:DD:78:C5:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:3a:1f:cd:98:66:a2:5c:c5:97:bf:45:a4:80:85:55:30:ba: 60:0e:47:4f:01:51:3d:0e:26:d9:8f:93:15:01:e2:9e:b1:52: 10:c0:a0:10:35:0f:de:91:7d:bf:0c:c0:02:83:e0:b1:c8:b5: fd:88:29:b7:17:e0:5b:3f:c1:11:b5:1d:1e:0f:dd:e8:97:90: b6:a8:c8:06:89:88:79:85:74:25:e0:cb:16:f8:ae:c8:23:45: a1:66:98:e0:2c:f6:c6:5d:69:3a:65:11:23:8f:48:76:a1:2c: a2:59:45:04:be:32:bf:81:6c:0f:e4:26:8b:c5:1e:55:ad:ea: 0a:89:77:78:7a:48:33:a9:e8:e4:dd:7b:ca:48:bb:46:e0:cf: 92:01:e0:ca:62:af:af:08:4a:f6:39:eb:85:3b:c4:be:38:88: fe:13:7f:47:e6:f4:34:8a:7a:a9:99:a9:0c:23:26:52:9a:5b: 29:93:81:6c:bd:a9:ac:e6:14:e4:03:65:d3:01:3b:ff:37:4f: 19:02:83:e9:b6:a0:2f:d4:44:a4:7b:f3:3f:da:cc:94:d0:2d: 71:c8:8c:3a:e3:0e:11:f3:6a:49:9b:cd:44:8c:b9:bf:2d:cb: 55:2e:93:c1:bd:56:d2:80:eb:9e:6a:e8:52:b3:b7:71:ff:28: de:fb:93:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMa7rHL20y1xH02kWkuuHhbd92O0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQyMzExRjU2M0RGMEFGOEVCRUZEQTIxODcxNjI2QjVE RDc4QzVCRDAeFw0yNTA2MjgxOTQ3MTBaFw0yNTA3MDEyMDQ1MTBaMDMxMTAvBgNV BAMTKDU2RDhEMDUxNDIzM0YyREI0NkY4QUZGMjEzMjZBMDVDRUE1NTBDQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7zaB+wxCBqr09+CHDZVxh85Rn hYSTZMkpy5J7WtSwpweGgI3rq3X/Yg2M0ch5aSLbjy6EcJhONz8wqqs+sDBQgXLJ pzsq6P65WcQHO1BT6VBfknfD5VRgHUQefjPZflPCR7r4R00Tg5/8JnVu2ShCPevb j5d1IaKC4XcteCEOd24xG6X4XHlSWmeFGi5Owmf7BeRcEt9vjYnoZwRwn8IJDEUi uTAfkxoSjod+SrxtKJqs7d8uy1xTbGGWOXQ+6Ywjmm5tPZowLb6l9oXqQLksvkLB t7N7Hdhrp5l0Fp1lU+X8IBiJid7DkDv7njRcC3SgIGS3JtjwBopbIop+TILZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVtjQUUIz8ttG+K/yEyagXOpVDK4wHwYDVR0j BBgwFoAULSMR9WPfCvjr79ohhxYmtd14xb0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjFjNzlmMS0yNjRlLTQyM2YtOWUwOC0wYjI5MDBkYTY5NDkvMC8yRDIzMTFGNTYz REYwQUY4RUJFRkRBMjE4NzE2MjZCNURENzhDNUJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQyMzExRjU2M0RGMEFGOEVCRUZEQTIxODcxNjI2QjVERDc4 QzVCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWYxYzc5ZjEtMjY0ZS00MjNmLTll MDgtMGIyOTAwZGE2OTQ5LzAvMkQyMzExRjU2M0RGMEFGOEVCRUZEQTIxODcxNjI2 QjVERDc4QzVCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADY6H82YZqJcxZe/RaSAhVUwumAOR08BUT0O JtmPkxUB4p6xUhDAoBA1D96Rfb8MwAKD4LHItf2IKbcX4Fs/wRG1HR4P3eiXkLao yAaJiHmFdCXgyxb4rsgjRaFmmOAs9sZdaTplESOPSHahLKJZRQS+Mr+BbA/kJovF HlWt6gqJd3h6SDOp6OTde8pIu0bgz5IB4Mpir68ISvY564U7xL44iP4Tf0fm9DSK eqmZqQwjJlKaWymTgWy9qazmFOQDZdMBO/83TxkCg+m2oC/URKR78z/azJTQLXHI jDrjDhHzakmbzUSMub8ty1Uuk8G9VtKA655q6FKzt3H/KN77k/A= -----END CERTIFICATE-----Generated at Sun Jun 29 21:44:13 2025 by rpki-client