$ rpki-client -vvf repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft File: 2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft (raw, json) Hash identifier: aGaJBph3N66j9rHbBCjYpE/c4pGoAW1gGuc1xRk7Oto= Subject key identifier: 04:0E:16:20:95:9F:92:FF:1E:4C:0B:4A:E9:7C:0E:40:4E:95:43:C9 Authority key identifier: 2E:29:F4:8B:C4:E2:FD:64:21:F1:2F:27:5B:FE:54:CB:5A:FC:4C:BF Certificate issuer: /CN=2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF Certificate serial: 502B063146AB08957E4A03DC8786BD1D0C37889B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft Manifest number: 0226 Signing time: Sat 23 Aug 2025 03:42:16 +0000 Manifest this update: Sat 23 Aug 2025 03:37:16 +0000 Manifest next update: Tue 26 Aug 2025 07:20:16 +0000 Files and hashes: 1: 2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.crl (hash: MWzNYa4ft+AUJMy8K+10CriPbG1KRViny8fpnaPGsjE=) 2: 3130332e3138342e3138322e302f32342d3234203d3e20313439363736.roa (hash: 1ohXfgQVLOVqfzLUY6nq2zHsOKGWcr19CJg3R6qlyZU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.crl rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 07:20:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:2b:06:31:46:ab:08:95:7e:4a:03:dc:87:86:bd:1d:0c:37:88:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF Validity Not Before: Aug 23 03:37:16 2025 GMT Not After : Aug 26 07:20:16 2025 GMT Subject: CN=040E1620959F92FF1E4C0B4AE97C0E404E9543C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bd:c6:ab:a1:3e:8e:86:77:af:e8:52:f3:26: d6:07:65:96:d1:24:06:0b:26:3a:9d:6b:1f:31:d5: 34:63:cf:54:4c:7d:14:da:08:36:a1:2d:44:fe:45: ae:56:1b:bf:34:e1:41:eb:89:7b:5b:b9:d4:04:bf: f2:9c:46:eb:cf:6b:2d:70:dd:00:a9:46:7d:aa:29: 92:11:eb:9e:7d:64:42:8f:b1:6f:87:08:59:8e:32: e5:35:1c:03:9b:c2:88:7a:67:84:01:14:e3:91:12: b4:36:ab:8c:be:96:09:a4:7a:63:e7:5f:2c:20:29: e7:a1:2b:d1:59:aa:5d:57:db:6b:2d:c7:aa:8f:bf: ab:07:9c:da:f4:1c:5f:0e:69:a4:33:85:91:8b:67: 07:e2:09:54:8f:d1:d9:f7:f7:a0:e7:50:c8:dc:11: 2c:35:68:9c:a1:25:0e:cc:1f:6d:1c:f9:f1:77:54: 46:c0:bc:04:8a:1d:41:98:4b:2b:84:1f:10:99:a9: 0b:ed:ed:13:b5:cb:54:18:21:1d:1e:59:f1:45:87: 6b:ed:df:98:32:e4:26:2a:b5:05:5a:59:d9:5c:5e: ca:17:30:c5:7d:89:c2:ab:71:7b:c0:43:f0:c9:96: 24:a4:51:9f:62:5b:63:f8:50:50:51:82:95:0d:fe: 73:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:0E:16:20:95:9F:92:FF:1E:4C:0B:4A:E9:7C:0E:40:4E:95:43:C9 X509v3 Authority Key Identifier: keyid:2E:29:F4:8B:C4:E2:FD:64:21:F1:2F:27:5B:FE:54:CB:5A:FC:4C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:96:83:c7:46:c7:6f:40:a8:7b:71:fc:4d:66:57:a8:e2:a3: 17:13:3a:fb:28:9f:9a:a3:85:50:e5:dd:9a:e5:a4:f8:db:20: a1:20:31:1e:b1:c9:20:c5:dc:e0:ac:65:45:db:cf:45:d3:11: c5:23:1a:58:67:51:ef:fb:89:a9:3e:a2:15:47:44:7f:ee:2c: b8:26:62:e6:d1:bc:16:86:24:ec:15:17:85:3c:62:db:74:22: d9:66:19:b2:39:60:1a:5d:32:11:d5:48:0f:b9:25:02:1a:51: 1d:33:12:4f:f1:0c:de:22:8b:47:2a:2c:52:72:77:81:1e:39: e1:5c:79:52:4f:2f:8c:ee:94:4f:46:5b:15:cc:0b:06:4c:ff: 71:23:bb:67:c0:66:d8:f3:49:cd:d5:4f:11:aa:f7:cd:d2:c1: 2e:89:41:15:63:99:8f:dc:a8:d5:a8:50:2f:1b:fc:81:8e:ca: 48:ad:fd:f3:fa:de:ad:11:bb:2c:9d:d9:84:fb:1e:5d:2e:e6: f3:50:64:3f:70:ea:be:14:94:11:31:ff:18:f7:6c:cd:59:36: e1:3d:fb:6d:6b:00:18:b1:6c:79:67:35:4c:15:be:17:ae:eb: 1f:5a:fd:08:1c:3c:49:ef:89:ad:d8:b5:ee:c3:e1:6b:49:e2: 51:d1:49:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUCsGMUarCJV+SgPch4a9HQw3iJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUyOUY0OEJDNEUyRkQ2NDIxRjEyRjI3NUJGRTU0Q0I1 QUZDNENCRjAeFw0yNTA4MjMwMzM3MTZaFw0yNTA4MjYwNzIwMTZaMDMxMTAvBgNV BAMTKDA0MEUxNjIwOTU5RjkyRkYxRTRDMEI0QUU5N0MwRTQwNEU5NTQzQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxvcaroT6Ohnev6FLzJtYHZZbR JAYLJjqdax8x1TRjz1RMfRTaCDahLUT+Ra5WG7804UHriXtbudQEv/KcRuvPay1w 3QCpRn2qKZIR6559ZEKPsW+HCFmOMuU1HAObwoh6Z4QBFOORErQ2q4y+lgmkemPn XywgKeehK9FZql1X22stx6qPv6sHnNr0HF8OaaQzhZGLZwfiCVSP0dn396DnUMjc ESw1aJyhJQ7MH20c+fF3VEbAvASKHUGYSyuEHxCZqQvt7RO1y1QYIR0eWfFFh2vt 35gy5CYqtQVaWdlcXsoXMMV9icKrcXvAQ/DJliSkUZ9iW2P4UFBRgpUN/nM7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBA4WIJWfkv8eTAtK6XwOQE6VQ8kwHwYDVR0j BBgwFoAULin0i8Ti/WQh8S8nW/5Uy1r8TL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YjI1ZjBlYi0zYzRkLTRmYzctYjNhNC1hZGIyMjk3ZGU2Y2YvMC8yRTI5RjQ4QkM0 RTJGRDY0MjFGMTJGMjc1QkZFNTRDQjVBRkM0Q0JGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUyOUY0OEJDNEUyRkQ2NDIxRjEyRjI3NUJGRTU0Q0I1QUZD NENCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmIyNWYwZWItM2M0ZC00ZmM3LWIz YTQtYWRiMjI5N2RlNmNmLzAvMkUyOUY0OEJDNEUyRkQ2NDIxRjEyRjI3NUJGRTU0 Q0I1QUZDNENCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIWWg8dGx29AqHtx/E1mV6jioxcTOvson5qj hVDl3ZrlpPjbIKEgMR6xySDF3OCsZUXbz0XTEcUjGlhnUe/7iak+ohVHRH/uLLgm YubRvBaGJOwVF4U8Ytt0ItlmGbI5YBpdMhHVSA+5JQIaUR0zEk/xDN4ii0cqLFJy d4EeOeFceVJPL4zulE9GWxXMCwZM/3Eju2fAZtjzSc3VTxGq983SwS6JQRVjmY/c qNWoUC8b/IGOykit/fP63q0Ruyyd2YT7Hl0u5vNQZD9w6r4UlBEx/xj3bM1ZNuE9 +21rABixbHlnNUwVvheu6x9a/QgcPEnvia3Yte7D4WtJ4lHRSak= -----END CERTIFICATE-----Generated at Sat Aug 23 13:28:05 2025 by rpki-client