$ rpki-client -vvf repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft File: 2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft (raw, json) Hash identifier: FPQ1gz6iOsjVbRa4/v1K0d0ziyBJI1iOoEyZqjeZZjk= Subject key identifier: 49:AF:66:CB:85:92:03:36:7B:5A:75:68:CD:5A:36:74:46:58:99:FE Authority key identifier: 2E:29:F4:8B:C4:E2:FD:64:21:F1:2F:27:5B:FE:54:CB:5A:FC:4C:BF Certificate issuer: /CN=2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF Certificate serial: 3D568471E5957079231D91EA1A635CDC879217E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft Manifest number: 020D Signing time: Sat 28 Jun 2025 11:02:14 +0000 Manifest this update: Sat 28 Jun 2025 10:57:14 +0000 Manifest next update: Tue 01 Jul 2025 11:08:14 +0000 Files and hashes: 1: 2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.crl (hash: VLyRkitbvnMo/xZDDGeJBUKtch8kpXe6LibTW0FXQBY=) 2: 3130332e3138342e3138322e302f32342d3234203d3e20313439363736.roa (hash: 1ohXfgQVLOVqfzLUY6nq2zHsOKGWcr19CJg3R6qlyZU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.crl rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 11:08:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:56:84:71:e5:95:70:79:23:1d:91:ea:1a:63:5c:dc:87:92:17:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF Validity Not Before: Jun 28 10:57:14 2025 GMT Not After : Jul 1 11:08:14 2025 GMT Subject: CN=49AF66CB859203367B5A7568CD5A3674465899FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cb:96:c8:9a:7c:40:6a:96:41:3c:10:83:00: 5b:29:c8:03:5b:3b:88:a8:d3:6c:e2:54:fd:a2:c9: 3e:fb:7a:73:d9:23:cb:80:53:67:a2:cc:8a:82:c7: 61:10:10:1a:92:63:3d:74:6c:fb:0b:ed:07:75:40: dc:03:c7:4f:18:a7:98:08:37:71:cd:ab:22:50:5c: 38:db:b1:bb:ba:08:4e:3d:64:5e:3c:db:d2:61:0c: 44:22:e8:12:76:82:26:68:ac:fd:ff:00:8f:c1:f2: 51:65:87:f7:01:5a:b5:0d:c8:ff:eb:5d:84:c6:56: 32:16:73:86:e4:06:0a:4a:b6:94:aa:5e:85:cc:66: 56:c9:b4:0b:68:4e:01:98:0c:75:42:d7:1e:96:05: de:cd:cc:e8:86:76:fe:5f:80:4a:ff:45:a7:6b:61: 4d:6b:c6:a4:69:2d:77:46:bc:5e:f1:1e:da:81:4d: d0:26:4a:f2:db:47:ec:55:ef:a0:0c:96:0c:f8:53: b9:4e:f6:d8:f1:74:7c:f5:bb:de:0a:75:67:e7:02: 4c:73:3f:96:d2:d1:9d:1f:17:94:4b:c0:2c:17:57: 16:c5:46:84:77:bc:3b:16:0e:cb:66:9f:b0:2d:2b: d8:1a:d9:fb:74:3c:bb:86:9e:7b:76:cc:56:0f:87: 07:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:AF:66:CB:85:92:03:36:7B:5A:75:68:CD:5A:36:74:46:58:99:FE X509v3 Authority Key Identifier: keyid:2E:29:F4:8B:C4:E2:FD:64:21:F1:2F:27:5B:FE:54:CB:5A:FC:4C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:c6:e5:c1:94:52:09:04:cb:58:70:25:9e:b6:48:5c:d1:93: 00:32:cd:66:88:4a:80:6d:35:43:a4:71:b1:fa:77:65:1a:1b: 67:61:d8:19:ca:24:b7:f6:41:80:c2:56:5f:44:77:ff:4e:3c: ae:d4:5d:70:6d:a1:ff:44:58:12:d8:fe:2e:b3:55:24:c3:35: 5b:fb:c0:b8:0c:8a:d5:4b:56:57:09:b6:a0:66:29:ab:38:1c: b0:e1:d7:e7:e6:b8:c5:66:5e:79:1e:b2:7f:97:32:6c:4a:72: bf:25:55:72:56:fb:dd:d4:c2:55:09:65:ed:17:1d:6a:1b:cc: 21:d9:6c:7c:5e:bc:76:a8:23:b5:35:92:3e:59:44:f1:89:45: 51:db:0a:f0:6b:0f:4d:9b:b3:06:c2:5d:12:23:c3:da:52:6c: 7a:9d:1b:96:77:9c:b6:ac:12:41:ea:2c:ad:86:50:a1:63:c2: f3:98:c5:84:20:53:74:82:77:0e:e2:97:d6:1e:db:a1:ab:b0: 26:8d:85:bc:d6:c4:e4:bb:b3:64:a2:a2:66:98:2f:d8:90:08: b5:73:a9:b4:76:3b:54:d3:88:fa:3e:ef:56:97:70:6b:31:51: ff:14:71:50:27:f2:8f:0f:9e:d2:c0:4a:69:e2:41:97:a3:08: f9:a1:90:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPVaEceWVcHkjHZHqGmNc3IeSF+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUyOUY0OEJDNEUyRkQ2NDIxRjEyRjI3NUJGRTU0Q0I1 QUZDNENCRjAeFw0yNTA2MjgxMDU3MTRaFw0yNTA3MDExMTA4MTRaMDMxMTAvBgNV BAMTKDQ5QUY2NkNCODU5MjAzMzY3QjVBNzU2OENENUEzNjc0NDY1ODk5RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNy5bImnxAapZBPBCDAFspyANb O4io02ziVP2iyT77enPZI8uAU2eizIqCx2EQEBqSYz10bPsL7Qd1QNwDx08Yp5gI N3HNqyJQXDjbsbu6CE49ZF4829JhDEQi6BJ2giZorP3/AI/B8lFlh/cBWrUNyP/r XYTGVjIWc4bkBgpKtpSqXoXMZlbJtAtoTgGYDHVC1x6WBd7NzOiGdv5fgEr/Radr YU1rxqRpLXdGvF7xHtqBTdAmSvLbR+xV76AMlgz4U7lO9tjxdHz1u94KdWfnAkxz P5bS0Z0fF5RLwCwXVxbFRoR3vDsWDstmn7AtK9ga2ft0PLuGnnt2zFYPhwfPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSa9my4WSAzZ7WnVozVo2dEZYmf4wHwYDVR0j BBgwFoAULin0i8Ti/WQh8S8nW/5Uy1r8TL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YjI1ZjBlYi0zYzRkLTRmYzctYjNhNC1hZGIyMjk3ZGU2Y2YvMC8yRTI5RjQ4QkM0 RTJGRDY0MjFGMTJGMjc1QkZFNTRDQjVBRkM0Q0JGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUyOUY0OEJDNEUyRkQ2NDIxRjEyRjI3NUJGRTU0Q0I1QUZD NENCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmIyNWYwZWItM2M0ZC00ZmM3LWIz YTQtYWRiMjI5N2RlNmNmLzAvMkUyOUY0OEJDNEUyRkQ2NDIxRjEyRjI3NUJGRTU0 Q0I1QUZDNENCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIXG5cGUUgkEy1hwJZ62SFzRkwAyzWaISoBt NUOkcbH6d2UaG2dh2BnKJLf2QYDCVl9Ed/9OPK7UXXBtof9EWBLY/i6zVSTDNVv7 wLgMitVLVlcJtqBmKas4HLDh1+fmuMVmXnkesn+XMmxKcr8lVXJW+93UwlUJZe0X HWobzCHZbHxevHaoI7U1kj5ZRPGJRVHbCvBrD02bswbCXRIjw9pSbHqdG5Z3nLas EkHqLK2GUKFjwvOYxYQgU3SCdw7il9Ye26GrsCaNhbzWxOS7s2SiomaYL9iQCLVz qbR2O1TTiPo+71aXcGsxUf8UcVAn8o8PntLASmniQZejCPmhkAk= -----END CERTIFICATE-----Generated at Mon Jun 30 00:32:23 2025 by rpki-client