$ rpki-client -vvf repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft File: 2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft (raw, json) Hash identifier: 1xs0E2SDtlTENONX5MI5rCG3uoygUv/DOvoj1cxWD1A= Subject key identifier: DE:DC:26:FE:7B:4F:D3:36:2D:80:B7:5F:E5:78:45:B0:13:40:DB:E2 Authority key identifier: 2D:23:C6:29:ED:95:6F:17:36:B7:DA:EC:CD:2A:AF:31:C4:F1:7C:26 Certificate issuer: /CN=2D23C629ED956F1736B7DAECCD2AAF31C4F17C26 Certificate serial: 30E0FF9C15E16BFAD3DA4E696B1CC67E2D52D9B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft Manifest number: 01AF Signing time: Mon 05 May 2025 05:30:53 +0000 Manifest this update: Mon 05 May 2025 05:25:53 +0000 Manifest next update: Thu 08 May 2025 09:22:53 +0000 Files and hashes: 1: 2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl (hash: qdJ9b4NFyu/G/4ZW2oRtYykxL369QcWynJWKPoqH+IA=) 2: 3130332e3133382e31302e302f32342d3234203d3e20313338383335.roa (hash: 2Vdu2MWYo3OwMz4g8uGZOXFnM8X1Z4ETt9GbdMMRo+8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 09:22:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:e0:ff:9c:15:e1:6b:fa:d3:da:4e:69:6b:1c:c6:7e:2d:52:d9:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D23C629ED956F1736B7DAECCD2AAF31C4F17C26 Validity Not Before: May 5 05:25:53 2025 GMT Not After : May 8 09:22:53 2025 GMT Subject: CN=DEDC26FE7B4FD3362D80B75FE57845B01340DBE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3f:7f:95:7e:58:9f:10:e1:6f:de:1f:fc:07: b2:27:5f:a9:af:79:02:e3:30:ed:a7:87:47:9c:97: 78:da:54:ee:3b:8e:da:31:c0:6e:58:fd:db:f3:f2: e3:66:69:57:1b:f0:01:c9:b8:85:b4:99:68:d5:b7: 8e:2c:cf:85:51:98:a9:79:a9:b4:d4:bb:97:e6:3e: 1d:1c:7e:4e:8f:bb:da:43:10:21:66:f9:9a:58:67: 38:c1:81:3b:f8:8a:08:ad:c7:f7:c3:af:82:23:a3: 9c:e5:1a:ee:c6:5f:4c:67:23:9a:bf:8e:85:7c:4e: 14:dd:5d:4c:cd:db:90:7a:18:e2:6c:57:16:38:b7: b4:ff:c7:12:4c:3b:99:b3:51:d4:9f:ad:24:e4:49: 8c:91:ff:ca:2d:6f:96:78:d1:c4:42:d5:37:47:de: d1:43:47:48:f6:31:9f:42:2b:3a:ad:6c:21:28:f0: 13:f1:d6:0d:64:bc:cc:38:51:42:4c:90:f3:dd:0a: 91:e9:10:89:33:7e:11:c4:cb:12:ed:6f:da:74:39: c7:b2:3b:8f:55:c8:8e:82:a9:b7:57:92:69:1b:8d: 4a:7d:81:8f:35:9a:e4:85:90:dd:ac:df:30:ff:15: 30:90:04:59:35:00:54:24:99:f8:d6:c1:73:bd:07: 61:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:DC:26:FE:7B:4F:D3:36:2D:80:B7:5F:E5:78:45:B0:13:40:DB:E2 X509v3 Authority Key Identifier: keyid:2D:23:C6:29:ED:95:6F:17:36:B7:DA:EC:CD:2A:AF:31:C4:F1:7C:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:93:e0:ca:59:d0:4d:c4:46:91:1e:9c:0c:bb:16:41:b5:43: 7f:93:18:44:e5:87:36:92:c5:ba:ae:3e:81:7f:37:09:44:d1: ec:90:4a:9b:9e:da:93:fd:9a:d4:de:9a:8f:36:79:c6:fe:52: b3:19:b3:45:5d:68:da:ec:3a:bc:90:22:4d:2d:f9:cd:b2:bc: ab:24:78:48:64:8c:ee:94:c3:4e:c1:fa:6e:74:e1:ee:f7:8c: a8:56:78:62:68:e6:2e:e0:c6:9a:b4:5e:18:f7:1f:6f:86:8a: f3:e7:fd:83:f2:5b:9c:e1:24:9e:08:e0:3a:ce:29:1d:24:06: 31:7b:b6:ed:f0:c3:13:e3:85:71:7f:da:ad:0f:dc:05:c2:d7: 33:4e:15:83:dd:5b:4c:52:2f:91:e5:26:11:6a:e8:8f:8e:fa: c7:78:8f:5d:fb:a0:90:45:20:f7:d9:8d:77:70:38:45:8e:f7: 6f:b3:34:ba:7d:b8:dd:e5:61:d1:b2:29:77:fe:61:f9:e2:7b: 25:09:c8:70:75:9a:86:fe:f0:64:9f:6a:59:b6:70:bd:28:ce: 25:0c:6c:48:99:14:9f:16:b5:48:6a:56:e2:52:53:f5:0d:3e: a8:c7:d2:fc:71:2b:7f:20:e0:e6:18:d4:04:4d:2a:41:f6:f7: 82:51:62:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMOD/nBXha/rT2k5paxzGfi1S2bUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFGMzFD NEYxN0MyNjAeFw0yNTA1MDUwNTI1NTNaFw0yNTA1MDgwOTIyNTNaMDMxMTAvBgNV BAMTKERFREMyNkZFN0I0RkQzMzYyRDgwQjc1RkU1Nzg0NUIwMTM0MERCRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPP3+VflifEOFv3h/8B7InX6mv eQLjMO2nh0ecl3jaVO47jtoxwG5Y/dvz8uNmaVcb8AHJuIW0mWjVt44sz4VRmKl5 qbTUu5fmPh0cfk6Pu9pDECFm+ZpYZzjBgTv4igitx/fDr4Ijo5zlGu7GX0xnI5q/ joV8ThTdXUzN25B6GOJsVxY4t7T/xxJMO5mzUdSfrSTkSYyR/8otb5Z40cRC1TdH 3tFDR0j2MZ9CKzqtbCEo8BPx1g1kvMw4UUJMkPPdCpHpEIkzfhHEyxLtb9p0Ocey O49VyI6CqbdXkmkbjUp9gY81muSFkN2s3zD/FTCQBFk1AFQkmfjWwXO9B2HVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3twm/ntP0zYtgLdf5XhFsBNA2+IwHwYDVR0j BBgwFoAULSPGKe2Vbxc2t9rszSqvMcTxfCYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODY4Y2YyMi1kMDI5LTQ1ZTItOWUyMS1kOTg5MmQzYWY3YTYvMC8yRDIzQzYyOUVE OTU2RjE3MzZCN0RBRUNDRDJBQUYzMUM0RjE3QzI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFGMzFDNEYx N0MyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDg2OGNmMjItZDAyOS00NWUyLTll MjEtZDk4OTJkM2FmN2E2LzAvMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFG MzFDNEYxN0MyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAICT4MpZ0E3ERpEenAy7FkG1Q3+TGETlhzaS xbquPoF/NwlE0eyQSpue2pP9mtTemo82ecb+UrMZs0VdaNrsOryQIk0t+c2yvKsk eEhkjO6Uw07B+m504e73jKhWeGJo5i7gxpq0Xhj3H2+GivPn/YPyW5zhJJ4I4DrO KR0kBjF7tu3wwxPjhXF/2q0P3AXC1zNOFYPdW0xSL5HlJhFq6I+O+sd4j137oJBF IPfZjXdwOEWO92+zNLp9uN3lYdGyKXf+YfnieyUJyHB1mob+8GSfalm2cL0oziUM bEiZFJ8WtUhqVuJSU/UNPqjH0vxxK38g4OYY1ARNKkH294JRYiA= -----END CERTIFICATE-----Generated at Wed May 7 12:22:22 2025 by rpki-client