$ rpki-client -vvf repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft File: 2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft (raw, json) Hash identifier: BOX0A3hCg3+vvD8wErcUMod/hlANcayamy/iYOwwpCI= Subject key identifier: A5:96:C4:74:2B:41:DE:82:C1:ED:3E:45:D0:AA:66:FD:0D:17:AC:56 Authority key identifier: 2E:2D:92:69:32:C5:C7:E2:96:93:1D:88:19:08:A4:BB:1E:98:EB:6D Certificate issuer: /CN=2E2D926932C5C7E296931D881908A4BB1E98EB6D Certificate serial: 6D42DC1DAF543A47E1FDDC5DE9CBC8151271611B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft Manifest number: 022F Signing time: Sun 29 Jun 2025 14:11:51 +0000 Manifest this update: Sun 29 Jun 2025 14:06:51 +0000 Manifest next update: Thu 03 Jul 2025 00:03:51 +0000 Files and hashes: 1: 3130332e3138312e3235302e302f32342d3234203d3e2039333431.roa (hash: Kh7pHFYHeApzfjYgrJNd5I2iP4JAPgnfkCfLUW4wIPU=) 2: 2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl (hash: ballZSJgdytd8b+a/ajcImh9QHeuMinMQ960FPvlxE8=) 3: 3130332e3138312e3235312e302f32342d3234203d3e2039333431.roa (hash: HM/zqihNRtDQE+DnhG8b5XIeNqQOzvMA43WJGWaoV58=) 4: 3130332e3138312e3235302e302f32332d3233203d3e2039333431.roa (hash: VX04EL/wbd2do7GkgjsMSku0mt+fGXzZJka0o80KEQo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:42:dc:1d:af:54:3a:47:e1:fd:dc:5d:e9:cb:c8:15:12:71:61:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E2D926932C5C7E296931D881908A4BB1E98EB6D Validity Not Before: Jun 29 14:06:51 2025 GMT Not After : Jul 3 00:03:51 2025 GMT Subject: CN=A596C4742B41DE82C1ED3E45D0AA66FD0D17AC56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:42:51:f9:27:a4:52:0b:c4:1d:3e:2a:54:46: f2:2b:c9:08:f3:7d:b8:b8:b7:1e:8b:f3:8f:c4:4f: 17:18:5d:ff:31:34:43:d4:0e:00:5c:89:d5:4b:88: 64:41:51:0a:44:98:ac:0f:56:c8:0a:99:da:60:45: e2:60:fc:04:5e:3e:71:74:c4:14:d3:74:97:63:24: 89:77:d6:8d:e5:06:56:a8:c3:64:fc:28:8a:af:23: 68:5e:d1:cd:7c:a7:c8:b2:1e:1b:55:49:a5:08:3f: 15:b7:f9:09:4b:7c:6c:0a:52:f7:0a:5c:88:bb:01: 65:f6:64:49:2e:d7:83:bc:0b:a0:02:30:79:1e:85: 9c:40:a6:f6:76:12:1c:82:7e:91:36:d9:fc:01:38: d9:33:83:26:79:3b:65:0f:18:f8:43:ef:fe:6c:d7: 3b:9c:87:92:29:78:14:da:e6:5b:16:14:0b:20:4e: f2:60:6e:1a:4a:a2:29:23:89:86:cd:f4:93:34:bc: 49:cf:78:e6:c1:b5:b6:d3:cf:81:e3:f1:b0:76:ce: be:18:62:09:aa:bb:c1:53:a9:31:40:1f:fe:2c:f3: 52:7a:7e:85:70:f4:da:0e:f7:86:c4:bd:14:6c:df: ab:d4:e7:93:1c:ca:17:f4:02:6d:ed:0c:f2:2f:b4: d4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:96:C4:74:2B:41:DE:82:C1:ED:3E:45:D0:AA:66:FD:0D:17:AC:56 X509v3 Authority Key Identifier: keyid:2E:2D:92:69:32:C5:C7:E2:96:93:1D:88:19:08:A4:BB:1E:98:EB:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:51:05:42:e4:32:24:98:cc:fc:41:92:79:bb:91:ce:56:26: 0d:57:bc:e9:68:86:94:d5:85:ba:37:48:20:93:37:5f:56:54: 1a:27:b7:d8:3f:f6:3f:2a:87:f3:fe:d0:cf:e6:0b:eb:a0:62: 8f:e0:21:7c:14:ad:e1:f2:07:37:b0:ea:1b:4c:1f:e7:73:46: 5d:b1:89:dd:98:e3:91:1d:c8:90:0d:28:82:b9:d5:9a:f3:6d: 44:15:30:83:c7:25:73:71:e5:93:03:1d:75:8a:d1:5e:ff:54: 82:64:e7:81:b8:a3:dd:9a:63:c0:e7:da:7d:e3:4e:0f:14:d2: 88:60:e6:dc:36:56:b7:93:36:b3:56:cb:8e:c3:0a:51:73:ff: 52:00:d7:e8:47:65:11:e2:bd:2e:fc:8d:fc:02:95:db:d8:bb: a3:b9:8a:e4:97:77:d7:fe:f2:2e:7f:67:ba:b9:68:c1:51:de: 34:e8:72:86:a9:b1:8b:57:68:50:03:17:1f:6d:f3:16:2a:fc: b7:96:ce:c4:74:6f:38:09:14:d0:db:76:fd:e8:d4:a9:0e:e0: 11:58:f7:25:1f:51:2e:61:ae:e9:c0:3a:ae:05:eb:89:ef:47: 4c:1a:6a:45:d4:f0:93:d3:ec:b8:fc:56:0c:2b:77:cd:20:a3: d9:f2:e4:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbULcHa9UOkfh/dxd6cvIFRJxYRswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0QkIx RTk4RUI2RDAeFw0yNTA2MjkxNDA2NTFaFw0yNTA3MDMwMDAzNTFaMDMxMTAvBgNV BAMTKEE1OTZDNDc0MkI0MURFODJDMUVEM0U0NUQwQUE2NkZEMEQxN0FDNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXQlH5J6RSC8QdPipURvIryQjz fbi4tx6L84/ETxcYXf8xNEPUDgBcidVLiGRBUQpEmKwPVsgKmdpgReJg/ARePnF0 xBTTdJdjJIl31o3lBlaow2T8KIqvI2he0c18p8iyHhtVSaUIPxW3+QlLfGwKUvcK XIi7AWX2ZEku14O8C6ACMHkehZxApvZ2EhyCfpE22fwBONkzgyZ5O2UPGPhD7/5s 1zuch5IpeBTa5lsWFAsgTvJgbhpKoikjiYbN9JM0vEnPeObBtbbTz4Hj8bB2zr4Y Ygmqu8FTqTFAH/4s81J6foVw9NoO94bEvRRs36vU55Mcyhf0Am3tDPIvtNTXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpZbEdCtB3oLB7T5F0Kpm/Q0XrFYwHwYDVR0j BBgwFoAULi2SaTLFx+KWkx2IGQikux6Y620wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmE1ODllZi05ZjNkLTQzYmMtYmEzMC1mYTMyNmI3MWY3ODcvMC8yRTJEOTI2OTMy QzVDN0UyOTY5MzFEODgxOTA4QTRCQjFFOThFQjZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0QkIxRTk4 RUI2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZhNTg5ZWYtOWYzZC00M2JjLWJh MzAtZmEzMjZiNzFmNzg3LzAvMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0 QkIxRTk4RUI2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIpRBULkMiSYzPxBknm7kc5WJg1XvOlohpTV hbo3SCCTN19WVBont9g/9j8qh/P+0M/mC+ugYo/gIXwUreHyBzew6htMH+dzRl2x id2Y45EdyJANKIK51ZrzbUQVMIPHJXNx5ZMDHXWK0V7/VIJk54G4o92aY8Dn2n3j Tg8U0ohg5tw2VreTNrNWy47DClFz/1IA1+hHZRHivS78jfwCldvYu6O5iuSXd9f+ 8i5/Z7q5aMFR3jTocoapsYtXaFADFx9t8xYq/LeWzsR0bzgJFNDbdv3o1KkO4BFY 9yUfUS5hrunAOq4F64nvR0waakXU8JPT7Lj8Vgwrd80go9ny5KQ= -----END CERTIFICATE-----Generated at Sun Jun 29 18:49:14 2025 by rpki-client