$ rpki-client -vvf repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft File: 2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft (raw, json) Hash identifier: +w653ja9/cfXxyuUpijp2DYZgZ7Jstrjt2rb7PQfqHA= Subject key identifier: 4F:92:E0:88:BC:A9:F5:28:46:11:82:6F:0B:13:68:90:80:78:49:31 Authority key identifier: 2E:2D:92:69:32:C5:C7:E2:96:93:1D:88:19:08:A4:BB:1E:98:EB:6D Certificate issuer: /CN=2E2D926932C5C7E296931D881908A4BB1E98EB6D Certificate serial: 733ED0EB2B9A6FAFDD907AF84BA76444BC41372D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft Manifest number: 0216 Signing time: Sun 04 May 2025 19:31:49 +0000 Manifest this update: Sun 04 May 2025 19:26:49 +0000 Manifest next update: Thu 08 May 2025 02:27:49 +0000 Files and hashes: 1: 3130332e3138312e3235312e302f32342d3234203d3e2039333431.roa (hash: HM/zqihNRtDQE+DnhG8b5XIeNqQOzvMA43WJGWaoV58=) 2: 3130332e3138312e3235302e302f32342d3234203d3e2039333431.roa (hash: Kh7pHFYHeApzfjYgrJNd5I2iP4JAPgnfkCfLUW4wIPU=) 3: 3130332e3138312e3235302e302f32332d3233203d3e2039333431.roa (hash: VX04EL/wbd2do7GkgjsMSku0mt+fGXzZJka0o80KEQo=) 4: 2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl (hash: BfrDmN5oK9dtNTuhugpnFUGHwlzKXyBGsXZUNYtLrD0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 02:27:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:3e:d0:eb:2b:9a:6f:af:dd:90:7a:f8:4b:a7:64:44:bc:41:37:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E2D926932C5C7E296931D881908A4BB1E98EB6D Validity Not Before: May 4 19:26:49 2025 GMT Not After : May 8 02:27:49 2025 GMT Subject: CN=4F92E088BCA9F5284611826F0B13689080784931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:69:3b:fb:b2:0c:65:47:b2:70:12:25:a7:65: 64:cb:7a:2b:dd:69:d9:e0:98:bf:fa:e8:ab:cd:c8: 68:db:2e:42:75:d4:63:68:62:1b:10:0a:84:e2:3f: 19:84:f9:ca:dc:d4:54:a9:13:46:42:a0:7b:b9:8f: ce:75:cf:9e:41:b6:8c:46:24:59:46:64:29:d0:e3: ee:df:70:2a:b5:81:9b:7e:5f:af:71:e6:d4:82:53: 1b:c2:cb:26:18:e4:bc:09:d4:af:38:07:01:fc:48: 84:91:76:dc:a0:84:4e:1b:fa:e3:1a:d5:39:0b:ab: 97:1e:da:61:a3:67:a3:9c:26:b6:9a:b0:15:24:d0: af:0c:31:5e:83:fd:5a:fc:35:d3:9a:59:21:56:c4: ef:18:c4:78:ae:e0:09:54:af:e7:dd:02:7d:6d:e1: bd:72:87:61:ec:95:aa:58:54:6e:92:32:2c:2a:46: 79:4e:b4:61:35:3a:8f:7b:a9:f7:09:ff:b7:8b:6b: 7e:3d:3d:b4:38:80:f2:1f:9d:83:b1:88:ff:5c:24: ce:c0:ba:2e:89:f9:30:83:61:51:f6:d7:c8:e8:dc: 0b:74:d4:be:45:04:fd:45:48:8b:29:28:66:02:b5: b2:32:fd:9a:58:42:03:1c:cf:1e:5a:42:36:0e:fa: 3b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:92:E0:88:BC:A9:F5:28:46:11:82:6F:0B:13:68:90:80:78:49:31 X509v3 Authority Key Identifier: keyid:2E:2D:92:69:32:C5:C7:E2:96:93:1D:88:19:08:A4:BB:1E:98:EB:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:07:be:cc:31:1a:61:e1:56:30:29:e3:dd:cf:ef:af:48:f5: c0:bf:6b:90:23:e6:dc:9c:74:42:0b:bf:8f:52:34:76:de:6f: 51:dd:08:a4:fc:c1:df:17:bb:b8:12:c7:4a:a2:00:03:ad:1f: 76:d7:53:d1:91:9f:1e:3e:b3:d6:e9:82:01:83:47:93:7d:cf: 1b:58:6d:77:42:8c:d9:96:90:25:c1:c3:17:16:19:2b:54:23: 8f:27:c4:35:36:2d:15:cc:87:df:5a:76:14:75:b9:31:bc:a7: 5f:51:b6:26:3d:2e:2c:f3:f0:5e:f5:2f:13:20:54:10:cd:60: bf:a8:67:ef:97:b4:7d:79:19:f8:18:28:c4:e4:ca:52:a6:f3: 20:d0:a0:43:26:70:e2:d2:16:fe:8a:25:ec:c8:f5:2d:bb:72: 5e:1f:f2:07:be:28:dc:27:39:90:a1:53:b0:69:dd:45:0d:8e: a7:30:00:ed:35:e8:56:89:43:de:32:e4:07:11:97:44:7d:a9: e9:a7:00:dd:b0:d4:fd:4e:a3:6e:1e:3d:23:14:fc:c1:cc:5c: 40:d3:ef:eb:0d:ad:ee:c0:63:56:9f:1c:d0:23:a0:7c:f4:25: a1:e6:9c:06:39:1e:c9:61:9d:71:ed:e5:ba:15:de:d7:83:bd: e1:3c:f5:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcz7Q6yuab6/dkHr4S6dkRLxBNy0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0QkIx RTk4RUI2RDAeFw0yNTA1MDQxOTI2NDlaFw0yNTA1MDgwMjI3NDlaMDMxMTAvBgNV BAMTKDRGOTJFMDg4QkNBOUY1Mjg0NjExODI2RjBCMTM2ODkwODA3ODQ5MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHaTv7sgxlR7JwEiWnZWTLeivd adngmL/66KvNyGjbLkJ11GNoYhsQCoTiPxmE+crc1FSpE0ZCoHu5j851z55BtoxG JFlGZCnQ4+7fcCq1gZt+X69x5tSCUxvCyyYY5LwJ1K84BwH8SISRdtyghE4b+uMa 1TkLq5ce2mGjZ6OcJraasBUk0K8MMV6D/Vr8NdOaWSFWxO8YxHiu4AlUr+fdAn1t 4b1yh2HslapYVG6SMiwqRnlOtGE1Oo97qfcJ/7eLa349PbQ4gPIfnYOxiP9cJM7A ui6J+TCDYVH218jo3At01L5FBP1FSIspKGYCtbIy/ZpYQgMczx5aQjYO+jvBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT5LgiLyp9ShGEYJvCxNokIB4STEwHwYDVR0j BBgwFoAULi2SaTLFx+KWkx2IGQikux6Y620wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmE1ODllZi05ZjNkLTQzYmMtYmEzMC1mYTMyNmI3MWY3ODcvMC8yRTJEOTI2OTMy QzVDN0UyOTY5MzFEODgxOTA4QTRCQjFFOThFQjZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0QkIxRTk4 RUI2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZhNTg5ZWYtOWYzZC00M2JjLWJh MzAtZmEzMjZiNzFmNzg3LzAvMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0 QkIxRTk4RUI2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKgHvswxGmHhVjAp493P769I9cC/a5Aj5tyc dEILv49SNHbeb1HdCKT8wd8Xu7gSx0qiAAOtH3bXU9GRnx4+s9bpggGDR5N9zxtY bXdCjNmWkCXBwxcWGStUI48nxDU2LRXMh99adhR1uTG8p19RtiY9Lizz8F71LxMg VBDNYL+oZ++XtH15GfgYKMTkylKm8yDQoEMmcOLSFv6KJezI9S27cl4f8ge+KNwn OZChU7Bp3UUNjqcwAO016FaJQ94y5AcRl0R9qemnAN2w1P1Oo24ePSMU/MHMXEDT 7+sNre7AY1afHNAjoHz0JaHmnAY5HslhnXHt5boV3teDveE89Ws= -----END CERTIFICATE-----Generated at Tue May 6 05:17:54 2025 by rpki-client