$ rpki-client -vvf repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft File: 2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft (raw, json) Hash identifier: UmoolQUVEwuIJjSDgbOaeRdvza65mZ6czUDMf7Tl30g= Subject key identifier: F5:FE:54:CC:AD:C5:78:0F:60:E8:44:41:83:CC:56:3A:AE:92:41:02 Authority key identifier: 2E:2D:92:69:32:C5:C7:E2:96:93:1D:88:19:08:A4:BB:1E:98:EB:6D Certificate issuer: /CN=2E2D926932C5C7E296931D881908A4BB1E98EB6D Certificate serial: 2609CCF344AF5F326E2A6CC207417990F2DE19FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft Manifest number: 0238 Signing time: Sun 20 Jul 2025 13:11:56 +0000 Manifest this update: Sun 20 Jul 2025 13:06:56 +0000 Manifest next update: Wed 23 Jul 2025 18:10:56 +0000 Files and hashes: 1: 3130332e3138312e3235312e302f32342d3234203d3e2039333431.roa (hash: HM/zqihNRtDQE+DnhG8b5XIeNqQOzvMA43WJGWaoV58=) 2: 3130332e3138312e3235302e302f32342d3234203d3e2039333431.roa (hash: Kh7pHFYHeApzfjYgrJNd5I2iP4JAPgnfkCfLUW4wIPU=) 3: 3130332e3138312e3235302e302f32332d3233203d3e2039333431.roa (hash: VX04EL/wbd2do7GkgjsMSku0mt+fGXzZJka0o80KEQo=) 4: 2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl (hash: s1EW9wUjp6x+cETghHyLMO6fsXhyNF1sXT11oCxEaY8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 18:10:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:09:cc:f3:44:af:5f:32:6e:2a:6c:c2:07:41:79:90:f2:de:19:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E2D926932C5C7E296931D881908A4BB1E98EB6D Validity Not Before: Jul 20 13:06:56 2025 GMT Not After : Jul 23 18:10:56 2025 GMT Subject: CN=F5FE54CCADC5780F60E8444183CC563AAE924102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:18:f8:f4:19:53:35:c8:9f:97:86:b5:c5:98: 3b:9f:3d:af:28:44:b2:d6:57:5c:a0:56:83:b6:3d: 41:7d:11:6d:d0:ee:1f:cf:f7:7f:c9:cd:05:6b:46: c9:d3:c3:b0:22:1f:35:a9:98:01:5a:ae:85:ca:06: b8:1b:bd:af:b0:df:54:15:cb:44:9a:60:06:d0:df: db:d9:ac:57:1e:6d:bf:83:e6:86:84:fe:a3:3a:86: 79:d1:d0:05:c5:4e:93:cb:80:54:85:a6:23:8b:13: e0:9d:cb:b8:30:6d:ed:b9:a7:82:2c:af:22:8b:f6: 02:8f:cb:f1:15:51:8f:c4:ed:20:af:0c:d9:70:69: 5f:25:c2:8e:de:f6:95:a1:f9:51:05:2f:09:e6:21: 67:9e:2d:cc:f8:25:08:18:e3:02:d4:b1:3b:e4:41: 9b:3a:3b:f4:2a:7d:28:23:69:a0:5b:fa:4f:44:27: ec:0b:5d:72:db:e7:8a:46:75:94:6b:14:50:2e:32: 69:a9:9a:ce:57:18:ba:6d:12:08:c5:22:ee:4a:7f: 1a:c2:77:4d:52:aa:6a:bd:52:29:b0:48:42:d9:f7: 7d:71:3c:6a:24:1a:69:27:af:74:70:61:df:29:de: 12:f1:6e:cc:59:34:bb:52:da:82:f9:e7:94:2e:b6: 70:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:FE:54:CC:AD:C5:78:0F:60:E8:44:41:83:CC:56:3A:AE:92:41:02 X509v3 Authority Key Identifier: keyid:2E:2D:92:69:32:C5:C7:E2:96:93:1D:88:19:08:A4:BB:1E:98:EB:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:21:43:91:d1:06:72:55:a2:81:c6:a4:2c:56:89:ce:7e:fa: 9c:ad:d6:40:20:f9:0e:7d:54:29:10:4b:69:95:48:b2:24:2c: c2:1d:87:92:ba:6d:cf:7f:23:c3:2f:89:e2:9b:88:4b:73:20: a8:36:c3:2d:62:c5:d9:02:f0:4d:b0:60:18:5d:9f:b5:1c:ff: b1:88:32:fc:1a:62:7d:85:14:f7:15:fa:99:eb:ac:2d:2d:33: 07:51:7a:67:89:29:15:0b:5d:d8:b4:5f:56:77:25:e1:d3:b7: a5:9e:27:70:11:fa:46:1e:3b:5d:ae:81:be:71:9c:9a:b1:6b: e1:b6:33:a2:40:27:4b:19:9e:f5:2c:fc:82:7c:58:6b:29:2a: 05:03:17:3b:aa:ae:c5:7e:ad:b4:e1:e2:10:ea:12:18:e1:5c: 5e:38:b6:31:64:57:6f:64:51:91:d4:75:de:71:34:ec:be:72: 74:00:40:0a:f7:82:4f:8a:0e:3f:bc:1a:b8:8e:e9:91:b3:7a: 70:b4:d4:b1:43:f0:fb:86:c5:9f:d7:6e:e1:fa:72:7d:55:39: 83:b5:23:f1:b0:74:92:e8:e1:29:34:9a:10:17:ee:53:72:e0: d1:f6:b3:bd:b3:74:c5:61:94:88:51:8e:ea:34:21:10:f5:94: de:64:04:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJgnM80SvXzJuKmzCB0F5kPLeGfwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0QkIx RTk4RUI2RDAeFw0yNTA3MjAxMzA2NTZaFw0yNTA3MjMxODEwNTZaMDMxMTAvBgNV BAMTKEY1RkU1NENDQURDNTc4MEY2MEU4NDQ0MTgzQ0M1NjNBQUU5MjQxMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLGPj0GVM1yJ+XhrXFmDufPa8o RLLWV1ygVoO2PUF9EW3Q7h/P93/JzQVrRsnTw7AiHzWpmAFaroXKBrgbva+w31QV y0SaYAbQ39vZrFcebb+D5oaE/qM6hnnR0AXFTpPLgFSFpiOLE+Cdy7gwbe25p4Is ryKL9gKPy/EVUY/E7SCvDNlwaV8lwo7e9pWh+VEFLwnmIWeeLcz4JQgY4wLUsTvk QZs6O/QqfSgjaaBb+k9EJ+wLXXLb54pGdZRrFFAuMmmpms5XGLptEgjFIu5KfxrC d01Sqmq9UimwSELZ931xPGokGmknr3RwYd8p3hLxbsxZNLtS2oL555QutnB5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9f5UzK3FeA9g6ERBg8xWOq6SQQIwHwYDVR0j BBgwFoAULi2SaTLFx+KWkx2IGQikux6Y620wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmE1ODllZi05ZjNkLTQzYmMtYmEzMC1mYTMyNmI3MWY3ODcvMC8yRTJEOTI2OTMy QzVDN0UyOTY5MzFEODgxOTA4QTRCQjFFOThFQjZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0QkIxRTk4 RUI2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZhNTg5ZWYtOWYzZC00M2JjLWJh MzAtZmEzMjZiNzFmNzg3LzAvMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0 QkIxRTk4RUI2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ4hQ5HRBnJVooHGpCxWic5++pyt1kAg+Q59 VCkQS2mVSLIkLMIdh5K6bc9/I8MvieKbiEtzIKg2wy1ixdkC8E2wYBhdn7Uc/7GI MvwaYn2FFPcV+pnrrC0tMwdRemeJKRULXdi0X1Z3JeHTt6WeJ3AR+kYeO12ugb5x nJqxa+G2M6JAJ0sZnvUs/IJ8WGspKgUDFzuqrsV+rbTh4hDqEhjhXF44tjFkV29k UZHUdd5xNOy+cnQAQAr3gk+KDj+8GriO6ZGzenC01LFD8PuGxZ/XbuH6cn1VOYO1 I/GwdJLo4Sk0mhAX7lNy4NH2s72zdMVhlIhRjuo0IRD1lN5kBOg= -----END CERTIFICATE-----Generated at Mon Jul 21 09:03:01 2025 by rpki-client