$ rpki-client -vvf repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft File: 2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft (raw, json) Hash identifier: OPkaqOSYdhP3pyFAAqLgwfzox/i/hjMEf3idWTq/p7w= Subject key identifier: 44:14:C1:37:D3:23:6D:93:DF:38:19:B2:29:D2:D4:EC:D7:8A:EC:CD Authority key identifier: 2D:9D:91:37:D4:42:7A:9D:34:E1:B1:5F:16:C5:C6:89:A8:C5:49:D9 Certificate issuer: /CN=2D9D9137D4427A9D34E1B15F16C5C689A8C549D9 Certificate serial: 504B6D8E9D6C1BD3247F0F3AD3F244EA44E4AECC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft Manifest number: 04DC Signing time: Wed 04 Jun 2025 09:41:20 +0000 Manifest this update: Wed 04 Jun 2025 09:36:20 +0000 Manifest next update: Sat 07 Jun 2025 19:23:20 +0000 Files and hashes: 1: 3130332e3134342e3130322e302f32332d3234203d3e20313339343231.roa (hash: cdpLxSADx6mq88cWkf5UoxPyeajYM3Kq/Bc+NW2yaec=) 2: 3130332e3134342e3130332e302f32342d3234203d3e20313339343231.roa (hash: LMahtEVFw1WQXjV2Jt5sgAVQZXkjGaxRYhPgCUjt0lU=) 3: 2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.crl (hash: TaX1jT+t3jVOhnBwOw8e58B+H4sfscrrQPqwLqFioZY=) 4: 3130332e3134342e3130322e302f32342d3234203d3e20313339343231.roa (hash: vzSMLWMHxbHbmKZs1ww72s93hpXFUe/64ZqkfEBoPE8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.crl rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 19:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:4b:6d:8e:9d:6c:1b:d3:24:7f:0f:3a:d3:f2:44:ea:44:e4:ae:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D9D9137D4427A9D34E1B15F16C5C689A8C549D9 Validity Not Before: Jun 4 09:36:20 2025 GMT Not After : Jun 7 19:23:20 2025 GMT Subject: CN=4414C137D3236D93DF3819B229D2D4ECD78AECCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:55:ec:b9:ba:ee:57:2e:99:2b:f0:1b:92:af: 5d:5b:d1:36:5d:cd:34:3e:fc:6d:e8:91:b0:10:47: bf:f7:20:b1:3e:62:e2:e6:58:9a:e4:d9:44:f9:0d: 2e:92:6c:5d:3f:bc:6e:ba:f5:69:42:ea:99:a1:f3: b1:44:db:02:54:29:44:dc:31:3e:ec:ba:3d:f9:e4: d8:12:3a:91:83:f4:ff:cb:59:e8:29:5e:5b:35:85: 44:9b:19:08:96:b0:f1:85:a5:0c:2c:78:fc:17:bd: 82:94:ea:d2:5e:ea:0d:da:1b:1c:b2:86:11:2d:a5: fe:6a:e2:24:0a:db:89:30:05:6a:41:00:e6:06:25: 71:7b:a4:3d:f8:0b:ce:33:b7:60:28:92:74:7c:04: a9:4f:48:c3:82:8d:0a:fd:5b:13:32:97:9e:4d:8b: 67:1b:3e:e6:d2:2d:8d:6a:40:26:17:bc:89:8d:bb: a6:1c:6d:fd:59:5e:6e:d8:18:14:96:7e:90:db:b2: 23:9f:f9:f6:7f:54:1b:3e:08:ce:64:84:e0:e7:7c: f0:bc:fe:67:cb:3d:9f:7e:f8:f3:a2:e9:39:76:3d: a0:e4:eb:e0:23:63:4b:40:b5:ba:33:17:e9:7b:a5: 5f:b9:d0:95:8a:8b:1e:f9:e3:93:c9:4c:74:55:28: 21:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:14:C1:37:D3:23:6D:93:DF:38:19:B2:29:D2:D4:EC:D7:8A:EC:CD X509v3 Authority Key Identifier: keyid:2D:9D:91:37:D4:42:7A:9D:34:E1:B1:5F:16:C5:C6:89:A8:C5:49:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:46:4d:a9:c4:3b:d0:c5:ad:42:88:95:22:67:ef:ea:1c:e0: 1d:c0:d4:bf:b4:de:33:3d:be:49:3e:0e:4f:fd:34:b1:b5:c3: 7a:42:19:73:63:ab:78:c3:e8:6a:89:2c:70:ff:9a:c2:15:69: 4b:54:de:c4:a0:27:56:18:72:0c:d9:84:b1:0e:17:2d:66:18: 53:bb:ca:56:9c:f7:43:cb:78:6e:38:f9:d2:3a:1b:6d:cf:3f: 8a:9f:a4:4e:0f:8d:13:ca:5d:ba:44:74:e2:c9:2e:3d:73:53: 82:c6:f3:3b:49:03:49:54:55:fb:67:55:4d:d4:59:e8:d3:bf: 2c:4a:41:13:78:e6:04:99:8f:d1:e3:f1:58:e2:4a:ab:41:2d: e3:16:38:9e:a5:95:22:21:3c:20:1f:46:42:6f:a1:2b:34:97: 7c:a6:6d:98:b4:57:fd:ae:67:42:7d:5a:0f:66:a3:93:2e:3b: ea:34:68:f3:91:0e:5e:ef:60:c8:99:85:ed:63:db:07:cc:17: 2a:20:a1:ed:c6:86:a0:87:b8:72:4e:80:38:83:75:b6:1e:d5: 2e:ab:e8:c6:34:bc:91:8e:f4:d0:41:23:59:80:27:d1:80:3b: 38:1e:7b:c4:de:7a:c8:be:78:c3:bf:19:38:c9:4b:a4:f9:0a: b6:e7:a1:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUEttjp1sG9Mkfw860/JE6kTkrswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ5RDkxMzdENDQyN0E5RDM0RTFCMTVGMTZDNUM2ODlB OEM1NDlEOTAeFw0yNTA2MDQwOTM2MjBaFw0yNTA2MDcxOTIzMjBaMDMxMTAvBgNV BAMTKDQ0MTRDMTM3RDMyMzZEOTNERjM4MTlCMjI5RDJENEVDRDc4QUVDQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKVey5uu5XLpkr8BuSr11b0TZd zTQ+/G3okbAQR7/3ILE+YuLmWJrk2UT5DS6SbF0/vG669WlC6pmh87FE2wJUKUTc MT7suj355NgSOpGD9P/LWegpXls1hUSbGQiWsPGFpQwsePwXvYKU6tJe6g3aGxyy hhEtpf5q4iQK24kwBWpBAOYGJXF7pD34C84zt2AoknR8BKlPSMOCjQr9WxMyl55N i2cbPubSLY1qQCYXvImNu6Ycbf1ZXm7YGBSWfpDbsiOf+fZ/VBs+CM5khODnfPC8 /mfLPZ9++POi6Tl2PaDk6+AjY0tAtbozF+l7pV+50JWKix7545PJTHRVKCGVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURBTBN9MjbZPfOBmyKdLU7NeK7M0wHwYDVR0j BBgwFoAULZ2RN9RCep004bFfFsXGiajFSdkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTUzNDFlOC0yMmQ4LTQ0OWMtYTc1My1lNDdiYmZjNDg1MzgvMC8yRDlEOTEzN0Q0 NDI3QTlEMzRFMUIxNUYxNkM1QzY4OUE4QzU0OUQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQ5RDkxMzdENDQyN0E5RDM0RTFCMTVGMTZDNUM2ODlBOEM1 NDlEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE1MzQxZTgtMjJkOC00NDljLWE3 NTMtZTQ3YmJmYzQ4NTM4LzAvMkQ5RDkxMzdENDQyN0E5RDM0RTFCMTVGMTZDNUM2 ODlBOEM1NDlEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE9GTanEO9DFrUKIlSJn7+oc4B3A1L+03jM9 vkk+Dk/9NLG1w3pCGXNjq3jD6GqJLHD/msIVaUtU3sSgJ1YYcgzZhLEOFy1mGFO7 ylac90PLeG44+dI6G23PP4qfpE4PjRPKXbpEdOLJLj1zU4LG8ztJA0lUVftnVU3U WejTvyxKQRN45gSZj9Hj8VjiSqtBLeMWOJ6llSIhPCAfRkJvoSs0l3ymbZi0V/2u Z0J9Wg9mo5MuO+o0aPORDl7vYMiZhe1j2wfMFyogoe3GhqCHuHJOgDiDdbYe1S6r 6MY0vJGO9NBBI1mAJ9GAOzgee8Teesi+eMO/GTjJS6T5CrbnoUQ= -----END CERTIFICATE-----Generated at Thu Jun 5 18:13:00 2025 by rpki-client