$ rpki-client -vvf repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft File: 2D0745D26E59440CB71FAFE996834493DA753248.mft (raw, json) Hash identifier: /ztFZj3cTCD/46+vXIO2oxhVi69NOb7KgeqzCfW9lWo= Subject key identifier: 76:E4:C1:96:D1:5B:E9:F9:CD:0E:FD:D0:F4:40:1C:D4:7F:C8:29:62 Authority key identifier: 2D:07:45:D2:6E:59:44:0C:B7:1F:AF:E9:96:83:44:93:DA:75:32:48 Certificate issuer: /CN=2D0745D26E59440CB71FAFE996834493DA753248 Certificate serial: 20C21B63751AD6454B7EFD213026817E6AF2CC43 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D0745D26E59440CB71FAFE996834493DA753248.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft Manifest number: 01AF Signing time: Fri 06 Jun 2025 06:40:49 +0000 Manifest this update: Fri 06 Jun 2025 06:35:49 +0000 Manifest next update: Mon 09 Jun 2025 15:23:49 +0000 Files and hashes: 1: 2D0745D26E59440CB71FAFE996834493DA753248.crl (hash: kZvl669FzWXoBLfhuHQnLxtpvcnVWsrqvOkqtlj30lQ=) 2: 3130332e37332e3135382e302f32342d3234203d3e203234343239.roa (hash: ujITe6uXtdvP5WOayQADk+Rg7asyYqwio86khyT1Nho=) 3: 3130332e37332e3135392e302f32342d3234203d3e20313338383836.roa (hash: 3BxgBY3dX8feRwsm1hvpch2b234JpMx6XR/YBvSI5jE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.crl rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D0745D26E59440CB71FAFE996834493DA753248.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 15:23:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:c2:1b:63:75:1a:d6:45:4b:7e:fd:21:30:26:81:7e:6a:f2:cc:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D0745D26E59440CB71FAFE996834493DA753248 Validity Not Before: Jun 6 06:35:49 2025 GMT Not After : Jun 9 15:23:49 2025 GMT Subject: CN=76E4C196D15BE9F9CD0EFDD0F4401CD47FC82962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e2:e2:00:8a:a8:dc:96:f2:7f:b2:6e:fd:7f: d5:ae:c5:d2:1f:21:24:c4:54:48:60:8d:d0:76:e9: 4a:fd:20:72:e3:40:b5:85:42:58:2c:81:83:26:c8: 67:75:cf:65:73:07:3e:8b:09:42:94:7d:f8:9f:74: be:4a:6c:3b:9b:c7:45:fa:68:ca:d1:73:b6:a0:fb: 90:b7:4b:7a:b0:9d:8a:88:e3:ae:da:bc:18:2d:88: ba:8c:67:ef:a5:21:27:95:b2:44:95:7c:0a:98:71: 32:90:4a:6e:bc:8b:2c:d4:a0:e4:9f:e1:ca:86:65: ec:8d:05:8e:84:82:1e:74:a3:7e:e5:30:d7:21:1f: bb:69:32:52:ef:4b:50:d9:3e:e9:3c:97:88:4e:bd: 02:fd:fe:9e:6c:ce:ae:8a:cb:95:b2:97:8e:10:61: d9:23:ef:2d:71:83:7b:0d:dd:52:6e:8d:86:1a:0c: 59:74:5b:3c:f5:2d:e0:58:4f:31:8e:c3:55:1f:69: ba:88:d2:0f:71:e4:30:80:dd:56:0c:d5:55:78:38: 14:b9:fc:17:0d:23:2a:9e:4d:8d:73:de:ae:d7:f2: 93:dc:0a:31:59:98:9f:02:8d:6d:4e:bc:fc:57:12: 35:f1:8e:37:18:1b:0b:48:be:fc:f8:06:0f:2e:77: c6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E4:C1:96:D1:5B:E9:F9:CD:0E:FD:D0:F4:40:1C:D4:7F:C8:29:62 X509v3 Authority Key Identifier: keyid:2D:07:45:D2:6E:59:44:0C:B7:1F:AF:E9:96:83:44:93:DA:75:32:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D0745D26E59440CB71FAFE996834493DA753248.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:27:bb:9c:e5:60:68:92:9f:b6:4f:40:eb:20:44:13:c3:22: 03:25:18:39:94:fe:f1:fc:5e:81:d0:fb:6f:e7:67:5f:dd:78: 69:8d:0c:57:11:13:3a:06:f2:0f:a5:55:8f:61:2d:ff:31:3e: e8:28:20:63:42:80:51:21:a4:e2:47:67:4e:ff:4a:35:81:4c: 42:21:c0:26:04:09:e1:05:8f:66:32:2b:34:c2:04:47:7b:92: 20:f9:30:74:41:91:c4:8b:53:65:9b:04:c6:d6:24:31:8d:20: b2:49:69:f8:e4:75:3b:94:cd:05:29:1d:fc:a4:66:34:75:ee: 1a:a5:b2:ab:b3:74:bc:7d:95:6e:1a:1a:34:7e:1d:5a:ce:50: e8:84:e8:68:fc:7d:13:05:55:e9:cd:fd:47:26:bb:7e:c5:9f: 3c:4f:ec:85:8f:3f:8a:12:14:05:38:0b:1b:d3:62:4b:6c:eb: ee:3f:88:84:5f:40:38:33:94:27:bf:d9:58:b1:9b:18:4a:af: e1:33:96:79:81:8c:0d:fa:c2:93:eb:cb:6a:a5:0b:9b:c0:58: fb:59:20:36:d6:23:0a:8e:5e:30:25:16:f0:26:c0:29:01:c5: 08:dc:13:2c:38:9a:c6:32:d3:bf:cc:98:ab:4d:b6:d8:75:53: d5:58:bb:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIMIbY3Ua1kVLfv0hMCaBfmryzEMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQwNzQ1RDI2RTU5NDQwQ0I3MUZBRkU5OTY4MzQ0OTNE QTc1MzI0ODAeFw0yNTA2MDYwNjM1NDlaFw0yNTA2MDkxNTIzNDlaMDMxMTAvBgNV BAMTKDc2RTRDMTk2RDE1QkU5RjlDRDBFRkREMEY0NDAxQ0Q0N0ZDODI5NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV4uIAiqjclvJ/sm79f9WuxdIf ISTEVEhgjdB26Ur9IHLjQLWFQlgsgYMmyGd1z2VzBz6LCUKUffifdL5KbDubx0X6 aMrRc7ag+5C3S3qwnYqI467avBgtiLqMZ++lISeVskSVfAqYcTKQSm68iyzUoOSf 4cqGZeyNBY6Egh50o37lMNchH7tpMlLvS1DZPuk8l4hOvQL9/p5szq6Ky5Wyl44Q Ydkj7y1xg3sN3VJujYYaDFl0Wzz1LeBYTzGOw1UfabqI0g9x5DCA3VYM1VV4OBS5 /BcNIyqeTY1z3q7X8pPcCjFZmJ8CjW1OvPxXEjXxjjcYGwtIvvz4Bg8ud8b3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUduTBltFb6fnNDv3Q9EAc1H/IKWIwHwYDVR0j BBgwFoAULQdF0m5ZRAy3H6/ploNEk9p1MkgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTQwNmNkYi0xNzkxLTQ3OGQtOWQyOC05ZTM3YTZmODA5Y2MvMC8yRDA3NDVEMjZF NTk0NDBDQjcxRkFGRTk5NjgzNDQ5M0RBNzUzMjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQwNzQ1RDI2RTU5NDQwQ0I3MUZBRkU5OTY4MzQ0OTNEQTc1 MzI0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E0MDZjZGItMTc5MS00NzhkLTlk MjgtOWUzN2E2ZjgwOWNjLzAvMkQwNzQ1RDI2RTU5NDQwQ0I3MUZBRkU5OTY4MzQ0 OTNEQTc1MzI0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL0nu5zlYGiSn7ZPQOsgRBPDIgMlGDmU/vH8 XoHQ+2/nZ1/deGmNDFcREzoG8g+lVY9hLf8xPugoIGNCgFEhpOJHZ07/SjWBTEIh wCYECeEFj2YyKzTCBEd7kiD5MHRBkcSLU2WbBMbWJDGNILJJafjkdTuUzQUpHfyk ZjR17hqlsquzdLx9lW4aGjR+HVrOUOiE6Gj8fRMFVenN/Ucmu37FnzxP7IWPP4oS FAU4CxvTYkts6+4/iIRfQDgzlCe/2VixmxhKr+EzlnmBjA36wpPry2qlC5vAWPtZ IDbWIwqOXjAlFvAmwCkBxQjcEyw4msYy07/MmKtNtth1U9VYux8= -----END CERTIFICATE-----Generated at Sat Jun 7 04:12:33 2025 by rpki-client