$ rpki-client -vvf repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.mft File: 26B04331F3DBA70B694F2FFF371C85EE023FB70F.mft (raw, json) Hash identifier: 0zR3C4F8zoGsWMqRJQa7TYUnB5LFdJqfZliix1qSL08= Subject key identifier: D9:DF:4F:38:C2:5E:BF:73:23:84:57:92:9C:49:F3:E7:1B:C2:EB:5A Authority key identifier: 26:B0:43:31:F3:DB:A7:0B:69:4F:2F:FF:37:1C:85:EE:02:3F:B7:0F Certificate issuer: /CN=26B04331F3DBA70B694F2FFF371C85EE023FB70F Certificate serial: 35BE4F72BCB5F346A3FDE467D4253EFDBB0D59E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26B04331F3DBA70B694F2FFF371C85EE023FB70F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.mft Manifest number: 0204 Signing time: Sat 05 Apr 2025 08:40:36 +0000 Manifest this update: Sat 05 Apr 2025 08:35:36 +0000 Manifest next update: Tue 08 Apr 2025 11:00:36 +0000 Files and hashes: 1: 3130332e3138302e312e302f32342d3234203d3e2039333431.roa (hash: iq5IAgV/ZMFtmge6dr231dN4pxG0uQlklK/RGgI/gfc=) 2: 26B04331F3DBA70B694F2FFF371C85EE023FB70F.crl (hash: PJXbGgkttYc/zyMImFCcURJCF/I4gRQW9fFY2F/JnIU=) 3: 3130332e3138302e302e302f32342d3234203d3e2039333431.roa (hash: D79Y8BsRJ6VHRaHIcDQn8DwQcFro3NZoMHr7zu28hbo=) 4: 3130332e3138302e302e302f32332d3233203d3e2039333431.roa (hash: 9Y+dv1ubLJjpj3Eq8ePmSnjNO3gF9XEsyFx3D6UDQmg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.crl rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26B04331F3DBA70B694F2FFF371C85EE023FB70F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:be:4f:72:bc:b5:f3:46:a3:fd:e4:67:d4:25:3e:fd:bb:0d:59:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26B04331F3DBA70B694F2FFF371C85EE023FB70F Validity Not Before: Apr 5 08:35:36 2025 GMT Not After : Apr 8 11:00:36 2025 GMT Subject: CN=D9DF4F38C25EBF73238457929C49F3E71BC2EB5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d1:81:ab:cd:97:0c:d0:05:68:c5:2a:be:83: 14:8d:1f:4b:53:68:fb:ab:24:bf:e8:9e:c6:3f:9b: 33:0d:84:ac:62:18:d4:e7:15:5d:1d:26:ca:fa:47: e3:c7:fb:0a:b1:9c:1d:21:3b:64:3b:84:30:27:61: 23:d6:b0:06:e0:6b:de:55:46:a9:53:95:11:a8:59: 01:df:51:ba:59:49:bb:70:9e:38:f2:ed:f0:a8:02: cf:34:68:22:4b:c3:7b:d4:b3:91:fb:ef:a9:65:98: c4:8f:29:44:90:7e:33:25:c3:44:b9:63:88:f8:4a: b0:ee:98:3a:57:9c:27:8c:bc:27:6e:b9:af:7d:e1: b6:b2:4d:e0:4e:a5:a5:d4:5e:14:93:a9:45:14:d8: 83:88:02:ae:da:df:f6:75:7b:54:07:77:77:7d:b8: 77:72:23:37:5e:2c:b6:22:3e:25:bf:ff:8e:d5:76: 30:b5:8d:74:b9:29:f0:c4:f1:2d:c0:6a:69:60:f2: 5e:57:4f:15:7c:df:bf:4e:b0:11:ef:42:b9:e9:57: 23:21:fe:6b:00:c3:90:f1:4c:3b:2e:3b:72:53:f8: 5f:97:6e:ad:34:62:77:dd:97:5c:0e:dd:79:85:47: c6:33:c9:71:d5:17:f3:c8:ac:79:73:10:02:76:ea: 64:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:DF:4F:38:C2:5E:BF:73:23:84:57:92:9C:49:F3:E7:1B:C2:EB:5A X509v3 Authority Key Identifier: keyid:26:B0:43:31:F3:DB:A7:0B:69:4F:2F:FF:37:1C:85:EE:02:3F:B7:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26B04331F3DBA70B694F2FFF371C85EE023FB70F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:78:b9:aa:8d:ad:31:40:05:ef:96:47:02:c7:6b:c7:31:b1: 40:e1:c1:29:98:f9:6e:5d:76:0d:ad:60:d8:5f:33:d3:d0:47: 40:2d:f6:33:cf:52:23:8c:52:c6:c0:3c:b1:44:26:5d:e6:d8: 27:bf:08:33:74:06:45:c3:f8:e2:9f:ab:91:a4:c9:30:85:13: 11:1a:10:89:5a:ed:3f:c3:75:0b:73:91:bb:26:96:2d:3c:08: dd:52:65:2c:c3:66:3e:4b:19:36:e7:47:3a:73:c1:8d:3c:2a: 65:d4:ff:29:fe:fe:5e:45:d4:1f:49:dd:3c:94:f1:d8:45:9d: 4c:2a:3d:df:52:e1:38:65:52:c2:7c:58:ed:d6:21:0d:e7:0e: fb:fe:73:0b:43:d3:0c:11:d7:f6:4a:77:58:50:0a:84:7f:6f: 7c:b8:a2:bb:22:f6:9c:79:ca:e7:6d:1f:08:60:45:90:75:c2: ab:f3:8d:2f:c9:df:b4:0a:39:cb:b1:71:07:b2:9d:6b:68:a0: b0:82:2d:02:90:3c:de:d4:f8:c9:60:91:62:4e:e2:df:54:f4: 11:13:b4:e6:ed:b8:3f:72:67:2c:ed:e2:cc:39:6f:01:10:bf: e2:a9:28:5a:f6:a1:64:69:cf:ba:81:cf:9f:2d:94:3e:70:ce: a6:a6:ed:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNb5Pcry180aj/eRn1CU+/bsNWeEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjZCMDQzMzFGM0RCQTcwQjY5NEYyRkZGMzcxQzg1RUUw MjNGQjcwRjAeFw0yNTA0MDUwODM1MzZaFw0yNTA0MDgxMTAwMzZaMDMxMTAvBgNV BAMTKEQ5REY0RjM4QzI1RUJGNzMyMzg0NTc5MjlDNDlGM0U3MUJDMkVCNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC80YGrzZcM0AVoxSq+gxSNH0tT aPurJL/onsY/mzMNhKxiGNTnFV0dJsr6R+PH+wqxnB0hO2Q7hDAnYSPWsAbga95V RqlTlRGoWQHfUbpZSbtwnjjy7fCoAs80aCJLw3vUs5H776llmMSPKUSQfjMlw0S5 Y4j4SrDumDpXnCeMvCduua994bayTeBOpaXUXhSTqUUU2IOIAq7a3/Z1e1QHd3d9 uHdyIzdeLLYiPiW//47VdjC1jXS5KfDE8S3Aamlg8l5XTxV8379OsBHvQrnpVyMh /msAw5DxTDsuO3JT+F+Xbq00Ynfdl1wO3XmFR8YzyXHVF/PIrHlzEAJ26mRRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2d9POMJev3MjhFeSnEnz5xvC61owHwYDVR0j BBgwFoAUJrBDMfPbpwtpTy//NxyF7gI/tw8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YThhOWE4MS0wYTUyLTRhNTAtYjdmNi1hMzZmODZmM2QyYzcvMC8yNkIwNDMzMUYz REJBNzBCNjk0RjJGRkYzNzFDODVFRTAyM0ZCNzBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjZCMDQzMzFGM0RCQTcwQjY5NEYyRkZGMzcxQzg1RUUwMjNG QjcwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E4YTlhODEtMGE1Mi00YTUwLWI3 ZjYtYTM2Zjg2ZjNkMmM3LzAvMjZCMDQzMzFGM0RCQTcwQjY5NEYyRkZGMzcxQzg1 RUUwMjNGQjcwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMl4uaqNrTFABe+WRwLHa8cxsUDhwSmY+W5d dg2tYNhfM9PQR0At9jPPUiOMUsbAPLFEJl3m2Ce/CDN0BkXD+OKfq5GkyTCFExEa EIla7T/DdQtzkbsmli08CN1SZSzDZj5LGTbnRzpzwY08KmXU/yn+/l5F1B9J3TyU 8dhFnUwqPd9S4ThlUsJ8WO3WIQ3nDvv+cwtD0wwR1/ZKd1hQCoR/b3y4orsi9px5 yudtHwhgRZB1wqvzjS/J37QKOcuxcQeynWtooLCCLQKQPN7U+MlgkWJO4t9U9BET tObtuD9yZyzt4sw5bwEQv+KpKFr2oWRpz7qBz58tlD5wzqam7cs= -----END CERTIFICATE-----Generated at Sat Apr 5 22:26:58 2025 by rpki-client