$ rpki-client -vvf repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft File: 2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft (raw, json) Hash identifier: DtOUf5WpZMBu5AvcMt48WjIChoMBBjhTevT6BWanM6A= Subject key identifier: 91:E4:6A:63:B9:55:88:55:62:B1:8B:68:7A:A3:0A:DD:A3:81:31:17 Authority key identifier: 2E:19:B9:74:05:D4:98:D3:B0:67:A9:A1:00:9C:DC:1E:02:FB:11:CF Certificate issuer: /CN=2E19B97405D498D3B067A9A1009CDC1E02FB11CF Certificate serial: 25A69DD39E4B9669103090C92DF44E03C0510199 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft Manifest number: 02BC Signing time: Sat 05 Apr 2025 15:21:54 +0000 Manifest this update: Sat 05 Apr 2025 15:16:54 +0000 Manifest next update: Tue 08 Apr 2025 20:01:54 +0000 Files and hashes: 1: 3130332e32352e3139322e302f32322d3234203d3e20313332363532.roa (hash: uishawwbIWA59fc6E2EnmmHu56G13qCCnCUtoDK7S+I=) 2: 323430313a313363303a3a2f33322d3336203d3e20313332363532.roa (hash: 0b7ns7LWe1lh+q97xLHcz0n7NxFtE+fPLuYQJ8QmqSI=) 3: 3134362e3139362e34302e302f32322d3234203d3e20313332363532.roa (hash: plzShTny50kIRVpKPuAFTM+py4IIAUYkLzBiUxnyTJ0=) 4: 2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl (hash: azkTFWSaLWcXmaGUtf3owFFaYo6eSQClI2F5gVXVjmI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:a6:9d:d3:9e:4b:96:69:10:30:90:c9:2d:f4:4e:03:c0:51:01:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E19B97405D498D3B067A9A1009CDC1E02FB11CF Validity Not Before: Apr 5 15:16:54 2025 GMT Not After : Apr 8 20:01:54 2025 GMT Subject: CN=91E46A63B955885562B18B687AA30ADDA3813117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a3:d9:97:74:f0:c5:48:22:b3:ae:2f:7f:4e: 7d:97:17:00:2c:cc:b3:3c:f8:7d:2c:5f:88:06:86: fd:42:1d:a4:4c:02:dd:54:96:a2:98:e7:13:0f:66: cb:e3:74:87:6b:33:25:72:0a:e3:b3:8f:f3:4d:59: 24:cf:73:a0:4c:c3:31:b4:47:a1:e8:ea:4e:34:69: e8:58:22:ad:4d:28:ba:09:5c:bc:e6:ad:4e:23:c7: 76:3d:70:6d:b6:8f:16:18:cf:9d:2b:8a:7c:30:f7: 86:9c:1b:0e:ef:c3:6b:f5:8a:39:fe:83:7b:81:19: 04:17:c2:a7:02:3b:a0:79:c0:96:c7:bc:19:96:ba: 20:b5:ed:e5:94:77:3e:cc:e0:40:4d:b8:d8:c1:1d: 8a:7e:97:60:c0:06:a7:d4:2c:91:31:09:ad:1c:5c: 11:65:f7:74:07:b3:57:04:e8:50:ce:55:64:50:fe: 6d:09:d0:92:c0:4f:12:e6:0f:1e:76:c1:75:42:e1: 64:e9:47:64:17:17:c0:d5:5f:78:fc:79:00:50:d6: ce:cc:d8:68:a9:ec:e6:00:77:f7:98:bf:a2:67:cd: fa:01:2b:28:60:a0:a5:53:d5:6f:1b:a7:d5:55:90: ff:ae:d4:4f:00:64:26:c4:ae:ab:48:f5:6a:a9:a2: 05:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E4:6A:63:B9:55:88:55:62:B1:8B:68:7A:A3:0A:DD:A3:81:31:17 X509v3 Authority Key Identifier: keyid:2E:19:B9:74:05:D4:98:D3:B0:67:A9:A1:00:9C:DC:1E:02:FB:11:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:ab:63:d2:b8:77:ee:91:aa:91:58:76:8b:8f:a2:4c:2b:f9: 5d:68:f8:1c:96:c8:91:91:01:0d:85:83:ab:6d:30:20:29:de: e3:67:3a:0b:49:f7:31:bd:e1:fb:e5:13:c5:c6:c6:63:85:ae: d6:c9:e3:85:c8:ef:d3:80:ac:42:aa:15:24:1d:48:0a:f2:46: ce:fd:db:ec:ab:e0:35:de:96:c3:07:68:30:9e:59:88:86:17: a8:68:a5:fc:78:cb:ba:2c:9e:1d:20:fd:69:c3:40:60:c3:65: 3b:3a:5f:83:fb:cd:0d:4f:69:6a:ee:3d:44:38:6e:b9:8a:b7: 29:5d:4c:2b:0b:74:62:5d:8a:e3:d3:52:09:ea:f9:f8:d7:82: d8:78:5f:09:be:41:d9:82:bc:11:af:1d:31:75:15:5c:63:fd: 8f:8c:d5:ab:1b:24:17:19:f4:43:e8:e0:7d:61:7a:4f:78:78: 4b:85:a7:fa:07:52:6e:a7:4d:32:40:99:2f:bb:31:68:40:d9: c4:b6:c1:e8:65:0a:df:3f:9e:cd:39:f6:5d:2a:e5:20:00:26: 2c:56:3b:25:3f:e4:24:fc:b3:06:03:1a:3b:08:86:9b:56:df: 1f:1b:e5:d4:10:d4:64:86:8f:a9:53:64:fc:ad:a4:2c:ef:2e: 85:0c:b6:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJaad055LlmkQMJDJLfROA8BRAZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUxOUI5NzQwNUQ0OThEM0IwNjdBOUExMDA5Q0RDMUUw MkZCMTFDRjAeFw0yNTA0MDUxNTE2NTRaFw0yNTA0MDgyMDAxNTRaMDMxMTAvBgNV BAMTKDkxRTQ2QTYzQjk1NTg4NTU2MkIxOEI2ODdBQTMwQUREQTM4MTMxMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMo9mXdPDFSCKzri9/Tn2XFwAs zLM8+H0sX4gGhv1CHaRMAt1UlqKY5xMPZsvjdIdrMyVyCuOzj/NNWSTPc6BMwzG0 R6Ho6k40aehYIq1NKLoJXLzmrU4jx3Y9cG22jxYYz50rinww94acGw7vw2v1ijn+ g3uBGQQXwqcCO6B5wJbHvBmWuiC17eWUdz7M4EBNuNjBHYp+l2DABqfULJExCa0c XBFl93QHs1cE6FDOVWRQ/m0J0JLATxLmDx52wXVC4WTpR2QXF8DVX3j8eQBQ1s7M 2Gip7OYAd/eYv6JnzfoBKyhgoKVT1W8bp9VVkP+u1E8AZCbErqtI9WqpogUXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkeRqY7lViFVisYtoeqMK3aOBMRcwHwYDVR0j BBgwFoAULhm5dAXUmNOwZ6mhAJzcHgL7Ec8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjYzMmEyYy00MDZlLTQ1ZDctYTAyOC0yNjA0NzRjNzcwMzgvMC8yRTE5Qjk3NDA1 RDQ5OEQzQjA2N0E5QTEwMDlDREMxRTAyRkIxMUNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUxOUI5NzQwNUQ0OThEM0IwNjdBOUExMDA5Q0RDMUUwMkZC MTFDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2I2MzJhMmMtNDA2ZS00NWQ3LWEw MjgtMjYwNDc0Yzc3MDM4LzAvMkUxOUI5NzQwNUQ0OThEM0IwNjdBOUExMDA5Q0RD MUUwMkZCMTFDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFWrY9K4d+6RqpFYdouPokwr+V1o+ByWyJGR AQ2Fg6ttMCAp3uNnOgtJ9zG94fvlE8XGxmOFrtbJ44XI79OArEKqFSQdSAryRs79 2+yr4DXelsMHaDCeWYiGF6hopfx4y7osnh0g/WnDQGDDZTs6X4P7zQ1PaWruPUQ4 brmKtyldTCsLdGJdiuPTUgnq+fjXgth4Xwm+QdmCvBGvHTF1FVxj/Y+M1asbJBcZ 9EPo4H1hek94eEuFp/oHUm6nTTJAmS+7MWhA2cS2wehlCt8/ns059l0q5SAAJixW OyU/5CT8swYDGjsIhptW3x8b5dQQ1GSGj6lTZPytpCzvLoUMtuM= -----END CERTIFICATE-----Generated at Sat Apr 5 23:16:46 2025 by rpki-client