$ rpki-client -vvf repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft File: 2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft (raw, json) Hash identifier: GvtO/oc2Km592qX2+/diocxFqL9G4aqYeyspn02vR8U= Subject key identifier: D5:90:AD:6F:7B:93:53:88:B5:FA:77:ED:73:92:75:40:CB:EF:FA:D1 Authority key identifier: 2E:19:B9:74:05:D4:98:D3:B0:67:A9:A1:00:9C:DC:1E:02:FB:11:CF Certificate issuer: /CN=2E19B97405D498D3B067A9A1009CDC1E02FB11CF Certificate serial: 508C1D9729F802DBBCB65931B90EA058472A3BC4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft Manifest number: 02D5 Signing time: Sun 01 Jun 2025 14:01:56 +0000 Manifest this update: Sun 01 Jun 2025 13:56:56 +0000 Manifest next update: Wed 04 Jun 2025 20:21:56 +0000 Files and hashes: 1: 2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl (hash: WyqXzhR617yTeCkHMxmcXHHXbaCP6dwcU/HQvtD4eXQ=) 2: 323430313a313363303a3a2f33322d3336203d3e20313332363532.roa (hash: 0b7ns7LWe1lh+q97xLHcz0n7NxFtE+fPLuYQJ8QmqSI=) 3: 3134362e3139362e34302e302f32322d3234203d3e20313332363532.roa (hash: plzShTny50kIRVpKPuAFTM+py4IIAUYkLzBiUxnyTJ0=) 4: 3130332e32352e3139322e302f32322d3234203d3e20313332363532.roa (hash: uishawwbIWA59fc6E2EnmmHu56G13qCCnCUtoDK7S+I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 20:21:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:8c:1d:97:29:f8:02:db:bc:b6:59:31:b9:0e:a0:58:47:2a:3b:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E19B97405D498D3B067A9A1009CDC1E02FB11CF Validity Not Before: Jun 1 13:56:56 2025 GMT Not After : Jun 4 20:21:56 2025 GMT Subject: CN=D590AD6F7B935388B5FA77ED73927540CBEFFAD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c2:75:00:ef:63:b7:b7:5b:b1:30:6a:93:fe: cf:20:d8:a2:28:cc:6f:94:67:c9:3d:c7:56:d0:3f: e6:6a:9a:96:f9:10:ba:9a:9d:ab:b4:5c:ec:db:0e: 38:86:62:f3:bb:1b:0a:c9:36:39:64:87:72:66:4e: 16:12:43:c6:65:9b:33:64:f1:0e:d4:ef:38:9b:da: d3:6e:ec:0d:cb:91:93:85:92:69:73:4c:d7:9e:b6: 2c:d7:be:e1:af:8d:2c:74:31:a3:4a:8a:5a:62:42: e0:aa:a8:50:6b:7f:74:16:81:62:14:8f:a6:d4:4e: 7c:9f:c1:58:be:4c:6f:dc:61:18:d9:c5:15:ae:9f: 6f:91:4b:e0:19:3f:ea:c1:16:e6:0a:35:56:66:a3: 1b:c8:fe:75:0a:97:04:ac:17:76:ce:25:95:d2:35: c6:83:39:c9:31:bd:ee:b7:cf:5d:8f:63:29:8d:c4: ee:85:8b:e8:dd:56:94:60:46:b3:5a:91:7b:70:a4: d7:fd:2e:c0:45:88:e8:1f:84:37:35:7b:16:be:0c: 63:31:e5:0f:96:8b:d6:b8:06:a5:12:0c:ec:86:0b: f9:d9:08:f7:60:e1:7e:b2:51:15:b5:bb:c7:12:7e: d6:6b:96:1d:fd:17:45:29:39:ef:26:d9:0e:c8:f3: 75:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:90:AD:6F:7B:93:53:88:B5:FA:77:ED:73:92:75:40:CB:EF:FA:D1 X509v3 Authority Key Identifier: keyid:2E:19:B9:74:05:D4:98:D3:B0:67:A9:A1:00:9C:DC:1E:02:FB:11:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:c5:99:ef:7d:02:12:c6:ca:17:6a:51:a8:08:af:11:21:21: 51:0f:5f:25:03:0a:46:44:cb:bf:57:3b:23:67:3c:7e:bb:8c: 17:49:30:30:2b:8c:8f:11:93:3c:2c:d3:01:1f:fb:e0:85:75: cc:5f:1e:90:36:ec:76:16:5f:49:33:46:56:94:70:14:d0:a7: e6:87:a4:b7:fa:da:b8:82:14:f5:be:c8:56:21:b8:40:28:52: a1:60:12:e4:8b:f5:15:a8:1b:c3:81:21:9a:17:e1:e2:97:06: 5f:df:0d:48:5b:db:85:01:f5:2d:fb:34:47:ea:d6:1e:6f:98: 62:88:42:91:12:37:a8:c4:93:97:e6:0f:40:4a:3e:b1:b3:ba: 9b:af:96:98:c6:90:0c:43:c3:a0:d2:e7:36:54:be:21:a5:ec: fd:a4:c6:97:56:0c:52:83:3f:3c:bd:bb:13:0d:51:07:ed:53: 89:f3:86:1c:e0:49:17:df:d9:c5:08:fd:61:11:99:d9:52:fc: 15:17:7a:7b:b5:a0:c0:a3:4c:6f:d6:b9:01:6a:af:2d:f6:89: b2:2d:b9:6a:fd:5a:f5:de:ff:06:25:65:b9:c6:66:d0:aa:2e: 3c:d1:4a:a7:16:45:b0:4c:50:dc:18:8b:b3:d1:41:7e:3f:ac: ec:04:f1:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUIwdlyn4Atu8tlkxuQ6gWEcqO8QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUxOUI5NzQwNUQ0OThEM0IwNjdBOUExMDA5Q0RDMUUw MkZCMTFDRjAeFw0yNTA2MDExMzU2NTZaFw0yNTA2MDQyMDIxNTZaMDMxMTAvBgNV BAMTKEQ1OTBBRDZGN0I5MzUzODhCNUZBNzdFRDczOTI3NTQwQ0JFRkZBRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqwnUA72O3t1uxMGqT/s8g2KIo zG+UZ8k9x1bQP+Zqmpb5ELqanau0XOzbDjiGYvO7GwrJNjlkh3JmThYSQ8ZlmzNk 8Q7U7zib2tNu7A3LkZOFkmlzTNeetizXvuGvjSx0MaNKilpiQuCqqFBrf3QWgWIU j6bUTnyfwVi+TG/cYRjZxRWun2+RS+AZP+rBFuYKNVZmoxvI/nUKlwSsF3bOJZXS NcaDOckxve63z12PYymNxO6Fi+jdVpRgRrNakXtwpNf9LsBFiOgfhDc1exa+DGMx 5Q+Wi9a4BqUSDOyGC/nZCPdg4X6yURW1u8cSftZrlh39F0UpOe8m2Q7I83UvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1ZCtb3uTU4i1+nftc5J1QMvv+tEwHwYDVR0j BBgwFoAULhm5dAXUmNOwZ6mhAJzcHgL7Ec8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjYzMmEyYy00MDZlLTQ1ZDctYTAyOC0yNjA0NzRjNzcwMzgvMC8yRTE5Qjk3NDA1 RDQ5OEQzQjA2N0E5QTEwMDlDREMxRTAyRkIxMUNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUxOUI5NzQwNUQ0OThEM0IwNjdBOUExMDA5Q0RDMUUwMkZC MTFDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2I2MzJhMmMtNDA2ZS00NWQ3LWEw MjgtMjYwNDc0Yzc3MDM4LzAvMkUxOUI5NzQwNUQ0OThEM0IwNjdBOUExMDA5Q0RD MUUwMkZCMTFDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ/Fme99AhLGyhdqUagIrxEhIVEPXyUDCkZE y79XOyNnPH67jBdJMDArjI8Rkzws0wEf++CFdcxfHpA27HYWX0kzRlaUcBTQp+aH pLf62riCFPW+yFYhuEAoUqFgEuSL9RWoG8OBIZoX4eKXBl/fDUhb24UB9S37NEfq 1h5vmGKIQpESN6jEk5fmD0BKPrGzupuvlpjGkAxDw6DS5zZUviGl7P2kxpdWDFKD Pzy9uxMNUQftU4nzhhzgSRff2cUI/WERmdlS/BUXenu1oMCjTG/WuQFqry32ibIt uWr9WvXe/wYlZbnGZtCqLjzRSqcWRbBMUNwYi7PRQX4/rOwE8Y0= -----END CERTIFICATE-----Generated at Tue Jun 3 23:18:10 2025 by rpki-client