$ rpki-client -vvf repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft File: 2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft (raw, json) Hash identifier: tr5uoOIsFcEcanaTcqRrTZXbfctXguzvCXlYlKq566k= Subject key identifier: 25:E4:75:7E:FA:F7:7E:5B:EF:0D:7B:15:26:7C:11:50:E2:EC:30:86 Authority key identifier: 2E:19:B9:74:05:D4:98:D3:B0:67:A9:A1:00:9C:DC:1E:02:FB:11:CF Certificate issuer: /CN=2E19B97405D498D3B067A9A1009CDC1E02FB11CF Certificate serial: 44B30AAD29769E02A7B5EA6744CBDDB4E2E4732C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft Manifest number: 0300 Signing time: Fri 05 Sep 2025 00:52:00 +0000 Manifest this update: Fri 05 Sep 2025 00:47:00 +0000 Manifest next update: Mon 08 Sep 2025 04:45:00 +0000 Files and hashes: 1: 3134362e3139362e34302e302f32322d3234203d3e20313332363532.roa (hash: n+xUq9a7n5f6ndT7big4scouCH78ut4B4QszfPAlm80=) 2: 323430313a313363303a3a2f33322d3336203d3e20313332363532.roa (hash: 0b7ns7LWe1lh+q97xLHcz0n7NxFtE+fPLuYQJ8QmqSI=) 3: 2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl (hash: nb8Wi3Yln1okFu6A6F0yJxhLZsvRVSS+RSNsmWQKvbc=) 4: 3130332e32352e3139322e302f32322d3234203d3e20313332363532.roa (hash: d+MQp3eqG/C/hSPziIw4OmNz4U3nA5FN+ZaHxiNIjvo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 04:45:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:b3:0a:ad:29:76:9e:02:a7:b5:ea:67:44:cb:dd:b4:e2:e4:73:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E19B97405D498D3B067A9A1009CDC1E02FB11CF Validity Not Before: Sep 5 00:47:00 2025 GMT Not After : Sep 8 04:45:00 2025 GMT Subject: CN=25E4757EFAF77E5BEF0D7B15267C1150E2EC3086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:70:58:21:4d:58:d3:64:82:2c:67:93:db:73: fe:ec:7e:9b:8a:52:bb:0a:e8:b8:c2:6e:8a:49:51: fe:a4:2d:d2:60:84:2f:32:49:51:27:b8:84:9a:8a: 92:16:ec:3e:e0:73:61:2a:92:c8:b9:48:e7:4b:39: 8b:80:82:66:5c:c9:3b:02:e3:62:a7:8a:72:a3:4f: d8:b1:e4:c3:cc:55:85:7a:af:78:51:1c:33:18:4e: 3a:b0:83:9c:5c:1b:6d:4e:96:45:d2:c3:5c:0a:ca: 78:81:84:34:4b:ef:9d:0d:10:1e:b3:0c:ad:17:00: ef:58:52:70:60:d1:69:3f:83:e3:6e:68:c5:1d:ab: f7:22:3b:b2:84:d2:20:b5:f3:9b:9e:7a:2d:8f:fe: 49:6b:a4:8e:e1:71:31:74:59:59:46:1b:34:01:44: bc:1c:7a:f4:4d:2e:4e:a6:82:25:36:67:5d:ec:31: e6:69:b4:b7:9b:17:0c:d1:54:2e:b9:e9:ad:e2:05: 26:c5:f7:04:21:bb:eb:ee:d7:00:9a:f1:60:ef:7a: a7:cc:82:4b:33:a4:9b:e8:fb:5d:8e:f6:44:a9:09: 6d:50:5a:8e:02:c0:54:27:40:d0:53:72:81:41:67: a2:0b:a7:d2:22:0a:54:f6:6e:aa:f4:e1:63:55:16: b5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:E4:75:7E:FA:F7:7E:5B:EF:0D:7B:15:26:7C:11:50:E2:EC:30:86 X509v3 Authority Key Identifier: keyid:2E:19:B9:74:05:D4:98:D3:B0:67:A9:A1:00:9C:DC:1E:02:FB:11:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:aa:d7:5b:20:c0:5e:96:a2:fc:f1:81:73:fe:0b:af:1c:46: f1:58:60:e2:c7:6c:d0:24:1f:6b:ab:81:c5:de:34:41:b0:db: dc:d1:cd:29:80:3b:ff:d7:4b:e0:c0:e3:45:58:69:83:b8:d9: 65:90:03:90:7e:16:38:2d:dc:09:ec:98:47:06:76:da:6c:09: 97:08:08:78:03:1e:2c:09:e8:bf:ec:9d:00:1e:8c:5f:ce:2a: 59:cd:35:34:8b:d4:42:14:24:6b:f8:e3:3f:24:68:a3:93:3f: 32:76:37:28:3e:be:51:82:8f:98:89:92:62:3a:b4:5d:39:05: 27:aa:4f:e6:ed:5f:0d:73:35:c7:43:8f:e8:5f:d6:04:a9:fd: ec:10:b2:12:17:af:1c:5d:e3:21:b2:ec:1d:e5:11:6b:26:66: 67:f2:be:d4:a9:7d:15:83:86:2e:7d:ca:8d:08:ff:35:71:44: 44:1d:13:3a:d1:59:6a:e7:8e:a8:55:8b:5b:4b:a2:7d:35:8f: cd:ac:c3:18:f4:40:21:47:33:3d:c6:74:41:7d:3d:e5:eb:86: 2f:56:df:2a:fc:2c:de:29:0f:c8:6c:d0:2c:05:5c:e9:8f:d9: 22:55:52:cc:db:f2:76:ec:b4:6d:31:f4:20:aa:e0:9c:37:56: 5f:b8:bd:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURLMKrSl2ngKntepnRMvdtOLkcywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUxOUI5NzQwNUQ0OThEM0IwNjdBOUExMDA5Q0RDMUUw MkZCMTFDRjAeFw0yNTA5MDUwMDQ3MDBaFw0yNTA5MDgwNDQ1MDBaMDMxMTAvBgNV BAMTKDI1RTQ3NTdFRkFGNzdFNUJFRjBEN0IxNTI2N0MxMTUwRTJFQzMwODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6cFghTVjTZIIsZ5Pbc/7sfpuK UrsK6LjCbopJUf6kLdJghC8ySVEnuISaipIW7D7gc2Eqksi5SOdLOYuAgmZcyTsC 42KninKjT9ix5MPMVYV6r3hRHDMYTjqwg5xcG21OlkXSw1wKyniBhDRL750NEB6z DK0XAO9YUnBg0Wk/g+NuaMUdq/ciO7KE0iC185ueei2P/klrpI7hcTF0WVlGGzQB RLwcevRNLk6mgiU2Z13sMeZptLebFwzRVC656a3iBSbF9wQhu+vu1wCa8WDveqfM gkszpJvo+12O9kSpCW1QWo4CwFQnQNBTcoFBZ6ILp9IiClT2bqr04WNVFrUJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJeR1fvr3flvvDXsVJnwRUOLsMIYwHwYDVR0j BBgwFoAULhm5dAXUmNOwZ6mhAJzcHgL7Ec8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjYzMmEyYy00MDZlLTQ1ZDctYTAyOC0yNjA0NzRjNzcwMzgvMC8yRTE5Qjk3NDA1 RDQ5OEQzQjA2N0E5QTEwMDlDREMxRTAyRkIxMUNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUxOUI5NzQwNUQ0OThEM0IwNjdBOUExMDA5Q0RDMUUwMkZC MTFDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2I2MzJhMmMtNDA2ZS00NWQ3LWEw MjgtMjYwNDc0Yzc3MDM4LzAvMkUxOUI5NzQwNUQ0OThEM0IwNjdBOUExMDA5Q0RD MUUwMkZCMTFDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGqq11sgwF6WovzxgXP+C68cRvFYYOLHbNAk H2urgcXeNEGw29zRzSmAO//XS+DA40VYaYO42WWQA5B+Fjgt3AnsmEcGdtpsCZcI CHgDHiwJ6L/snQAejF/OKlnNNTSL1EIUJGv44z8kaKOTPzJ2Nyg+vlGCj5iJkmI6 tF05BSeqT+btXw1zNcdDj+hf1gSp/ewQshIXrxxd4yGy7B3lEWsmZmfyvtSpfRWD hi59yo0I/zVxREQdEzrRWWrnjqhVi1tLon01j82swxj0QCFHMz3GdEF9PeXrhi9W 3yr8LN4pD8hs0CwFXOmP2SJVUszb8nbstG0x9CCq4Jw3Vl+4vWY= -----END CERTIFICATE-----Generated at Fri Sep 5 10:11:34 2025 by rpki-client