$ rpki-client -vvf repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft File: 26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft (raw, json) Hash identifier: e05QkJJMCo9IgAq1rilHTvA2I+UhyQfmUgi1Spr1lXY= Subject key identifier: 4B:58:86:9E:D0:2F:33:7B:CD:BC:2F:A6:50:FF:AB:86:46:E0:75:14 Authority key identifier: 26:C0:12:47:69:3F:68:CF:DA:1F:8C:B6:B8:8F:7A:37:00:D3:00:01 Certificate issuer: /CN=26C01247693F68CFDA1F8CB6B88F7A3700D30001 Certificate serial: 04C8904812A3F9D949A680AE05DB065807FE2B99 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26C01247693F68CFDA1F8CB6B88F7A3700D30001.cer Subject info access: rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft Manifest number: 023E Signing time: Wed 04 Jun 2025 19:32:22 +0000 Manifest this update: Wed 04 Jun 2025 19:27:22 +0000 Manifest next update: Sat 07 Jun 2025 23:40:22 +0000 Files and hashes: 1: 3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa (hash: 74TGkae1+QCuTSaWAZ/1dR0+kJTY94tmxgSufeIPFe8=) 2: 3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa (hash: sGDel48okAqvaV/rcb1x3ACW4s1s006aJg3vUEaDkGw=) 3: 323030313a6466373a376438303a3a2f34382d3438203d3e20313431393039.roa (hash: 1ypZTh1uqX7Kh/HgM6WUDlwDLRHdZ90Km18x/Ynnn+Y=) 4: 26C01247693F68CFDA1F8CB6B88F7A3700D30001.crl (hash: vmNKOD480JkWktRyQ9SxAf+kOtWjrqcDuOi5lzOTUC8=) 5: 3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa (hash: d1iOOjv6qaBSXhMhm+Csiy2EgfiQomEVVv4AskXzPBg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.crl rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26C01247693F68CFDA1F8CB6B88F7A3700D30001.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 23:40:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:c8:90:48:12:a3:f9:d9:49:a6:80:ae:05:db:06:58:07:fe:2b:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26C01247693F68CFDA1F8CB6B88F7A3700D30001 Validity Not Before: Jun 4 19:27:22 2025 GMT Not After : Jun 7 23:40:22 2025 GMT Subject: CN=4B58869ED02F337BCDBC2FA650FFAB8646E07514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f6:13:85:8b:1d:b1:05:3e:1a:e5:e5:d1:01: 79:48:1e:7b:96:1e:a4:cc:ce:7f:01:5a:d6:82:bd: 91:25:e8:1e:52:ce:b7:37:7c:cb:6a:62:86:6c:8a: 93:0a:d7:48:4b:10:53:75:ae:52:93:fc:cc:50:58: a7:04:4b:c2:03:a1:3b:1e:02:e0:6e:e4:cb:b8:90: 22:f8:b2:a8:37:45:17:28:b3:59:d9:3d:47:99:49: a1:5a:6e:d5:05:11:b2:ea:fb:3f:09:9e:9f:ac:e6: 33:0f:4d:f2:f6:02:a4:c2:4f:f0:b8:ed:aa:65:3f: fd:3d:98:a6:c6:b9:0c:7f:ca:66:e6:c8:0b:95:47: eb:17:42:42:37:ab:76:1b:dd:0a:6a:d5:ae:9c:d2: 54:20:1c:19:11:0b:9a:c0:12:ea:f9:9f:46:90:8c: 6f:96:47:bf:ad:c2:2b:32:35:da:74:75:3a:8b:b5: 09:ab:97:8d:09:99:7d:78:b5:a6:23:49:4e:0c:2f: 97:d1:0f:da:a3:41:ae:e2:d3:d9:ed:94:4b:77:79: f2:dd:87:78:87:be:fa:95:a4:a8:7e:f2:78:8a:b5: 49:f8:bb:35:62:67:42:78:bf:ab:1a:38:67:81:81: a5:29:57:db:33:c8:9b:5b:1b:77:14:78:d2:7b:2b: 6a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:58:86:9E:D0:2F:33:7B:CD:BC:2F:A6:50:FF:AB:86:46:E0:75:14 X509v3 Authority Key Identifier: keyid:26:C0:12:47:69:3F:68:CF:DA:1F:8C:B6:B8:8F:7A:37:00:D3:00:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26C01247693F68CFDA1F8CB6B88F7A3700D30001.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:3c:df:78:2e:89:7c:17:85:26:e9:b5:a0:91:d2:81:90:b9: 4c:b5:97:4b:54:0f:4a:4f:c1:0a:7e:32:87:7a:d2:3d:1c:4c: ca:50:10:65:b9:3d:4d:d5:32:6e:78:8c:2e:a1:8b:27:6f:38: 90:16:bf:53:b5:ef:cb:b0:92:5b:b2:97:f5:d0:f3:59:3d:ad: 3e:53:9e:ae:e6:25:61:0e:e7:6e:c7:52:78:d6:82:13:a9:56: da:95:d8:07:5d:17:b9:a0:a8:96:12:b2:0f:d7:db:3c:59:d0: d3:4d:52:99:61:09:49:82:a9:ee:a3:0f:91:da:68:aa:62:71: d2:a0:de:12:c6:ea:c6:f3:c9:c8:af:ad:63:aa:13:1e:6d:0a: 11:5a:64:db:1c:52:f9:16:4f:41:7a:b5:fb:ad:3e:5a:05:b5: dd:08:7b:00:48:af:71:89:87:aa:b9:a3:63:12:4b:2e:4d:a3: 71:a2:7d:5a:87:80:fe:a5:7b:c0:7f:b1:2a:17:89:d4:1c:58: a1:b7:49:36:17:74:46:53:71:e2:95:de:e2:ae:48:29:2b:3b: f7:8c:a3:0f:0e:d8:c9:c3:02:ac:fe:39:a1:de:2f:ae:aa:39: 23:6b:d2:66:90:bb:b1:40:4c:90:27:d7:95:18:51:1d:be:4c: 7a:d9:e0:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBMiQSBKj+dlJpoCuBdsGWAf+K5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjZDMDEyNDc2OTNGNjhDRkRBMUY4Q0I2Qjg4RjdBMzcw MEQzMDAwMTAeFw0yNTA2MDQxOTI3MjJaFw0yNTA2MDcyMzQwMjJaMDMxMTAvBgNV BAMTKDRCNTg4NjlFRDAyRjMzN0JDREJDMkZBNjUwRkZBQjg2NDZFMDc1MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw9hOFix2xBT4a5eXRAXlIHnuW HqTMzn8BWtaCvZEl6B5Szrc3fMtqYoZsipMK10hLEFN1rlKT/MxQWKcES8IDoTse AuBu5Mu4kCL4sqg3RRcos1nZPUeZSaFabtUFEbLq+z8Jnp+s5jMPTfL2AqTCT/C4 7aplP/09mKbGuQx/ymbmyAuVR+sXQkI3q3Yb3Qpq1a6c0lQgHBkRC5rAEur5n0aQ jG+WR7+twisyNdp0dTqLtQmrl40JmX14taYjSU4ML5fRD9qjQa7i09ntlEt3efLd h3iHvvqVpKh+8niKtUn4uzViZ0J4v6saOGeBgaUpV9szyJtbG3cUeNJ7K2qjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS1iGntAvM3vNvC+mUP+rhkbgdRQwHwYDVR0j BBgwFoAUJsASR2k/aM/aH4y2uI96NwDTAAEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDFjNGQ2MS1kY2VmLTRhMjAtYmQ0Yy1hMjgyYTM3YWE2OWUvMC8yNkMwMTI0NzY5 M0Y2OENGREExRjhDQjZCODhGN0EzNzAwRDMwMDAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjZDMDEyNDc2OTNGNjhDRkRBMUY4Q0I2Qjg4RjdBMzcwMEQz MDAwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAxYzRkNjEtZGNlZi00YTIwLWJk NGMtYTI4MmEzN2FhNjllLzAvMjZDMDEyNDc2OTNGNjhDRkRBMUY4Q0I2Qjg4RjdB MzcwMEQzMDAwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABU833guiXwXhSbptaCR0oGQuUy1l0tUD0pP wQp+Mod60j0cTMpQEGW5PU3VMm54jC6hiydvOJAWv1O178uwkluyl/XQ81k9rT5T nq7mJWEO527HUnjWghOpVtqV2AddF7mgqJYSsg/X2zxZ0NNNUplhCUmCqe6jD5Ha aKpicdKg3hLG6sbzycivrWOqEx5tChFaZNscUvkWT0F6tfutPloFtd0IewBIr3GJ h6q5o2MSSy5No3GifVqHgP6le8B/sSoXidQcWKG3STYXdEZTceKV3uKuSCkrO/eM ow8O2MnDAqz+OaHeL66qOSNr0maQu7FATJAn15UYUR2+THrZ4NA= -----END CERTIFICATE-----Generated at Thu Jun 5 18:15:40 2025 by rpki-client