$ rpki-client -vvf repo-rpki.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.mft File: 26AE16DF2BF0FD5184FEC655250D244739FA9FC4.mft (raw, json) Hash identifier: hJnzrcWmydXDN3GZXEfGhAUlCwf5zNcjcsVrzzBD1ac= Subject key identifier: BE:80:61:39:6F:4A:F7:2F:E6:13:C2:5D:E0:42:BF:5F:01:DA:68:EB Authority key identifier: 26:AE:16:DF:2B:F0:FD:51:84:FE:C6:55:25:0D:24:47:39:FA:9F:C4 Certificate issuer: /CN=26AE16DF2BF0FD5184FEC655250D244739FA9FC4 Certificate serial: 6BFDB0A8638D0E544318AFB8C80263ED9A0BE97A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.mft Manifest number: 02C3 Signing time: Tue 11 Mar 2025 22:30:47 +0000 Manifest this update: Tue 11 Mar 2025 22:25:47 +0000 Manifest next update: Fri 14 Mar 2025 22:59:47 +0000 Files and hashes: 1: 3130332e3137332e3133332e302f32342d3234203d3e203438343635.roa (hash: VONDB0sjMvNA9R0KzuDTxHk2C5/253xi9WC/ikSH9oo=) 2: 26AE16DF2BF0FD5184FEC655250D244739FA9FC4.crl (hash: lY9mqhFKMnY2nz2+FMQNea53M7Zx0HCLSqDDLVjO8ak=) 3: 3130332e3137332e3133332e302f32342d3234203d3e20313437303834.roa (hash: g1wr2MBVGH7eht8KZrxF8fBeplEQhJUwFAn1HB+/U7k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.crl rsync://repo-rpki.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Mar 2025 22:59:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:fd:b0:a8:63:8d:0e:54:43:18:af:b8:c8:02:63:ed:9a:0b:e9:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26AE16DF2BF0FD5184FEC655250D244739FA9FC4 Validity Not Before: Mar 11 22:25:47 2025 GMT Not After : Mar 14 22:59:47 2025 GMT Subject: CN=BE8061396F4AF72FE613C25DE042BF5F01DA68EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a5:c1:c4:f5:63:21:9a:a2:f6:dd:02:21:6d: ae:35:49:1a:81:c0:bf:5c:78:8a:4f:86:75:0a:b5: 83:c9:9a:7c:93:fb:bb:47:a0:96:7c:42:72:54:d5: 4d:c9:19:6c:11:ef:ed:f1:dd:75:8c:99:f8:32:57: b5:e8:fd:f3:22:c5:d0:25:3d:49:72:5e:12:cb:4c: 99:7f:10:a2:62:d2:9c:d2:0d:ac:39:5f:9f:62:18: 8a:9b:53:48:8a:3f:91:89:b0:f1:d4:8f:c5:bb:c3: 07:2a:a9:71:47:29:a0:68:3e:dc:e6:6f:ac:a1:14: e4:02:6c:20:72:f8:36:31:d0:07:e1:82:7f:b7:4f: 1c:9a:79:ed:39:d0:b3:56:a2:02:e3:74:9c:77:f9: 3f:89:2a:c4:d7:51:1e:27:b1:34:4b:d5:f5:ca:ae: 2a:5c:75:35:6e:0b:ee:50:8d:c6:06:95:1c:d1:8a: f5:e2:a9:c3:4b:5b:40:8b:96:3c:ed:d6:4c:d4:46: 11:91:18:59:b3:9c:84:8b:81:d5:13:3a:28:12:88: 5a:87:ff:70:86:1d:7f:a5:2a:0c:e8:67:3f:20:7b: cd:3e:5c:a6:71:29:74:c2:10:17:ed:c6:31:f3:12: 4a:78:05:39:0d:68:c7:c8:0d:b3:c7:94:fa:9d:17: 16:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:80:61:39:6F:4A:F7:2F:E6:13:C2:5D:E0:42:BF:5F:01:DA:68:EB X509v3 Authority Key Identifier: keyid:26:AE:16:DF:2B:F0:FD:51:84:FE:C6:55:25:0D:24:47:39:FA:9F:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:18:f2:fb:1c:96:18:41:f3:ca:28:fc:74:80:6e:a9:2b:b5: 71:88:3b:f1:98:03:0c:c9:8b:ea:75:34:b5:93:db:71:09:bc: 43:dc:47:ba:d1:38:41:49:a5:ed:d0:60:7b:a9:a1:ae:57:dc: 24:65:ff:9e:0f:be:91:c1:20:b8:0b:4e:1d:c6:56:cd:b2:6d: 1e:9e:c0:83:15:2e:4d:f0:9c:58:a5:f6:5b:a9:5b:f8:0a:1e: fa:7b:79:74:76:a0:90:2c:d3:bf:ed:28:25:b5:e7:0d:39:d4: 5d:38:f6:b9:dd:ca:55:f2:44:25:e4:49:40:ce:b7:ec:31:ed: 6e:8a:5c:43:aa:18:e4:e1:0f:8a:52:e7:10:67:82:ae:b3:db: f5:5e:b5:9e:59:de:04:28:d8:e3:54:9d:5e:1d:11:dd:a0:62: 26:8d:b7:b5:c1:89:10:9c:00:69:b1:e5:86:13:6b:dc:73:ab: 53:70:51:2f:1e:a3:b1:7e:2a:6f:0c:a8:de:ba:d4:e6:41:7a: 6f:22:56:95:05:8b:9c:7d:cf:4c:21:b5:81:22:50:39:9a:5c: 21:a3:13:0f:33:cc:0b:5a:9c:dd:f9:6d:08:38:04:7c:e7:20: 0d:e3:fc:f2:de:c5:9e:51:fb:1e:18:07:17:11:63:a6:82:99: 34:85:cc:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa/2wqGONDlRDGK+4yAJj7ZoL6XowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjZBRTE2REYyQkYwRkQ1MTg0RkVDNjU1MjUwRDI0NDcz OUZBOUZDNDAeFw0yNTAzMTEyMjI1NDdaFw0yNTAzMTQyMjU5NDdaMDMxMTAvBgNV BAMTKEJFODA2MTM5NkY0QUY3MkZFNjEzQzI1REUwNDJCRjVGMDFEQTY4RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzpcHE9WMhmqL23QIhba41SRqB wL9ceIpPhnUKtYPJmnyT+7tHoJZ8QnJU1U3JGWwR7+3x3XWMmfgyV7Xo/fMixdAl PUlyXhLLTJl/EKJi0pzSDaw5X59iGIqbU0iKP5GJsPHUj8W7wwcqqXFHKaBoPtzm b6yhFOQCbCBy+DYx0Afhgn+3Txyaee050LNWogLjdJx3+T+JKsTXUR4nsTRL1fXK ripcdTVuC+5QjcYGlRzRivXiqcNLW0CLljzt1kzURhGRGFmznISLgdUTOigSiFqH /3CGHX+lKgzoZz8ge80+XKZxKXTCEBftxjHzEkp4BTkNaMfIDbPHlPqdFxaFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvoBhOW9K9y/mE8Jd4EK/XwHaaOswHwYDVR0j BBgwFoAUJq4W3yvw/VGE/sZVJQ0kRzn6n8QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OGM0YmExMi02M2JiLTQ1NTAtYWMwZi01M2YwOGM0NjM1MTEvMC8yNkFFMTZERjJC RjBGRDUxODRGRUM2NTUyNTBEMjQ0NzM5RkE5RkM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjZBRTE2REYyQkYwRkQ1MTg0RkVDNjU1MjUwRDI0NDczOUZB OUZDNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOThjNGJhMTItNjNiYi00NTUwLWFj MGYtNTNmMDhjNDYzNTExLzAvMjZBRTE2REYyQkYwRkQ1MTg0RkVDNjU1MjUwRDI0 NDczOUZBOUZDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADkY8vsclhhB88oo/HSAbqkrtXGIO/GYAwzJ i+p1NLWT23EJvEPcR7rROEFJpe3QYHupoa5X3CRl/54PvpHBILgLTh3GVs2ybR6e wIMVLk3wnFil9lupW/gKHvp7eXR2oJAs07/tKCW15w051F049rndylXyRCXkSUDO t+wx7W6KXEOqGOThD4pS5xBngq6z2/VetZ5Z3gQo2ONUnV4dEd2gYiaNt7XBiRCc AGmx5YYTa9xzq1NwUS8eo7F+Km8MqN661OZBem8iVpUFi5x9z0whtYEiUDmaXCGj Ew8zzAtanN35bQg4BHznIA3j/PLexZ5R+x4YBxcRY6aCmTSFzB0= -----END CERTIFICATE-----Generated at Thu Mar 13 21:33:54 2025 by rpki-client