$ rpki-client -vvf repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft File: 2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft (raw, json) Hash identifier: QGiPXR6HBF74PnAL+iy3lQJAYfAlMvelPGmbP4e/sV4= Subject key identifier: F9:A9:00:0D:89:E6:F6:84:B3:DA:9C:FD:5D:FC:F6:FD:2A:46:73:79 Authority key identifier: 2E:2D:92:69:32:C5:C7:E2:96:93:1D:88:19:08:A4:BB:1E:98:EB:6D Certificate issuer: /CN=2E2D926932C5C7E296931D881908A4BB1E98EB6D Certificate serial: 7E82C13F687F563DCE5AE8AAA0169C3C43323E5C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft Manifest number: 0209 Signing time: Sat 05 Apr 2025 21:51:49 +0000 Manifest this update: Sat 05 Apr 2025 21:46:49 +0000 Manifest next update: Wed 09 Apr 2025 03:30:49 +0000 Files and hashes: 1: 3130332e3138312e3235302e302f32332d3233203d3e2039333431.roa (hash: VX04EL/wbd2do7GkgjsMSku0mt+fGXzZJka0o80KEQo=) 2: 3130332e3138312e3235312e302f32342d3234203d3e2039333431.roa (hash: HM/zqihNRtDQE+DnhG8b5XIeNqQOzvMA43WJGWaoV58=) 3: 3130332e3138312e3235302e302f32342d3234203d3e2039333431.roa (hash: Kh7pHFYHeApzfjYgrJNd5I2iP4JAPgnfkCfLUW4wIPU=) 4: 2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl (hash: +28Rfmr9+wZYid1Tf2sv7rN3H6suobvds9M6szRSKG0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 03:30:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:82:c1:3f:68:7f:56:3d:ce:5a:e8:aa:a0:16:9c:3c:43:32:3e:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E2D926932C5C7E296931D881908A4BB1E98EB6D Validity Not Before: Apr 5 21:46:49 2025 GMT Not After : Apr 9 03:30:49 2025 GMT Subject: CN=F9A9000D89E6F684B3DA9CFD5DFCF6FD2A467379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ad:e6:e3:88:ab:c6:97:2e:f8:01:78:20:3d: ed:c8:a6:82:bf:1a:80:58:29:22:16:d6:b5:a7:73: 7f:ec:fe:1a:ff:c3:3f:f2:50:2f:c5:ca:f2:56:fb: 56:5b:cf:50:73:45:99:f7:40:80:78:57:07:3d:65: ed:33:aa:2b:f1:53:d2:fa:2a:5c:ec:bb:33:66:5c: af:59:21:71:95:cb:73:49:a9:72:42:7e:cf:66:89: d5:34:8b:da:5d:8f:46:e8:a0:8a:d8:e5:83:1e:da: 24:e2:1d:fd:1f:db:4e:fc:9c:32:f0:7b:2d:db:48: b6:bc:85:c2:cf:c7:2e:25:4b:3f:34:82:64:c0:65: 72:90:5b:3d:70:4e:4c:f1:e2:31:3f:06:82:1f:f6: 38:aa:54:5d:2b:eb:85:7b:b6:92:e5:22:b6:78:cd: 27:a0:37:f7:8a:63:54:21:c5:ea:28:19:b3:82:a1: de:85:b0:30:57:4e:7e:5a:c3:66:46:2b:6b:74:fb: e6:7e:30:61:5d:3c:c8:e1:bc:dd:ed:a9:30:09:38: 73:8a:45:0c:1d:2d:48:7c:9e:b1:b6:2e:2c:09:19: 0e:05:7a:ba:79:90:a6:98:91:8d:2d:54:1a:f5:2b: 98:e5:bb:2d:cd:a5:4d:57:f2:58:b1:7a:26:c3:ef: 67:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A9:00:0D:89:E6:F6:84:B3:DA:9C:FD:5D:FC:F6:FD:2A:46:73:79 X509v3 Authority Key Identifier: keyid:2E:2D:92:69:32:C5:C7:E2:96:93:1D:88:19:08:A4:BB:1E:98:EB:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:3e:ba:dc:43:d6:5a:5c:29:a2:8a:1c:32:4c:31:0d:56:c7: 73:28:6f:c2:60:74:a0:9d:fa:10:61:68:6f:93:7f:ab:f9:d5: c2:97:3a:26:07:49:19:a8:13:c8:73:d2:57:da:11:2b:cc:e6: 3b:12:57:60:fb:64:a9:e4:24:82:79:91:96:72:48:17:49:a4: 4c:17:a4:b0:b6:0c:22:88:6a:13:19:83:1e:75:8f:d4:dc:89: 9e:4f:da:e5:bd:bf:ac:c9:25:f9:a1:68:4d:6d:29:76:27:c9: 7c:f4:1d:41:60:fa:a4:69:8a:89:2c:06:83:1f:3c:d7:47:02: ba:b8:7d:0e:b0:5e:89:60:52:a8:12:a9:92:77:29:8d:74:81: 0c:95:3b:ce:d4:1e:60:79:0b:b3:9a:3e:a8:3e:74:73:75:88: 56:b0:bf:94:c4:87:5d:c1:a7:6e:4b:e7:59:53:29:8a:e0:91: 20:5d:8e:9d:04:7d:06:3b:37:99:14:09:6b:93:68:0f:df:41: 9a:fb:60:91:6f:97:9a:34:a5:0f:11:ba:23:ce:5f:b5:c7:67: de:bf:6e:fc:71:65:24:ad:07:cb:c3:ee:d1:b8:1b:62:ab:70: 16:54:68:46:ce:c1:2f:3c:3c:ae:e6:28:7d:64:1f:19:68:1c: 2c:19:6b:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfoLBP2h/Vj3OWuiqoBacPEMyPlwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0QkIx RTk4RUI2RDAeFw0yNTA0MDUyMTQ2NDlaFw0yNTA0MDkwMzMwNDlaMDMxMTAvBgNV BAMTKEY5QTkwMDBEODlFNkY2ODRCM0RBOUNGRDVERkNGNkZEMkE0NjczNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnrebjiKvGly74AXggPe3IpoK/ GoBYKSIW1rWnc3/s/hr/wz/yUC/FyvJW+1Zbz1BzRZn3QIB4Vwc9Ze0zqivxU9L6 KlzsuzNmXK9ZIXGVy3NJqXJCfs9midU0i9pdj0booIrY5YMe2iTiHf0f2078nDLw ey3bSLa8hcLPxy4lSz80gmTAZXKQWz1wTkzx4jE/BoIf9jiqVF0r64V7tpLlIrZ4 zSegN/eKY1QhxeooGbOCod6FsDBXTn5aw2ZGK2t0++Z+MGFdPMjhvN3tqTAJOHOK RQwdLUh8nrG2LiwJGQ4Ferp5kKaYkY0tVBr1K5jluy3NpU1X8lixeibD72dhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+akADYnm9oSz2pz9Xfz2/SpGc3kwHwYDVR0j BBgwFoAULi2SaTLFx+KWkx2IGQikux6Y620wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmE1ODllZi05ZjNkLTQzYmMtYmEzMC1mYTMyNmI3MWY3ODcvMC8yRTJEOTI2OTMy QzVDN0UyOTY5MzFEODgxOTA4QTRCQjFFOThFQjZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0QkIxRTk4 RUI2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZhNTg5ZWYtOWYzZC00M2JjLWJh MzAtZmEzMjZiNzFmNzg3LzAvMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0 QkIxRTk4RUI2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIc+utxD1lpcKaKKHDJMMQ1Wx3Mob8JgdKCd +hBhaG+Tf6v51cKXOiYHSRmoE8hz0lfaESvM5jsSV2D7ZKnkJIJ5kZZySBdJpEwX pLC2DCKIahMZgx51j9TciZ5P2uW9v6zJJfmhaE1tKXYnyXz0HUFg+qRpioksBoMf PNdHArq4fQ6wXolgUqgSqZJ3KY10gQyVO87UHmB5C7OaPqg+dHN1iFawv5TEh13B p25L51lTKYrgkSBdjp0EfQY7N5kUCWuTaA/fQZr7YJFvl5o0pQ8RuiPOX7XHZ96/ bvxxZSStB8vD7tG4G2KrcBZUaEbOwS88PK7mKH1kHxloHCwZa7E= -----END CERTIFICATE-----Generated at Sun Apr 6 04:35:08 2025 by rpki-client