$ rpki-client -vvf repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.mft File: 2ADCBF290A98776E6F59353351C879A1502B884A.mft (raw, json) Hash identifier: YHLMtih0yM5wjmgutIu3U+9fp/YJoKY3OXEvPOfUm38= Subject key identifier: 56:26:2F:EF:F9:59:FF:69:31:2E:81:94:4A:9D:D5:9B:42:3C:5A:1A Authority key identifier: 2A:DC:BF:29:0A:98:77:6E:6F:59:35:33:51:C8:79:A1:50:2B:88:4A Certificate issuer: /CN=2ADCBF290A98776E6F59353351C879A1502B884A Certificate serial: 3673C38AFDD5838FC4C00E1345FCF8AAAC012558 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2ADCBF290A98776E6F59353351C879A1502B884A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.mft Manifest number: 017F Signing time: Sun 01 Jun 2025 23:40:46 +0000 Manifest this update: Sun 01 Jun 2025 23:35:46 +0000 Manifest next update: Thu 05 Jun 2025 04:45:46 +0000 Files and hashes: 1: 3130332e35342e38322e302f32332d3233203d3e20313530353132.roa (hash: FjkCQEbxTkTrmju7umuTXr3UC7Hk/PD5qd4yUNE4PfI=) 2: 3130332e35342e38332e302f32342d3234203d3e20313530353132.roa (hash: TNPPWguy+EG+YXVjh98k8HLbiPmnDYSLszixyMOhlSg=) 3: 2ADCBF290A98776E6F59353351C879A1502B884A.crl (hash: z4lTgXnM+NcVtn2vHo9OWLWjtO4+YfTh4cYlAkMc60Q=) 4: 3130332e35342e38322e302f32342d3234203d3e20313530353132.roa (hash: Bn094jjpTmS3GhwwJiONFucK7tyqAYJ6uENssiFFaws=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.crl rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2ADCBF290A98776E6F59353351C879A1502B884A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 04:45:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:73:c3:8a:fd:d5:83:8f:c4:c0:0e:13:45:fc:f8:aa:ac:01:25:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ADCBF290A98776E6F59353351C879A1502B884A Validity Not Before: Jun 1 23:35:46 2025 GMT Not After : Jun 5 04:45:46 2025 GMT Subject: CN=56262FEFF959FF69312E81944A9DD59B423C5A1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c4:9d:f5:4d:50:c8:b5:d9:8f:be:18:74:e4: 88:24:4d:64:5f:0d:cc:91:1f:ed:86:fc:55:a5:c4: ee:fe:3c:35:2e:58:d1:5c:99:45:a3:0d:28:61:70: 46:6c:63:82:c4:cb:25:85:13:96:a0:78:6b:37:37: c6:6e:83:e8:74:03:1b:36:c8:66:cf:c2:5a:27:d1: b9:f6:82:95:ad:be:51:37:cc:b4:17:a6:fa:25:d4: 06:aa:f8:90:64:da:3e:47:db:87:85:1b:52:00:21: 92:a4:88:0d:88:31:90:ea:16:64:dd:8c:9f:ee:04: a9:ec:11:c8:30:92:49:8d:8f:a8:80:a9:1b:c0:fe: 82:c9:8a:9c:d7:a0:f6:8f:25:8b:06:0a:70:e0:be: 62:66:4a:29:29:77:f9:17:0f:40:46:ce:50:13:00: 7c:82:03:57:07:d8:d2:cf:8b:a2:78:2a:14:e7:49: 7d:1d:c4:e1:de:8a:ec:9f:85:1c:ec:21:21:a0:e3: 6a:94:73:96:c9:7f:88:65:a5:39:7f:c3:dc:92:56: 32:da:36:49:2f:84:1c:bf:d5:59:9f:6a:02:db:63: 09:c0:c6:d9:c8:70:86:84:7f:5f:d5:95:3a:e7:ce: 33:bc:12:6d:18:07:19:b2:44:89:4a:5b:71:14:76: 9f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:26:2F:EF:F9:59:FF:69:31:2E:81:94:4A:9D:D5:9B:42:3C:5A:1A X509v3 Authority Key Identifier: keyid:2A:DC:BF:29:0A:98:77:6E:6F:59:35:33:51:C8:79:A1:50:2B:88:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2ADCBF290A98776E6F59353351C879A1502B884A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:b0:51:0b:28:a1:8d:ff:75:48:ff:ab:e4:f2:07:2e:6c:f6: 60:04:15:16:c3:7f:49:f3:b8:5f:78:3c:0c:c0:9f:84:dc:cb: 79:4e:33:fb:a4:93:f2:ac:4e:d0:3a:c5:73:5b:bb:6f:cb:70: 8e:0e:0e:30:0c:26:eb:ef:1e:cf:6e:d6:b1:b6:5d:c7:2c:10: cf:1c:aa:8c:f0:c5:16:ed:77:0f:5c:0c:cf:61:d6:d5:12:68: 84:4b:92:3f:6f:84:aa:a1:b5:51:2d:2f:1a:9c:d5:d4:a2:8a: c0:26:11:7e:54:86:2e:16:ee:fd:0a:d4:eb:94:59:66:bc:75: 1f:01:d5:41:5a:73:c6:2f:98:2b:41:5c:df:01:7f:59:95:61: 9d:93:39:5c:56:e9:6a:0a:f6:4e:4b:21:3f:1c:9a:ad:33:6d: dc:b6:c2:62:8a:cb:1d:77:f0:3c:19:62:e2:5d:1c:d3:2e:e4: 88:05:7a:37:5a:75:69:65:05:39:85:4f:f6:9e:d5:13:f7:9a: be:3b:ef:a0:ea:d5:98:c0:08:a7:00:53:c7:79:37:ad:d5:d5: 1e:55:91:4d:d8:7d:6f:f9:45:34:14:d2:00:d6:56:51:c5:44: 23:62:65:48:6d:59:ac:5c:c7:99:4b:70:1e:d1:df:e7:b2:89: b9:95:76:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNnPDiv3Vg4/EwA4TRfz4qqwBJVgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFEQ0JGMjkwQTk4Nzc2RTZGNTkzNTMzNTFDODc5QTE1 MDJCODg0QTAeFw0yNTA2MDEyMzM1NDZaFw0yNTA2MDUwNDQ1NDZaMDMxMTAvBgNV BAMTKDU2MjYyRkVGRjk1OUZGNjkzMTJFODE5NDRBOURENTlCNDIzQzVBMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWxJ31TVDItdmPvhh05IgkTWRf DcyRH+2G/FWlxO7+PDUuWNFcmUWjDShhcEZsY4LEyyWFE5ageGs3N8Zug+h0Axs2 yGbPwlon0bn2gpWtvlE3zLQXpvol1Aaq+JBk2j5H24eFG1IAIZKkiA2IMZDqFmTd jJ/uBKnsEcgwkkmNj6iAqRvA/oLJipzXoPaPJYsGCnDgvmJmSikpd/kXD0BGzlAT AHyCA1cH2NLPi6J4KhTnSX0dxOHeiuyfhRzsISGg42qUc5bJf4hlpTl/w9ySVjLa NkkvhBy/1VmfagLbYwnAxtnIcIaEf1/VlTrnzjO8Em0YBxmyRIlKW3EUdp9HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUViYv7/lZ/2kxLoGUSp3Vm0I8WhowHwYDVR0j BBgwFoAUKty/KQqYd25vWTUzUch5oVAriEowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGRlOTQ2My02OGE3LTQ2MmQtOTQwOC1hN2MzOWNlNmU4ZmYvMC8yQURDQkYyOTBB OTg3NzZFNkY1OTM1MzM1MUM4NzlBMTUwMkI4ODRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkFEQ0JGMjkwQTk4Nzc2RTZGNTkzNTMzNTFDODc5QTE1MDJC ODg0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThkZTk0NjMtNjhhNy00NjJkLTk0 MDgtYTdjMzljZTZlOGZmLzAvMkFEQ0JGMjkwQTk4Nzc2RTZGNTkzNTMzNTFDODc5 QTE1MDJCODg0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACGwUQsooY3/dUj/q+TyBy5s9mAEFRbDf0nz uF94PAzAn4Tcy3lOM/ukk/KsTtA6xXNbu2/LcI4ODjAMJuvvHs9u1rG2XccsEM8c qozwxRbtdw9cDM9h1tUSaIRLkj9vhKqhtVEtLxqc1dSiisAmEX5Uhi4W7v0K1OuU WWa8dR8B1UFac8YvmCtBXN8Bf1mVYZ2TOVxW6WoK9k5LIT8cmq0zbdy2wmKKyx13 8DwZYuJdHNMu5IgFejdadWllBTmFT/ae1RP3mr4776Dq1ZjACKcAU8d5N63V1R5V kU3YfW/5RTQU0gDWVlHFRCNiZUhtWaxcx5lLcB7R3+eyibmVdk8= -----END CERTIFICATE-----Generated at Tue Jun 3 23:30:18 2025 by rpki-client