$ rpki-client -vvf repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft File: 2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft (raw, json) Hash identifier: FE8Aw3vkN+5TIeMJHTwA9aJUzzvO3ZUy9bak+zuusN4= Subject key identifier: 32:57:AB:5E:99:49:6D:16:24:83:C3:EB:02:C4:CC:A3:84:51:0C:89 Authority key identifier: 2A:DD:D4:03:51:73:FA:C3:BB:39:49:CB:36:CC:EF:25:53:79:8B:FC Certificate issuer: /CN=2ADDD4035173FAC3BB3949CB36CCEF2553798BFC Certificate serial: 1B16B0A849E07E94230023F8FAD7AC4144FFFCF3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft Manifest number: B2 Signing time: Sun 15 Jun 2025 12:40:39 +0000 Manifest this update: Sun 15 Jun 2025 12:35:39 +0000 Manifest next update: Wed 18 Jun 2025 13:01:39 +0000 Files and hashes: 1: 2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.crl (hash: H/TNSHxHMStU98BlZWIHd9wOaFquxv2UTfSIPL5Gf0s=) 2: 3135372e32302e3234342e302f32342d3234203d3e20313338303839.roa (hash: teoM6MXntxfZebuRvj4HuDCmBJE7bmAYK9p8NliSwzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.crl rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 13:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:16:b0:a8:49:e0:7e:94:23:00:23:f8:fa:d7:ac:41:44:ff:fc:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ADDD4035173FAC3BB3949CB36CCEF2553798BFC Validity Not Before: Jun 15 12:35:39 2025 GMT Not After : Jun 18 13:01:39 2025 GMT Subject: CN=3257AB5E99496D162483C3EB02C4CCA384510C89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c0:a4:0e:15:ca:3c:55:4f:84:c4:fe:cb:b8: a6:a5:17:5a:61:db:75:36:92:85:65:db:b4:ba:b2: 79:71:70:5c:09:a8:5a:1e:ec:bd:4c:66:bb:be:b2: 82:ca:97:2f:11:2c:1f:8c:79:d4:2f:39:ad:b9:f2: 80:25:ca:21:71:85:be:2a:6e:2a:50:e3:b0:6c:16: 44:ef:50:46:00:b0:6e:e1:3e:2c:f5:74:54:12:99: d2:c6:b1:86:55:6d:63:1d:85:73:29:24:d5:38:45: 87:e4:0f:a4:d4:90:f6:c6:c0:df:e8:c4:ed:92:c7: 76:79:52:6a:f9:ab:0f:fd:c8:cc:f3:27:17:33:0b: 97:9d:ec:90:52:6d:88:b5:e6:a4:2d:11:a4:cd:d5: 72:b4:4b:05:3c:42:3b:15:b0:92:4a:33:cd:12:ec: a0:eb:29:f9:4a:4e:6a:a8:40:e7:35:bd:43:b3:37: 9b:cf:ce:b0:b9:ce:64:cf:61:c5:72:22:48:60:f8: 58:3f:6d:e0:07:b4:40:29:bf:08:4c:f4:ce:06:d7: d4:fc:74:20:d6:b0:8e:2b:0a:a2:e2:bf:7b:e3:93: a5:a3:61:84:80:7e:3e:79:b3:dd:55:f5:2d:75:c1: e6:6c:2c:4e:6c:82:68:96:7e:11:00:b8:64:ea:76: 27:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:57:AB:5E:99:49:6D:16:24:83:C3:EB:02:C4:CC:A3:84:51:0C:89 X509v3 Authority Key Identifier: keyid:2A:DD:D4:03:51:73:FA:C3:BB:39:49:CB:36:CC:EF:25:53:79:8B:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:02:39:92:0e:46:82:1e:27:8a:aa:90:ef:ba:56:15:f0:e1: db:7d:77:f9:95:83:71:8d:8e:55:59:d7:6b:60:5d:a4:c1:b6: 78:a6:06:49:45:2e:ae:03:c9:9d:c8:ea:7b:eb:54:96:85:15: 43:80:ae:33:17:6d:f4:38:91:3b:b4:db:b3:9c:5c:d7:5c:5a: bd:a2:f8:af:65:44:e6:16:bf:3e:1e:7e:3d:f6:6c:ae:9d:4e: 62:4e:a6:82:0a:21:98:ee:a6:07:c8:1e:47:9d:d2:cf:ec:e0: e9:e3:55:6e:3a:76:13:61:b5:9f:5b:4b:a9:43:63:36:ca:c6: 42:92:7c:d3:1a:9d:c8:38:73:62:72:bb:74:8c:7c:0c:97:6b: ec:88:4b:a4:82:0e:e6:ec:7f:79:67:c1:39:90:45:8d:8a:a3: e0:7f:98:a9:3c:6a:04:3a:d2:70:ad:09:42:8f:26:17:6a:76: d7:9d:a9:7d:00:e8:af:57:46:75:b2:68:50:b9:f6:a6:ca:f9: a3:6c:1e:4d:12:da:ab:fc:7c:2a:e9:24:03:e2:fb:3e:4e:85: a6:20:ee:ba:08:f5:b3:82:e5:10:d3:c0:24:55:bc:64:ff:37: 66:01:fe:7b:3c:57:d2:d8:ad:7e:92:5a:d2:22:4a:50:6b:46: 4c:b5:83:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGxawqEngfpQjACP4+tesQUT//PMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFEREQ0MDM1MTczRkFDM0JCMzk0OUNCMzZDQ0VGMjU1 Mzc5OEJGQzAeFw0yNTA2MTUxMjM1MzlaFw0yNTA2MTgxMzAxMzlaMDMxMTAvBgNV BAMTKDMyNTdBQjVFOTk0OTZEMTYyNDgzQzNFQjAyQzRDQ0EzODQ1MTBDODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwwKQOFco8VU+ExP7LuKalF1ph 23U2koVl27S6snlxcFwJqFoe7L1MZru+soLKly8RLB+MedQvOa258oAlyiFxhb4q bipQ47BsFkTvUEYAsG7hPiz1dFQSmdLGsYZVbWMdhXMpJNU4RYfkD6TUkPbGwN/o xO2Sx3Z5Umr5qw/9yMzzJxczC5ed7JBSbYi15qQtEaTN1XK0SwU8QjsVsJJKM80S 7KDrKflKTmqoQOc1vUOzN5vPzrC5zmTPYcVyIkhg+Fg/beAHtEApvwhM9M4G19T8 dCDWsI4rCqLiv3vjk6WjYYSAfj55s91V9S11weZsLE5sgmiWfhEAuGTqdid/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMlerXplJbRYkg8PrAsTMo4RRDIkwHwYDVR0j BBgwFoAUKt3UA1Fz+sO7OUnLNszvJVN5i/wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODY3YTJlZS1kNDExLTRmZjgtOWY1Yy0zNWQwMzQxMjNmODQvMC8yQURERDQwMzUx NzNGQUMzQkIzOTQ5Q0IzNkNDRUYyNTUzNzk4QkZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkFEREQ0MDM1MTczRkFDM0JCMzk0OUNCMzZDQ0VGMjU1Mzc5 OEJGQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjg2N2EyZWUtZDQxMS00ZmY4LTlm NWMtMzVkMDM0MTIzZjg0LzAvMkFEREQ0MDM1MTczRkFDM0JCMzk0OUNCMzZDQ0VG MjU1Mzc5OEJGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACgCOZIORoIeJ4qqkO+6VhXw4dt9d/mVg3GN jlVZ12tgXaTBtnimBklFLq4DyZ3I6nvrVJaFFUOArjMXbfQ4kTu027OcXNdcWr2i +K9lROYWvz4efj32bK6dTmJOpoIKIZjupgfIHked0s/s4OnjVW46dhNhtZ9bS6lD YzbKxkKSfNMancg4c2Jyu3SMfAyXa+yIS6SCDubsf3lnwTmQRY2Ko+B/mKk8agQ6 0nCtCUKPJhdqdtedqX0A6K9XRnWyaFC59qbK+aNsHk0S2qv8fCrpJAPi+z5OhaYg 7roI9bOC5RDTwCRVvGT/N2YB/ns8V9LYrX6SWtIiSlBrRky1gxQ= -----END CERTIFICATE-----Generated at Mon Jun 16 11:02:17 2025 by rpki-client