$ rpki-client -vvf repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft File: 2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft (raw, json) Hash identifier: s0SmjBHT1dKzf3t1HWnYqaBkjGTqVrWP2iqmiU7bdos= Subject key identifier: B9:B5:E0:AB:24:F8:FB:D9:D0:02:DF:F5:5F:B0:A4:30:45:7C:B7:12 Authority key identifier: 2E:19:B9:74:05:D4:98:D3:B0:67:A9:A1:00:9C:DC:1E:02:FB:11:CF Certificate issuer: /CN=2E19B97405D498D3B067A9A1009CDC1E02FB11CF Certificate serial: 49FBC89F34E8E76B5656018F9C5285D0CFE227A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft Manifest number: 02DB Signing time: Sun 15 Jun 2025 13:51:55 +0000 Manifest this update: Sun 15 Jun 2025 13:46:55 +0000 Manifest next update: Wed 18 Jun 2025 19:11:55 +0000 Files and hashes: 1: 3130332e32352e3139322e302f32322d3234203d3e20313332363532.roa (hash: uishawwbIWA59fc6E2EnmmHu56G13qCCnCUtoDK7S+I=) 2: 2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl (hash: JqG57c8ZUTsto8DKXCcCoclZPr5RgvThnl08GYuLfm4=) 3: 323430313a313363303a3a2f33322d3336203d3e20313332363532.roa (hash: 0b7ns7LWe1lh+q97xLHcz0n7NxFtE+fPLuYQJ8QmqSI=) 4: 3134362e3139362e34302e302f32322d3234203d3e20313332363532.roa (hash: plzShTny50kIRVpKPuAFTM+py4IIAUYkLzBiUxnyTJ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 19:11:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:fb:c8:9f:34:e8:e7:6b:56:56:01:8f:9c:52:85:d0:cf:e2:27:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E19B97405D498D3B067A9A1009CDC1E02FB11CF Validity Not Before: Jun 15 13:46:55 2025 GMT Not After : Jun 18 19:11:55 2025 GMT Subject: CN=B9B5E0AB24F8FBD9D002DFF55FB0A430457CB712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:de:0d:fc:fa:30:78:0e:03:e3:ab:04:45:87: 00:2c:66:08:e8:d8:c2:f9:0e:28:28:a4:9c:77:80: 9b:1f:31:2e:2a:a7:06:85:b1:f7:62:6f:8c:7a:b6: fe:7e:d5:64:a3:8f:e5:c6:ff:3c:62:cc:ce:c5:97: 43:6f:a3:88:dd:22:3e:ec:a6:44:d8:d6:1f:ed:a1: 0b:b3:99:2f:9a:57:46:f5:ff:1b:8a:af:83:6e:1e: 6d:ca:ad:7a:7a:c3:5b:ff:90:81:6c:4c:05:70:3d: 18:7b:d1:0f:58:d5:f6:4f:5c:f4:8d:f0:0f:75:11: 32:f1:d3:60:0d:4b:59:3d:b7:44:71:51:0d:de:6c: 91:e7:2e:16:7e:51:1c:16:06:ca:54:68:6a:82:dc: 92:3f:86:d7:27:5d:ad:8a:13:dd:c9:a3:ab:dd:d1: 2c:f0:7a:92:6a:04:af:f6:e4:20:c4:35:cc:be:8d: d7:0b:90:0b:41:a7:47:a1:f7:0b:0a:02:c7:89:eb: e8:f2:cd:a8:4c:fa:4f:44:92:40:ae:8b:d8:71:65: cd:8e:e1:83:cc:f7:91:7d:d4:e3:7d:90:33:4b:d5: 1f:b1:b5:68:eb:28:85:22:a6:97:50:4e:82:6f:10: 30:0e:f4:78:68:cc:83:cc:e0:16:6a:da:fe:5c:a4: 84:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B5:E0:AB:24:F8:FB:D9:D0:02:DF:F5:5F:B0:A4:30:45:7C:B7:12 X509v3 Authority Key Identifier: keyid:2E:19:B9:74:05:D4:98:D3:B0:67:A9:A1:00:9C:DC:1E:02:FB:11:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:0a:60:3b:5c:4c:b2:ec:fa:9e:df:71:8d:5d:42:d2:a1:d3: 4c:a3:e8:84:56:41:5c:d4:7a:e2:f4:83:7e:a3:55:99:88:30: 75:41:47:e7:68:cb:65:e3:12:9e:31:20:1f:72:be:b0:86:b6: 26:3a:07:3c:b3:19:52:41:30:eb:53:63:02:ee:24:5a:3f:99: 95:5b:b1:4f:e8:c0:a2:49:00:79:64:bc:6a:67:71:32:4c:4d: 28:71:82:ac:92:23:67:96:fd:43:53:91:cc:a9:9a:32:43:e5: 5c:32:fc:40:43:13:46:c6:dd:9b:b9:31:29:99:6f:35:0d:c3: e2:34:a6:56:ec:d8:62:6d:83:4c:10:9d:83:66:ce:7d:1c:65: 91:49:3b:7e:b4:c1:91:b0:f9:83:54:f6:ca:ce:25:63:70:1b: c0:07:23:fc:2c:71:64:77:f0:ab:74:eb:15:66:db:58:4a:66: 6b:d8:5f:21:4e:3e:e4:7d:9a:2c:d8:74:f6:79:7c:5e:6b:42: b2:4a:b4:37:ae:10:a8:19:dc:72:e5:96:e8:92:12:04:1d:ea: d4:58:a6:8a:e3:80:6d:ff:02:af:f8:c1:a6:7c:ad:b7:77:5b: db:7f:64:7f:b8:cd:7f:48:52:6c:87:d5:9d:2b:07:2e:20:1f: 03:ac:cd:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSfvInzTo52tWVgGPnFKF0M/iJ6MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUxOUI5NzQwNUQ0OThEM0IwNjdBOUExMDA5Q0RDMUUw MkZCMTFDRjAeFw0yNTA2MTUxMzQ2NTVaFw0yNTA2MTgxOTExNTVaMDMxMTAvBgNV BAMTKEI5QjVFMEFCMjRGOEZCRDlEMDAyREZGNTVGQjBBNDMwNDU3Q0I3MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh3g38+jB4DgPjqwRFhwAsZgjo 2ML5DigopJx3gJsfMS4qpwaFsfdib4x6tv5+1WSjj+XG/zxizM7Fl0Nvo4jdIj7s pkTY1h/toQuzmS+aV0b1/xuKr4NuHm3KrXp6w1v/kIFsTAVwPRh70Q9Y1fZPXPSN 8A91ETLx02ANS1k9t0RxUQ3ebJHnLhZ+URwWBspUaGqC3JI/htcnXa2KE93Jo6vd 0SzwepJqBK/25CDENcy+jdcLkAtBp0eh9wsKAseJ6+jyzahM+k9EkkCui9hxZc2O 4YPM95F91ON9kDNL1R+xtWjrKIUippdQToJvEDAO9HhozIPM4BZq2v5cpITDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUubXgqyT4+9nQAt/1X7CkMEV8txIwHwYDVR0j BBgwFoAULhm5dAXUmNOwZ6mhAJzcHgL7Ec8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjYzMmEyYy00MDZlLTQ1ZDctYTAyOC0yNjA0NzRjNzcwMzgvMC8yRTE5Qjk3NDA1 RDQ5OEQzQjA2N0E5QTEwMDlDREMxRTAyRkIxMUNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUxOUI5NzQwNUQ0OThEM0IwNjdBOUExMDA5Q0RDMUUwMkZC MTFDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2I2MzJhMmMtNDA2ZS00NWQ3LWEw MjgtMjYwNDc0Yzc3MDM4LzAvMkUxOUI5NzQwNUQ0OThEM0IwNjdBOUExMDA5Q0RD MUUwMkZCMTFDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIUKYDtcTLLs+p7fcY1dQtKh00yj6IRWQVzU euL0g36jVZmIMHVBR+doy2XjEp4xIB9yvrCGtiY6BzyzGVJBMOtTYwLuJFo/mZVb sU/owKJJAHlkvGpncTJMTShxgqySI2eW/UNTkcypmjJD5Vwy/EBDE0bG3Zu5MSmZ bzUNw+I0plbs2GJtg0wQnYNmzn0cZZFJO360wZGw+YNU9srOJWNwG8AHI/wscWR3 8Kt06xVm21hKZmvYXyFOPuR9mizYdPZ5fF5rQrJKtDeuEKgZ3HLlluiSEgQd6tRY porjgG3/Aq/4waZ8rbd3W9t/ZH+4zX9IUmyH1Z0rBy4gHwOszVI= -----END CERTIFICATE-----Generated at Mon Jun 16 20:48:32 2025 by rpki-client