$ rpki-client -vvf repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft File: 2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft (raw, json) Hash identifier: ya/qTvTjVRCPd9Y8UUcdv3OZcCxUIkn+jeehyBHEITI= Subject key identifier: F4:1B:E5:CA:C2:36:26:D8:C4:06:99:8D:87:E7:41:12:B2:40:85:A0 Authority key identifier: 2E:19:B9:74:05:D4:98:D3:B0:67:A9:A1:00:9C:DC:1E:02:FB:11:CF Certificate issuer: /CN=2E19B97405D498D3B067A9A1009CDC1E02FB11CF Certificate serial: 61C259843CB0B19BA373BCCC948AEA3790967154 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft Manifest number: 02F2 Signing time: Mon 04 Aug 2025 16:31:59 +0000 Manifest this update: Mon 04 Aug 2025 16:26:59 +0000 Manifest next update: Fri 08 Aug 2025 01:14:59 +0000 Files and hashes: 1: 2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl (hash: RBEdCZVaRfQ98yrsF1mLPihe9Z9Txo/fSq3JoFy/sSY=) 2: 3134362e3139362e34302e302f32322d3234203d3e20313332363532.roa (hash: n+xUq9a7n5f6ndT7big4scouCH78ut4B4QszfPAlm80=) 3: 3130332e32352e3139322e302f32322d3234203d3e20313332363532.roa (hash: d+MQp3eqG/C/hSPziIw4OmNz4U3nA5FN+ZaHxiNIjvo=) 4: 323430313a313363303a3a2f33322d3336203d3e20313332363532.roa (hash: 0b7ns7LWe1lh+q97xLHcz0n7NxFtE+fPLuYQJ8QmqSI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 01:14:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:c2:59:84:3c:b0:b1:9b:a3:73:bc:cc:94:8a:ea:37:90:96:71:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E19B97405D498D3B067A9A1009CDC1E02FB11CF Validity Not Before: Aug 4 16:26:59 2025 GMT Not After : Aug 8 01:14:59 2025 GMT Subject: CN=F41BE5CAC23626D8C406998D87E74112B24085A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:be:93:3d:a7:c8:3a:26:1d:f9:57:c4:a4:04: 44:ed:10:2c:ff:6d:17:ae:65:e1:a1:2b:6d:83:03: 86:10:11:4f:cb:ce:8a:95:93:45:a3:ea:1f:9a:8a: 3a:70:d0:93:6a:71:9f:1b:7a:70:f3:24:03:57:93: 95:87:ed:09:a3:50:18:94:ec:1f:a0:63:bd:d9:5a: fa:55:3c:93:65:d8:7f:ef:ac:e4:08:e7:e7:fe:82: fc:a4:1b:77:25:99:b1:59:46:73:01:f2:82:f7:b4: 74:a5:20:9d:55:59:17:28:96:07:e4:b7:99:32:85: 73:0e:c1:39:21:38:47:23:a5:4f:61:e5:4f:99:ce: 4d:58:1a:fb:eb:5e:8a:5f:bd:f6:84:82:22:67:a7: e2:ed:df:46:10:f2:b2:44:74:ae:99:06:45:c8:1e: 67:5e:3b:35:12:49:e2:e4:80:76:e5:3c:8d:2d:32: c9:9a:3e:49:fb:d6:ad:ea:fa:e9:bc:89:fa:a5:82: 5b:fa:d8:08:cf:09:1a:ca:12:99:a2:59:5d:02:cc: c1:46:50:3a:b5:94:f5:c4:07:60:37:c5:71:64:9f: 10:fb:c7:cb:c1:28:4c:66:7e:60:60:cd:6e:54:82: 40:32:47:ba:fa:76:7a:56:ba:04:ab:f2:a0:c6:c9: eb:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:1B:E5:CA:C2:36:26:D8:C4:06:99:8D:87:E7:41:12:B2:40:85:A0 X509v3 Authority Key Identifier: keyid:2E:19:B9:74:05:D4:98:D3:B0:67:A9:A1:00:9C:DC:1E:02:FB:11:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:11:b7:5d:25:cc:59:83:52:9d:2b:ff:31:72:40:e4:4d:2a: d5:6a:78:52:9b:1d:fe:7e:d5:ef:ac:b9:c7:cf:7d:8e:fe:e8: 93:bd:b1:93:2d:be:65:c8:5a:f6:dd:35:9d:2e:3c:dd:13:50: 65:f6:e4:03:84:37:88:b9:29:49:6e:b8:e6:2d:1f:58:06:ac: d6:c0:8e:6b:37:0a:fa:8c:f5:6c:09:32:f0:ec:0c:d0:1f:85: 68:79:03:f3:8e:5e:42:7a:d7:4e:e7:f5:e0:8b:59:7d:7b:a9: 13:27:56:d2:a7:87:a4:59:e1:74:9c:1e:bf:ab:a9:f9:b1:f7: a9:a9:69:f7:19:f1:21:d2:a0:be:de:70:3a:e0:5e:d8:39:1d: b5:96:65:5a:19:8d:e9:f6:69:27:ca:3e:b8:04:c0:4e:41:1d: c4:02:06:82:0c:73:7d:d8:af:9c:51:64:57:a2:99:8a:e4:cd: dc:24:21:5b:34:81:8e:30:83:8a:5b:24:8d:f0:a5:11:ed:ee: 0d:7a:4d:8b:99:d4:41:7d:e3:e3:91:2a:d2:98:02:a3:18:91: 12:dc:b9:e4:f5:c5:20:38:87:99:1e:5f:a0:91:84:1a:bb:03: 27:8c:88:a3:56:c8:50:4b:33:bb:ba:a1:89:62:76:bd:0d:43: 61:cb:c7:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYcJZhDywsZujc7zMlIrqN5CWcVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUxOUI5NzQwNUQ0OThEM0IwNjdBOUExMDA5Q0RDMUUw MkZCMTFDRjAeFw0yNTA4MDQxNjI2NTlaFw0yNTA4MDgwMTE0NTlaMDMxMTAvBgNV BAMTKEY0MUJFNUNBQzIzNjI2RDhDNDA2OTk4RDg3RTc0MTEyQjI0MDg1QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsvpM9p8g6Jh35V8SkBETtECz/ bReuZeGhK22DA4YQEU/LzoqVk0Wj6h+aijpw0JNqcZ8benDzJANXk5WH7QmjUBiU 7B+gY73ZWvpVPJNl2H/vrOQI5+f+gvykG3clmbFZRnMB8oL3tHSlIJ1VWRcolgfk t5kyhXMOwTkhOEcjpU9h5U+Zzk1YGvvrXopfvfaEgiJnp+Lt30YQ8rJEdK6ZBkXI HmdeOzUSSeLkgHblPI0tMsmaPkn71q3q+um8ifqlglv62AjPCRrKEpmiWV0CzMFG UDq1lPXEB2A3xXFknxD7x8vBKExmfmBgzW5UgkAyR7r6dnpWugSr8qDGyesfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9BvlysI2JtjEBpmNh+dBErJAhaAwHwYDVR0j BBgwFoAULhm5dAXUmNOwZ6mhAJzcHgL7Ec8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjYzMmEyYy00MDZlLTQ1ZDctYTAyOC0yNjA0NzRjNzcwMzgvMC8yRTE5Qjk3NDA1 RDQ5OEQzQjA2N0E5QTEwMDlDREMxRTAyRkIxMUNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUxOUI5NzQwNUQ0OThEM0IwNjdBOUExMDA5Q0RDMUUwMkZC MTFDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2I2MzJhMmMtNDA2ZS00NWQ3LWEw MjgtMjYwNDc0Yzc3MDM4LzAvMkUxOUI5NzQwNUQ0OThEM0IwNjdBOUExMDA5Q0RD MUUwMkZCMTFDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAQRt10lzFmDUp0r/zFyQORNKtVqeFKbHf5+ 1e+sucfPfY7+6JO9sZMtvmXIWvbdNZ0uPN0TUGX25AOEN4i5KUluuOYtH1gGrNbA jms3CvqM9WwJMvDsDNAfhWh5A/OOXkJ6107n9eCLWX17qRMnVtKnh6RZ4XScHr+r qfmx96mpafcZ8SHSoL7ecDrgXtg5HbWWZVoZjen2aSfKPrgEwE5BHcQCBoIMc33Y r5xRZFeimYrkzdwkIVs0gY4wg4pbJI3wpRHt7g16TYuZ1EF94+ORKtKYAqMYkRLc ueT1xSA4h5keX6CRhBq7AyeMiKNWyFBLM7u6oYlidr0NQ2HLx+g= -----END CERTIFICATE-----Generated at Wed Aug 6 18:49:16 2025 by rpki-client