$ rpki-client -vvf repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft File: 26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft (raw, json) Hash identifier: LLDhmZjyWfGK+uVns2JNTqu98Ghbg5z/KgrzY9I2o90= Subject key identifier: 24:C8:B4:87:98:42:C9:F7:D0:C7:F8:01:31:86:41:F5:F5:15:A3:7E Authority key identifier: 26:C0:12:47:69:3F:68:CF:DA:1F:8C:B6:B8:8F:7A:37:00:D3:00:01 Certificate issuer: /CN=26C01247693F68CFDA1F8CB6B88F7A3700D30001 Certificate serial: 10AC6C6BC4C3C435FAABC5BAFC5FDAFF290CF635 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26C01247693F68CFDA1F8CB6B88F7A3700D30001.cer Subject info access: rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft Manifest number: 022E Signing time: Wed 30 Apr 2025 19:32:05 +0000 Manifest this update: Wed 30 Apr 2025 19:27:05 +0000 Manifest next update: Sat 03 May 2025 21:37:05 +0000 Files and hashes: 1: 3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa (hash: 74TGkae1+QCuTSaWAZ/1dR0+kJTY94tmxgSufeIPFe8=) 2: 26C01247693F68CFDA1F8CB6B88F7A3700D30001.crl (hash: R6+GzvkT+teVb4cX54CRmb7JZfIzyg3ekSZVV9B5bWQ=) 3: 323030313a6466373a376438303a3a2f34382d3438203d3e20313431393039.roa (hash: 1ypZTh1uqX7Kh/HgM6WUDlwDLRHdZ90Km18x/Ynnn+Y=) 4: 3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa (hash: d1iOOjv6qaBSXhMhm+Csiy2EgfiQomEVVv4AskXzPBg=) 5: 3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa (hash: sGDel48okAqvaV/rcb1x3ACW4s1s006aJg3vUEaDkGw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.crl rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26C01247693F68CFDA1F8CB6B88F7A3700D30001.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 21:37:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:ac:6c:6b:c4:c3:c4:35:fa:ab:c5:ba:fc:5f:da:ff:29:0c:f6:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26C01247693F68CFDA1F8CB6B88F7A3700D30001 Validity Not Before: Apr 30 19:27:05 2025 GMT Not After : May 3 21:37:05 2025 GMT Subject: CN=24C8B4879842C9F7D0C7F801318641F5F515A37E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:84:db:ce:d3:bb:d1:92:2a:5c:7e:ad:3c:ce: 22:15:9d:a5:c2:f9:09:df:b8:f3:50:6c:e0:e6:44: 71:de:85:d4:13:4e:8b:c0:85:d5:48:68:26:2e:0e: 63:d8:96:e5:a9:1e:0b:27:1a:3c:f6:11:e4:4f:68: 82:04:e8:79:bb:6a:68:7b:28:b2:0f:38:f8:f2:0d: 4f:b7:ac:6f:cd:a7:34:2d:0f:e5:b4:62:97:e3:00: e7:5e:9a:0d:f4:8d:e1:80:99:9f:64:12:8e:fb:e3: c3:61:1f:14:3c:59:48:70:62:b0:07:50:c0:f4:68: 72:e9:81:b6:eb:a6:6c:a3:04:8d:13:ab:ef:31:65: 4f:74:0b:e1:5f:d7:5f:09:93:83:21:74:0a:f0:57: 5d:86:00:8c:18:b7:ad:ba:c7:c9:c2:1a:75:a2:a5: 03:8f:08:0e:bf:24:f9:aa:08:35:e4:ff:79:af:66: 8a:13:2b:51:27:56:b7:7a:7e:c4:d7:cf:c2:f2:64: 79:cf:32:b5:c0:c6:07:fc:27:26:a6:1f:5d:3c:6b: 3f:32:a4:71:b1:0a:99:e6:12:11:17:ee:28:ff:b9: 80:9b:26:19:63:6c:84:0d:e7:e0:a0:9b:14:ba:8a: 6c:21:7c:c3:d0:a4:14:95:40:69:d3:cf:56:79:e9: c1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C8:B4:87:98:42:C9:F7:D0:C7:F8:01:31:86:41:F5:F5:15:A3:7E X509v3 Authority Key Identifier: keyid:26:C0:12:47:69:3F:68:CF:DA:1F:8C:B6:B8:8F:7A:37:00:D3:00:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26C01247693F68CFDA1F8CB6B88F7A3700D30001.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:b5:95:b5:51:23:64:c4:1d:5c:b9:de:94:8d:61:4c:ab:fb: 1b:9a:24:33:30:73:29:43:ad:49:30:69:88:41:59:40:b0:a7: a5:c6:ea:cf:62:09:fc:48:56:bd:79:81:f2:97:08:cd:e9:90: e7:15:01:45:11:f8:75:33:c3:05:78:58:d0:c9:68:5d:cd:15: 6a:9f:cb:7c:0a:28:39:fa:aa:23:96:e2:58:f5:d7:51:1b:20: c7:72:c0:2c:1e:f0:97:ac:98:17:04:5d:bb:ce:e0:49:6c:d0: 5a:e2:32:33:4a:3f:2d:1d:fa:f2:ea:55:e2:85:f6:33:dc:12: 59:bf:6a:02:9d:1e:d5:7d:6f:a9:4e:10:66:8c:94:ca:5d:5e: ae:c4:53:6f:be:6f:6d:95:9f:5a:af:0e:92:0e:15:ec:6d:7d: 35:1d:aa:79:c9:80:fc:73:48:d2:61:ce:57:5d:9c:5d:fd:42: cb:e0:59:94:13:e3:78:e6:bf:20:20:1c:9b:6a:f1:7b:e2:30: f7:d0:12:c3:9b:92:8f:85:bb:76:49:08:6d:45:05:04:fe:ed: c9:9a:dd:5a:32:00:0f:e3:83:bd:3c:5a:a4:f6:e6:12:64:13: f1:93:80:97:a4:85:06:94:22:37:31:ae:a6:4a:da:66:ae:8c: 83:d5:d0:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEKxsa8TDxDX6q8W6/F/a/ykM9jUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjZDMDEyNDc2OTNGNjhDRkRBMUY4Q0I2Qjg4RjdBMzcw MEQzMDAwMTAeFw0yNTA0MzAxOTI3MDVaFw0yNTA1MDMyMTM3MDVaMDMxMTAvBgNV BAMTKDI0QzhCNDg3OTg0MkM5RjdEMEM3RjgwMTMxODY0MUY1RjUxNUEzN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDshNvO07vRkipcfq08ziIVnaXC +QnfuPNQbODmRHHehdQTTovAhdVIaCYuDmPYluWpHgsnGjz2EeRPaIIE6Hm7amh7 KLIPOPjyDU+3rG/NpzQtD+W0YpfjAOdemg30jeGAmZ9kEo7748NhHxQ8WUhwYrAH UMD0aHLpgbbrpmyjBI0Tq+8xZU90C+Ff118Jk4MhdArwV12GAIwYt626x8nCGnWi pQOPCA6/JPmqCDXk/3mvZooTK1EnVrd6fsTXz8LyZHnPMrXAxgf8JyamH108az8y pHGxCpnmEhEX7ij/uYCbJhljbIQN5+CgmxS6imwhfMPQpBSVQGnTz1Z56cFRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJMi0h5hCyffQx/gBMYZB9fUVo34wHwYDVR0j BBgwFoAUJsASR2k/aM/aH4y2uI96NwDTAAEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDFjNGQ2MS1kY2VmLTRhMjAtYmQ0Yy1hMjgyYTM3YWE2OWUvMC8yNkMwMTI0NzY5 M0Y2OENGREExRjhDQjZCODhGN0EzNzAwRDMwMDAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjZDMDEyNDc2OTNGNjhDRkRBMUY4Q0I2Qjg4RjdBMzcwMEQz MDAwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAxYzRkNjEtZGNlZi00YTIwLWJk NGMtYTI4MmEzN2FhNjllLzAvMjZDMDEyNDc2OTNGNjhDRkRBMUY4Q0I2Qjg4RjdB MzcwMEQzMDAwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGy1lbVRI2TEHVy53pSNYUyr+xuaJDMwcylD rUkwaYhBWUCwp6XG6s9iCfxIVr15gfKXCM3pkOcVAUUR+HUzwwV4WNDJaF3NFWqf y3wKKDn6qiOW4lj111EbIMdywCwe8JesmBcEXbvO4Els0FriMjNKPy0d+vLqVeKF 9jPcElm/agKdHtV9b6lOEGaMlMpdXq7EU2++b22Vn1qvDpIOFextfTUdqnnJgPxz SNJhzlddnF39QsvgWZQT43jmvyAgHJtq8XviMPfQEsObko+Fu3ZJCG1FBQT+7cma 3VoyAA/jg708WqT25hJkE/GTgJekhQaUIjcxrqZK2maujIPV0Pc= -----END CERTIFICATE-----Generated at Thu May 1 09:31:41 2025 by rpki-client