$ rpki-client -vvf repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft File: 2993EFF92300988A33773DD8C4B502F74B907112.mft (raw, json) Hash identifier: yFvi652scDtTYMOmKBLu431CdIWFliVY6QD9maASL9M= Subject key identifier: 1F:42:04:D1:75:BE:3F:11:0E:F2:7F:29:6D:CB:78:13:04:62:9A:C8 Authority key identifier: 29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12 Certificate issuer: /CN=2993EFF92300988A33773DD8C4B502F74B907112 Certificate serial: 26087D993B9EFBAB1DED08A7B11AA4DB1B8DBD97 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer Subject info access: rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft Manifest number: 01BD Signing time: Sun 15 Jun 2025 19:22:17 +0000 Manifest this update: Sun 15 Jun 2025 19:17:17 +0000 Manifest next update: Thu 19 Jun 2025 00:03:17 +0000 Files and hashes: 1: 323430323a326334303a3a2f34382d3438203d3e203535363736.roa (hash: Cry5tI26ZFq+xJIM45fHnqWQpQQD1hwh8FhbwaGJxgw=) 2: 3130332e3130352e37362e302f32342d3234203d3e20313336383734.roa (hash: KvURdCiLhHkbUOwAzv8M2lOHWbthmo9CgPxXvVYh4Sg=) 3: 3130332e3130352e37362e302f32342d3234203d3e203535363736.roa (hash: UUqUhVxo4riOoAS8LfSUq3H3CWxdpGF4ZToXB6Mfx1U=) 4: 323430323a326334303a3a2f34382d3438203d3e20313336383734.roa (hash: DPykOYeFqNoag7xb92W8/PrEblwWpE1eWB5cwaAPFZY=) 5: 3130332e3130352e37392e302f32342d3234203d3e20313336383734.roa (hash: TT7MUwzbMrgBN8oEIAyXqU2sblUIPBHys6QVI7/dQqE=) 6: 3130332e3130352e37372e302f32342d3234203d3e203535363736.roa (hash: q2JzAJ4KWuMy8UNkflOx1INP6Nh24QMXd1+kRMj9Nio=) 7: 2993EFF92300988A33773DD8C4B502F74B907112.crl (hash: ujtNcA7vmT2jXEoJbVTf5Ot5z1HiUVCZI70lzdupx2E=) 8: 3130332e3130352e37382e302f32342d3234203d3e20313336383734.roa (hash: HyOmqTBNJysFk0nvijg1y0JCQQaN+Dk9utcTlFmaQHY=) 9: 3130332e3130352e37362e302f32332d3234203d3e20313336383734.roa (hash: Jdxi2ld+DrcEuncfblvPGye54qLDFL//BHCw7NiVlyE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.crl rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 00:03:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:08:7d:99:3b:9e:fb:ab:1d:ed:08:a7:b1:1a:a4:db:1b:8d:bd:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2993EFF92300988A33773DD8C4B502F74B907112 Validity Not Before: Jun 15 19:17:17 2025 GMT Not After : Jun 19 00:03:17 2025 GMT Subject: CN=1F4204D175BE3F110EF27F296DCB781304629AC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ae:4c:0e:ad:fe:d0:cf:07:f9:60:47:95:fa: db:68:81:b6:ae:6f:a8:4f:3a:17:10:ae:31:06:4f: 21:8f:cf:da:78:b1:8d:1d:5a:3c:af:ae:78:3c:23: fc:c1:bf:61:7b:1e:a5:fb:1f:eb:26:74:ea:b9:5c: b1:d2:17:b3:d0:59:a5:11:ee:f7:27:e3:ae:7e:01: ca:37:90:f7:15:69:62:ec:62:37:f3:a3:7f:ba:fe: d9:79:a6:e7:3d:5f:e0:3e:3e:93:72:c4:40:fd:05: 5d:be:84:79:ba:91:53:3d:a4:94:a3:e5:06:7b:33: ae:7f:58:56:4a:80:6a:03:c3:ee:da:c6:11:c9:72: e3:19:1c:85:94:f8:48:87:88:b4:76:06:b9:50:e0: aa:d3:cf:f0:6a:75:c0:cb:85:fb:bc:df:bb:3d:8e: 00:0a:4c:5e:ea:5f:bd:5c:e1:27:55:7b:c5:a9:7b: b4:86:a3:ad:cf:b5:9c:10:05:77:3d:fc:6d:8c:af: c8:2d:2f:06:e2:9c:70:a0:4c:30:5c:eb:89:d5:f4: cb:fe:ab:a5:93:bd:a2:9e:27:61:0d:11:2e:38:3e: 62:81:ca:61:ec:f7:9b:d2:62:6d:33:c3:88:cc:db: 04:bc:17:91:aa:c8:e6:af:fe:d8:85:ea:9e:d2:36: d3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:42:04:D1:75:BE:3F:11:0E:F2:7F:29:6D:CB:78:13:04:62:9A:C8 X509v3 Authority Key Identifier: keyid:29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:8a:a8:bc:ec:67:11:e3:77:fc:41:c3:27:29:f6:ea:55:98: dc:89:98:d5:eb:4a:08:ff:f5:41:cd:ee:8a:c2:c8:de:df:ae: 20:6f:69:43:58:5d:1a:01:a8:b9:dd:b3:32:b7:39:3f:26:b7: 46:6d:ed:4c:34:ca:e5:90:5b:7c:c6:95:2c:d1:8d:5a:dc:92: 2f:15:ac:70:3e:0e:9d:d7:8f:7d:14:28:2e:97:8d:f9:1a:08: 13:58:af:94:4a:50:c6:66:94:1d:6f:48:71:e3:2b:7a:30:a3: 2f:e1:8a:e0:24:85:a2:d5:37:b6:19:67:04:88:39:79:25:96: 89:6e:75:e9:e4:35:23:50:e5:07:1e:f4:ae:bc:2e:35:d2:c1: 60:7c:a1:a8:b5:99:0d:5b:e0:69:a5:d8:5f:1d:bc:24:f6:38: 95:a8:c5:ed:af:c8:b1:68:f9:b8:ae:22:f4:cc:46:32:31:39: b9:31:f3:8c:80:09:99:a1:a8:3a:18:7e:b1:2d:9f:3d:36:29: 18:7e:46:e3:a5:9f:27:f4:67:39:29:34:00:be:1f:69:54:94: 48:06:8d:d8:1c:28:13:4a:11:4c:65:3e:bf:79:10:df:e4:5c: d4:ef:f4:83:78:55:bb:5e:02:1d:b7:51:53:24:aa:d2:d0:6b: c0:9e:51:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJgh9mTue+6sd7QinsRqk2xuNvZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk5M0VGRjkyMzAwOTg4QTMzNzczREQ4QzRCNTAyRjc0 QjkwNzExMjAeFw0yNTA2MTUxOTE3MTdaFw0yNTA2MTkwMDAzMTdaMDMxMTAvBgNV BAMTKDFGNDIwNEQxNzVCRTNGMTEwRUYyN0YyOTZEQ0I3ODEzMDQ2MjlBQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJrkwOrf7Qzwf5YEeV+ttogbau b6hPOhcQrjEGTyGPz9p4sY0dWjyvrng8I/zBv2F7HqX7H+smdOq5XLHSF7PQWaUR 7vcn465+Aco3kPcVaWLsYjfzo3+6/tl5puc9X+A+PpNyxED9BV2+hHm6kVM9pJSj 5QZ7M65/WFZKgGoDw+7axhHJcuMZHIWU+EiHiLR2BrlQ4KrTz/BqdcDLhfu837s9 jgAKTF7qX71c4SdVe8Wpe7SGo63PtZwQBXc9/G2Mr8gtLwbinHCgTDBc64nV9Mv+ q6WTvaKeJ2ENES44PmKBymHs95vSYm0zw4jM2wS8F5GqyOav/tiF6p7SNtPRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH0IE0XW+PxEO8n8pbct4EwRimsgwHwYDVR0j BBgwFoAUKZPv+SMAmIozdz3YxLUC90uQcRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzdiYzNkMi00YWIzLTRjZmItOTIyMi02NmM2ZWE5NDQ3ZTMvMC8yOTkzRUZGOTIz MDA5ODhBMzM3NzNERDhDNEI1MDJGNzRCOTA3MTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk5M0VGRjkyMzAwOTg4QTMzNzczREQ4QzRCNTAyRjc0Qjkw NzExMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc3YmMzZDItNGFiMy00Y2ZiLTky MjItNjZjNmVhOTQ0N2UzLzAvMjk5M0VGRjkyMzAwOTg4QTMzNzczREQ4QzRCNTAy Rjc0QjkwNzExMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI+KqLzsZxHjd/xBwycp9upVmNyJmNXrSgj/ 9UHN7orCyN7friBvaUNYXRoBqLndszK3OT8mt0Zt7Uw0yuWQW3zGlSzRjVrcki8V rHA+Dp3Xj30UKC6XjfkaCBNYr5RKUMZmlB1vSHHjK3owoy/hiuAkhaLVN7YZZwSI OXklloludenkNSNQ5Qce9K68LjXSwWB8oai1mQ1b4Gml2F8dvCT2OJWoxe2vyLFo +biuIvTMRjIxObkx84yACZmhqDoYfrEtnz02KRh+RuOlnyf0ZzkpNAC+H2lUlEgG jdgcKBNKEUxlPr95EN/kXNTv9IN4VbteAh23UVMkqtLQa8CeUfo= -----END CERTIFICATE-----Generated at Mon Jun 16 22:29:01 2025 by rpki-client