$ rpki-client -vvf repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft File: 2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft (raw, json) Hash identifier: SjJ8uM57okuDrhoLYGkBCoRks+pJij9ai3fUOnlvb/U= Subject key identifier: C6:84:A4:2C:D2:60:19:7A:B1:75:EE:BC:56:F4:73:08:EC:4B:2C:99 Authority key identifier: 2B:0D:3D:70:A0:27:B5:3C:7A:D2:17:FE:22:CA:0E:D1:11:FD:F3:B0 Certificate issuer: /CN=2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0 Certificate serial: 0C5551857FAEBF8A5EA06F93EC6ACAE464859008 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft Manifest number: 67 Signing time: Mon 16 Jun 2025 08:31:49 +0000 Manifest this update: Mon 16 Jun 2025 08:26:49 +0000 Manifest next update: Thu 19 Jun 2025 17:18:49 +0000 Files and hashes: 1: 2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.crl (hash: Ki1YWeNdSzEBiVhs7aUvkE9Vb2n30nNgTcLpJ1TQtUE=) 2: 3130332e3232352e31372e302f32342d3234203d3e20313532303632.roa (hash: P8QCMdvNkcGuA4F0hmx15JmIaSEyGRAUfWjBJiusufQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.crl rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 17:18:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:55:51:85:7f:ae:bf:8a:5e:a0:6f:93:ec:6a:ca:e4:64:85:90:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0 Validity Not Before: Jun 16 08:26:49 2025 GMT Not After : Jun 19 17:18:49 2025 GMT Subject: CN=C684A42CD260197AB175EEBC56F47308EC4B2C99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:78:30:3d:5e:52:18:6c:3d:4b:86:4c:95:a8: e8:2d:60:df:7d:56:de:ab:ef:0e:75:e0:dd:e7:da: 16:43:bc:c8:2e:fd:25:15:13:74:31:47:ab:52:f3: 79:cc:51:74:ca:eb:e3:12:7d:26:7c:0f:1f:54:d7: 3d:a2:6d:af:9e:f8:df:9e:51:f8:87:17:71:e7:49: 7f:d8:90:74:30:40:c7:ae:f7:d5:e8:c4:ef:26:ba: cb:8e:02:80:05:98:d8:60:39:d8:9d:36:7e:c9:9c: 37:61:b3:8e:f5:86:fa:1e:7d:e8:cd:f3:9b:2e:b2: ba:f9:7e:6c:00:58:53:e3:37:af:7d:e9:94:65:29: d8:df:f3:e5:57:37:b6:f5:1c:14:36:86:29:f9:02: 4a:e9:bf:4e:49:83:5e:87:46:53:d7:28:61:db:04: 70:f1:12:09:33:23:89:1f:da:69:53:06:d9:ec:c9: 34:f5:d8:f5:d3:6e:a6:1b:9e:11:ee:68:27:32:7c: 37:2d:21:35:45:b0:fc:9b:66:91:59:2d:c4:5f:f5: eb:a7:aa:9c:ed:9b:1f:49:ea:e7:07:68:70:2d:88: 0a:13:38:99:d2:62:b0:d4:17:b2:62:b8:b3:cc:d4: d2:55:30:c7:07:6b:0b:b4:fd:24:b7:e3:06:fb:47: 5d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:84:A4:2C:D2:60:19:7A:B1:75:EE:BC:56:F4:73:08:EC:4B:2C:99 X509v3 Authority Key Identifier: keyid:2B:0D:3D:70:A0:27:B5:3C:7A:D2:17:FE:22:CA:0E:D1:11:FD:F3:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:1d:60:dd:30:4d:ac:66:b9:88:dd:b9:66:eb:ae:e1:32:ed: 4b:ed:44:61:50:4f:9d:01:a3:bb:3f:9c:b7:2c:70:c9:26:4a: 57:fe:9c:63:3c:dd:14:18:a5:54:f2:57:cc:06:4a:62:40:8a: a9:67:19:34:6a:77:2d:d8:4a:30:9e:de:79:fb:59:0f:ec:4b: 0d:1b:a3:10:83:2f:8b:6f:58:d5:1e:68:34:f8:8b:75:7a:02: eb:c8:e8:32:eb:05:7b:7e:f7:5f:cf:cd:8b:8a:48:4d:bd:cf: 26:a7:56:02:b8:75:31:d3:14:7a:72:c2:a6:04:d8:6b:9c:fe: 46:49:ca:b9:94:a5:a4:8c:d0:c5:71:97:64:72:c5:dd:0f:91: 25:fb:3d:07:da:1e:97:fc:fd:7f:f7:4b:41:68:e9:50:9e:eb: f8:ea:b5:41:d4:7d:81:a6:b7:37:1e:04:a8:a9:50:bb:f4:e2: b4:d0:ae:07:ff:6d:2f:10:25:ed:3f:e1:f1:9f:7c:08:ec:d4: 3e:91:ea:95:ac:9a:61:bd:1e:29:18:34:44:8e:22:9a:05:2a: 8a:93:15:16:b9:24:45:de:21:d0:23:eb:11:a1:17:43:50:93: 6c:59:d1:25:dc:62:89:23:81:a9:4e:6a:0a:b2:83:e1:a7:e1: 5e:a1:16:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDFVRhX+uv4peoG+T7GrK5GSFkAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIwRDNENzBBMDI3QjUzQzdBRDIxN0ZFMjJDQTBFRDEx MUZERjNCMDAeFw0yNTA2MTYwODI2NDlaFw0yNTA2MTkxNzE4NDlaMDMxMTAvBgNV BAMTKEM2ODRBNDJDRDI2MDE5N0FCMTc1RUVCQzU2RjQ3MzA4RUM0QjJDOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDeDA9XlIYbD1LhkyVqOgtYN99 Vt6r7w514N3n2hZDvMgu/SUVE3QxR6tS83nMUXTK6+MSfSZ8Dx9U1z2iba+e+N+e UfiHF3HnSX/YkHQwQMeu99XoxO8musuOAoAFmNhgOdidNn7JnDdhs471hvoefejN 85susrr5fmwAWFPjN6996ZRlKdjf8+VXN7b1HBQ2hin5Akrpv05Jg16HRlPXKGHb BHDxEgkzI4kf2mlTBtnsyTT12PXTbqYbnhHuaCcyfDctITVFsPybZpFZLcRf9eun qpztmx9J6ucHaHAtiAoTOJnSYrDUF7JiuLPM1NJVMMcHawu0/SS34wb7R10TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxoSkLNJgGXqxde68VvRzCOxLLJkwHwYDVR0j BBgwFoAUKw09cKAntTx60hf+IsoO0RH987AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzcyZDNmNS1kZDUzLTRiNzQtOTQ3Yy02YmI1MTBmNGY1MDMvMC8yQjBEM0Q3MEEw MjdCNTNDN0FEMjE3RkUyMkNBMEVEMTExRkRGM0IwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkIwRDNENzBBMDI3QjUzQzdBRDIxN0ZFMjJDQTBFRDExMUZE RjNCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWM3MmQzZjUtZGQ1My00Yjc0LTk0 N2MtNmJiNTEwZjRmNTAzLzAvMkIwRDNENzBBMDI3QjUzQzdBRDIxN0ZFMjJDQTBF RDExMUZERjNCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC4dYN0wTaxmuYjduWbrruEy7UvtRGFQT50B o7s/nLcscMkmSlf+nGM83RQYpVTyV8wGSmJAiqlnGTRqdy3YSjCe3nn7WQ/sSw0b oxCDL4tvWNUeaDT4i3V6AuvI6DLrBXt+91/PzYuKSE29zyanVgK4dTHTFHpywqYE 2Guc/kZJyrmUpaSM0MVxl2Ryxd0PkSX7PQfaHpf8/X/3S0Fo6VCe6/jqtUHUfYGm tzceBKipULv04rTQrgf/bS8QJe0/4fGffAjs1D6R6pWsmmG9HikYNESOIpoFKoqT FRa5JEXeIdAj6xGhF0NQk2xZ0SXcYokjgalOagqyg+Gn4V6hFoU= -----END CERTIFICATE-----Generated at Mon Jun 16 20:24:04 2025 by rpki-client