$ rpki-client -vvf repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft File: 2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft (raw, json) Hash identifier: OAhHgfqaNxFlTN3ReAvR1NA4EwyeblrArPYG0UDRNlU= Subject key identifier: 27:1F:4F:60:67:9B:EB:F8:D1:02:76:BF:AC:40:A6:E8:FE:1C:F8:2A Authority key identifier: 2B:69:EA:50:8D:C6:2D:34:C2:B3:CA:4F:BA:57:BF:3A:FF:FD:49:94 Certificate issuer: /CN=2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994 Certificate serial: 3AB7FC0784759EA43322A1839ECB70547A2550F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft Manifest number: 0443 Signing time: Mon 16 Jun 2025 12:31:08 +0000 Manifest this update: Mon 16 Jun 2025 12:26:08 +0000 Manifest next update: Thu 19 Jun 2025 16:15:08 +0000 Files and hashes: 1: 3130332e3136322e31392e302f32342d3234203d3e20313431363430.roa (hash: dsIKfbnR+pN9Hwy4NZz2+3xuPhAknppnbWGiA908HyE=) 2: 2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.crl (hash: ujJs14pyG1Eay13VR0bPCiK90si5G2WAPd4lPrt9IOs=) 3: 323030313a6466353a653238303a3a2f34382d3438203d3e20313431363430.roa (hash: +ZHphLOhvruOuJkUwXhmKIA/kEZXmDLtlpGcK4ZlSQI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.crl rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 16:15:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b7:fc:07:84:75:9e:a4:33:22:a1:83:9e:cb:70:54:7a:25:50:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994 Validity Not Before: Jun 16 12:26:08 2025 GMT Not After : Jun 19 16:15:08 2025 GMT Subject: CN=271F4F60679BEBF8D10276BFAC40A6E8FE1CF82A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:58:30:dd:96:72:f1:86:6f:38:f7:4c:ea:f6: e2:70:38:0d:d4:37:12:f6:c4:18:62:83:0a:97:ad: 4d:3b:0f:0d:6e:ff:f0:8f:10:ee:55:5e:eb:fd:fc: e3:bd:89:19:57:17:b7:5e:4f:e6:08:25:4a:9d:c9: 0b:5e:43:17:78:b6:64:40:76:f9:56:bb:0e:bf:cd: e9:00:be:e8:cb:a7:c9:a0:5e:08:4e:54:5b:71:4e: 86:c4:fb:cb:49:b5:60:40:4c:6b:2a:35:ed:be:37: e4:15:e1:2d:b3:77:26:ea:2d:94:b3:32:ed:a6:9d: 19:01:28:56:3c:ab:00:5b:be:5f:2a:fd:35:e1:51: 7b:b2:2f:ed:5f:0c:6a:ea:9e:d6:de:19:cb:97:e4: 01:4e:1f:dd:b6:cf:18:10:94:35:f6:f0:66:14:e7: 99:e3:90:a1:29:b3:f0:32:b7:c6:13:6f:37:e1:c3: 8c:21:ca:c0:eb:4b:ba:45:42:2f:0c:4c:28:60:a2: 98:94:21:b4:c9:6c:18:ee:58:a6:88:c0:98:47:bc: 91:53:32:05:2f:bc:4d:c7:a3:e2:3c:04:7d:62:f9: fd:e6:11:f4:cf:6e:2d:b8:32:8c:05:4f:1d:02:fc: fc:d4:1a:3e:ac:53:7f:77:af:c8:bd:c0:89:7a:f3: 91:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:1F:4F:60:67:9B:EB:F8:D1:02:76:BF:AC:40:A6:E8:FE:1C:F8:2A X509v3 Authority Key Identifier: keyid:2B:69:EA:50:8D:C6:2D:34:C2:B3:CA:4F:BA:57:BF:3A:FF:FD:49:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:10:b7:ec:04:33:e5:eb:e0:49:ac:de:c2:31:bf:79:eb:74: a1:db:25:21:28:a5:7a:45:95:90:e7:a0:ed:f2:a5:4a:f1:b4: 8e:e7:2e:62:f2:06:29:d9:7a:24:2a:db:a8:57:8a:f2:c2:dc: 58:5b:17:0a:d8:5c:8d:f2:d2:65:1f:41:6b:1e:e0:19:c5:bb: d3:00:dc:2d:38:d3:de:0d:3e:c1:40:ce:7f:e9:61:c4:e4:a4: 74:8e:5b:96:f2:59:dc:08:5c:35:49:33:af:53:69:6e:94:cb: b9:36:1b:67:af:34:18:98:dc:ba:6e:5a:be:b3:21:b1:78:ec: e8:bb:c1:d0:c6:14:40:7d:73:88:48:6f:2b:c5:5e:a9:4c:73: 2f:41:ff:bf:22:93:97:02:ab:43:86:0b:25:79:c7:c2:e9:0c: 00:a7:5d:db:ba:87:45:48:2d:6a:f9:9d:6c:11:5d:62:02:14: 9f:ae:c0:4d:1b:a4:24:ac:ce:6e:76:da:48:0e:1f:d8:1a:de: 4f:5c:f0:af:9d:d3:16:41:3a:ed:10:2b:33:bf:a2:24:15:a2: 30:b1:41:66:0d:83:49:c7:ce:85:35:dc:b6:b7:a6:48:6f:35: 60:ae:64:da:42:fc:2a:c8:8a:80:ad:d4:9f:25:f6:29:66:c9: c7:1e:3f:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOrf8B4R1nqQzIqGDnstwVHolUPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI2OUVBNTA4REM2MkQzNEMyQjNDQTRGQkE1N0JGM0FG RkZENDk5NDAeFw0yNTA2MTYxMjI2MDhaFw0yNTA2MTkxNjE1MDhaMDMxMTAvBgNV BAMTKDI3MUY0RjYwNjc5QkVCRjhEMTAyNzZCRkFDNDBBNkU4RkUxQ0Y4MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNWDDdlnLxhm8490zq9uJwOA3U NxL2xBhigwqXrU07Dw1u//CPEO5VXuv9/OO9iRlXF7deT+YIJUqdyQteQxd4tmRA dvlWuw6/zekAvujLp8mgXghOVFtxTobE+8tJtWBATGsqNe2+N+QV4S2zdybqLZSz Mu2mnRkBKFY8qwBbvl8q/TXhUXuyL+1fDGrqntbeGcuX5AFOH922zxgQlDX28GYU 55njkKEps/Ayt8YTbzfhw4whysDrS7pFQi8MTChgopiUIbTJbBjuWKaIwJhHvJFT MgUvvE3Ho+I8BH1i+f3mEfTPbi24MowFTx0C/PzUGj6sU393r8i9wIl685F/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJx9PYGeb6/jRAna/rECm6P4c+CowHwYDVR0j BBgwFoAUK2nqUI3GLTTCs8pPule/Ov/9SZQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2M2MzdiZC01OTcxLTQyNjQtOTk3YS03NDlkODA0YTY4NTgvMC8yQjY5RUE1MDhE QzYyRDM0QzJCM0NBNEZCQTU3QkYzQUZGRkQ0OTk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkI2OUVBNTA4REM2MkQzNEMyQjNDQTRGQkE1N0JGM0FGRkZE NDk5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWNjNjM3YmQtNTk3MS00MjY0LTk5 N2EtNzQ5ZDgwNGE2ODU4LzAvMkI2OUVBNTA4REM2MkQzNEMyQjNDQTRGQkE1N0JG M0FGRkZENDk5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE0Qt+wEM+Xr4Ems3sIxv3nrdKHbJSEopXpF lZDnoO3ypUrxtI7nLmLyBinZeiQq26hXivLC3FhbFwrYXI3y0mUfQWse4BnFu9MA 3C04094NPsFAzn/pYcTkpHSOW5byWdwIXDVJM69TaW6Uy7k2G2evNBiY3LpuWr6z IbF47Oi7wdDGFEB9c4hIbyvFXqlMcy9B/78ik5cCq0OGCyV5x8LpDACnXdu6h0VI LWr5nWwRXWICFJ+uwE0bpCSszm522kgOH9ga3k9c8K+d0xZBOu0QKzO/oiQVojCx QWYNg0nHzoU13La3pkhvNWCuZNpC/CrIioCt1J8l9ilmycceP90= -----END CERTIFICATE-----Generated at Wed Jun 18 07:49:38 2025 by rpki-client