$ rpki-client -vvf repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft File: 2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft (raw, json) Hash identifier: CWv0fRUKccGauv5TcIQspsodpLUAyq7flEiNUS3iTIU= Subject key identifier: B3:AE:DA:94:D5:F3:28:C7:62:BF:D5:AD:F1:14:67:79:02:15:A7:56 Authority key identifier: 2D:6F:96:FA:63:0E:A7:AE:0A:2B:12:2B:6F:04:CC:4F:5F:32:CE:B5 Certificate issuer: /CN=2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5 Certificate serial: 173F4C08A07B8E981DDE550F3751DC1585B4625F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft Manifest number: 01E4 Signing time: Sun 15 Jun 2025 17:30:51 +0000 Manifest this update: Sun 15 Jun 2025 17:25:51 +0000 Manifest next update: Thu 19 Jun 2025 00:01:51 +0000 Files and hashes: 1: 3130332e3139312e36312e302f32342d3234203d3e20313430343233.roa (hash: GKmBfpKDeFOAn/hth0t5+jc0CLfcCDiIkzuoYyGRF6A=) 2: 3130332e3139312e36302e302f32342d3234203d3e20313430343233.roa (hash: sSH+72BWEr4MQc7BgNlbk4H5MkWrjKvE4wSUUqHwmBM=) 3: 3130332e3139312e36302e302f32332d3234203d3e20313430343233.roa (hash: B7I4pT8xixNUOiX63bEN83in57afrlzmDDKwQ4/5sls=) 4: 2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl (hash: 5ekMuCd2x/bwNJRfocnSF5p/VuAkwrPhuaH3a19rznk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:3f:4c:08:a0:7b:8e:98:1d:de:55:0f:37:51:dc:15:85:b4:62:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5 Validity Not Before: Jun 15 17:25:51 2025 GMT Not After : Jun 19 00:01:51 2025 GMT Subject: CN=B3AEDA94D5F328C762BFD5ADF11467790215A756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:73:39:ea:0f:3b:28:f6:a8:b4:a2:a6:7e:d4: e3:56:2d:d6:3d:26:00:34:84:ba:92:9b:51:1e:0f: 35:18:5a:66:52:73:37:71:cb:54:33:a6:29:70:a0: 6c:c0:d2:7a:14:af:12:3c:c4:28:f6:33:67:be:dd: ae:c8:fb:87:ad:b8:87:38:21:b3:29:e2:1f:5d:f7: 25:04:95:0f:29:77:85:df:8f:14:c5:73:71:c9:76: 21:9d:bf:e6:4e:63:a7:dd:f3:f6:d6:17:30:42:3a: 40:d6:66:7b:58:07:eb:4f:1f:6f:75:7a:1f:21:2e: 17:c4:9b:e9:12:44:54:8b:dd:9b:f2:08:aa:7c:0b: 41:75:0f:c8:03:ed:e5:d4:8f:20:f6:2c:83:2c:7c: fe:f4:68:cd:a1:ee:08:c6:4f:52:7f:85:2c:3e:47: 39:39:d1:35:ad:78:09:12:db:e0:73:b5:89:7f:4b: 0b:eb:07:2f:26:b3:f6:f9:0e:96:12:85:af:0a:0a: c3:c1:b0:2c:27:64:90:ab:37:79:60:c9:42:75:0f: 9c:a5:b9:3e:a1:56:84:36:23:0b:55:e4:b2:d9:22: aa:aa:95:67:e9:cd:80:8d:89:23:58:a7:e9:38:66: b9:62:43:38:51:47:45:b1:3c:ce:9f:d8:f6:9c:dc: ec:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:AE:DA:94:D5:F3:28:C7:62:BF:D5:AD:F1:14:67:79:02:15:A7:56 X509v3 Authority Key Identifier: keyid:2D:6F:96:FA:63:0E:A7:AE:0A:2B:12:2B:6F:04:CC:4F:5F:32:CE:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:48:3a:48:9f:f1:46:63:7b:2d:bb:a3:57:93:95:4b:0f:6f: 6e:ec:63:f4:4b:00:07:bf:dd:46:f0:89:33:30:a4:39:a1:cc: fa:dd:a7:af:eb:4d:3a:b7:b4:c8:b5:70:0b:37:09:62:bc:23: 5c:20:34:e7:79:c6:58:c5:75:f3:f2:70:ec:a8:5d:d8:99:d9: 88:f3:2f:ac:f5:bd:fc:b1:81:85:2d:a9:b1:64:b9:e9:a2:0e: 67:d8:ce:71:cf:96:30:da:bb:30:76:59:2c:fd:be:62:e2:12: 06:56:04:3c:17:38:7c:47:3b:74:1e:d8:f8:9d:20:7f:8c:e6: 4c:a8:1f:5a:2e:2c:2f:af:49:7b:81:d9:17:6b:c7:f2:ed:60: bb:79:17:18:18:3c:26:7c:17:1c:8a:55:ff:80:30:c8:f8:99: 82:f3:7a:fc:87:55:99:78:6a:c9:b8:b1:bc:0f:c9:00:65:88: d5:a9:d3:2a:e9:50:6e:a2:dd:f5:d9:d4:bd:45:ed:0e:06:d2: 66:7d:31:1b:b9:77:ab:0b:2b:21:f7:a5:06:5c:59:19:30:b9: 81:63:4c:b6:be:f1:ea:90:b2:f0:43:f7:e2:3c:a9:21:d9:5d: d8:c0:32:bf:ed:90:02:1a:b9:1c:ce:cd:69:de:d4:91:3f:01: 2c:5c:77:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFz9MCKB7jpgd3lUPN1HcFYW0Yl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNENDNEY1 RjMyQ0VCNTAeFw0yNTA2MTUxNzI1NTFaFw0yNTA2MTkwMDAxNTFaMDMxMTAvBgNV BAMTKEIzQUVEQTk0RDVGMzI4Qzc2MkJGRDVBREYxMTQ2Nzc5MDIxNUE3NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLcznqDzso9qi0oqZ+1ONWLdY9 JgA0hLqSm1EeDzUYWmZSczdxy1QzpilwoGzA0noUrxI8xCj2M2e+3a7I+4etuIc4 IbMp4h9d9yUElQ8pd4XfjxTFc3HJdiGdv+ZOY6fd8/bWFzBCOkDWZntYB+tPH291 eh8hLhfEm+kSRFSL3ZvyCKp8C0F1D8gD7eXUjyD2LIMsfP70aM2h7gjGT1J/hSw+ Rzk50TWteAkS2+BztYl/SwvrBy8ms/b5DpYSha8KCsPBsCwnZJCrN3lgyUJ1D5yl uT6hVoQ2IwtV5LLZIqqqlWfpzYCNiSNYp+k4ZrliQzhRR0WxPM6f2Pac3OyTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs67alNXzKMdiv9Wt8RRneQIVp1YwHwYDVR0j BBgwFoAULW+W+mMOp64KKxIrbwTMT18yzrUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTM0ZDJkOC0zNGFmLTQ3NTctOGFkOS05MmRhMzVkOTIxNjgvMC8yRDZGOTZGQTYz MEVBN0FFMEEyQjEyMkI2RjA0Q0M0RjVGMzJDRUI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNENDNEY1RjMy Q0VCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUzNGQyZDgtMzRhZi00NzU3LThh ZDktOTJkYTM1ZDkyMTY4LzAvMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNEND NEY1RjMyQ0VCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABZIOkif8UZjey27o1eTlUsPb27sY/RLAAe/ 3UbwiTMwpDmhzPrdp6/rTTq3tMi1cAs3CWK8I1wgNOd5xljFdfPycOyoXdiZ2Yjz L6z1vfyxgYUtqbFkuemiDmfYznHPljDauzB2WSz9vmLiEgZWBDwXOHxHO3Qe2Pid IH+M5kyoH1ouLC+vSXuB2Rdrx/LtYLt5FxgYPCZ8FxyKVf+AMMj4mYLzevyHVZl4 asm4sbwPyQBliNWp0yrpUG6i3fXZ1L1F7Q4G0mZ9MRu5d6sLKyH3pQZcWRkwuYFj TLa+8eqQsvBD9+I8qSHZXdjAMr/tkAIauRzOzWne1JE/ASxcd9U= -----END CERTIFICATE-----Generated at Mon Jun 16 00:43:14 2025 by rpki-client