$ rpki-client -vvf repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft File: 2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft (raw, json) Hash identifier: 9SgEkoP+an6ymAJxEvfmNtL3PBrPfe18PPuZeek5zpo= Subject key identifier: 02:FB:40:1C:40:B9:D7:34:F9:E8:7E:19:CF:8C:96:7B:E5:95:C1:1C Authority key identifier: 2D:23:C6:29:ED:95:6F:17:36:B7:DA:EC:CD:2A:AF:31:C4:F1:7C:26 Certificate issuer: /CN=2D23C629ED956F1736B7DAECCD2AAF31C4F17C26 Certificate serial: 66FFB37A2215F6740ABE07CDC18350F0AD195D53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft Manifest number: 01C1 Signing time: Sun 15 Jun 2025 04:30:54 +0000 Manifest this update: Sun 15 Jun 2025 04:25:54 +0000 Manifest next update: Wed 18 Jun 2025 09:20:54 +0000 Files and hashes: 1: 3130332e3133382e31302e302f32342d3234203d3e20313338383335.roa (hash: 2Vdu2MWYo3OwMz4g8uGZOXFnM8X1Z4ETt9GbdMMRo+8=) 2: 2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl (hash: KkJUEer+LN4VRIq+d9k/fDj7bgkYht/kMs2AC1LLcxA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 09:20:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:ff:b3:7a:22:15:f6:74:0a:be:07:cd:c1:83:50:f0:ad:19:5d:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D23C629ED956F1736B7DAECCD2AAF31C4F17C26 Validity Not Before: Jun 15 04:25:54 2025 GMT Not After : Jun 18 09:20:54 2025 GMT Subject: CN=02FB401C40B9D734F9E87E19CF8C967BE595C11C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:77:fc:28:b4:0b:64:56:aa:69:ac:dd:f6:e0: 31:2a:93:9c:ad:83:74:1b:fb:37:84:5a:6e:28:8a: 82:39:f4:fe:29:ba:08:b5:ad:01:b8:01:64:ed:5a: 84:b4:63:c5:ae:0e:81:9f:30:66:37:d7:8c:71:12: 80:27:df:61:49:6d:d6:f1:bc:88:57:ee:2d:39:e5: 9e:23:15:37:7b:64:93:63:02:a9:98:43:04:8e:ec: 95:be:28:85:45:1f:e2:f3:b9:da:8c:9f:fd:6d:c3: 7c:4c:92:c2:c6:70:6a:ac:68:14:eb:04:2e:03:53: 06:fd:24:09:a0:1a:30:1f:03:50:bf:81:4e:4d:0a: 7c:f3:10:51:42:b1:b5:5e:3a:c1:65:9c:d0:d3:23: 6e:cb:0c:eb:09:f4:14:27:7c:ae:72:88:4b:e3:f7: 69:a9:cb:ca:6f:69:b8:05:bc:17:00:68:3d:12:56: 97:57:96:27:b8:01:9a:e7:42:6e:cd:fc:4f:50:27: 38:8d:53:17:09:80:d9:cd:ca:bf:06:ec:be:4e:e8: 66:8d:13:43:f6:1b:c7:81:df:99:a3:2e:77:e8:21: 28:f5:c7:6a:dd:00:35:21:04:1a:58:80:0e:2b:7b: f4:3a:a9:02:d9:3e:51:17:f6:4e:5d:18:ea:d9:65: d7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:FB:40:1C:40:B9:D7:34:F9:E8:7E:19:CF:8C:96:7B:E5:95:C1:1C X509v3 Authority Key Identifier: keyid:2D:23:C6:29:ED:95:6F:17:36:B7:DA:EC:CD:2A:AF:31:C4:F1:7C:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:9d:51:4e:86:c3:f9:d5:f7:d3:f7:33:5f:8f:20:40:de:81: ab:22:45:d4:92:99:7b:fc:48:01:4d:7a:85:b2:e5:bf:aa:2b: e4:1d:a3:9c:0b:17:ad:03:66:d1:ef:24:9a:2e:0c:ad:61:4c: ff:a3:25:6a:a8:a0:07:5e:c2:73:25:18:82:60:91:44:1b:17: 50:81:37:79:d2:74:80:57:02:c6:34:2a:bb:b0:a0:05:86:21: be:65:c3:0d:b2:17:cb:1f:12:75:ab:03:22:e5:a6:f5:f5:37: 50:e1:17:c0:d1:44:7c:e4:26:ba:7f:d6:df:75:99:0b:2f:c6: 9a:16:d8:37:a3:2f:d2:fd:40:fd:74:ed:27:37:ec:38:bd:2c: fa:d9:f9:4a:35:d6:e0:ed:1c:cb:53:38:68:af:98:0b:68:83: 3f:94:55:57:0f:de:e9:fe:16:6b:fc:c2:7a:95:7a:19:66:27: 41:a8:2b:30:db:41:be:44:c9:e7:76:82:e4:ae:12:e1:57:86: 4a:bc:41:bb:4a:1f:83:fa:9b:1e:68:35:d6:ed:39:6a:c8:31: 82:17:3b:8d:30:6c:ba:cf:10:56:72:50:c2:3a:48:a2:0d:26: f3:df:7b:40:8f:e5:13:60:07:6c:31:36:e6:0b:36:95:c7:df: 6c:2c:c3:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZv+zeiIV9nQKvgfNwYNQ8K0ZXVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFGMzFD NEYxN0MyNjAeFw0yNTA2MTUwNDI1NTRaFw0yNTA2MTgwOTIwNTRaMDMxMTAvBgNV BAMTKDAyRkI0MDFDNDBCOUQ3MzRGOUU4N0UxOUNGOEM5NjdCRTU5NUMxMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFd/wotAtkVqpprN324DEqk5yt g3Qb+zeEWm4oioI59P4pugi1rQG4AWTtWoS0Y8WuDoGfMGY314xxEoAn32FJbdbx vIhX7i055Z4jFTd7ZJNjAqmYQwSO7JW+KIVFH+LzudqMn/1tw3xMksLGcGqsaBTr BC4DUwb9JAmgGjAfA1C/gU5NCnzzEFFCsbVeOsFlnNDTI27LDOsJ9BQnfK5yiEvj 92mpy8pvabgFvBcAaD0SVpdXlie4AZrnQm7N/E9QJziNUxcJgNnNyr8G7L5O6GaN E0P2G8eB35mjLnfoISj1x2rdADUhBBpYgA4re/Q6qQLZPlEX9k5dGOrZZdfHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAvtAHEC51zT56H4Zz4yWe+WVwRwwHwYDVR0j BBgwFoAULSPGKe2Vbxc2t9rszSqvMcTxfCYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODY4Y2YyMi1kMDI5LTQ1ZTItOWUyMS1kOTg5MmQzYWY3YTYvMC8yRDIzQzYyOUVE OTU2RjE3MzZCN0RBRUNDRDJBQUYzMUM0RjE3QzI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFGMzFDNEYx N0MyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDg2OGNmMjItZDAyOS00NWUyLTll MjEtZDk4OTJkM2FmN2E2LzAvMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFG MzFDNEYxN0MyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI+dUU6Gw/nV99P3M1+PIEDegasiRdSSmXv8 SAFNeoWy5b+qK+Qdo5wLF60DZtHvJJouDK1hTP+jJWqooAdewnMlGIJgkUQbF1CB N3nSdIBXAsY0KruwoAWGIb5lww2yF8sfEnWrAyLlpvX1N1DhF8DRRHzkJrp/1t91 mQsvxpoW2DejL9L9QP107Sc37Di9LPrZ+Uo11uDtHMtTOGivmAtogz+UVVcP3un+ Fmv8wnqVehlmJ0GoKzDbQb5Eyed2guSuEuFXhkq8QbtKH4P6mx5oNdbtOWrIMYIX O40wbLrPEFZyUMI6SKINJvPfe0CP5RNgB2wxNuYLNpXH32wsw9Y= -----END CERTIFICATE-----Generated at Mon Jun 16 10:42:57 2025 by rpki-client