$ rpki-client -vvf repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft File: 2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft (raw, json) Hash identifier: FI9updOYxjmusYipJ8jSJbOV01q96tTqOTx193uIbWY= Subject key identifier: 60:DE:05:25:2D:E5:5F:97:9C:58:01:B4:00:92:2A:6F:FA:9A:35:76 Authority key identifier: 2D:EC:7D:B2:A5:C9:62:CF:A5:3D:57:8D:EA:7D:C8:43:83:A6:33:D4 Certificate issuer: /CN=2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4 Certificate serial: 6D47ED31DC726B0834E1124BB943B8710501CF1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft Manifest number: 04B4 Signing time: Sat 14 Jun 2025 18:21:20 +0000 Manifest this update: Sat 14 Jun 2025 18:16:20 +0000 Manifest next update: Tue 17 Jun 2025 20:55:20 +0000 Files and hashes: 1: 323430343a613463303a666163653a3a2f34382d3438203d3e20313338383232.roa (hash: 8BcFapwe+X3BcAcYyUi0aKlB+9OoLNEUNoO57IgvOug=) 2: 3130332e3133372e33382e302f32332d3234203d3e20313338383232.roa (hash: mA/rP0hr8/EieVP2HKsGbfcjdkP2Kd8or4Jc67/Y7I0=) 3: 323430343a613463303a3a2f33322d3438203d3e20313338383232.roa (hash: jd8RzIV4pb6xOSx8M2iJByCvMa7m6mddhFLRaUaFvoI=) 4: 2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.crl (hash: bl8dFHCX3W6lVn9tVfOgQq+qcS3GyHnvwSJBvW+jmmg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.crl rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 20:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:47:ed:31:dc:72:6b:08:34:e1:12:4b:b9:43:b8:71:05:01:cf:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4 Validity Not Before: Jun 14 18:16:20 2025 GMT Not After : Jun 17 20:55:20 2025 GMT Subject: CN=60DE05252DE55F979C5801B400922A6FFA9A3576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fe:f4:6c:2a:a0:74:d4:a7:92:38:5f:6e:f0: af:fa:93:e2:88:2e:2f:8b:e1:d3:fa:50:26:e4:d3: 19:36:1b:84:82:4c:a0:e8:72:b5:dd:c4:b6:ce:fc: eb:1c:ec:06:08:3b:2a:15:ba:cc:21:ab:4e:fa:5e: d8:7b:73:eb:9f:4f:f3:b7:6a:ee:b7:fc:01:07:17: 5f:3c:5e:75:87:54:89:98:25:2d:a5:8e:37:58:4a: f6:09:ec:ef:a2:73:a2:63:77:f1:da:ef:5d:81:c0: 51:5e:41:0f:27:89:a9:4c:f4:dc:60:2b:a6:74:a8: ec:ee:00:57:3f:4b:01:ad:0e:18:e5:45:2d:4b:4f: ea:7f:42:ae:a1:b5:23:aa:0c:cc:5a:43:3d:a6:5e: 32:12:44:00:fe:f2:f9:0a:05:70:3f:fb:b2:59:35: e3:8c:b5:b6:35:0f:4c:15:c3:2c:d5:1c:81:a9:92: db:b8:47:97:27:b6:a3:39:0a:04:13:ba:76:69:5a: 76:7a:b1:55:b7:f5:83:96:40:bc:b9:90:7d:e2:f4: 2b:3a:73:f3:92:36:52:d6:06:4b:22:28:b1:67:55: 53:1e:47:bd:20:f2:a2:21:35:04:2d:13:33:7b:2a: b0:7b:f9:5b:7e:53:e1:97:5e:6d:37:77:25:fe:9b: e2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:DE:05:25:2D:E5:5F:97:9C:58:01:B4:00:92:2A:6F:FA:9A:35:76 X509v3 Authority Key Identifier: keyid:2D:EC:7D:B2:A5:C9:62:CF:A5:3D:57:8D:EA:7D:C8:43:83:A6:33:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:d9:03:c2:88:8d:b9:76:8a:c0:29:47:b5:6e:0f:02:dc:bd: 38:2e:5d:f9:6d:44:11:c3:14:95:9c:d7:94:f7:65:69:6e:8e: f2:52:94:5f:d0:f0:fd:24:df:a3:35:ac:36:32:1a:f5:0a:8c: 14:1b:4b:60:f3:3d:ce:10:01:de:eb:8f:aa:3b:92:f6:cc:c7: 1c:78:24:1f:21:3e:57:7e:37:3e:6a:0f:27:84:92:69:62:5e: 6a:38:bb:58:b9:5b:29:2c:33:a7:71:02:31:5a:fd:a9:ba:98: 79:ad:2c:57:7a:d1:0c:5c:47:7f:80:ae:3f:3e:53:dd:25:f5: 1e:77:85:92:d7:e5:ed:99:dc:c4:a3:29:bf:b2:6c:5b:57:0e: b2:ad:cc:3b:dc:39:f0:15:d1:76:78:5e:18:64:85:d6:a7:71: cb:0f:7f:6a:29:ac:8c:e5:da:b7:64:88:6a:51:3c:a7:77:35: d3:f2:a7:f3:da:f8:03:db:55:38:ab:b6:84:e0:64:5a:88:86: 74:98:ee:0c:f9:9d:c7:14:d3:37:b5:c5:82:66:2a:c2:c1:5b: d0:4d:91:ad:3b:d2:6a:a9:d9:5f:65:c3:6e:79:21:72:d6:6b: 44:8c:d8:7e:50:1c:84:a3:bc:c1:5e:5a:12:63:64:34:2f:aa: 41:9f:c3:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbUftMdxyawg04RJLuUO4cQUBzxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRFQzdEQjJBNUM5NjJDRkE1M0Q1NzhERUE3REM4NDM4 M0E2MzNENDAeFw0yNTA2MTQxODE2MjBaFw0yNTA2MTcyMDU1MjBaMDMxMTAvBgNV BAMTKDYwREUwNTI1MkRFNTVGOTc5QzU4MDFCNDAwOTIyQTZGRkE5QTM1NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE/vRsKqB01KeSOF9u8K/6k+KI Li+L4dP6UCbk0xk2G4SCTKDocrXdxLbO/Osc7AYIOyoVuswhq076Xth7c+ufT/O3 au63/AEHF188XnWHVImYJS2ljjdYSvYJ7O+ic6Jjd/Ha712BwFFeQQ8nialM9Nxg K6Z0qOzuAFc/SwGtDhjlRS1LT+p/Qq6htSOqDMxaQz2mXjISRAD+8vkKBXA/+7JZ NeOMtbY1D0wVwyzVHIGpktu4R5cntqM5CgQTunZpWnZ6sVW39YOWQLy5kH3i9Cs6 c/OSNlLWBksiKLFnVVMeR70g8qIhNQQtEzN7KrB7+Vt+U+GXXm03dyX+m+I/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYN4FJS3lX5ecWAG0AJIqb/qaNXYwHwYDVR0j BBgwFoAULex9sqXJYs+lPVeN6n3IQ4OmM9QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l M2JiZjFkYS1lMzE3LTQ4ZWYtYWQ2ZC1mZThhOGJmMDg0MDAvMC8yREVDN0RCMkE1 Qzk2MkNGQTUzRDU3OERFQTdEQzg0MzgzQTYzM0Q0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkRFQzdEQjJBNUM5NjJDRkE1M0Q1NzhERUE3REM4NDM4M0E2 MzNENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTNiYmYxZGEtZTMxNy00OGVmLWFk NmQtZmU4YThiZjA4NDAwLzAvMkRFQzdEQjJBNUM5NjJDRkE1M0Q1NzhERUE3REM4 NDM4M0E2MzNENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGPZA8KIjbl2isApR7VuDwLcvTguXfltRBHD FJWc15T3ZWlujvJSlF/Q8P0k36M1rDYyGvUKjBQbS2DzPc4QAd7rj6o7kvbMxxx4 JB8hPld+Nz5qDyeEkmliXmo4u1i5WyksM6dxAjFa/am6mHmtLFd60QxcR3+Arj8+ U90l9R53hZLX5e2Z3MSjKb+ybFtXDrKtzDvcOfAV0XZ4XhhkhdanccsPf2oprIzl 2rdkiGpRPKd3NdPyp/Pa+APbVTirtoTgZFqIhnSY7gz5nccU0ze1xYJmKsLBW9BN ka070mqp2V9lw255IXLWa0SM2H5QHISjvMFeWhJjZDQvqkGfwww= -----END CERTIFICATE-----Generated at Mon Jun 16 16:35:25 2025 by rpki-client