$ rpki-client -vvf repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft File: 2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft (raw, json) Hash identifier: 4JqGMJpOGyQkZPWNKoal2GgrQPy15dUi4E1iXQ6MrHM= Subject key identifier: DC:11:AD:C2:4C:7C:72:58:9F:BC:FC:15:0F:9C:68:0B:28:B5:AD:C0 Authority key identifier: 2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9 Certificate issuer: /CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9 Certificate serial: 3778D610920FC50272C7CE0E5D3943D3B841041C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft Manifest number: 04C7 Signing time: Mon 28 Apr 2025 19:11:53 +0000 Manifest this update: Mon 28 Apr 2025 19:06:53 +0000 Manifest next update: Thu 01 May 2025 19:11:53 +0000 Files and hashes: 1: 3138302e3231342e3234382e302f32342d3234203d3e203338313530.roa (hash: MPKCsRZDZNYsOLsUI2cCtDDIcaytMV4pMvYW85eFW6g=) 2: 323430323a663038303a3a2f34382d3438203d3e203338313530.roa (hash: 1RKwgHPp3AyIEd8oV5JkBCpBzxMgTDMCTLGzRDTdkec=) 3: 3230322e39312e31342e302f32342d3234203d3e203338313530.roa (hash: 8A/BY747A8tcSGdw0kTUxTjlElKl9Fd3VYE57A9ejPU=) 4: 3230322e39312e31352e302f32342d3234203d3e203338313530.roa (hash: YzITjDQsLZYdV9iPbkoBc0BV/7hfCBo8LKPdZNMO5zk=) 5: 3230322e39312e31332e302f32342d3234203d3e203338313530.roa (hash: Wtm1w2LUkfHMAUBMo8NjVJYbQmXKg5zGneLmy036pZw=) 6: 323430323a663038303a623a3a2f34382d3438203d3e203338313530.roa (hash: qL0wIERL/FZVPFJyexaf4LbHX3ijAAg3bydjjAMgQFk=) 7: 3138302e3231342e3234302e302f32342d3234203d3e203338313530.roa (hash: uMyrrNvQSHXCaIKeb7YHUJzsiyYMgIhzsvfO2xxvbt8=) 8: 2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl (hash: +xUn/h1AQ3yYnUCgelNXhdE+5JYPHhxt+AB6mUZ2tF4=) 9: 323430323a663038303a313a3a2f34382d3438203d3e203338313530.roa (hash: 86LEq8VXDYdpyuZGjiApApkS8W4DXo5k1//8mltFNGU=) 10: 3138302e3231342e3235322e302f32342d3234203d3e203338313530.roa (hash: VGkd3qyb5RgrQP18pdu6ONcUZAOkXXeZJwZvx9Z15f0=) 11: 323430323a663038303a633a3a2f34382d3438203d3e203338313530.roa (hash: AaYY+4X7oz0aflYSKjFBAuNR5h1WiPnSw/fVuiThbtI=) 12: 3138302e3231342e3234312e302f32342d3234203d3e203338313530.roa (hash: 2nesNt4oWdAkHyQxEw62xi3ZAjzFaGioInIZZXdKjCk=) 13: 3138302e3231342e3234342e302f32342d3234203d3e203338313530.roa (hash: f/2H82Qaid5o3IMXt4khgRJ2TNCnkFt1IS90BtFG4io=) 14: 323430323a663038303a333a3a2f34382d3438203d3e203338313530.roa (hash: MNsCflRoTlLLKOy1y3qU2xpl0KIGEKY8wK60n9pU+7g=) 15: 3138302e3231342e3234372e302f32342d3234203d3e203338313530.roa (hash: YGt+3ApTgn/LWTxT6WNpkphV9VxIGygYqSnpvA8kmgQ=) 16: 3138302e3231342e3235332e302f32342d3234203d3e203338313530.roa (hash: dVyXyeitdxkWoIb0JFvBz6herhcN9vKQBLdnntu/3Os=) 17: 323430323a663038303a323a3a2f34382d3438203d3e203338313530.roa (hash: rWMJzCml+x1f4kxh43cBQCSbawN5JhE1k0v3Pybh1Bw=) 18: 3230322e39312e382e302f32342d3234203d3e203338313530.roa (hash: Qol8+JNrvQvm3P/r8gMV8qivGzVQrg5+cD0Ai4x07CE=) 19: 3138302e3231342e3235342e302f32342d3234203d3e203338313530.roa (hash: KgjDRBaTzfFY7ynerTEb+2VCWhn64do32R4bwf4i4r4=) 20: 3138302e3231342e3234392e302f32342d3234203d3e203338313530.roa (hash: ny1yGnHbBejhv6vr1eZqYtkbGIWNTtnBZ/7ODF69CVs=) 21: 3138302e3231342e3234322e302f32342d3234203d3e203338313530.roa (hash: C1gcqSO0oBdwp9BpXOWFzZg2s6goQaazqVUj4XoKSkc=) 22: 3138302e3231342e3234362e302f32342d3234203d3e203338313530.roa (hash: pSMqZyq3tofIqbVs5e+fl67udIcuxiGW/jxUt5sa3SU=) 23: 323430323a663038303a613a3a2f34382d3438203d3e203338313530.roa (hash: kTFbI48ADj1NCd9+X2nm988kpUAUJ4nuOUWfrmLXPzY=) 24: 3138302e3231342e3235352e302f32342d3234203d3e203338313530.roa (hash: MCayY48jaokp/UrLHAPKrxV+i3KtaHJo7UcYRQc0U04=) 25: 3138302e3231342e3234352e302f32342d3234203d3e203338313530.roa (hash: /l1tDvX0eINixyD193hNPS/nyzynVbnxaZxIsWWnUIs=) 26: 3138302e3231342e3234332e302f32342d3234203d3e203338313530.roa (hash: NfXkvyJjdz3lMbP2RK80QjI1Az4nVDj8tmiqN24vkXc=) 27: 3230322e39312e31302e302f32342d3234203d3e203338313530.roa (hash: DLxQo0gdb9JVW6MFJYL4swYph24mURb/ELIJzCfK7Kk=) 28: 3230322e39312e31322e302f32342d3234203d3e203338313530.roa (hash: w+MxiQGbDB18Rg5VSNV+eDaLzxTuL21IeMT2XF0iFag=) 29: 3230322e39312e31312e302f32342d3234203d3e203338313530.roa (hash: t94nbHda1ZlB5Svw5eATejFXQCzX8y8ZKvAurl4HFgc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:11:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:78:d6:10:92:0f:c5:02:72:c7:ce:0e:5d:39:43:d3:b8:41:04:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9 Validity Not Before: Apr 28 19:06:53 2025 GMT Not After : May 1 19:11:53 2025 GMT Subject: CN=DC11ADC24C7C72589FBCFC150F9C680B28B5ADC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d9:b8:ed:d2:c1:8b:18:3f:bf:5d:5a:6d:86: 9d:12:c1:6f:3c:37:da:35:d2:d6:b1:b3:cd:d4:ee: cd:dc:a5:8b:97:09:43:19:ae:a4:92:8f:e1:d9:4a: 68:45:03:14:c1:35:a3:bf:59:55:2c:29:98:70:5b: 26:67:9f:98:42:91:a0:cc:0a:5e:ef:a4:d1:8a:8c: 04:f3:79:0c:0f:96:3d:2b:8d:89:9b:b8:84:21:71: c6:15:64:7d:c3:b9:6f:84:23:55:04:e1:86:b7:aa: 1c:7e:42:3a:f6:e4:f8:93:74:fc:1e:7b:5b:52:e7: f1:1e:89:b0:d1:c7:1c:9e:ef:90:10:51:d7:93:ea: 31:01:32:df:7c:1b:1f:41:00:d5:a2:06:fa:d8:5e: d8:12:73:51:20:87:bb:3a:93:49:af:d3:9d:18:de: 5a:8b:9c:59:e1:8c:fd:f1:70:32:a0:2f:b7:15:25: 78:d3:c6:66:82:e0:80:3e:9a:ed:ee:73:33:a8:a8: 77:ba:81:b8:ab:00:92:17:3c:ec:89:40:6e:91:25: 7e:6d:29:4a:2e:56:85:9b:9c:a8:75:54:9b:6a:b5: 98:ec:37:5d:c3:8f:39:f1:c9:94:ec:dd:12:1f:31: 6e:a0:7b:a8:0d:0c:f6:ae:b3:9e:45:0a:1d:67:65: 77:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:11:AD:C2:4C:7C:72:58:9F:BC:FC:15:0F:9C:68:0B:28:B5:AD:C0 X509v3 Authority Key Identifier: keyid:2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:97:2c:64:46:95:f4:1b:cb:eb:51:05:85:c0:78:95:7a:ba: 7b:fd:15:32:a8:48:25:9d:c1:56:93:3c:f6:b2:53:a5:89:f3: 9e:41:ce:e0:20:52:57:c5:ad:7d:d4:33:70:6c:cd:53:09:0b: ab:07:2b:d1:8c:84:13:24:99:60:a6:6a:8f:2a:73:9a:37:12: 5e:b4:57:00:77:8e:20:c1:d0:55:cd:4e:be:cf:77:f2:a1:e1: 85:42:ba:ff:ab:b7:df:96:08:e9:79:70:00:f3:68:52:7f:f1: 8f:ed:69:b8:c4:00:df:6d:96:37:c2:90:95:cd:83:74:ad:a7: 8e:77:bb:ed:65:e4:af:b1:ff:4d:26:0c:b7:11:7a:c4:cb:e9: 7b:5a:a2:31:1f:05:39:dd:c8:a8:7f:19:46:3b:b8:b4:c4:70: 22:5c:15:94:2a:03:80:be:0c:0d:3b:e8:7a:45:60:f4:48:9c: e1:f0:91:6a:a6:7f:43:0f:63:36:ee:98:d3:50:15:a5:32:d9: 07:c0:68:cc:29:cf:1c:23:f1:fa:13:92:ae:4e:09:ca:aa:eb: 97:9e:ab:33:e0:86:58:19:92:20:23:2d:5d:48:b4:c3:d7:be: aa:db:81:d2:a8:b0:a7:c2:01:2d:55:52:0e:eb:e5:41:0f:17: ef:7d:37:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN3jWEJIPxQJyx84OXTlD07hBBBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNBNDc0ODdGNzI3ODE3MzMzMzBBMzhDOTVGRjhBNURG NjhDREJCOTAeFw0yNTA0MjgxOTA2NTNaFw0yNTA1MDExOTExNTNaMDMxMTAvBgNV BAMTKERDMTFBREMyNEM3QzcyNTg5RkJDRkMxNTBGOUM2ODBCMjhCNUFEQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf2bjt0sGLGD+/XVpthp0SwW88 N9o10taxs83U7s3cpYuXCUMZrqSSj+HZSmhFAxTBNaO/WVUsKZhwWyZnn5hCkaDM Cl7vpNGKjATzeQwPlj0rjYmbuIQhccYVZH3DuW+EI1UE4Ya3qhx+Qjr25PiTdPwe e1tS5/EeibDRxxye75AQUdeT6jEBMt98Gx9BANWiBvrYXtgSc1Egh7s6k0mv050Y 3lqLnFnhjP3xcDKgL7cVJXjTxmaC4IA+mu3uczOoqHe6gbirAJIXPOyJQG6RJX5t KUouVoWbnKh1VJtqtZjsN13DjznxyZTs3RIfMW6ge6gNDPaus55FCh1nZXdhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3BGtwkx8clifvPwVD5xoCyi1rcAwHwYDVR0j BBgwFoAULKR0h/cngXMzMKOMlf+KXfaM27kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2U2NWI2Ny05MDVjLTQwM2MtOGM3OS0yMzE1NjU5NjY4YWEvMC8yQ0E0NzQ4N0Y3 Mjc4MTczMzMzMEEzOEM5NUZGOEE1REY2OENEQkI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkNBNDc0ODdGNzI3ODE3MzMzMzBBMzhDOTVGRjhBNURGNjhD REJCOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTdlNjViNjctOTA1Yy00MDNjLThj NzktMjMxNTY1OTY2OGFhLzAvMkNBNDc0ODdGNzI3ODE3MzMzMzBBMzhDOTVGRjhB NURGNjhDREJCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABiXLGRGlfQby+tRBYXAeJV6unv9FTKoSCWd wVaTPPayU6WJ855BzuAgUlfFrX3UM3BszVMJC6sHK9GMhBMkmWCmao8qc5o3El60 VwB3jiDB0FXNTr7Pd/Kh4YVCuv+rt9+WCOl5cADzaFJ/8Y/tabjEAN9tljfCkJXN g3Stp453u+1l5K+x/00mDLcResTL6XtaojEfBTndyKh/GUY7uLTEcCJcFZQqA4C+ DA076HpFYPRInOHwkWqmf0MPYzbumNNQFaUy2QfAaMwpzxwj8foTkq5OCcqq65ee qzPghlgZkiAjLV1ItMPXvqrbgdKosKfCAS1VUg7r5UEPF+99N2g= -----END CERTIFICATE-----Generated at Wed Apr 30 05:37:09 2025 by rpki-client