$ rpki-client -vvf repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.mft File: AB2FF74AE26C6B3D3C718834D700985B9160087D.mft (raw, json) Hash identifier: x6x6MjrWNSkHIZ8m7ewRADvj8ethOibSWnwqMe7Tr8s= Subject key identifier: BC:41:0B:06:CB:D9:2E:AC:FA:DE:B7:57:D8:90:47:C2:57:D5:F5:D8 Authority key identifier: AB:2F:F7:4A:E2:6C:6B:3D:3C:71:88:34:D7:00:98:5B:91:60:08:7D Certificate issuer: /CN=AB2FF74AE26C6B3D3C718834D700985B9160087D Certificate serial: 1FC7A510B8BAC88ED9739428E82D65B712D09B48 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB2FF74AE26C6B3D3C718834D700985B9160087D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.mft Manifest number: 01C6 Signing time: Sun 27 Apr 2025 22:00:41 +0000 Manifest this update: Sun 27 Apr 2025 21:55:41 +0000 Manifest next update: Thu 01 May 2025 08:58:41 +0000 Files and hashes: 1: 3130332e3138372e3136342e302f32342d3234203d3e20313439383937.roa (hash: /Q4H0K4v8ItlNxhJ8szrhX51VPiw7LRnFLYK18FRMkU=) 2: 3130332e3138372e3136352e302f32342d3234203d3e20313439383937.roa (hash: vQNZKuXdJqiWRC9W5c9NVU2jEIMrPmnWp8pvVSMANm0=) 3: 3130332e3138372e3136342e302f32332d3233203d3e20313439383937.roa (hash: R44rX+ydsbGKHqLgPo+zBEoCnzYtOSmwj18qh4MFo5Q=) 4: AB2FF74AE26C6B3D3C718834D700985B9160087D.crl (hash: ckrE/iqQwXvI3sXXMdQ/my0LXhEl2OyzQOrEeQLR1Is=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.crl rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB2FF74AE26C6B3D3C718834D700985B9160087D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 08:58:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:c7:a5:10:b8:ba:c8:8e:d9:73:94:28:e8:2d:65:b7:12:d0:9b:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB2FF74AE26C6B3D3C718834D700985B9160087D Validity Not Before: Apr 27 21:55:41 2025 GMT Not After : May 1 08:58:41 2025 GMT Subject: CN=BC410B06CBD92EACFADEB757D89047C257D5F5D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:68:ed:85:ba:b2:5e:dc:e5:26:9e:a3:3f:6b: 60:71:56:d5:e8:a3:be:6b:31:69:01:2b:73:49:9b: ad:aa:e8:e6:ed:bd:f6:ba:e4:38:22:1d:06:ea:3f: e8:27:6b:00:ee:b2:98:e5:da:0b:8f:86:b9:c3:2d: cc:a2:ec:dd:be:4f:67:d8:fb:b1:58:d3:04:a0:39: 7a:69:ea:0a:1c:fd:76:fb:5f:7f:21:8e:d4:3f:6a: 08:59:11:78:fb:3a:ff:c1:17:95:e1:3e:6d:94:f1: 17:5b:16:69:cc:b2:f4:df:58:96:b0:72:99:29:81: 27:03:e3:d9:68:b2:65:7a:00:63:47:47:5f:22:4d: 96:14:cc:7b:f4:13:9e:cb:d8:39:95:36:8a:d8:46: a0:9b:05:1b:35:16:3d:42:3e:70:d7:93:f3:be:97: 00:c5:32:ed:b7:9c:d4:6d:44:18:eb:e6:7a:20:65: 57:4f:af:62:6b:75:c6:c5:22:94:f6:ea:a3:9f:22: 2a:e7:71:20:58:1d:6d:0b:9e:7b:fb:e1:f5:81:c1: 45:6a:1d:33:a0:8d:62:21:30:e7:aa:bc:d3:eb:96: 4a:77:5a:3d:59:a9:f9:fc:b6:b9:1f:98:2d:77:4b: 59:ea:7b:a8:05:ba:e9:fd:88:a2:41:91:01:23:1f: 69:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:41:0B:06:CB:D9:2E:AC:FA:DE:B7:57:D8:90:47:C2:57:D5:F5:D8 X509v3 Authority Key Identifier: keyid:AB:2F:F7:4A:E2:6C:6B:3D:3C:71:88:34:D7:00:98:5B:91:60:08:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB2FF74AE26C6B3D3C718834D700985B9160087D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:19:00:6e:49:f6:b2:4d:12:28:2d:8e:58:4f:7e:49:73:9e: 7a:2e:72:b2:de:28:ca:f3:67:f8:e3:43:eb:c7:8c:cc:88:44: 6a:0c:83:67:be:d5:dc:10:30:5c:b2:67:65:2c:cd:6b:34:cf: e6:61:74:23:e1:23:32:6f:18:4c:19:90:9b:78:a5:b2:00:43: ed:ff:45:bd:37:d0:0b:26:75:b4:d2:f2:d1:b7:43:27:ad:37: 69:87:4b:68:d3:53:b2:ac:78:eb:aa:d4:77:a8:a6:e6:b3:65: d9:19:60:75:74:78:7a:20:02:e1:43:d3:0b:d5:30:35:21:29: 4f:3b:44:e5:c3:cd:f9:db:95:53:e0:28:d3:92:2e:ce:36:c9: 8d:14:52:c6:bf:b4:9c:0a:f7:ad:f3:6b:cb:ee:25:15:3f:4d: 75:9a:d8:8c:35:2e:6d:f8:76:1e:05:0c:a5:a0:88:13:eb:a0: 53:cd:11:bf:fd:72:fa:bc:6f:72:ca:eb:6e:04:e9:35:fb:d0: ec:73:da:56:3a:d7:90:4a:14:fa:a5:41:34:e6:3d:26:62:d3: 64:6f:98:d7:e1:21:59:5c:4a:9d:ce:07:db:c4:d3:57:2b:d6: f6:e8:10:62:59:f5:85:95:62:45:e3:d8:4a:66:93:b5:b7:3c: 87:ef:bb:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH8elELi6yI7Zc5Qo6C1ltxLQm0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUIyRkY3NEFFMjZDNkIzRDNDNzE4ODM0RDcwMDk4NUI5 MTYwMDg3RDAeFw0yNTA0MjcyMTU1NDFaFw0yNTA1MDEwODU4NDFaMDMxMTAvBgNV BAMTKEJDNDEwQjA2Q0JEOTJFQUNGQURFQjc1N0Q4OTA0N0MyNTdENUY1RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAaO2FurJe3OUmnqM/a2BxVtXo o75rMWkBK3NJm62q6Obtvfa65DgiHQbqP+gnawDuspjl2guPhrnDLcyi7N2+T2fY +7FY0wSgOXpp6goc/Xb7X38hjtQ/aghZEXj7Ov/BF5XhPm2U8RdbFmnMsvTfWJaw cpkpgScD49losmV6AGNHR18iTZYUzHv0E57L2DmVNorYRqCbBRs1Fj1CPnDXk/O+ lwDFMu23nNRtRBjr5nogZVdPr2JrdcbFIpT26qOfIirncSBYHW0Lnnv74fWBwUVq HTOgjWIhMOeqvNPrlkp3Wj1Zqfn8trkfmC13S1nqe6gFuun9iKJBkQEjH2kDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvEELBsvZLqz63rdX2JBHwlfV9dgwHwYDVR0j BBgwFoAUqy/3SuJsaz08cYg01wCYW5FgCH0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTRiYjRjOC02ZmNmLTRmZmYtYmRjYy1mZTFmY2NlZTEwNDUvMC9BQjJGRjc0QUUy NkM2QjNEM0M3MTg4MzRENzAwOTg1QjkxNjAwODdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUIyRkY3NEFFMjZDNkIzRDNDNzE4ODM0RDcwMDk4NUI5MTYw MDg3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjE0YmI0YzgtNmZjZi00ZmZmLWJk Y2MtZmUxZmNjZWUxMDQ1LzAvQUIyRkY3NEFFMjZDNkIzRDNDNzE4ODM0RDcwMDk4 NUI5MTYwMDg3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAwZAG5J9rJNEigtjlhPfklznnoucrLeKMrz Z/jjQ+vHjMyIRGoMg2e+1dwQMFyyZ2UszWs0z+ZhdCPhIzJvGEwZkJt4pbIAQ+3/ Rb030AsmdbTS8tG3QyetN2mHS2jTU7KseOuq1HeopuazZdkZYHV0eHogAuFD0wvV MDUhKU87ROXDzfnblVPgKNOSLs42yY0UUsa/tJwK963za8vuJRU/TXWa2Iw1Lm34 dh4FDKWgiBProFPNEb/9cvq8b3LK624E6TX70Oxz2lY615BKFPqlQTTmPSZi02Rv mNfhIVlcSp3OB9vE01cr1vboEGJZ9YWVYkXj2Epmk7W3PIfvu4c= -----END CERTIFICATE-----Generated at Tue Apr 29 09:15:20 2025 by rpki-client