$ rpki-client -vvf repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft File: 2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft (raw, json) Hash identifier: 5vVmOkLK89PjqTR5AT1eT2mIlsWKMcsyWW0FD3a8WFI= Subject key identifier: DD:EA:B3:1C:64:BD:36:B4:AB:E6:CF:75:D4:EB:7E:19:08:93:09:D2 Authority key identifier: 2A:DD:D4:03:51:73:FA:C3:BB:39:49:CB:36:CC:EF:25:53:79:8B:FC Certificate issuer: /CN=2ADDD4035173FAC3BB3949CB36CCEF2553798BFC Certificate serial: 485C56C1FE8C583ED5DD14215035021889F2490C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft Manifest number: 9C Signing time: Sat 26 Apr 2025 11:30:38 +0000 Manifest this update: Sat 26 Apr 2025 11:25:38 +0000 Manifest next update: Tue 29 Apr 2025 22:01:38 +0000 Files and hashes: 1: 2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.crl (hash: GZKXP3jkuyG3t7YVFiDoB7XWx7U6NLKo3IycVfwrXKA=) 2: 3135372e32302e3234342e302f32342d3234203d3e20313338303839.roa (hash: teoM6MXntxfZebuRvj4HuDCmBJE7bmAYK9p8NliSwzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.crl rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 03:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:5c:56:c1:fe:8c:58:3e:d5:dd:14:21:50:35:02:18:89:f2:49:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ADDD4035173FAC3BB3949CB36CCEF2553798BFC Validity Not Before: Apr 26 11:25:38 2025 GMT Not After : Apr 29 22:01:38 2025 GMT Subject: CN=DDEAB31C64BD36B4ABE6CF75D4EB7E19089309D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:de:f9:5a:dd:37:9e:9b:0d:43:b8:1a:23:a7: 2b:e1:04:1f:13:63:7a:2c:c1:f1:3b:3e:88:65:56: 8c:00:65:25:7e:70:3c:68:f3:70:ca:73:d9:20:f8: fe:80:66:3a:82:25:be:90:b0:a6:77:b2:d4:18:ce: 67:ad:a5:56:ee:59:34:14:d4:e4:0d:e4:fe:16:d2: 74:4b:23:fc:24:78:56:29:42:33:a0:25:27:ae:82: 6f:e8:f8:24:2e:b9:74:ec:13:02:fe:96:35:98:77: 9e:ce:0f:c5:a5:2b:a7:6c:c2:2d:80:b1:61:db:9c: 34:06:2a:37:79:4a:8b:8d:9d:08:78:37:b0:e0:0c: 98:e5:ec:b4:db:d9:72:ab:30:d4:bc:e8:50:39:20: 68:e6:0c:88:59:22:3e:9b:80:0b:97:17:3e:8b:89: db:db:cb:ec:6f:ed:87:00:ed:bd:fc:00:bb:7a:ad: 65:f7:3a:fd:a1:25:7e:ec:80:8d:16:4b:0c:62:14: 37:c6:78:8c:a9:56:db:aa:aa:56:83:94:87:ef:a2: 0d:64:35:6a:77:02:23:51:e1:bb:2c:52:09:92:e6: d9:b4:33:bc:be:bd:03:ff:fc:cd:9e:b8:4a:60:9a: 6e:5c:36:4b:66:7a:f7:47:3a:b9:e5:02:64:f6:fc: cc:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:EA:B3:1C:64:BD:36:B4:AB:E6:CF:75:D4:EB:7E:19:08:93:09:D2 X509v3 Authority Key Identifier: keyid:2A:DD:D4:03:51:73:FA:C3:BB:39:49:CB:36:CC:EF:25:53:79:8B:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:e6:5d:54:72:8f:3d:0b:17:f0:44:50:c7:f7:17:e9:43:a6: f2:8b:0b:19:ec:c0:90:9a:3a:84:0e:fc:c8:06:df:5c:64:de: 54:c8:2c:ff:f0:af:2e:b8:23:39:1b:3c:77:bd:13:95:c2:20: 43:af:b6:34:99:db:2d:4a:d0:d0:a8:ac:89:1a:11:7f:6c:78: 93:46:70:91:cc:78:41:2a:7a:b2:19:d8:d3:6f:3a:fe:0b:e7: 4c:7a:04:15:49:42:4e:3a:4b:bb:ad:df:1c:7d:88:fd:b7:54: c2:af:23:6e:c6:3c:b9:ed:26:ce:b1:39:34:4c:11:c7:b5:35: 96:2f:bd:b9:14:ae:a0:b6:48:26:48:b2:b9:3d:f4:51:8a:94: 6b:28:ce:d3:6c:b1:ac:ab:01:6b:43:9d:ee:67:bb:d5:f3:8e: 3d:4f:e2:6d:bc:66:94:90:7d:de:c3:1d:70:cc:8c:a2:ca:0c: 2a:64:aa:7f:fa:5b:2c:e2:fc:6e:a5:98:81:f6:d9:89:5b:1e: 3d:d4:7a:fd:e1:74:74:92:2e:43:56:f0:8d:77:41:97:e1:f4: da:3f:c2:a6:06:32:5b:fc:d7:26:f5:ab:7b:ca:d5:89:b5:dd: bb:92:aa:f2:ff:3f:2e:21:eb:92:00:b9:c0:b2:d3:b0:f2:26: 1e:dc:cf:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSFxWwf6MWD7V3RQhUDUCGInySQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFEREQ0MDM1MTczRkFDM0JCMzk0OUNCMzZDQ0VGMjU1 Mzc5OEJGQzAeFw0yNTA0MjYxMTI1MzhaFw0yNTA0MjkyMjAxMzhaMDMxMTAvBgNV BAMTKERERUFCMzFDNjRCRDM2QjRBQkU2Q0Y3NUQ0RUI3RTE5MDg5MzA5RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/3vla3Teemw1DuBojpyvhBB8T Y3oswfE7PohlVowAZSV+cDxo83DKc9kg+P6AZjqCJb6QsKZ3stQYzmetpVbuWTQU 1OQN5P4W0nRLI/wkeFYpQjOgJSeugm/o+CQuuXTsEwL+ljWYd57OD8WlK6dswi2A sWHbnDQGKjd5SouNnQh4N7DgDJjl7LTb2XKrMNS86FA5IGjmDIhZIj6bgAuXFz6L idvby+xv7YcA7b38ALt6rWX3Ov2hJX7sgI0WSwxiFDfGeIypVtuqqlaDlIfvog1k NWp3AiNR4bssUgmS5tm0M7y+vQP//M2euEpgmm5cNktmevdHOrnlAmT2/MyXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3eqzHGS9NrSr5s911Ot+GQiTCdIwHwYDVR0j BBgwFoAUKt3UA1Fz+sO7OUnLNszvJVN5i/wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODY3YTJlZS1kNDExLTRmZjgtOWY1Yy0zNWQwMzQxMjNmODQvMC8yQURERDQwMzUx NzNGQUMzQkIzOTQ5Q0IzNkNDRUYyNTUzNzk4QkZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkFEREQ0MDM1MTczRkFDM0JCMzk0OUNCMzZDQ0VGMjU1Mzc5 OEJGQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjg2N2EyZWUtZDQxMS00ZmY4LTlm NWMtMzVkMDM0MTIzZjg0LzAvMkFEREQ0MDM1MTczRkFDM0JCMzk0OUNCMzZDQ0VG MjU1Mzc5OEJGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADvmXVRyjz0LF/BEUMf3F+lDpvKLCxnswJCa OoQO/MgG31xk3lTILP/wry64IzkbPHe9E5XCIEOvtjSZ2y1K0NCorIkaEX9seJNG cJHMeEEqerIZ2NNvOv4L50x6BBVJQk46S7ut3xx9iP23VMKvI27GPLntJs6xOTRM Ece1NZYvvbkUrqC2SCZIsrk99FGKlGsoztNssayrAWtDne5nu9Xzjj1P4m28ZpSQ fd7DHXDMjKLKDCpkqn/6Wyzi/G6lmIH22YlbHj3Uev3hdHSSLkNW8I13QZfh9No/ wqYGMlv81yb1q3vK1Ym13buSqvL/Py4h65IAucCy07DyJh7cz2I= -----END CERTIFICATE-----Generated at Sun Apr 27 12:15:30 2025 by rpki-client