$ rpki-client -vvf repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft File: 2FB994CD1282292E6D2907FCECD7F9E472F49985.mft (raw, json) Hash identifier: /Q1EF8TSidzmOaVNZ8bzF0qCFeZ6SQFt7N4bVhUkS6k= Subject key identifier: 42:02:A4:EF:69:34:D7:11:E7:D7:52:B1:23:F0:60:11:17:7D:7E:28 Authority key identifier: 2F:B9:94:CD:12:82:29:2E:6D:29:07:FC:EC:D7:F9:E4:72:F4:99:85 Certificate issuer: /CN=2FB994CD1282292E6D2907FCECD7F9E472F49985 Certificate serial: 2470369AEE3077F83220480B0F58F2A42EF29156 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft Manifest number: 04CA Signing time: Sun 27 Apr 2025 20:10:44 +0000 Manifest this update: Sun 27 Apr 2025 20:05:44 +0000 Manifest next update: Thu 01 May 2025 02:51:44 +0000 Files and hashes: 1: 3130332e3131302e392e302f32342d3234203d3e20313331373137.roa (hash: CAz4EFFuV39K7Yj6bXuCbRxkDhyk69KXBlvgMI1myCM=) 2: 3130332e3131302e382e302f32342d3234203d3e20313331373137.roa (hash: 6z/aBJVjmnV5y30TyBAs1DIg7YaA2W+Hxhks9f6rrXI=) 3: 2FB994CD1282292E6D2907FCECD7F9E472F49985.crl (hash: x5+0E3wxqIt4Qvb3hu48RlXIbtBtrn133IwhyTteH98=) 4: 3130332e3131302e31312e302f32342d3234203d3e20313331373137.roa (hash: IwHwotddAWU2g9udtUXGTuKj467I/RXi9GwfJR1ItSs=) 5: 3130332e3131302e382e302f32322d3232203d3e20313331373137.roa (hash: pX7k3ZuG4xOOUuk1ngzA+y7GWKvpGHKk6TxYVimyz5o=) 6: 3130332e3131302e31302e302f32342d3234203d3e20313331373137.roa (hash: StKC3RjUEcb6GVhgx3SU+vMU9RD+LiURtnpuaNC5b5E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.crl rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 02:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:70:36:9a:ee:30:77:f8:32:20:48:0b:0f:58:f2:a4:2e:f2:91:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FB994CD1282292E6D2907FCECD7F9E472F49985 Validity Not Before: Apr 27 20:05:44 2025 GMT Not After : May 1 02:51:44 2025 GMT Subject: CN=4202A4EF6934D711E7D752B123F06011177D7E28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6b:0b:ee:7e:b9:58:3a:3f:26:af:90:53:7c: 24:fd:77:99:c1:85:e9:f1:fb:4c:3d:db:81:57:af: 84:a3:8c:fd:a4:bc:e7:c3:2d:27:9a:9c:76:dd:b5: 39:fc:40:19:61:ea:7d:3d:4f:f5:f4:31:c2:e8:fa: 51:b0:bf:34:22:9d:e3:5b:cb:9f:37:3c:c1:e0:a2: b6:0b:74:99:34:05:b0:ce:52:f8:ff:e3:ae:8c:39: 97:79:28:3e:90:65:b3:f5:1d:15:f7:fb:01:5d:aa: 16:36:85:db:6e:32:92:be:cf:00:29:82:10:be:fe: 68:22:d8:4a:c7:f9:30:a0:b4:dc:82:ae:48:95:43: e7:b9:58:4d:de:0a:40:5b:3f:21:9b:df:33:ce:58: ab:b3:c5:9c:53:b7:66:c0:4b:f9:e1:43:88:13:b3: 29:06:56:f2:f3:95:47:7a:2b:52:bd:aa:9a:b3:da: 38:09:81:bf:35:f6:d4:c2:03:63:48:3b:9b:de:38: 1a:a9:b3:88:11:05:19:09:95:69:d2:bc:d8:0f:ff: 28:2f:d6:a5:16:6d:88:ae:13:7e:ed:15:a9:0c:ae: b9:0d:34:22:b6:3b:70:20:df:bf:02:5f:58:cb:25: f3:45:52:cc:8e:02:05:4d:d1:61:97:e5:0c:07:eb: 54:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:02:A4:EF:69:34:D7:11:E7:D7:52:B1:23:F0:60:11:17:7D:7E:28 X509v3 Authority Key Identifier: keyid:2F:B9:94:CD:12:82:29:2E:6D:29:07:FC:EC:D7:F9:E4:72:F4:99:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:e9:78:85:11:33:46:27:3b:fc:6d:c5:83:f8:5a:1f:b1:42: d9:59:92:5f:22:35:64:87:94:c4:4f:da:2b:0d:f3:08:8f:ad: be:e5:11:e8:98:92:51:72:e3:c2:ea:7a:d1:fc:29:af:01:a9: 04:91:aa:8a:fb:62:16:11:36:23:94:02:80:79:47:36:4c:dd: 21:9e:66:c0:22:63:49:66:7a:5f:fa:0a:d6:db:41:29:8c:bd: 55:00:a4:91:ee:ad:6b:c9:62:d7:8f:b9:2e:ca:41:ee:5e:bd: 9f:a6:93:f0:ff:82:16:14:f6:f2:3c:ec:84:b4:9d:76:07:2d: 55:d6:4c:08:0a:98:ef:c9:8b:23:4d:94:97:aa:46:72:2d:2d: c7:10:d8:07:34:0c:52:b6:d5:8a:a7:9c:0a:35:2c:07:7e:8d: 1a:55:6e:cc:00:14:91:83:00:25:7d:af:8e:3c:d1:10:57:8f: 16:f6:e9:a7:15:4c:85:b8:bc:cb:43:ff:36:00:53:fc:b4:50: 99:84:96:c0:4d:60:07:d9:16:49:d4:d6:6e:5a:ed:ec:58:4b: b8:eb:bd:02:3c:66:50:e6:6f:11:d3:69:25:10:67:d9:7b:fb: 8f:96:6a:1c:2c:57:17:d4:16:4e:63:54:46:e1:e5:9f:88:60: 9e:0e:7f:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJHA2mu4wd/gyIEgLD1jypC7ykVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZCOTk0Q0QxMjgyMjkyRTZEMjkwN0ZDRUNEN0Y5RTQ3 MkY0OTk4NTAeFw0yNTA0MjcyMDA1NDRaFw0yNTA1MDEwMjUxNDRaMDMxMTAvBgNV BAMTKDQyMDJBNEVGNjkzNEQ3MTFFN0Q3NTJCMTIzRjA2MDExMTc3RDdFMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAawvufrlYOj8mr5BTfCT9d5nB henx+0w924FXr4SjjP2kvOfDLSeanHbdtTn8QBlh6n09T/X0McLo+lGwvzQineNb y583PMHgorYLdJk0BbDOUvj/466MOZd5KD6QZbP1HRX3+wFdqhY2hdtuMpK+zwAp ghC+/mgi2ErH+TCgtNyCrkiVQ+e5WE3eCkBbPyGb3zPOWKuzxZxTt2bAS/nhQ4gT sykGVvLzlUd6K1K9qpqz2jgJgb819tTCA2NIO5veOBqps4gRBRkJlWnSvNgP/ygv 1qUWbYiuE37tFakMrrkNNCK2O3Ag378CX1jLJfNFUsyOAgVN0WGX5QwH61TXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQgKk72k01xHn11KxI/BgERd9figwHwYDVR0j BBgwFoAUL7mUzRKCKS5tKQf87Nf55HL0mYUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZGE3NzNkZC05NWFhLTQ0N2UtOTkzZC00Y2Y0YTEyNzNiMzEvMC8yRkI5OTRDRDEy ODIyOTJFNkQyOTA3RkNFQ0Q3RjlFNDcyRjQ5OTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkZCOTk0Q0QxMjgyMjkyRTZEMjkwN0ZDRUNEN0Y5RTQ3MkY0 OTk4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmRhNzczZGQtOTVhYS00NDdlLTk5 M2QtNGNmNGExMjczYjMxLzAvMkZCOTk0Q0QxMjgyMjkyRTZEMjkwN0ZDRUNEN0Y5 RTQ3MkY0OTk4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA7peIURM0YnO/xtxYP4Wh+xQtlZkl8iNWSH lMRP2isN8wiPrb7lEeiYklFy48LqetH8Ka8BqQSRqor7YhYRNiOUAoB5RzZM3SGe ZsAiY0lmel/6CtbbQSmMvVUApJHurWvJYtePuS7KQe5evZ+mk/D/ghYU9vI87IS0 nXYHLVXWTAgKmO/JiyNNlJeqRnItLccQ2Ac0DFK21YqnnAo1LAd+jRpVbswAFJGD ACV9r4480RBXjxb26acVTIW4vMtD/zYAU/y0UJmElsBNYAfZFknU1m5a7exYS7jr vQI8ZlDmbxHTaSUQZ9l7+4+WahwsVxfUFk5jVEbh5Z+IYJ4Of2Q= -----END CERTIFICATE-----Generated at Tue Apr 29 23:37:19 2025 by rpki-client