$ rpki-client -vvf repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft File: 2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft (raw, json) Hash identifier: CQ4IlXQq2SEisnQw2GWcWQuGU/iDpY8g1ZEBranKGQE= Subject key identifier: A2:2E:BD:5C:15:98:C8:B5:49:D5:23:ED:97:35:2E:8C:B3:75:21:EA Authority key identifier: 2A:27:80:23:3B:F2:E0:6D:53:3E:C6:B0:5F:50:02:06:FB:B0:6D:6D Certificate issuer: /CN=2A2780233BF2E06D533EC6B05F500206FBB06D6D Certificate serial: 0C914ABFDC4F98735D1123D01ECDA393F4911F24 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2780233BF2E06D533EC6B05F500206FBB06D6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft Manifest number: 016F Signing time: Sat 26 Apr 2025 00:40:38 +0000 Manifest this update: Sat 26 Apr 2025 00:35:38 +0000 Manifest next update: Tue 29 Apr 2025 09:01:38 +0000 Files and hashes: 1: 2A2780233BF2E06D533EC6B05F500206FBB06D6D.crl (hash: 7ZT+D73HwI98AT9RuJIzbeKoo1NfTj6f5gnb0D0kVuc=) 2: 3130332e3134312e3137302e302f32342d3234203d3e20313530353139.roa (hash: fbcGL1NLXeGrNrcBk/cYo3ucVVcH9bT5MeT1X/6RPlA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.crl rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2780233BF2E06D533EC6B05F500206FBB06D6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 09:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:91:4a:bf:dc:4f:98:73:5d:11:23:d0:1e:cd:a3:93:f4:91:1f:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2780233BF2E06D533EC6B05F500206FBB06D6D Validity Not Before: Apr 26 00:35:38 2025 GMT Not After : Apr 29 09:01:38 2025 GMT Subject: CN=A22EBD5C1598C8B549D523ED97352E8CB37521EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:54:8b:11:f5:7c:84:c9:71:a8:88:b5:6b:40: ca:06:fb:e0:a5:0b:01:73:94:c4:53:87:91:ef:0a: c5:55:45:d1:b8:78:94:5d:87:2e:c1:ea:c2:d8:84: db:c4:f9:86:bd:03:54:c6:85:c6:08:6a:35:42:e8: 7b:a6:a2:b2:14:10:97:70:9a:71:72:c6:dd:44:16: 59:d5:15:d3:78:c4:94:ae:66:54:48:f4:ec:aa:59: 1e:01:c8:d1:c2:e4:fd:77:23:07:b7:98:c1:a5:a3: df:7e:f4:15:47:0a:c8:12:87:ce:ae:4a:83:75:47: 8b:69:58:02:26:63:ad:a3:a5:2e:dd:fb:b7:3f:13: eb:3a:74:d5:52:30:f2:0e:bc:eb:48:7c:e0:82:d9: e0:17:b8:22:87:75:81:4f:ab:70:b0:9d:53:39:4b: 82:43:a0:1b:74:02:18:69:13:a7:6e:a8:46:61:3c: 08:7b:c1:1f:50:30:40:de:f4:8e:4a:43:a8:bc:5d: 72:d9:ff:bd:ef:4c:f7:4c:85:9a:bf:20:f6:a0:f7: f0:88:44:27:d8:bd:8c:b3:d7:b7:dc:ba:00:f3:1d: 66:9a:26:9c:ab:4f:a1:40:0c:fe:ca:34:9d:11:86: 86:45:d3:2d:cb:b2:77:25:a3:39:28:02:7e:52:c2: 06:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:2E:BD:5C:15:98:C8:B5:49:D5:23:ED:97:35:2E:8C:B3:75:21:EA X509v3 Authority Key Identifier: keyid:2A:27:80:23:3B:F2:E0:6D:53:3E:C6:B0:5F:50:02:06:FB:B0:6D:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2780233BF2E06D533EC6B05F500206FBB06D6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:20:fa:36:fa:dd:44:70:d6:2e:0f:84:f9:fe:41:ea:6a:17: 7d:50:57:ec:a3:fb:75:5d:c8:96:0b:e2:a2:99:40:3b:a2:2f: 37:cb:f3:ff:20:f0:9e:50:78:e6:c1:36:7a:ab:5c:81:2b:83: 5b:a0:10:b5:b3:e6:2d:b4:9f:61:fa:33:ca:63:3f:4d:d3:25: 7d:ec:5b:37:17:7a:49:22:86:bb:4c:75:a8:44:b4:9b:60:72: d9:17:e2:79:b5:b2:9b:10:4d:09:e7:5a:83:86:7c:9f:09:52: 65:16:b7:1f:40:8e:6d:d3:f7:b4:27:10:73:1a:4e:84:eb:55: e8:51:cd:95:36:02:c7:c2:19:bb:82:54:4a:f6:ac:8a:bf:d4: 17:66:98:7c:b3:57:ce:d8:ac:61:7c:c7:3e:7e:5b:1e:31:e0: 4e:c5:51:b2:cf:21:9f:55:81:b3:73:1c:83:e8:b3:0d:3d:ca: ee:8b:41:17:5e:55:5a:f6:86:3e:6a:e7:5a:1b:16:d8:a1:ec: 79:76:09:07:88:c7:1a:7c:59:58:1c:27:b3:5f:f8:98:65:ac: 36:da:10:2a:b4:48:a7:e1:1a:d1:bd:a4:73:50:db:3a:8a:2f: 35:ec:6c:57:23:29:09:d4:52:a2:c7:44:0a:b7:34:09:d9:84: 89:34:14:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDJFKv9xPmHNdESPQHs2jk/SRHyQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyNzgwMjMzQkYyRTA2RDUzM0VDNkIwNUY1MDAyMDZG QkIwNkQ2RDAeFw0yNTA0MjYwMDM1MzhaFw0yNTA0MjkwOTAxMzhaMDMxMTAvBgNV BAMTKEEyMkVCRDVDMTU5OEM4QjU0OUQ1MjNFRDk3MzUyRThDQjM3NTIxRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaVIsR9XyEyXGoiLVrQMoG++Cl CwFzlMRTh5HvCsVVRdG4eJRdhy7B6sLYhNvE+Ya9A1TGhcYIajVC6HumorIUEJdw mnFyxt1EFlnVFdN4xJSuZlRI9OyqWR4ByNHC5P13Iwe3mMGlo99+9BVHCsgSh86u SoN1R4tpWAImY62jpS7d+7c/E+s6dNVSMPIOvOtIfOCC2eAXuCKHdYFPq3CwnVM5 S4JDoBt0AhhpE6duqEZhPAh7wR9QMEDe9I5KQ6i8XXLZ/73vTPdMhZq/IPag9/CI RCfYvYyz17fcugDzHWaaJpyrT6FADP7KNJ0RhoZF0y3LsnclozkoAn5SwgYTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoi69XBWYyLVJ1SPtlzUujLN1IeowHwYDVR0j BBgwFoAUKieAIzvy4G1TPsawX1ACBvuwbW0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzZmOGMwYS1lMDNmLTQxNDAtYmExNi04MzNhYzIyNDFhZmIvMC8yQTI3ODAyMzNC RjJFMDZENTMzRUM2QjA1RjUwMDIwNkZCQjA2RDZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkEyNzgwMjMzQkYyRTA2RDUzM0VDNkIwNUY1MDAyMDZGQkIw NkQ2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M2ZjhjMGEtZTAzZi00MTQwLWJh MTYtODMzYWMyMjQxYWZiLzAvMkEyNzgwMjMzQkYyRTA2RDUzM0VDNkIwNUY1MDAy MDZGQkIwNkQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFcg+jb63URw1i4PhPn+QepqF31QV+yj+3Vd yJYL4qKZQDuiLzfL8/8g8J5QeObBNnqrXIErg1ugELWz5i20n2H6M8pjP03TJX3s WzcXekkihrtMdahEtJtgctkX4nm1spsQTQnnWoOGfJ8JUmUWtx9Ajm3T97QnEHMa ToTrVehRzZU2AsfCGbuCVEr2rIq/1BdmmHyzV87YrGF8xz5+Wx4x4E7FUbLPIZ9V gbNzHIPosw09yu6LQRdeVVr2hj5q51obFtih7Hl2CQeIxxp8WVgcJ7Nf+JhlrDba ECq0SKfhGtG9pHNQ2zqKLzXsbFcjKQnUUqLHRAq3NAnZhIk0FBw= -----END CERTIFICATE-----Generated at Sun Apr 27 06:31:30 2025 by rpki-client