$ rpki-client -vvf repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft File: 2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft (raw, json) Hash identifier: KCR/3cQxy1DVqWKVxPcOku87di8RSbrKsqBZ2Jk1CRw= Subject key identifier: 07:A1:95:9E:3C:6E:E3:22:EF:A9:58:69:D3:CA:D8:C8:66:4D:3C:00 Authority key identifier: 2B:DF:AF:A7:0A:11:BF:BF:6C:98:2B:BF:2C:2C:08:4D:E8:0E:03:4E Certificate issuer: /CN=2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E Certificate serial: 19343C1799CEB0CF6C56ADA5A1D6E765DF858BB9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft Manifest number: 0344 Signing time: Sat 26 Apr 2025 16:31:57 +0000 Manifest this update: Sat 26 Apr 2025 16:26:57 +0000 Manifest next update: Wed 30 Apr 2025 01:19:57 +0000 Files and hashes: 1: 2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl (hash: NK2HXKHrdebIlYbaHfRvrE4kg8m4OqfEOuZoIdlIUIg=) 2: 3130332e3136392e322e302f32332d3234203d3e203137393935.roa (hash: +JB4xjkXbgweSU7X29CnYlRjnbB6M5XtdFb5z4Dimtg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 20:11:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:34:3c:17:99:ce:b0:cf:6c:56:ad:a5:a1:d6:e7:65:df:85:8b:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E Validity Not Before: Apr 26 16:26:57 2025 GMT Not After : Apr 30 01:19:57 2025 GMT Subject: CN=07A1959E3C6EE322EFA95869D3CAD8C8664D3C00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c5:b1:e3:a6:73:52:76:60:7b:42:61:32:5e: 0e:06:cb:6d:c7:91:b7:bf:22:24:92:c9:74:0c:5f: e6:40:ff:bb:c9:57:c6:84:7a:94:be:9a:03:d4:84: 05:0c:f6:2a:71:de:6c:08:2f:0a:47:59:e3:94:7d: 2f:ef:c2:ca:88:86:9e:c0:e6:35:e1:84:d0:47:ed: a0:75:e9:e3:fa:90:38:86:8f:54:94:58:56:1d:b0: 4e:d0:88:3d:00:d4:72:e7:ae:3b:06:4d:1e:7c:ff: bd:f7:7d:51:00:3c:68:79:26:a4:86:1f:8a:04:db: ec:48:64:01:93:56:bd:8b:f8:87:0a:e8:15:ae:c9: 9d:7d:af:46:69:3c:09:e6:94:83:81:52:a8:a2:e8: 8e:63:1e:22:96:2a:bb:34:3b:ec:e7:0c:81:bb:ae: 8c:e9:7c:46:60:b0:67:c8:4a:81:84:25:a9:4c:84: 87:8c:cd:a4:b4:71:8d:d1:26:26:ce:a4:41:14:29: 2d:b3:56:7a:d2:f0:11:ef:3e:d2:1d:93:8d:c6:a4: 9c:c8:d4:b3:50:82:ff:36:88:5a:2e:cd:31:75:65: 19:4a:0f:8f:38:ff:96:a8:10:28:9a:9a:30:50:d5: ff:98:f9:3a:49:95:7d:be:2f:2c:82:2f:2a:96:1c: 48:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:A1:95:9E:3C:6E:E3:22:EF:A9:58:69:D3:CA:D8:C8:66:4D:3C:00 X509v3 Authority Key Identifier: keyid:2B:DF:AF:A7:0A:11:BF:BF:6C:98:2B:BF:2C:2C:08:4D:E8:0E:03:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:64:77:b0:66:d4:60:98:64:7a:2e:ce:f5:31:0c:f7:4d:0e: e6:1a:f2:d7:93:6b:e4:5a:f9:a1:7e:b7:d2:81:a3:dd:cf:d4: 00:32:9f:78:50:ff:ab:37:70:43:55:f3:b5:47:96:8b:84:c8: 8f:8b:df:4d:0d:a3:aa:c5:1d:84:1d:cb:3c:d6:6f:0f:69:61: 83:ad:c4:03:c7:16:bf:09:bb:8e:7e:13:39:41:5f:a1:9b:98: 1e:63:8a:63:0e:2b:3f:1f:e6:87:d9:04:2b:65:58:8c:09:52: 12:48:15:d9:3f:c7:fd:4c:85:83:34:47:9f:81:10:4c:14:0c: b9:e4:10:d9:fb:df:f3:f9:3e:71:65:fa:0d:df:f0:5d:d3:92: 2a:46:eb:ba:60:b5:e4:5f:ac:be:c6:16:4f:f4:94:c0:3a:4a: bf:2e:41:01:36:a0:a1:b4:5a:d3:b2:12:21:be:2b:c8:b9:e1: c2:26:ae:fa:87:41:33:8d:a5:8a:d8:34:48:84:c8:41:15:e4: 76:be:91:08:20:82:1f:6a:d4:6e:81:f2:e3:af:4c:a4:41:19: 91:f8:c0:1c:4f:0a:68:27:1d:0d:55:21:40:20:81:57:5b:25: 75:4a:15:38:b9:b8:fc:cc:eb:96:fb:4f:c0:f9:f3:83:1a:1e: 6b:88:cc:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGTQ8F5nOsM9sVq2lodbnZd+Fi7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4NERF ODBFMDM0RTAeFw0yNTA0MjYxNjI2NTdaFw0yNTA0MzAwMTE5NTdaMDMxMTAvBgNV BAMTKDA3QTE5NTlFM0M2RUUzMjJFRkE5NTg2OUQzQ0FEOEM4NjY0RDNDMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgxbHjpnNSdmB7QmEyXg4Gy23H kbe/IiSSyXQMX+ZA/7vJV8aEepS+mgPUhAUM9ipx3mwILwpHWeOUfS/vwsqIhp7A 5jXhhNBH7aB16eP6kDiGj1SUWFYdsE7QiD0A1HLnrjsGTR58/733fVEAPGh5JqSG H4oE2+xIZAGTVr2L+IcK6BWuyZ19r0ZpPAnmlIOBUqii6I5jHiKWKrs0O+znDIG7 rozpfEZgsGfISoGEJalMhIeMzaS0cY3RJibOpEEUKS2zVnrS8BHvPtIdk43GpJzI 1LNQgv82iFouzTF1ZRlKD484/5aoECiamjBQ1f+Y+TpJlX2+LyyCLyqWHEjjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB6GVnjxu4yLvqVhp08rYyGZNPAAwHwYDVR0j BBgwFoAUK9+vpwoRv79smCu/LCwITegOA04wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmNkOWNlYS0zYmY0LTRhOWMtYWVlNi0wMDMzOWMwNjU1MGIvMC8yQkRGQUZBNzBB MTFCRkJGNkM5ODJCQkYyQzJDMDg0REU4MEUwMzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4NERFODBF MDM0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJjZDljZWEtM2JmNC00YTljLWFl ZTYtMDAzMzljMDY1NTBiLzAvMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4 NERFODBFMDM0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKtkd7Bm1GCYZHouzvUxDPdNDuYa8teTa+Ra +aF+t9KBo93P1AAyn3hQ/6s3cENV87VHlouEyI+L300No6rFHYQdyzzWbw9pYYOt xAPHFr8Ju45+EzlBX6GbmB5jimMOKz8f5ofZBCtlWIwJUhJIFdk/x/1MhYM0R5+B EEwUDLnkENn73/P5PnFl+g3f8F3TkipG67pgteRfrL7GFk/0lMA6Sr8uQQE2oKG0 WtOyEiG+K8i54cImrvqHQTONpYrYNEiEyEEV5Ha+kQgggh9q1G6B8uOvTKRBGZH4 wBxPCmgnHQ1VIUAggVdbJXVKFTi5uPzM65b7T8D584MaHmuIzHQ= -----END CERTIFICATE-----Generated at Sun Apr 27 00:24:40 2025 by rpki-client