$ rpki-client -vvf repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft File: 2BB2F216687C4268643F593811E7E886DCD6CBFA.mft (raw, json) Hash identifier: vdJs4QrVJyN1HfNuIBnhnj8+ZGZOWbRE/GA/eKVeqaU= Subject key identifier: 66:64:4F:71:89:69:0A:5D:67:CE:40:B0:8B:4C:60:3C:9E:8D:F8:AB Authority key identifier: 2B:B2:F2:16:68:7C:42:68:64:3F:59:38:11:E7:E8:86:DC:D6:CB:FA Certificate issuer: /CN=2BB2F216687C4268643F593811E7E886DCD6CBFA Certificate serial: 6CE97700420A1FE53DB64EB56B33DFACE71AB34C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft Manifest number: 01BD Signing time: Sun 27 Apr 2025 11:22:05 +0000 Manifest this update: Sun 27 Apr 2025 11:17:05 +0000 Manifest next update: Wed 30 Apr 2025 17:11:05 +0000 Files and hashes: 1: 323030313a6466313a6134303a3a2f34382d3438203d3e20313431363432.roa (hash: fFX2S0yuCGbDsYrqvIvfedkBEVG6E8+DQx58RVmq88I=) 2: 2BB2F216687C4268643F593811E7E886DCD6CBFA.crl (hash: jCf1g50/b8T+8rWIfhxk/8KpdvAB6A15UQTq3pLVPd0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.crl rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 17:11:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:e9:77:00:42:0a:1f:e5:3d:b6:4e:b5:6b:33:df:ac:e7:1a:b3:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB2F216687C4268643F593811E7E886DCD6CBFA Validity Not Before: Apr 27 11:17:05 2025 GMT Not After : Apr 30 17:11:05 2025 GMT Subject: CN=66644F7189690A5D67CE40B08B4C603C9E8DF8AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:af:07:57:04:8f:05:2c:f3:96:31:22:64:9d: 91:31:a9:1c:1a:46:ca:3e:54:4d:d5:84:fa:df:be: 7a:b8:13:6d:f6:7d:a3:4c:d4:1e:19:83:d8:a4:5f: 5d:3d:63:57:9f:3b:d8:a6:b5:d7:3f:29:47:9f:fe: db:77:03:07:6c:f5:7b:66:ce:20:c4:58:f7:c4:8d: ff:cb:1a:73:9a:94:97:f3:5a:e7:d1:e9:e3:21:52: 8c:d0:78:b4:dc:ce:5c:3d:2c:9c:04:3c:1c:55:48: 67:78:e4:3a:df:e3:e9:93:d4:d3:81:ce:67:d6:0d: a6:d8:28:cd:3c:82:be:fb:0f:ff:4f:28:75:1f:7f: f6:a0:f7:b8:42:ec:f8:50:f1:61:65:4b:56:ba:6e: 51:43:92:b9:09:21:5c:62:92:23:b4:e7:ea:f4:bb: 65:cf:4c:c9:be:72:ce:3d:02:bc:67:c7:40:69:c9: 1d:54:ad:9e:45:07:19:48:32:01:07:25:dc:16:87: 5b:3d:c3:8a:64:78:7b:cb:71:eb:14:87:93:26:98: 3f:6c:e4:9d:d0:94:83:3e:d9:cc:8a:93:e8:b4:db: fc:37:40:42:f7:07:09:b8:72:5b:8f:fc:e0:53:0a: a4:13:98:63:6a:bb:cb:3a:fe:fa:1e:ad:bd:79:96: 23:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:64:4F:71:89:69:0A:5D:67:CE:40:B0:8B:4C:60:3C:9E:8D:F8:AB X509v3 Authority Key Identifier: keyid:2B:B2:F2:16:68:7C:42:68:64:3F:59:38:11:E7:E8:86:DC:D6:CB:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:65:1b:95:a1:ec:06:ba:ac:96:03:4d:cf:1f:9f:53:bd:9b: ae:36:da:9b:57:a6:b5:42:d6:54:af:c2:48:44:4c:ca:68:d6: df:0a:e3:c8:c7:fa:23:fe:da:8b:2d:47:4b:bb:79:ce:37:b4: 1e:57:30:20:42:18:16:ea:4f:70:3a:27:7a:28:a9:4e:38:e6: 6c:f5:b0:c9:d0:0f:f5:e9:52:ee:1c:e1:61:6b:67:e5:09:e7: b2:9d:f7:bf:fb:36:0d:c4:3d:84:3a:52:da:5a:10:95:a8:80: ef:34:c7:50:06:25:94:51:06:9f:69:a8:41:59:e8:d5:11:80: d8:9f:09:17:b7:eb:75:18:eb:8e:d8:35:64:59:0a:c4:09:fe: 87:71:59:e5:a2:be:03:6b:e2:25:5e:f1:c4:3d:cd:17:7c:1d: 66:41:6c:94:25:5b:a5:66:86:fc:11:c2:85:db:df:b7:a2:f7: 93:ae:93:7d:0d:22:75:b8:c2:07:94:72:b4:72:64:0d:3c:55: 24:9a:f9:32:b5:cc:fb:32:aa:e9:ba:07:1b:47:a3:39:eb:9c: 49:3f:27:57:29:44:06:55:e5:1d:33:62:85:6d:da:d0:e6:e8: 68:6d:4f:f8:0a:53:98:1c:9f:19:c5:1d:18:25:23:a9:f5:f8: 7b:48:9c:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbOl3AEIKH+U9tk61azPfrOcas0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCMkYyMTY2ODdDNDI2ODY0M0Y1OTM4MTFFN0U4ODZE Q0Q2Q0JGQTAeFw0yNTA0MjcxMTE3MDVaFw0yNTA0MzAxNzExMDVaMDMxMTAvBgNV BAMTKDY2NjQ0RjcxODk2OTBBNUQ2N0NFNDBCMDhCNEM2MDNDOUU4REY4QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/rwdXBI8FLPOWMSJknZExqRwa Rso+VE3VhPrfvnq4E232faNM1B4Zg9ikX109Y1efO9imtdc/KUef/tt3Awds9Xtm ziDEWPfEjf/LGnOalJfzWufR6eMhUozQeLTczlw9LJwEPBxVSGd45Drf4+mT1NOB zmfWDabYKM08gr77D/9PKHUff/ag97hC7PhQ8WFlS1a6blFDkrkJIVxikiO05+r0 u2XPTMm+cs49Arxnx0BpyR1UrZ5FBxlIMgEHJdwWh1s9w4pkeHvLcesUh5MmmD9s 5J3QlIM+2cyKk+i02/w3QEL3Bwm4cluP/OBTCqQTmGNqu8s6/voerb15liP5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZmRPcYlpCl1nzkCwi0xgPJ6N+KswHwYDVR0j BBgwFoAUK7LyFmh8QmhkP1k4EefohtzWy/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmFmZGY1MC1kZjUxLTQ5NWEtYjFiMC1hMTNhMDEzOWFiMTUvMC8yQkIyRjIxNjY4 N0M0MjY4NjQzRjU5MzgxMUU3RTg4NkRDRDZDQkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJCMkYyMTY2ODdDNDI2ODY0M0Y1OTM4MTFFN0U4ODZEQ0Q2 Q0JGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJhZmRmNTAtZGY1MS00OTVhLWIx YjAtYTEzYTAxMzlhYjE1LzAvMkJCMkYyMTY2ODdDNDI2ODY0M0Y1OTM4MTFFN0U4 ODZEQ0Q2Q0JGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACtlG5Wh7Aa6rJYDTc8fn1O9m6422ptXprVC 1lSvwkhETMpo1t8K48jH+iP+2ostR0u7ec43tB5XMCBCGBbqT3A6J3ooqU445mz1 sMnQD/XpUu4c4WFrZ+UJ57Kd97/7Ng3EPYQ6UtpaEJWogO80x1AGJZRRBp9pqEFZ 6NURgNifCRe363UY647YNWRZCsQJ/odxWeWivgNr4iVe8cQ9zRd8HWZBbJQlW6Vm hvwRwoXb37ei95Ouk30NInW4wgeUcrRyZA08VSSa+TK1zPsyqum6BxtHoznrnEk/ J1cpRAZV5R0zYoVt2tDm6GhtT/gKU5gcnxnFHRglI6n1+HtInIM= -----END CERTIFICATE-----Generated at Mon Apr 28 02:10:01 2025 by rpki-client