$ rpki-client -vvf repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft File: 2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft (raw, json) Hash identifier: AVKkIBTDJmHZzmZfofsoF4uBzQzNG/s6UL+XFJTH0+s= Subject key identifier: 8C:A3:0E:44:4B:70:38:E0:08:B4:BB:7B:37:C4:CF:55:57:9F:05:48 Authority key identifier: 2A:A6:E6:5B:86:E4:42:3A:EC:7D:02:D8:5B:43:BA:00:80:12:D2:9D Certificate issuer: /CN=2AA6E65B86E4423AEC7D02D85B43BA008012D29D Certificate serial: 595CA4633D6683C7AFA09A784266DF8B83AE4174 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft Manifest number: 016F Signing time: Sat 26 Apr 2025 18:11:03 +0000 Manifest this update: Sat 26 Apr 2025 18:06:03 +0000 Manifest next update: Wed 30 Apr 2025 04:17:03 +0000 Files and hashes: 1: 2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl (hash: D0/XcN8CR6TlQ20sAgsY7s0nI72N1Kw7H22fOPmOhJg=) 2: 3130332e3132392e35302e302f32332d3234203d3e20313335343738.roa (hash: RsQS9pXwEYaCDD5cA+PCEhqN7yNzqnOa8ujUnr88Njo=) 3: 3130332e3132392e34382e302f32332d3234203d3e20313335343738.roa (hash: nuG2thm0oiOwKnakW1lHLkXwPbpo6Y7ruJlmvamdekA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 04:17:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:5c:a4:63:3d:66:83:c7:af:a0:9a:78:42:66:df:8b:83:ae:41:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AA6E65B86E4423AEC7D02D85B43BA008012D29D Validity Not Before: Apr 26 18:06:03 2025 GMT Not After : Apr 30 04:17:03 2025 GMT Subject: CN=8CA30E444B7038E008B4BB7B37C4CF55579F0548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a7:04:d5:6b:b3:03:66:ad:d3:f3:03:cf:0d: e4:4e:48:65:1b:81:97:d1:c8:aa:dc:f1:76:0f:9a: ea:f1:9d:c3:c9:4c:37:0d:8b:53:3a:fa:89:42:10: ee:c7:d7:01:4f:e5:a0:44:60:11:ee:0d:21:8a:3a: 40:73:23:d4:3f:33:fc:f3:f9:ee:9a:54:22:3c:47: 62:22:ef:16:07:97:b7:83:b5:1d:2c:75:4b:5b:f7: e0:8f:51:2f:a5:da:a9:dc:05:1b:14:44:6c:c3:0c: 0d:e1:f1:0b:c0:ea:71:b7:39:0e:97:5e:0b:f6:31: b4:03:7c:cd:8c:ec:db:a0:ca:04:35:bf:23:c7:7f: 9c:8f:c0:26:db:59:e3:c0:bd:26:ba:02:9b:79:ad: 7f:dc:dc:66:79:a1:c0:71:79:a6:05:6b:93:d8:5d: f2:5a:69:8c:2a:58:10:0e:24:d6:24:fa:cf:ad:e1: 48:e5:ce:2f:8e:7a:ea:a8:3c:83:b1:8f:e1:e8:8e: 9b:9b:4c:1b:55:6d:46:a6:7a:fc:79:ad:a9:67:cb: 7d:50:d3:1b:e4:10:ca:6a:3d:f1:ff:53:f5:5b:67: 86:37:95:68:98:31:da:be:32:ce:a4:ed:ab:2d:bc: 47:8e:1a:35:8d:9d:6e:7e:a2:b2:3e:51:c0:33:73: 88:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:A3:0E:44:4B:70:38:E0:08:B4:BB:7B:37:C4:CF:55:57:9F:05:48 X509v3 Authority Key Identifier: keyid:2A:A6:E6:5B:86:E4:42:3A:EC:7D:02:D8:5B:43:BA:00:80:12:D2:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:e4:97:df:d3:87:72:e8:1e:e8:9b:7a:be:41:c6:11:d2:bf: 66:c4:05:95:33:a8:e2:6f:fc:40:6b:d8:63:65:60:ae:d1:93: a8:dc:61:3e:9b:20:f8:b0:0e:ae:d7:57:14:dc:2e:ff:05:af: 46:0b:51:4b:32:35:ce:32:b4:40:6c:5d:23:c6:83:7d:34:f7: f8:b4:a5:4a:e7:91:9d:04:f0:e3:a2:43:02:98:f8:6b:37:20: 7a:52:e9:7d:1a:89:51:52:d4:56:e6:1c:b4:24:83:cd:98:83: 3f:f3:dd:09:cc:68:45:11:37:eb:cf:2c:dd:d5:77:a2:24:fe: fb:22:29:64:1a:00:06:a9:af:09:aa:8a:b1:9a:52:ef:2b:3c: 45:79:d5:8f:92:7f:f8:d9:3d:d1:f6:f7:0f:07:87:8a:58:9b: f6:9b:78:83:ba:52:ca:20:6f:fc:22:19:0f:5e:94:11:e8:bd: 56:75:60:ce:3d:d8:c3:d8:2e:93:f6:85:c8:f1:f0:e8:32:21: 5c:a6:55:bb:d9:79:a5:1d:bc:5b:82:61:52:22:de:dc:de:e6: 68:73:79:53:e0:ae:97:a7:8d:93:08:33:37:7c:b5:7d:f8:71: 51:87:51:a6:c4:2e:26:b3:70:b2:e4:b9:50:3a:f6:30:04:61: 3d:e5:c0:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWVykYz1mg8evoJp4Qmbfi4OuQXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBNkU2NUI4NkU0NDIzQUVDN0QwMkQ4NUI0M0JBMDA4 MDEyRDI5RDAeFw0yNTA0MjYxODA2MDNaFw0yNTA0MzAwNDE3MDNaMDMxMTAvBgNV BAMTKDhDQTMwRTQ0NEI3MDM4RTAwOEI0QkI3QjM3QzRDRjU1NTc5RjA1NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6pwTVa7MDZq3T8wPPDeROSGUb gZfRyKrc8XYPmurxncPJTDcNi1M6+olCEO7H1wFP5aBEYBHuDSGKOkBzI9Q/M/zz +e6aVCI8R2Ii7xYHl7eDtR0sdUtb9+CPUS+l2qncBRsURGzDDA3h8QvA6nG3OQ6X Xgv2MbQDfM2M7NugygQ1vyPHf5yPwCbbWePAvSa6Apt5rX/c3GZ5ocBxeaYFa5PY XfJaaYwqWBAOJNYk+s+t4Ujlzi+OeuqoPIOxj+HojpubTBtVbUamevx5ralny31Q 0xvkEMpqPfH/U/VbZ4Y3lWiYMdq+Ms6k7astvEeOGjWNnW5+orI+UcAzc4jPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjKMOREtwOOAItLt7N8TPVVefBUgwHwYDVR0j BBgwFoAUKqbmW4bkQjrsfQLYW0O6AIAS0p0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTZiZmY5ZC1mYjEzLTQ3YjktOWNjMC1kZDZhMDczMGExYzYvMC8yQUE2RTY1Qjg2 RTQ0MjNBRUM3RDAyRDg1QjQzQkEwMDgwMTJEMjlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkFBNkU2NUI4NkU0NDIzQUVDN0QwMkQ4NUI0M0JBMDA4MDEy RDI5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U2YmZmOWQtZmIxMy00N2I5LTlj YzAtZGQ2YTA3MzBhMWM2LzAvMkFBNkU2NUI4NkU0NDIzQUVDN0QwMkQ4NUI0M0JB MDA4MDEyRDI5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEXkl9/Th3LoHuiber5BxhHSv2bEBZUzqOJv /EBr2GNlYK7Rk6jcYT6bIPiwDq7XVxTcLv8Fr0YLUUsyNc4ytEBsXSPGg3009/i0 pUrnkZ0E8OOiQwKY+Gs3IHpS6X0aiVFS1FbmHLQkg82Ygz/z3QnMaEURN+vPLN3V d6Ik/vsiKWQaAAaprwmqirGaUu8rPEV51Y+Sf/jZPdH29w8Hh4pYm/abeIO6Usog b/wiGQ9elBHovVZ1YM492MPYLpP2hcjx8OgyIVymVbvZeaUdvFuCYVIi3tze5mhz eVPgrpenjZMIMzd8tX34cVGHUabELiazcLLkuVA69jAEYT3lwOk= -----END CERTIFICATE-----Generated at Sun Apr 27 17:11:34 2025 by rpki-client