$ rpki-client -vvf repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft File: 2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft (raw, json) Hash identifier: Wh84fdKj4gqY0JtQcIOefvCSSHzq6e9+30Zl7CS7/Ao= Subject key identifier: 8F:E1:07:C8:F5:13:91:94:72:C7:5E:A1:AA:F2:F5:A3:37:62:D8:09 Authority key identifier: 2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6 Certificate issuer: /CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6 Certificate serial: 7004E23FABD5C8D9C268FAF1F4F457435AC389A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft Manifest number: 032D Signing time: Wed 30 Apr 2025 12:41:24 +0000 Manifest this update: Wed 30 Apr 2025 12:36:24 +0000 Manifest next update: Sat 03 May 2025 18:29:24 +0000 Files and hashes: 1: 2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl (hash: i55qdAh+mMinKYrKon6BR4UJbBIaqHEzA92uHN9Odnc=) 2: 3130332e3233312e38312e302f32342d3234203d3e20313331373335.roa (hash: cHq0w9NeVR2kphOoYMXZeSGQxfdQLrs5CAZ+diGk+MY=) 3: 3130332e3233312e38332e302f32342d3234203d3e20313331373335.roa (hash: aea2W9WYQPl/1TtNtg5p/r8zRHe+55gj7tNmZIC5BG8=) 4: 3130332e3233312e38302e302f32342d3234203d3e20313331373335.roa (hash: etlEVL/G6ecv5pikZQs/QfSTGNp1Hz5OKi7d2dSKjks=) 5: 3130332e3233312e38322e302f32342d3234203d3e20313331373335.roa (hash: +ZL/jR4jkHL38m4yhCnPzcMy2A6pqHCMxHZrb0m8ttA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 18:29:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:04:e2:3f:ab:d5:c8:d9:c2:68:fa:f1:f4:f4:57:43:5a:c3:89:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6 Validity Not Before: Apr 30 12:36:24 2025 GMT Not After : May 3 18:29:24 2025 GMT Subject: CN=8FE107C8F513919472C75EA1AAF2F5A33762D809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d1:74:13:6d:c1:a2:51:4d:fa:19:89:4c:6a: bf:b9:fc:07:1a:1a:d3:3a:47:56:90:22:5d:0a:b2: 8e:db:11:6d:0e:c9:44:5f:f7:01:c9:c8:75:37:47: d9:78:d6:95:e4:f8:f3:47:d9:3f:e7:53:cf:42:61: 0b:88:12:46:ba:83:7f:9e:47:ed:32:50:0b:4c:54: a8:bf:e5:f6:cd:9c:c9:ac:2b:65:0f:d2:5b:cc:a2: d3:bc:8a:64:30:77:b6:e7:4c:4a:58:1e:e3:9b:51: fa:1b:85:43:4a:bc:2a:27:1b:d0:c6:e5:24:82:75: 9d:69:3a:56:5d:3d:88:33:14:c4:7d:f6:7b:9b:4a: 3e:a8:c2:6e:c0:19:f3:d1:28:20:ff:0e:40:bc:0d: 53:16:5f:73:1f:86:44:8a:95:41:d7:6e:dc:a2:81: 4b:27:32:17:26:94:6c:7f:88:3d:68:cb:f1:2a:c0: a0:11:26:06:04:4b:79:3c:4e:81:e0:fd:a5:82:8c: a9:8f:ad:60:3b:ed:a1:f9:05:3e:60:4a:25:a4:21: 59:17:e1:83:6d:35:0c:7e:aa:b5:b4:bc:2d:a6:c3: 2a:1c:27:e3:a1:03:a2:3a:66:56:07:38:0c:63:a3: 14:29:46:6b:8d:dc:e4:68:c8:32:5c:ca:9e:c4:02: f7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E1:07:C8:F5:13:91:94:72:C7:5E:A1:AA:F2:F5:A3:37:62:D8:09 X509v3 Authority Key Identifier: keyid:2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:9b:1e:01:0f:46:a8:71:d6:53:69:f8:97:87:f4:93:42:8b: c2:e3:a4:45:ee:92:5f:e4:b6:8c:c0:17:ed:c9:2a:1f:32:41: 2c:e3:7a:8d:d1:92:83:f5:4f:69:b7:6f:df:30:49:21:51:81: ba:78:ed:c4:c4:0c:3b:2f:44:a2:eb:2a:0f:52:e1:99:a0:0d: 0a:88:3e:15:03:7b:f9:96:80:51:ea:12:ac:cc:17:6e:26:c4: e0:c0:46:d3:55:cd:43:d5:f4:ea:28:e8:b3:4d:3e:9d:87:5c: f9:18:df:0b:09:ba:78:8b:48:a7:ce:ca:34:f0:9c:7d:5e:86: 57:c6:eb:f0:f2:06:13:60:18:be:9b:aa:ce:66:1a:d9:c5:2a: 6f:93:eb:36:1b:6b:4d:87:dd:0a:bb:2a:0a:b3:ea:58:a9:36: e9:77:ea:95:26:73:5a:5f:05:1f:2f:3f:d9:97:c8:e4:5b:ca: 59:83:52:86:82:ea:f0:11:82:b3:95:ec:b8:57:0d:4f:92:fe: 8d:84:2e:3e:d6:9c:eb:9d:6d:d4:1c:fd:6c:5d:4a:82:62:02: 4e:21:d6:0f:fd:9d:26:87:c2:8a:b1:77:b4:aa:f2:fc:37:c8: 60:f0:e2:3a:6a:ee:b7:2d:f2:2f:b2:98:cb:ce:ae:1a:8d:b3: 01:1d:4e:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcATiP6vVyNnCaPrx9PRXQ1rDiakwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3REU1 RDdBNjNBNjAeFw0yNTA0MzAxMjM2MjRaFw0yNTA1MDMxODI5MjRaMDMxMTAvBgNV BAMTKDhGRTEwN0M4RjUxMzkxOTQ3MkM3NUVBMUFBRjJGNUEzMzc2MkQ4MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp0XQTbcGiUU36GYlMar+5/Aca GtM6R1aQIl0Kso7bEW0OyURf9wHJyHU3R9l41pXk+PNH2T/nU89CYQuIEka6g3+e R+0yUAtMVKi/5fbNnMmsK2UP0lvMotO8imQwd7bnTEpYHuObUfobhUNKvConG9DG 5SSCdZ1pOlZdPYgzFMR99nubSj6owm7AGfPRKCD/DkC8DVMWX3MfhkSKlUHXbtyi gUsnMhcmlGx/iD1oy/EqwKARJgYES3k8ToHg/aWCjKmPrWA77aH5BT5gSiWkIVkX 4YNtNQx+qrW0vC2mwyocJ+OhA6I6ZlYHOAxjoxQpRmuN3ORoyDJcyp7EAvfbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj+EHyPUTkZRyx16hqvL1ozdi2AkwHwYDVR0j BBgwFoAUK7E4J0I1dRQdoPHFezPn3l16Y6YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTQ5M2JlMS1mMDY0LTQ5ZTYtOTQ5YS1jYjNlY2JmYzhmNDYvMC8yQkIxMzgyNzQy MzU3NTE0MURBMEYxQzU3QjMzRTdERTVEN0E2M0E2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3REU1RDdB NjNBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGE0OTNiZTEtZjA2NC00OWU2LTk0 OWEtY2IzZWNiZmM4ZjQ2LzAvMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3 REU1RDdBNjNBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF2bHgEPRqhx1lNp+JeH9JNCi8LjpEXukl/k tozAF+3JKh8yQSzjeo3RkoP1T2m3b98wSSFRgbp47cTEDDsvRKLrKg9S4ZmgDQqI PhUDe/mWgFHqEqzMF24mxODARtNVzUPV9Ooo6LNNPp2HXPkY3wsJuniLSKfOyjTw nH1ehlfG6/DyBhNgGL6bqs5mGtnFKm+T6zYba02H3Qq7Kgqz6lipNul36pUmc1pf BR8vP9mXyORbylmDUoaC6vARgrOV7LhXDU+S/o2ELj7WnOudbdQc/WxdSoJiAk4h 1g/9nSaHwoqxd7Sq8vw3yGDw4jpq7rct8i+ymMvOrhqNswEdThM= -----END CERTIFICATE-----Generated at Wed Apr 30 22:37:45 2025 by rpki-client