$ rpki-client -vvf repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft File: 2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft (raw, json) Hash identifier: VK+Q0MyKCi9jWKz+OZgx21XSHc5pN8VZUOmuqumR3Oo= Subject key identifier: 19:EC:17:90:5A:80:AA:6A:70:0A:D3:50:0E:F8:AA:6F:5F:5A:97:80 Authority key identifier: 2F:24:A2:04:48:06:30:1E:B7:FA:6C:E5:C8:52:1F:E0:39:41:B7:BA Certificate issuer: /CN=2F24A2044806301EB7FA6CE5C8521FE03941B7BA Certificate serial: 2AE93559E4BA8AD01E8FF0CD37A6DDDFC50B6903 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft Manifest number: CD Signing time: Tue 29 Apr 2025 04:21:21 +0000 Manifest this update: Tue 29 Apr 2025 04:16:21 +0000 Manifest next update: Fri 02 May 2025 06:19:21 +0000 Files and hashes: 1: 2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl (hash: a5MUSuKnXalfaDqWtNiTQcSftG2nKHLie09mVm25snA=) 2: 3130332e3138342e35372e302f32342d3234203d3e20313532333532.roa (hash: X5jcqVTllqsiihg+7l6qTb+EAVnsgGJI9/U4b928wFE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:19:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:e9:35:59:e4:ba:8a:d0:1e:8f:f0:cd:37:a6:dd:df:c5:0b:69:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F24A2044806301EB7FA6CE5C8521FE03941B7BA Validity Not Before: Apr 29 04:16:21 2025 GMT Not After : May 2 06:19:21 2025 GMT Subject: CN=19EC17905A80AA6A700AD3500EF8AA6F5F5A9780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:64:31:b6:87:7f:c4:c1:19:9a:27:30:dd:7e: 16:9a:ca:81:dd:e0:eb:3a:be:55:de:cd:ae:01:68: 42:9d:fd:ac:03:b0:34:77:d7:6c:b4:32:7c:8b:78: 4b:f7:26:2a:7f:05:bb:12:3f:59:a8:c4:44:37:5c: fa:35:1b:d9:2f:5c:6a:57:bb:71:45:8e:77:3a:58: de:58:61:f7:09:5a:7f:ae:0f:54:12:7a:3a:6d:35: a4:c0:8a:cf:e4:90:9f:fd:36:b2:4c:11:2b:2d:23: 25:14:20:5a:d0:3a:66:48:e9:1a:ec:c8:2f:06:9d: 17:62:6c:f2:06:76:9b:37:1e:d0:91:aa:76:63:c3: ae:ca:de:7a:a6:4d:f0:db:35:49:60:4c:96:54:5f: 62:1b:b0:f8:2a:f1:19:4d:33:78:9a:e9:ae:e6:93: 36:20:a6:41:46:4d:91:6d:be:7a:f2:82:b2:91:6c: b1:3f:32:ef:35:9f:f2:19:2e:5d:ab:62:2c:cb:99: 9e:d2:47:3b:46:5c:61:ec:2c:45:02:56:f0:49:66: e1:ba:4b:0a:c5:9c:3c:f3:38:bd:dd:44:70:9c:bb: b3:d1:6a:ef:3c:c4:19:10:83:b8:9b:58:49:3f:ad: 36:2a:d1:f7:08:7c:b8:3b:57:9b:3d:af:6d:7a:e0: c0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:EC:17:90:5A:80:AA:6A:70:0A:D3:50:0E:F8:AA:6F:5F:5A:97:80 X509v3 Authority Key Identifier: keyid:2F:24:A2:04:48:06:30:1E:B7:FA:6C:E5:C8:52:1F:E0:39:41:B7:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:df:9f:db:f1:a5:11:fd:64:1a:55:df:44:6b:28:00:71:15: 6a:72:88:51:6e:3d:3e:84:71:01:88:a7:49:47:c6:13:f7:ca: d3:56:1c:04:0d:93:a3:fd:04:b7:04:d0:cd:9e:02:01:9f:48: a4:e6:19:58:40:f3:71:1a:c3:87:98:e0:be:5a:2c:72:08:e4: 7b:96:8d:e6:79:d6:9e:55:75:e9:8f:19:70:e2:52:33:e8:24: 7b:9c:e2:2f:5c:37:ca:95:c6:9c:b8:d8:40:36:ac:d1:f5:cc: 44:dd:56:55:2a:90:58:fe:9f:24:cb:ce:d6:72:b4:eb:3d:d7: 79:97:a5:07:e7:c8:08:a7:5e:f9:d5:47:28:06:c6:d0:35:f9: 58:2c:43:c2:0d:f2:e5:7e:be:ac:47:92:87:db:25:05:04:4f: 3d:60:6b:20:d9:18:44:4b:e3:41:e4:44:94:78:e4:6f:d2:20: 5d:48:78:d1:4e:5b:2f:7a:5e:84:ab:af:1a:56:9d:bc:c1:8e: 2a:59:35:53:5d:87:46:58:02:0e:34:30:9c:1e:6b:da:8a:8d: 9d:b5:6b:b3:26:99:14:16:b4:5d:ee:59:76:01:22:3a:b4:6b: 18:3a:28:40:0e:63:4e:05:4a:d8:dd:dd:3c:21:0a:0b:95:64: 56:b2:95:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKuk1WeS6itAej/DNN6bd38ULaQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFGRTAz OTQxQjdCQTAeFw0yNTA0MjkwNDE2MjFaFw0yNTA1MDIwNjE5MjFaMDMxMTAvBgNV BAMTKDE5RUMxNzkwNUE4MEFBNkE3MDBBRDM1MDBFRjhBQTZGNUY1QTk3ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1ZDG2h3/EwRmaJzDdfhaayoHd 4Os6vlXeza4BaEKd/awDsDR312y0MnyLeEv3Jip/BbsSP1moxEQ3XPo1G9kvXGpX u3FFjnc6WN5YYfcJWn+uD1QSejptNaTAis/kkJ/9NrJMESstIyUUIFrQOmZI6Rrs yC8GnRdibPIGdps3HtCRqnZjw67K3nqmTfDbNUlgTJZUX2IbsPgq8RlNM3ia6a7m kzYgpkFGTZFtvnrygrKRbLE/Mu81n/IZLl2rYizLmZ7SRztGXGHsLEUCVvBJZuG6 SwrFnDzzOL3dRHCcu7PRau88xBkQg7ibWEk/rTYq0fcIfLg7V5s9r2164MCLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGewXkFqAqmpwCtNQDviqb19al4AwHwYDVR0j BBgwFoAULySiBEgGMB63+mzlyFIf4DlBt7owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWEyOTI5Yy02MDg4LTRjYjUtODNjNi1mNGEzNTZiMjBmOWQvMC8yRjI0QTIwNDQ4 MDYzMDFFQjdGQTZDRTVDODUyMUZFMDM5NDFCN0JBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFGRTAzOTQx QjdCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFhMjkyOWMtNjA4OC00Y2I1LTgz YzYtZjRhMzU2YjIwZjlkLzAvMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFG RTAzOTQxQjdCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALfn9vxpRH9ZBpV30RrKABxFWpyiFFuPT6E cQGIp0lHxhP3ytNWHAQNk6P9BLcE0M2eAgGfSKTmGVhA83Eaw4eY4L5aLHII5HuW jeZ51p5VdemPGXDiUjPoJHuc4i9cN8qVxpy42EA2rNH1zETdVlUqkFj+nyTLztZy tOs913mXpQfnyAinXvnVRygGxtA1+VgsQ8IN8uV+vqxHkofbJQUETz1gayDZGERL 40HkRJR45G/SIF1IeNFOWy96XoSrrxpWnbzBjipZNVNdh0ZYAg40MJwea9qKjZ21 a7MmmRQWtF3uWXYBIjq0axg6KEAOY04FStjd3TwhCguVZFaylYw= -----END CERTIFICATE-----Generated at Tue Apr 29 07:38:57 2025 by rpki-client