$ rpki-client -vvf repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft File: 2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft (raw, json) Hash identifier: +8fVWHRPlfoE3IwCW1OvuktSVdUycWdLZdJcdBohTys= Subject key identifier: 2B:DE:07:6C:6F:3C:B2:27:DB:A8:F3:C6:AA:61:93:63:AE:A6:B4:1B Authority key identifier: 2D:6F:96:FA:63:0E:A7:AE:0A:2B:12:2B:6F:04:CC:4F:5F:32:CE:B5 Certificate issuer: /CN=2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5 Certificate serial: 378B3BF6CF32F856A314E37ABCA7F07F11CE934F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft Manifest number: 01CF Signing time: Mon 28 Apr 2025 02:20:51 +0000 Manifest this update: Mon 28 Apr 2025 02:15:51 +0000 Manifest next update: Thu 01 May 2025 12:26:51 +0000 Files and hashes: 1: 3130332e3139312e36302e302f32342d3234203d3e20313430343233.roa (hash: sSH+72BWEr4MQc7BgNlbk4H5MkWrjKvE4wSUUqHwmBM=) 2: 3130332e3139312e36302e302f32332d3234203d3e20313430343233.roa (hash: B7I4pT8xixNUOiX63bEN83in57afrlzmDDKwQ4/5sls=) 3: 3130332e3139312e36312e302f32342d3234203d3e20313430343233.roa (hash: GKmBfpKDeFOAn/hth0t5+jc0CLfcCDiIkzuoYyGRF6A=) 4: 2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl (hash: V4PtUUsUnnOd6+jbs0CuF6vJukr1KAOV3u2vtJV54+0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 12:26:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:8b:3b:f6:cf:32:f8:56:a3:14:e3:7a:bc:a7:f0:7f:11:ce:93:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5 Validity Not Before: Apr 28 02:15:51 2025 GMT Not After : May 1 12:26:51 2025 GMT Subject: CN=2BDE076C6F3CB227DBA8F3C6AA619363AEA6B41B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3a:90:b4:27:cd:f6:3f:46:5a:24:01:f3:e5: 35:1f:e3:60:bb:d3:8d:4f:56:37:5a:80:e8:bc:8c: 63:96:e1:32:c6:93:10:d9:93:43:86:72:e4:79:6e: f8:38:f2:67:24:92:f9:6d:e8:0e:26:8f:d3:0f:5b: d6:86:93:b2:6f:e0:9e:2d:68:c4:cc:bb:d0:cb:04: f2:4d:54:54:42:ed:75:60:8f:91:1d:7d:07:3a:64: 0b:4f:a6:ca:66:8b:a0:77:14:fd:07:2a:0f:ed:d0: 67:66:2d:15:9c:99:7e:c5:d0:c5:b3:65:22:c5:f4: c1:50:3a:cf:5e:31:fc:9c:6e:4c:17:6c:84:c7:3a: c6:99:e1:bb:1b:82:26:15:62:fe:aa:1d:e6:c7:ab: d4:0d:ce:10:cc:a6:98:48:a8:20:b8:d7:42:4d:9a: 50:66:fa:da:84:92:8c:2d:60:c9:d2:fc:d4:f6:e2: be:eb:97:23:ff:3e:25:c0:15:2e:e7:e9:4b:7b:14: ea:52:f0:90:80:ab:b3:95:4e:d4:34:2d:af:97:20: 5e:6a:4f:16:9f:cd:1d:c7:17:49:e9:3d:48:c7:59: 2d:f7:1a:a1:27:92:ee:c9:d5:37:1c:24:97:54:8f: 6a:b8:0a:9b:ed:dd:d4:c7:36:b7:cf:89:0f:84:4e: d0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:DE:07:6C:6F:3C:B2:27:DB:A8:F3:C6:AA:61:93:63:AE:A6:B4:1B X509v3 Authority Key Identifier: keyid:2D:6F:96:FA:63:0E:A7:AE:0A:2B:12:2B:6F:04:CC:4F:5F:32:CE:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:7a:7b:94:48:3a:1a:87:13:ce:a3:59:7c:7a:fd:0c:65:49: 59:da:99:5d:46:1e:a4:10:16:20:6f:ff:d9:23:28:4c:8c:67: 08:4e:3e:d9:cf:86:8d:68:30:e0:31:16:4d:d8:1c:93:c8:69: ce:0a:35:a6:66:18:68:43:c1:04:b3:96:bb:2b:06:3a:d6:26: cc:7d:b4:9f:99:04:8b:c5:e2:c6:64:ea:8e:ff:7f:17:6b:2f: 5a:d3:45:e6:a4:b8:61:63:25:a0:00:d8:a1:c4:7e:b1:18:45: 7a:ec:50:23:78:8e:da:29:99:5f:a3:27:6d:05:0c:5f:2a:05: 3a:f2:3a:7a:d4:a7:2d:f4:8e:29:53:59:6c:49:55:68:88:c4: c0:bd:54:85:7a:3e:ea:30:a9:3d:c5:6f:58:9a:6d:2a:e6:7a: e6:65:3b:50:f5:38:f2:b3:91:24:02:51:a1:55:2c:8e:62:f9: 8a:73:0b:db:d4:94:89:8b:33:2c:c8:f0:46:ea:a9:52:0b:cb: b8:81:39:6d:86:59:c8:75:e6:6d:0f:f6:64:52:f5:f5:18:1c: 7d:3f:4f:30:37:fe:82:f1:83:b0:b3:27:18:a3:a4:b3:84:59: 5e:dc:d7:d5:e8:09:15:c0:6c:de:c3:f6:18:5c:dd:00:25:d1: d5:db:22:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN4s79s8y+FajFON6vKfwfxHOk08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNENDNEY1 RjMyQ0VCNTAeFw0yNTA0MjgwMjE1NTFaFw0yNTA1MDExMjI2NTFaMDMxMTAvBgNV BAMTKDJCREUwNzZDNkYzQ0IyMjdEQkE4RjNDNkFBNjE5MzYzQUVBNkI0MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSOpC0J832P0ZaJAHz5TUf42C7 041PVjdagOi8jGOW4TLGkxDZk0OGcuR5bvg48mckkvlt6A4mj9MPW9aGk7Jv4J4t aMTMu9DLBPJNVFRC7XVgj5EdfQc6ZAtPpspmi6B3FP0HKg/t0GdmLRWcmX7F0MWz ZSLF9MFQOs9eMfycbkwXbITHOsaZ4bsbgiYVYv6qHebHq9QNzhDMpphIqCC410JN mlBm+tqEkowtYMnS/NT24r7rlyP/PiXAFS7n6Ut7FOpS8JCAq7OVTtQ0La+XIF5q TxafzR3HF0npPUjHWS33GqEnku7J1TccJJdUj2q4Cpvt3dTHNrfPiQ+ETtBJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK94HbG88sifbqPPGqmGTY66mtBswHwYDVR0j BBgwFoAULW+W+mMOp64KKxIrbwTMT18yzrUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTM0ZDJkOC0zNGFmLTQ3NTctOGFkOS05MmRhMzVkOTIxNjgvMC8yRDZGOTZGQTYz MEVBN0FFMEEyQjEyMkI2RjA0Q0M0RjVGMzJDRUI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNENDNEY1RjMy Q0VCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUzNGQyZDgtMzRhZi00NzU3LThh ZDktOTJkYTM1ZDkyMTY4LzAvMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNEND NEY1RjMyQ0VCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALR6e5RIOhqHE86jWXx6/QxlSVnamV1GHqQQ FiBv/9kjKEyMZwhOPtnPho1oMOAxFk3YHJPIac4KNaZmGGhDwQSzlrsrBjrWJsx9 tJ+ZBIvF4sZk6o7/fxdrL1rTReakuGFjJaAA2KHEfrEYRXrsUCN4jtopmV+jJ20F DF8qBTryOnrUpy30jilTWWxJVWiIxMC9VIV6PuowqT3Fb1iabSrmeuZlO1D1OPKz kSQCUaFVLI5i+YpzC9vUlImLMyzI8EbqqVILy7iBOW2GWch15m0P9mRS9fUYHH0/ TzA3/oLxg7CzJxijpLOEWV7c19XoCRXAbN7D9hhc3QAl0dXbIhI= -----END CERTIFICATE-----Generated at Tue Apr 29 12:48:31 2025 by rpki-client