$ rpki-client -vvf repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft File: 2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft (raw, json) Hash identifier: DfCOWPS8e17lQu/BV9IuC5EYu71qAX3t2NWloXswMAI= Subject key identifier: 33:F3:7D:47:8B:5E:C3:2F:63:54:67:EE:7B:EF:71:6A:60:61:00:0E Authority key identifier: 2A:2A:BC:86:29:3A:3D:A3:60:2C:0D:FB:CE:D7:D9:92:4F:E5:A5:8B Certificate issuer: /CN=2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B Certificate serial: 5506F5E466CDDEF6AF91A45419F99F9253662E0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft Manifest number: 04CA Signing time: Sun 27 Apr 2025 11:20:48 +0000 Manifest this update: Sun 27 Apr 2025 11:15:48 +0000 Manifest next update: Wed 30 Apr 2025 13:05:48 +0000 Files and hashes: 1: 3130332e3134352e3234322e302f32332d3234203d3e20313339343534.roa (hash: MBnVObk5rtYYwHlaUlSzw5T8+2QUD+ApGXh8c63UDdI=) 2: 2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.crl (hash: VGtWzka+bOe2hOSl4JEZrbNGdoOVxwgAzlizZLlRjbg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.crl rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 13:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:06:f5:e4:66:cd:de:f6:af:91:a4:54:19:f9:9f:92:53:66:2e:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B Validity Not Before: Apr 27 11:15:48 2025 GMT Not After : Apr 30 13:05:48 2025 GMT Subject: CN=33F37D478B5EC32F635467EE7BEF716A6061000E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:28:38:80:18:ab:f5:99:36:59:32:db:f0:b9: 83:fe:26:26:69:b5:3a:56:7e:f7:7e:9d:c4:73:7c: 6d:a0:97:e7:8b:a0:6c:12:91:a4:a7:21:96:31:92: 05:3b:8c:ff:2e:a7:2b:6d:39:a0:47:34:17:e4:b9: ec:a6:5d:af:1f:32:83:e7:7d:19:d6:20:60:83:c6: 2e:1c:32:6b:80:2e:27:a2:a9:e8:ee:1d:46:9a:9c: 01:70:a1:24:8d:18:d5:18:2f:f5:09:c4:a7:4b:eb: d2:68:59:4f:b5:1e:1b:9a:45:5d:32:38:f4:5e:92: e0:d1:f4:a6:0d:53:44:5f:3a:6e:41:d8:f0:93:ff: 1c:fd:cd:91:dc:d7:4b:60:63:70:07:64:0d:87:a7: 65:d4:ce:a0:68:a3:a3:16:9e:45:3b:d1:a3:b7:b5: d7:0e:cd:bb:5b:b4:5a:d6:25:4b:8a:8b:4f:29:97: 8e:41:e5:58:1c:d9:d2:87:3c:a5:f4:76:57:9a:b0: e2:56:2b:17:ef:e3:3c:89:a0:61:30:6d:ec:20:10: b2:13:79:6a:6d:bd:f5:98:b6:39:03:67:20:a1:61: 99:dd:35:70:59:4b:31:dc:68:78:98:41:11:01:b7: 6b:36:58:43:91:b1:ab:24:1f:3a:77:03:00:cf:95: 0c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F3:7D:47:8B:5E:C3:2F:63:54:67:EE:7B:EF:71:6A:60:61:00:0E X509v3 Authority Key Identifier: keyid:2A:2A:BC:86:29:3A:3D:A3:60:2C:0D:FB:CE:D7:D9:92:4F:E5:A5:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:7b:8e:91:b2:a8:1b:f1:2d:c8:95:8d:98:97:fb:e9:08:bb: 3f:c3:3c:d9:33:4e:a0:5c:2c:8d:8c:a1:5f:1f:53:67:f7:b7: ae:e0:f5:bb:12:e4:89:e8:7f:3c:8c:b4:8a:6c:0e:00:d2:70: 0c:bc:6d:a4:1a:8e:47:ff:9a:ed:98:21:42:3c:8e:6c:74:68: d9:4b:9b:6f:1f:2c:c9:d2:af:6f:fd:0d:1a:33:eb:80:f0:b8: 68:5b:22:ca:70:40:81:1d:cc:88:57:c2:7c:74:48:2f:a4:7e: 13:a0:54:d8:96:a0:ec:16:7d:74:68:51:10:7c:b7:38:f5:fc: e6:e9:aa:d6:9f:6d:5a:ed:c2:91:e9:9b:fa:54:0e:2d:47:09: db:46:6d:0a:9f:d4:f8:7d:03:80:e6:4a:ce:71:6c:4b:23:87: e5:86:62:35:05:50:f1:e3:8b:cc:d2:c5:25:2b:fb:c3:1c:70: 78:0f:26:00:fc:0e:37:0d:57:b5:0e:7e:f2:cc:01:3a:37:6d: 75:09:fa:f4:c1:7f:ff:1f:48:6d:6a:7b:08:fe:db:d3:d5:9b: dc:c1:5a:cf:be:74:1d:e0:62:f7:df:9f:75:bd:9e:80:d9:d3: da:42:30:c9:84:50:92:6c:99:5e:bb:95:ab:7b:32:b7:e1:49: 7c:9b:b5:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVQb15GbN3vavkaRUGfmfklNmLg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyQUJDODYyOTNBM0RBMzYwMkMwREZCQ0VEN0Q5OTI0 RkU1QTU4QjAeFw0yNTA0MjcxMTE1NDhaFw0yNTA0MzAxMzA1NDhaMDMxMTAvBgNV BAMTKDMzRjM3RDQ3OEI1RUMzMkY2MzU0NjdFRTdCRUY3MTZBNjA2MTAwMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDKDiAGKv1mTZZMtvwuYP+JiZp tTpWfvd+ncRzfG2gl+eLoGwSkaSnIZYxkgU7jP8upyttOaBHNBfkueymXa8fMoPn fRnWIGCDxi4cMmuALieiqejuHUaanAFwoSSNGNUYL/UJxKdL69JoWU+1HhuaRV0y OPRekuDR9KYNU0RfOm5B2PCT/xz9zZHc10tgY3AHZA2Hp2XUzqBoo6MWnkU70aO3 tdcOzbtbtFrWJUuKi08pl45B5Vgc2dKHPKX0dleasOJWKxfv4zyJoGEwbewgELIT eWptvfWYtjkDZyChYZndNXBZSzHcaHiYQREBt2s2WEORsaskHzp3AwDPlQztAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM/N9R4tewy9jVGfue+9xamBhAA4wHwYDVR0j BBgwFoAUKiq8hik6PaNgLA37ztfZkk/lpYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzUwYTY1MS0xYTFhLTQ1MDEtYThiYy05NTkxZTExMDlhMjcvMC8yQTJBQkM4NjI5 M0EzREEzNjAyQzBERkJDRUQ3RDk5MjRGRTVBNThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkEyQUJDODYyOTNBM0RBMzYwMkMwREZCQ0VEN0Q5OTI0RkU1 QTU4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc1MGE2NTEtMWExYS00NTAxLWE4 YmMtOTU5MWUxMTA5YTI3LzAvMkEyQUJDODYyOTNBM0RBMzYwMkMwREZCQ0VEN0Q5 OTI0RkU1QTU4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ97jpGyqBvxLciVjZiX++kIuz/DPNkzTqBc LI2MoV8fU2f3t67g9bsS5InofzyMtIpsDgDScAy8baQajkf/mu2YIUI8jmx0aNlL m28fLMnSr2/9DRoz64DwuGhbIspwQIEdzIhXwnx0SC+kfhOgVNiWoOwWfXRoURB8 tzj1/ObpqtafbVrtwpHpm/pUDi1HCdtGbQqf1Ph9A4DmSs5xbEsjh+WGYjUFUPHj i8zSxSUr+8MccHgPJgD8DjcNV7UOfvLMATo3bXUJ+vTBf/8fSG1qewj+29PVm9zB Ws++dB3gYvffn3W9noDZ09pCMMmEUJJsmV67lat7MrfhSXybtXo= -----END CERTIFICATE-----Generated at Tue Apr 29 09:20:26 2025 by rpki-client