$ rpki-client -vvf repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft File: 2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft (raw, json) Hash identifier: aFU3LxTdjE1okkJS/a24P2OQMOLoPXUkFZaedQfyHY4= Subject key identifier: C2:52:9A:09:05:A2:33:38:00:5D:27:BF:80:E3:FF:57:EE:5C:FB:20 Authority key identifier: 2B:15:30:AD:20:AC:1F:2F:7F:2E:A2:EB:AA:E7:07:D0:E1:28:A1:DC Certificate issuer: /CN=2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC Certificate serial: 227ED8A2E92DD60A098B148B1DBDA60A3D672103 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft Manifest number: 02EE Signing time: Wed 30 Apr 2025 11:42:16 +0000 Manifest this update: Wed 30 Apr 2025 11:37:16 +0000 Manifest next update: Sat 03 May 2025 20:14:16 +0000 Files and hashes: 1: 3130332e3137322e31372e302f32342d3234203d3e20313432333831.roa (hash: DVIrghrEW7VwPIX0cx9PZe/9iJL/OmwC/t6EzXjRAD8=) 2: 2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl (hash: TwMOlM1si8iqmYCXRulrHeH00VeWSTms+01MJHGnOUQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 20:14:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:7e:d8:a2:e9:2d:d6:0a:09:8b:14:8b:1d:bd:a6:0a:3d:67:21:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC Validity Not Before: Apr 30 11:37:16 2025 GMT Not After : May 3 20:14:16 2025 GMT Subject: CN=C2529A0905A23338005D27BF80E3FF57EE5CFB20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:73:11:7b:ca:ce:f8:0f:5d:8e:5b:c3:05:53: 57:6b:4d:aa:3c:38:a1:b8:00:c1:3f:8f:9c:dd:d2: 81:04:f0:a8:f1:4c:81:f1:58:b7:6f:8b:4b:4a:08: f1:6a:7d:fd:4e:8f:9b:d6:f6:c3:6a:bc:20:76:c9: 6e:4c:d8:a1:b3:44:ee:47:9e:96:66:a3:36:37:f2: 03:2f:5e:22:4f:35:02:29:1a:e0:9f:8b:6e:21:92: 02:42:3f:0a:e3:04:15:a9:6e:4c:77:a2:40:b2:8b: e5:d6:2b:2f:87:e3:ee:18:a5:78:ba:56:b5:75:b5: e8:d4:d5:49:6c:8f:4d:04:2a:7e:37:97:87:4c:8b: 1f:aa:f1:b7:2e:0e:de:4d:dc:13:c7:2d:af:06:37: 30:96:7b:b8:27:40:cc:45:bd:c4:45:5b:f1:75:5b: 5f:3a:e9:2d:7e:7f:2e:77:6b:ed:c7:ff:91:f8:d1: 55:2d:ac:c8:e3:a1:73:0e:e3:28:53:ce:02:23:bd: 4d:44:b6:e5:ee:4a:58:74:7b:04:90:2f:9d:de:b1: db:92:7c:ad:20:5c:9f:07:26:f1:6b:11:2a:fd:51: f4:3f:42:a4:2f:ed:01:96:0a:61:52:31:ea:a5:ab: 6f:9e:cc:3a:ae:5d:0d:14:b9:8f:93:81:da:ea:bc: eb:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:52:9A:09:05:A2:33:38:00:5D:27:BF:80:E3:FF:57:EE:5C:FB:20 X509v3 Authority Key Identifier: keyid:2B:15:30:AD:20:AC:1F:2F:7F:2E:A2:EB:AA:E7:07:D0:E1:28:A1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:54:1c:f8:b2:ad:4d:68:f6:ae:a8:8d:6f:13:18:cc:78:bc: c6:9a:3e:db:56:1a:c7:3b:f3:6e:a1:e5:38:2d:f7:38:c9:4b: 07:00:e5:41:b1:1a:a5:39:21:bf:4e:af:7f:14:4d:00:67:d8: 2b:9d:39:71:44:2e:59:ac:78:92:cd:9b:bd:6e:2d:53:d5:27: 71:c4:f3:27:41:93:e4:07:84:d0:79:c2:1b:57:ab:8b:36:5e: d2:14:d8:a5:7c:63:88:a1:8b:d2:55:a3:f3:c7:f3:3e:22:a0: 77:16:60:f6:c1:75:3e:5d:05:f6:21:fa:13:2e:4a:2c:28:aa: b0:1c:cd:a9:51:cf:44:b6:d8:96:05:80:27:7b:42:f0:96:b8: 8f:e6:4a:00:2e:0b:90:14:4d:53:fd:e2:25:da:99:34:e7:a1: 10:6c:ed:07:c2:2b:61:eb:0b:6a:ca:a1:fc:86:b8:f7:14:18: 68:e9:47:55:06:93:a7:a6:4b:12:b6:a8:42:fe:98:2a:c7:0e: 89:5e:94:36:0d:52:37:7e:26:72:7e:1c:85:a0:97:2d:ec:a8: e9:a0:f4:ef:9f:7b:f6:78:a0:78:27:12:96:f0:6b:90:d7:d0: 5c:a0:e2:0d:c0:e3:4d:22:d9:15:c6:a4:70:49:3f:6b:10:49: 16:d1:14:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIn7Youkt1goJixSLHb2mCj1nIQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3RDBF MTI4QTFEQzAeFw0yNTA0MzAxMTM3MTZaFw0yNTA1MDMyMDE0MTZaMDMxMTAvBgNV BAMTKEMyNTI5QTA5MDVBMjMzMzgwMDVEMjdCRjgwRTNGRjU3RUU1Q0ZCMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGcxF7ys74D12OW8MFU1drTao8 OKG4AME/j5zd0oEE8KjxTIHxWLdvi0tKCPFqff1Oj5vW9sNqvCB2yW5M2KGzRO5H npZmozY38gMvXiJPNQIpGuCfi24hkgJCPwrjBBWpbkx3okCyi+XWKy+H4+4YpXi6 VrV1tejU1Ulsj00EKn43l4dMix+q8bcuDt5N3BPHLa8GNzCWe7gnQMxFvcRFW/F1 W1866S1+fy53a+3H/5H40VUtrMjjoXMO4yhTzgIjvU1EtuXuSlh0ewSQL53esduS fK0gXJ8HJvFrESr9UfQ/QqQv7QGWCmFSMeqlq2+ezDquXQ0UuY+TgdrqvOs/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwlKaCQWiMzgAXSe/gOP/V+5c+yAwHwYDVR0j BBgwFoAUKxUwrSCsHy9/LqLrqucH0OEoodwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NjY4ODU0YS0zZjI0LTQwYjEtODBjZC1lNjM2YWE3ZThiMWMvMC8yQjE1MzBBRDIw QUMxRjJGN0YyRUEyRUJBQUU3MDdEMEUxMjhBMURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3RDBFMTI4 QTFEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjY2ODg1NGEtM2YyNC00MGIxLTgw Y2QtZTYzNmFhN2U4YjFjLzAvMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3 RDBFMTI4QTFEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF9UHPiyrU1o9q6ojW8TGMx4vMaaPttWGsc7 826h5Tgt9zjJSwcA5UGxGqU5Ib9Or38UTQBn2CudOXFELlmseJLNm71uLVPVJ3HE 8ydBk+QHhNB5whtXq4s2XtIU2KV8Y4ihi9JVo/PH8z4ioHcWYPbBdT5dBfYh+hMu SiwoqrAczalRz0S22JYFgCd7QvCWuI/mSgAuC5AUTVP94iXamTTnoRBs7QfCK2Hr C2rKofyGuPcUGGjpR1UGk6emSxK2qEL+mCrHDolelDYNUjd+JnJ+HIWgly3sqOmg 9O+fe/Z4oHgnEpbwa5DX0Fyg4g3A400i2RXGpHBJP2sQSRbRFFo= -----END CERTIFICATE-----Generated at Thu May 1 04:06:35 2025 by rpki-client