$ rpki-client -vvf repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft File: 2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft (raw, json) Hash identifier: 2fbyEN5sjufTe5myLOAlEuObD40haL5agpfMtSMvobc= Subject key identifier: 13:9C:41:8D:BA:5B:DD:FA:0B:84:47:8D:D2:C1:03:0C:09:1B:B0:A4 Authority key identifier: 2D:51:7D:C0:24:CE:FC:FA:F8:0C:F7:FD:39:22:46:89:4E:94:F1:2F Certificate issuer: /CN=2D517DC024CEFCFAF80CF7FD392246894E94F12F Certificate serial: 4E8357C126E47B8E8E7C681BEDC6D4D3E7079B43 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft Manifest number: BC Signing time: Thu 08 May 2025 19:00:53 +0000 Manifest this update: Thu 08 May 2025 18:55:53 +0000 Manifest next update: Mon 12 May 2025 00:13:53 +0000 Files and hashes: 1: 3130332e3135362e3131302e302f32342d3234203d3e20313431303839.roa (hash: oX2rRL4yj7u4AFId0yrPwmCzP4drZZYO3pu9upGhNCY=) 2: 2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl (hash: cmxw9BnC2WDR9yE7rE0fFC6IGMtM/PVE06WYmM8MqAI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 00:13:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:83:57:c1:26:e4:7b:8e:8e:7c:68:1b:ed:c6:d4:d3:e7:07:9b:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D517DC024CEFCFAF80CF7FD392246894E94F12F Validity Not Before: May 8 18:55:53 2025 GMT Not After : May 12 00:13:53 2025 GMT Subject: CN=139C418DBA5BDDFA0B84478DD2C1030C091BB0A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c1:a4:6d:0b:df:82:1c:ae:51:0e:82:1d:38: 6a:83:37:10:a4:8a:c2:dd:ee:d9:87:63:54:00:1f: e4:1b:e3:71:72:ff:9f:a1:14:6b:5c:98:c7:66:5b: b2:63:37:58:a6:fe:e7:a8:e1:83:3e:a0:fe:1e:79: bd:aa:ee:d8:0e:c6:54:78:62:32:a0:86:35:0a:8d: c0:13:b8:e6:2c:8c:21:ad:88:fa:dd:42:de:b5:6f: 86:f5:22:a3:18:3b:b3:80:1f:60:16:c7:d4:ef:11: 97:1e:8d:a1:6a:c2:1a:26:c1:b4:90:4b:8a:30:36: 1d:6b:a5:a6:25:84:12:70:1e:aa:29:94:54:d7:f8: b5:91:63:0e:08:55:55:47:38:e3:29:d9:d2:24:43: 33:85:1f:5c:ed:0c:3c:e1:b0:98:e4:d3:e9:6e:43: 74:d3:72:15:ff:d7:10:a1:86:23:bd:55:ed:52:1b: c5:b0:89:6d:64:cd:49:41:85:8d:3c:66:71:10:b2: cf:c7:79:d5:84:24:97:26:30:60:9f:d8:2f:b6:62: d9:53:2e:ac:51:53:0c:2f:3d:1a:5c:2e:96:8f:f5: 36:e3:b2:94:43:b0:51:cd:d6:58:04:ce:ab:d7:03: 46:54:2b:c0:b0:ae:10:fb:74:62:04:04:e7:8f:49: e3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:9C:41:8D:BA:5B:DD:FA:0B:84:47:8D:D2:C1:03:0C:09:1B:B0:A4 X509v3 Authority Key Identifier: keyid:2D:51:7D:C0:24:CE:FC:FA:F8:0C:F7:FD:39:22:46:89:4E:94:F1:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:8b:c4:c6:0f:e5:91:89:3a:85:e5:4a:f6:71:1f:11:eb:67: 6d:a7:ae:71:15:4e:84:29:1b:f0:6f:0e:4e:72:4d:13:c4:af: e3:c7:1f:d1:82:e1:ab:bd:40:0d:24:e1:ce:46:57:68:78:ad: 1f:ef:13:67:30:29:49:61:33:56:ab:12:1e:59:e8:a7:76:02: 8c:00:13:5e:42:0a:c8:7d:4c:fa:02:68:6d:08:90:e6:cd:f3: 79:e9:1b:b3:6e:c3:07:97:74:b3:c7:82:03:77:5d:4a:cc:8f: e4:eb:2f:70:3a:09:dd:47:ae:74:9d:8e:a1:8b:1b:58:f5:60: fe:22:57:5d:8f:d6:23:24:2a:08:20:99:6a:e2:43:dd:22:3a: 02:f7:ff:3a:7c:85:06:8d:84:de:30:4f:32:19:32:ad:9d:18: d2:04:91:b3:4f:46:79:46:95:40:11:e7:33:c4:cb:4c:6f:0c: ef:3a:2a:bb:df:e5:e9:63:f0:f9:1f:62:e0:f8:c8:b8:6a:a2: 59:28:f5:ff:7a:79:a8:f4:7d:ff:15:f8:9b:9b:6f:07:93:5a: 00:31:72:8d:9d:11:49:75:d6:29:be:fb:a5:85:b1:c7:36:5f: ae:b2:54:e7:b5:da:06:b6:42:42:3c:2f:5c:bd:d6:61:f9:4a: 0a:29:48:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUToNXwSbke46OfGgb7cbU0+cHm0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2ODk0 RTk0RjEyRjAeFw0yNTA1MDgxODU1NTNaFw0yNTA1MTIwMDEzNTNaMDMxMTAvBgNV BAMTKDEzOUM0MThEQkE1QkRERkEwQjg0NDc4REQyQzEwMzBDMDkxQkIwQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTwaRtC9+CHK5RDoIdOGqDNxCk isLd7tmHY1QAH+Qb43Fy/5+hFGtcmMdmW7JjN1im/ueo4YM+oP4eeb2q7tgOxlR4 YjKghjUKjcATuOYsjCGtiPrdQt61b4b1IqMYO7OAH2AWx9TvEZcejaFqwhomwbSQ S4owNh1rpaYlhBJwHqoplFTX+LWRYw4IVVVHOOMp2dIkQzOFH1ztDDzhsJjk0+lu Q3TTchX/1xChhiO9Ve1SG8WwiW1kzUlBhY08ZnEQss/HedWEJJcmMGCf2C+2YtlT LqxRUwwvPRpcLpaP9TbjspRDsFHN1lgEzqvXA0ZUK8CwrhD7dGIEBOePSeOTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE5xBjbpb3foLhEeN0sEDDAkbsKQwHwYDVR0j BBgwFoAULVF9wCTO/Pr4DPf9OSJGiU6U8S8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDMzYTFjNi0wZjcwLTRjOTgtOTZiMC1jYWI1ODEyNmFiOTQvMC8yRDUxN0RDMDI0 Q0VGQ0ZBRjgwQ0Y3RkQzOTIyNDY4OTRFOTRGMTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2ODk0RTk0 RjEyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQzM2ExYzYtMGY3MC00Yzk4LTk2 YjAtY2FiNTgxMjZhYjk0LzAvMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2 ODk0RTk0RjEyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIyLxMYP5ZGJOoXlSvZxHxHrZ22nrnEVToQp G/BvDk5yTRPEr+PHH9GC4au9QA0k4c5GV2h4rR/vE2cwKUlhM1arEh5Z6Kd2AowA E15CCsh9TPoCaG0IkObN83npG7NuwweXdLPHggN3XUrMj+TrL3A6Cd1HrnSdjqGL G1j1YP4iV12P1iMkKgggmWriQ90iOgL3/zp8hQaNhN4wTzIZMq2dGNIEkbNPRnlG lUAR5zPEy0xvDO86Krvf5elj8PkfYuD4yLhqolko9f96eaj0ff8V+JubbweTWgAx co2dEUl11im++6WFscc2X66yVOe12ga2QkI8L1y91mH5SgopSNQ= -----END CERTIFICATE-----Generated at Thu May 8 23:26:26 2025 by rpki-client