$ rpki-client -vvf repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft File: 2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft (raw, json) Hash identifier: cI13gZKALV4JSrXg5O8S4tXfMShz+YXymZJoEpH/v/8= Subject key identifier: CD:AA:0F:66:C0:33:BF:D9:79:1D:4D:2F:29:2D:A6:4C:6B:17:AF:C0 Authority key identifier: 2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9 Certificate issuer: /CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9 Certificate serial: 7D4151A766D66DB82035F847B6A2AA600A08C4FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft Manifest number: 04CB Signing time: Wed 07 May 2025 10:51:50 +0000 Manifest this update: Wed 07 May 2025 10:46:50 +0000 Manifest next update: Sat 10 May 2025 11:25:50 +0000 Files and hashes: 1: 3138302e3231342e3234382e302f32342d3234203d3e203338313530.roa (hash: MPKCsRZDZNYsOLsUI2cCtDDIcaytMV4pMvYW85eFW6g=) 2: 2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl (hash: s+INY7TO4VKOLmuKxAu0zYHeKeF1KWDFun5nsJp8/Ns=) 3: 3138302e3231342e3234352e302f32342d3234203d3e203338313530.roa (hash: /l1tDvX0eINixyD193hNPS/nyzynVbnxaZxIsWWnUIs=) 4: 3230322e39312e31342e302f32342d3234203d3e203338313530.roa (hash: 8A/BY747A8tcSGdw0kTUxTjlElKl9Fd3VYE57A9ejPU=) 5: 323430323a663038303a623a3a2f34382d3438203d3e203338313530.roa (hash: qL0wIERL/FZVPFJyexaf4LbHX3ijAAg3bydjjAMgQFk=) 6: 3138302e3231342e3234342e302f32342d3234203d3e203338313530.roa (hash: f/2H82Qaid5o3IMXt4khgRJ2TNCnkFt1IS90BtFG4io=) 7: 323430323a663038303a613a3a2f34382d3438203d3e203338313530.roa (hash: kTFbI48ADj1NCd9+X2nm988kpUAUJ4nuOUWfrmLXPzY=) 8: 3138302e3231342e3234332e302f32342d3234203d3e203338313530.roa (hash: NfXkvyJjdz3lMbP2RK80QjI1Az4nVDj8tmiqN24vkXc=) 9: 3230322e39312e31352e302f32342d3234203d3e203338313530.roa (hash: YzITjDQsLZYdV9iPbkoBc0BV/7hfCBo8LKPdZNMO5zk=) 10: 3138302e3231342e3234372e302f32342d3234203d3e203338313530.roa (hash: YGt+3ApTgn/LWTxT6WNpkphV9VxIGygYqSnpvA8kmgQ=) 11: 3138302e3231342e3234362e302f32342d3234203d3e203338313530.roa (hash: pSMqZyq3tofIqbVs5e+fl67udIcuxiGW/jxUt5sa3SU=) 12: 3138302e3231342e3234322e302f32342d3234203d3e203338313530.roa (hash: C1gcqSO0oBdwp9BpXOWFzZg2s6goQaazqVUj4XoKSkc=) 13: 3138302e3231342e3234312e302f32342d3234203d3e203338313530.roa (hash: 2nesNt4oWdAkHyQxEw62xi3ZAjzFaGioInIZZXdKjCk=) 14: 323430323a663038303a333a3a2f34382d3438203d3e203338313530.roa (hash: MNsCflRoTlLLKOy1y3qU2xpl0KIGEKY8wK60n9pU+7g=) 15: 3230322e39312e31332e302f32342d3234203d3e203338313530.roa (hash: Wtm1w2LUkfHMAUBMo8NjVJYbQmXKg5zGneLmy036pZw=) 16: 3138302e3231342e3235322e302f32342d3234203d3e203338313530.roa (hash: VGkd3qyb5RgrQP18pdu6ONcUZAOkXXeZJwZvx9Z15f0=) 17: 3138302e3231342e3234302e302f32342d3234203d3e203338313530.roa (hash: uMyrrNvQSHXCaIKeb7YHUJzsiyYMgIhzsvfO2xxvbt8=) 18: 3230322e39312e31302e302f32342d3234203d3e203338313530.roa (hash: DLxQo0gdb9JVW6MFJYL4swYph24mURb/ELIJzCfK7Kk=) 19: 3138302e3231342e3234392e302f32342d3234203d3e203338313530.roa (hash: ny1yGnHbBejhv6vr1eZqYtkbGIWNTtnBZ/7ODF69CVs=) 20: 323430323a663038303a323a3a2f34382d3438203d3e203338313530.roa (hash: rWMJzCml+x1f4kxh43cBQCSbawN5JhE1k0v3Pybh1Bw=) 21: 323430323a663038303a3a2f34382d3438203d3e203338313530.roa (hash: 1RKwgHPp3AyIEd8oV5JkBCpBzxMgTDMCTLGzRDTdkec=) 22: 3138302e3231342e3235342e302f32342d3234203d3e203338313530.roa (hash: KgjDRBaTzfFY7ynerTEb+2VCWhn64do32R4bwf4i4r4=) 23: 3138302e3231342e3235332e302f32342d3234203d3e203338313530.roa (hash: dVyXyeitdxkWoIb0JFvBz6herhcN9vKQBLdnntu/3Os=) 24: 3230322e39312e31312e302f32342d3234203d3e203338313530.roa (hash: t94nbHda1ZlB5Svw5eATejFXQCzX8y8ZKvAurl4HFgc=) 25: 3138302e3231342e3235352e302f32342d3234203d3e203338313530.roa (hash: MCayY48jaokp/UrLHAPKrxV+i3KtaHJo7UcYRQc0U04=) 26: 3230322e39312e31322e302f32342d3234203d3e203338313530.roa (hash: w+MxiQGbDB18Rg5VSNV+eDaLzxTuL21IeMT2XF0iFag=) 27: 3230322e39312e382e302f32342d3234203d3e203338313530.roa (hash: Qol8+JNrvQvm3P/r8gMV8qivGzVQrg5+cD0Ai4x07CE=) 28: 323430323a663038303a633a3a2f34382d3438203d3e203338313530.roa (hash: AaYY+4X7oz0aflYSKjFBAuNR5h1WiPnSw/fVuiThbtI=) 29: 323430323a663038303a313a3a2f34382d3438203d3e203338313530.roa (hash: 86LEq8VXDYdpyuZGjiApApkS8W4DXo5k1//8mltFNGU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 11:25:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:41:51:a7:66:d6:6d:b8:20:35:f8:47:b6:a2:aa:60:0a:08:c4:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9 Validity Not Before: May 7 10:46:50 2025 GMT Not After : May 10 11:25:50 2025 GMT Subject: CN=CDAA0F66C033BFD9791D4D2F292DA64C6B17AFC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b8:16:bd:57:56:61:ae:9f:14:5f:fb:2a:59: 7d:c2:fb:f8:db:ff:0e:21:87:c6:13:77:38:33:cc: c8:36:40:ae:8a:60:b7:fd:c5:f3:6d:fd:83:2f:b3: a2:38:35:66:6c:e3:14:10:f8:46:26:eb:3a:58:5e: 87:8d:b0:e4:7d:1d:23:ef:4a:22:4c:75:38:cf:00: 22:c5:12:9b:46:9a:74:13:45:b1:9b:92:32:46:02: 8f:64:88:c9:5f:3c:cf:b1:b0:39:54:60:13:3e:81: 64:48:e7:c3:07:60:22:6b:a4:6c:d2:54:74:1b:b2: c9:92:3a:55:ce:3c:98:89:18:f0:66:10:ac:6c:94: c3:d0:46:83:4c:e5:9c:ce:3d:1b:ee:5b:64:f9:4b: f6:59:93:c8:81:9c:6f:e6:e7:e9:34:6c:20:ca:1c: 5f:9f:d5:1d:0c:60:71:98:97:ad:f7:5c:8c:a8:c6: b2:1e:47:63:88:37:52:a3:40:10:08:13:a0:52:6a: 41:21:29:66:5e:65:99:7b:89:23:9a:6a:8f:59:ef: c5:83:1c:c1:e3:24:b7:05:59:4d:5b:17:85:c3:b5: 34:81:40:04:e7:76:87:85:aa:0b:97:8e:68:83:53: 64:bc:d4:48:5c:cd:f0:19:1c:c4:a7:c8:94:db:18: 81:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:AA:0F:66:C0:33:BF:D9:79:1D:4D:2F:29:2D:A6:4C:6B:17:AF:C0 X509v3 Authority Key Identifier: keyid:2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:63:9e:fe:53:fe:b4:41:84:ad:61:2d:38:e3:9a:93:27:66: 95:81:19:1d:f3:f5:6d:7c:7f:a5:70:4a:dc:6f:8a:ba:85:4f: 13:69:82:cb:9d:26:be:5e:f8:3b:7b:fd:91:67:23:b8:ff:a5: f2:94:cc:35:c1:44:29:de:2b:33:dc:c6:24:a8:31:45:d4:5e: cb:b8:1d:8b:25:12:a8:b7:29:ac:17:df:c0:6e:97:ff:0f:0e: 7e:7e:e3:4c:bc:50:35:bf:94:e3:13:46:67:1e:15:8d:a6:f3: e0:a9:f5:c9:01:af:e6:d5:3a:53:83:cc:7e:91:01:a1:f1:30: 00:03:51:84:e5:d2:b3:44:da:d8:eb:45:0f:71:de:74:c1:4e: e9:b3:11:16:37:88:60:d5:e5:2c:26:f6:df:54:74:09:66:16: fc:95:b0:66:49:1f:db:a7:12:d3:77:09:3f:91:53:e1:fc:ce: 50:7d:df:bb:ba:93:61:aa:d1:91:6c:9d:53:42:6a:02:2b:49: cc:a6:28:d1:0a:92:f8:0d:2a:32:7e:7e:0e:14:82:b5:63:7f: f0:92:d2:3c:3b:ed:e1:3a:2d:f6:31:6b:59:fd:3d:05:f8:d3: 75:3c:c6:9d:e2:22:c2:64:81:11:75:ba:35:cd:08:ae:49:5a: 94:8a:e6:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfUFRp2bWbbggNfhHtqKqYAoIxP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNBNDc0ODdGNzI3ODE3MzMzMzBBMzhDOTVGRjhBNURG NjhDREJCOTAeFw0yNTA1MDcxMDQ2NTBaFw0yNTA1MTAxMTI1NTBaMDMxMTAvBgNV BAMTKENEQUEwRjY2QzAzM0JGRDk3OTFENEQyRjI5MkRBNjRDNkIxN0FGQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCauBa9V1Zhrp8UX/sqWX3C+/jb /w4hh8YTdzgzzMg2QK6KYLf9xfNt/YMvs6I4NWZs4xQQ+EYm6zpYXoeNsOR9HSPv SiJMdTjPACLFEptGmnQTRbGbkjJGAo9kiMlfPM+xsDlUYBM+gWRI58MHYCJrpGzS VHQbssmSOlXOPJiJGPBmEKxslMPQRoNM5ZzOPRvuW2T5S/ZZk8iBnG/m5+k0bCDK HF+f1R0MYHGYl633XIyoxrIeR2OIN1KjQBAIE6BSakEhKWZeZZl7iSOaao9Z78WD HMHjJLcFWU1bF4XDtTSBQATndoeFqguXjmiDU2S81EhczfAZHMSnyJTbGIHdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzaoPZsAzv9l5HU0vKS2mTGsXr8AwHwYDVR0j BBgwFoAULKR0h/cngXMzMKOMlf+KXfaM27kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2U2NWI2Ny05MDVjLTQwM2MtOGM3OS0yMzE1NjU5NjY4YWEvMC8yQ0E0NzQ4N0Y3 Mjc4MTczMzMzMEEzOEM5NUZGOEE1REY2OENEQkI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkNBNDc0ODdGNzI3ODE3MzMzMzBBMzhDOTVGRjhBNURGNjhD REJCOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTdlNjViNjctOTA1Yy00MDNjLThj NzktMjMxNTY1OTY2OGFhLzAvMkNBNDc0ODdGNzI3ODE3MzMzMzBBMzhDOTVGRjhB NURGNjhDREJCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC1jnv5T/rRBhK1hLTjjmpMnZpWBGR3z9W18 f6VwStxvirqFTxNpgsudJr5e+Dt7/ZFnI7j/pfKUzDXBRCneKzPcxiSoMUXUXsu4 HYslEqi3KawX38Bul/8PDn5+40y8UDW/lOMTRmceFY2m8+Cp9ckBr+bVOlODzH6R AaHxMAADUYTl0rNE2tjrRQ9x3nTBTumzERY3iGDV5Swm9t9UdAlmFvyVsGZJH9un EtN3CT+RU+H8zlB937u6k2Gq0ZFsnVNCagIrScymKNEKkvgNKjJ+fg4UgrVjf/CS 0jw77eE6LfYxa1n9PQX403U8xp3iIsJkgRF1ujXNCK5JWpSK5rw= -----END CERTIFICATE-----Generated at Thu May 8 07:09:26 2025 by rpki-client