$ rpki-client -vvf repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft File: 2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft (raw, json) Hash identifier: yKBo6E34xjscc6sz8Bzqhd5unIVp22vvNw2+cH0r1wg= Subject key identifier: 84:7B:F7:FA:C1:FA:3A:1F:AC:B3:09:5F:81:D3:96:EA:6E:AB:E5:9E Authority key identifier: 2A:06:B4:29:F7:0B:86:9F:9E:70:FB:36:95:16:74:F7:D8:A4:AC:4E Certificate issuer: /CN=2A06B429F70B869F9E70FB36951674F7D8A4AC4E Certificate serial: 39FF38C2253B0EF8D8D6CF54F341939CE22B9721 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft Manifest number: F4 Signing time: Tue 13 May 2025 00:22:14 +0000 Manifest this update: Tue 13 May 2025 00:17:14 +0000 Manifest next update: Fri 16 May 2025 07:37:14 +0000 Files and hashes: 1: 3130332e3135312e32342e302f32342d3234203d3e20313530353332.roa (hash: 3tho/NQEZ7clEuLXEou7D6b7IKWMhHVDrU5KgBLQwQM=) 2: 2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl (hash: +wipoxwAqHvDjWqhXwAAGKsvC+ro29hVX5KMGauvD7U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 07:37:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ff:38:c2:25:3b:0e:f8:d8:d6:cf:54:f3:41:93:9c:e2:2b:97:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A06B429F70B869F9E70FB36951674F7D8A4AC4E Validity Not Before: May 13 00:17:14 2025 GMT Not After : May 16 07:37:14 2025 GMT Subject: CN=847BF7FAC1FA3A1FACB3095F81D396EA6EABE59E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c0:f8:d6:6f:08:3a:cf:ee:06:f5:cf:23:45: f1:40:c8:a9:c1:49:4b:57:52:96:95:d8:28:b2:b9: fc:07:4f:22:cf:54:a3:59:89:47:7b:02:0f:49:92: 2e:fc:62:95:50:b9:44:39:7c:35:3d:75:27:16:b4: f9:23:13:17:09:e1:82:e6:9d:b8:52:d4:4e:d6:9f: 05:20:65:25:c9:23:8c:5a:41:d6:04:b5:4c:f7:c2: 06:c1:9b:25:bc:2b:c5:38:1a:ba:a4:a7:be:92:18: a6:74:6c:b9:e1:c4:4d:4f:c5:c2:8a:63:c5:c2:87: dc:18:56:ef:68:49:57:fe:e5:dc:0c:7b:9a:65:0f: 08:d0:11:ff:00:70:81:d9:a5:62:84:44:62:8c:a5: 40:42:07:11:c7:3e:90:62:1a:52:78:a0:b0:ca:52: 45:83:9b:47:52:ba:c8:f7:1f:20:a3:9f:5f:90:6e: 02:01:e3:41:b1:24:a9:f2:6f:2a:6b:fa:f0:e9:12: 41:68:ee:54:b7:09:1e:fc:41:4c:e0:63:d2:0d:a8: d8:9f:09:61:6d:8e:fa:16:00:6e:d5:9d:63:cb:4b: dd:17:b1:92:a5:a3:75:b6:8b:14:0e:c1:e2:3b:d0: 2f:3c:3d:cd:9e:39:76:54:52:8c:36:43:d3:ae:31: fb:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:7B:F7:FA:C1:FA:3A:1F:AC:B3:09:5F:81:D3:96:EA:6E:AB:E5:9E X509v3 Authority Key Identifier: keyid:2A:06:B4:29:F7:0B:86:9F:9E:70:FB:36:95:16:74:F7:D8:A4:AC:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:8c:6d:b1:f0:2a:b8:39:81:c7:04:ac:6a:95:a7:53:0c:ab: 2e:99:cf:b2:e5:48:ed:bf:cd:00:88:b1:c9:14:c8:3c:81:d7: f4:45:a2:2b:1e:58:0c:c5:85:b9:bb:50:a1:b2:88:6e:6c:9c: 79:c7:6b:42:cb:25:99:30:4e:47:ac:be:da:f5:e1:3a:7e:a9: fc:cc:85:df:a0:4e:90:4b:37:e2:47:6a:09:93:7f:0a:7a:97: d1:51:ef:af:ba:26:ec:ad:bf:cb:45:8b:ed:2f:97:87:c6:b9: 2f:10:fe:3c:ff:1b:7b:04:c4:a6:f0:b0:e8:34:63:06:8c:9f: 85:61:db:f5:fc:df:32:58:1b:14:95:ae:6f:9b:1c:76:bb:1b: b4:06:a4:68:89:7f:f3:43:74:88:9c:f0:ea:2e:6d:18:0e:cb: 72:ff:50:ac:30:0b:7d:39:c2:a6:92:8c:2d:0b:9b:87:e7:dc: 25:38:e1:d7:bf:18:51:00:88:c6:49:b6:ed:54:de:8d:e3:8b: 88:8c:ff:bf:68:a5:ff:49:bc:f5:3b:dd:3d:d3:23:65:c6:61: 5d:d1:f7:b0:d2:4d:e3:f7:33:28:37:4e:32:a3:c9:a5:47:fe: d2:dc:6f:4b:53:5f:27:87:43:35:58:7f:62:89:2a:75:e1:16: 6c:2c:21:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOf84wiU7DvjY1s9U80GTnOIrlyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEwNkI0MjlGNzBCODY5RjlFNzBGQjM2OTUxNjc0RjdE OEE0QUM0RTAeFw0yNTA1MTMwMDE3MTRaFw0yNTA1MTYwNzM3MTRaMDMxMTAvBgNV BAMTKDg0N0JGN0ZBQzFGQTNBMUZBQ0IzMDk1RjgxRDM5NkVBNkVBQkU1OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEwPjWbwg6z+4G9c8jRfFAyKnB SUtXUpaV2CiyufwHTyLPVKNZiUd7Ag9Jki78YpVQuUQ5fDU9dScWtPkjExcJ4YLm nbhS1E7WnwUgZSXJI4xaQdYEtUz3wgbBmyW8K8U4Grqkp76SGKZ0bLnhxE1PxcKK Y8XCh9wYVu9oSVf+5dwMe5plDwjQEf8AcIHZpWKERGKMpUBCBxHHPpBiGlJ4oLDK UkWDm0dSusj3HyCjn1+QbgIB40GxJKnybypr+vDpEkFo7lS3CR78QUzgY9INqNif CWFtjvoWAG7VnWPLS90XsZKlo3W2ixQOweI70C88Pc2eOXZUUow2Q9OuMfu/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhHv3+sH6Oh+sswlfgdOW6m6r5Z4wHwYDVR0j BBgwFoAUKga0KfcLhp+ecPs2lRZ099ikrE4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjVhNDdiNi01NTEzLTQ2MTAtOTRjZi0xZmVlYzRlZWVjZjMvMC8yQTA2QjQyOUY3 MEI4NjlGOUU3MEZCMzY5NTE2NzRGN0Q4QTRBQzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkEwNkI0MjlGNzBCODY5RjlFNzBGQjM2OTUxNjc0RjdEOEE0 QUM0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI1YTQ3YjYtNTUxMy00NjEwLTk0 Y2YtMWZlZWM0ZWVlY2YzLzAvMkEwNkI0MjlGNzBCODY5RjlFNzBGQjM2OTUxNjc0 RjdEOEE0QUM0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMiMbbHwKrg5gccErGqVp1MMqy6Zz7LlSO2/ zQCIsckUyDyB1/RFoiseWAzFhbm7UKGyiG5snHnHa0LLJZkwTkesvtr14Tp+qfzM hd+gTpBLN+JHagmTfwp6l9FR76+6Juytv8tFi+0vl4fGuS8Q/jz/G3sExKbwsOg0 YwaMn4Vh2/X83zJYGxSVrm+bHHa7G7QGpGiJf/NDdIic8OoubRgOy3L/UKwwC305 wqaSjC0Lm4fn3CU44de/GFEAiMZJtu1U3o3ji4iM/79opf9JvPU73T3TI2XGYV3R 97DSTeP3Myg3TjKjyaVH/tLcb0tTXyeHQzVYf2KJKnXhFmwsIfE= -----END CERTIFICATE-----Generated at Tue May 13 06:28:34 2025 by rpki-client