$ rpki-client -vvf repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft File: 2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft (raw, json) Hash identifier: HKsujZ7HzrchjMCBZ8xdvnFA3Ebj9/toWM1Xs/p5BC0= Subject key identifier: 7A:87:57:B1:A4:DC:4E:F8:EC:E5:9F:8E:2E:FF:B8:FF:45:7B:04:1B Authority key identifier: 2D:9D:91:37:D4:42:7A:9D:34:E1:B1:5F:16:C5:C6:89:A8:C5:49:D9 Certificate issuer: /CN=2D9D9137D4427A9D34E1B15F16C5C689A8C549D9 Certificate serial: 413585A416F09872D0B5350419738C45A79B6425 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft Manifest number: 04CD Signing time: Sun 04 May 2025 04:51:19 +0000 Manifest this update: Sun 04 May 2025 04:46:19 +0000 Manifest next update: Wed 07 May 2025 14:06:19 +0000 Files and hashes: 1: 3130332e3134342e3130322e302f32332d3234203d3e20313339343231.roa (hash: 4ZQAqwv3D6xv0wZbi1M8yeP/AQMFxtqYLV8/krPMgXw=) 2: 3130332e3134342e3130332e302f32342d3234203d3e20313339343231.roa (hash: LMahtEVFw1WQXjV2Jt5sgAVQZXkjGaxRYhPgCUjt0lU=) 3: 2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.crl (hash: igqa8IbMIx0cezjIvFC+fwTGvRyWG2Df+Hw+KKQb/P0=) 4: 3130332e3134342e3130322e302f32342d3234203d3e20313339343231.roa (hash: vzSMLWMHxbHbmKZs1ww72s93hpXFUe/64ZqkfEBoPE8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.crl rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 14:06:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:35:85:a4:16:f0:98:72:d0:b5:35:04:19:73:8c:45:a7:9b:64:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D9D9137D4427A9D34E1B15F16C5C689A8C549D9 Validity Not Before: May 4 04:46:19 2025 GMT Not After : May 7 14:06:19 2025 GMT Subject: CN=7A8757B1A4DC4EF8ECE59F8E2EFFB8FF457B041B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c2:32:c4:ca:87:e7:60:52:f1:29:06:82:35: 64:99:b6:f8:77:f7:31:6e:e4:49:cb:13:a4:f9:ec: 5d:3e:ff:9e:74:9e:6f:0d:f3:23:80:02:28:76:e2: d5:57:cf:91:b2:42:3a:3b:fe:1c:1e:a4:d7:21:40: 1c:41:46:92:f3:9a:26:7d:78:2f:d5:d6:5b:8d:96: 06:69:1f:53:65:21:cd:9e:14:0d:38:4b:0e:a1:a0: a4:5d:f3:6d:ee:5b:76:42:cb:5e:aa:b4:eb:b7:1b: 41:df:df:bb:34:07:6a:29:c5:b5:1d:05:79:a3:94: 8b:a2:17:8a:ef:32:14:f7:43:d6:0a:14:52:db:a8: 45:ec:81:de:f4:8d:b0:0c:4f:8a:34:f6:44:fa:c0: 31:16:66:45:b2:59:34:04:6c:2e:85:9e:13:96:b7: 33:1a:91:9c:d0:ef:9a:ae:b7:b7:bc:97:63:f8:06: 3e:d4:5e:c0:7f:5e:65:09:a2:de:d0:fb:63:60:d5: ef:8a:99:ea:ef:f3:bd:17:c4:94:5b:07:84:7f:4f: 69:70:f8:9c:75:c2:8f:25:61:02:f8:a4:84:10:05: e5:02:51:d2:bf:a2:6d:67:e9:a7:0a:12:b0:e4:14: 47:b3:9a:ba:d8:2e:e2:88:50:15:9a:59:c0:27:f4: ef:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:87:57:B1:A4:DC:4E:F8:EC:E5:9F:8E:2E:FF:B8:FF:45:7B:04:1B X509v3 Authority Key Identifier: keyid:2D:9D:91:37:D4:42:7A:9D:34:E1:B1:5F:16:C5:C6:89:A8:C5:49:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:81:d9:9f:63:3d:e8:e8:16:b1:b6:46:25:57:27:5d:b9:7e: a5:fa:4a:a0:c5:31:20:ab:f6:48:64:03:f7:a3:7b:7e:ab:b0: a7:04:b5:d8:c3:db:31:92:54:d9:c2:3f:f2:2c:64:49:76:49: d1:2d:be:4d:aa:9b:2e:66:85:32:93:b3:30:27:93:ed:c8:7d: e0:5e:52:ff:ad:5e:13:91:d8:18:40:dc:ca:1f:10:80:c9:96: f4:2d:84:78:00:bf:c9:2a:a0:71:9c:04:48:cd:95:e6:93:bf: 68:6f:d4:b8:b8:cd:dd:d4:ca:ef:c3:f7:79:2b:39:cb:ad:f8: ad:a8:c3:aa:98:c8:d8:1f:48:c4:bf:63:02:02:80:a9:0e:7f: 71:50:59:bb:c3:7c:b6:f4:be:95:06:0c:2f:d7:4b:d0:90:a7: a6:2b:3d:69:ac:6a:cc:3e:3d:17:f9:05:bf:8d:6b:99:76:67: 09:9d:94:1e:e0:86:60:bc:c3:bf:0c:ee:f9:79:74:0e:3e:50: 94:df:1f:4a:46:57:09:40:9d:84:37:c2:37:46:99:e1:87:70: 67:f9:15:e8:8e:2c:40:54:32:18:14:18:8d:1f:6e:be:26:f1: 02:a3:fd:9b:5a:4b:ca:15:ca:d6:89:bf:ba:7c:b5:9a:e7:02: 6f:16:07:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQTWFpBbwmHLQtTUEGXOMRaebZCUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ5RDkxMzdENDQyN0E5RDM0RTFCMTVGMTZDNUM2ODlB OEM1NDlEOTAeFw0yNTA1MDQwNDQ2MTlaFw0yNTA1MDcxNDA2MTlaMDMxMTAvBgNV BAMTKDdBODc1N0IxQTREQzRFRjhFQ0U1OUY4RTJFRkZCOEZGNDU3QjA0MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6wjLEyofnYFLxKQaCNWSZtvh3 9zFu5EnLE6T57F0+/550nm8N8yOAAih24tVXz5GyQjo7/hwepNchQBxBRpLzmiZ9 eC/V1luNlgZpH1NlIc2eFA04Sw6hoKRd823uW3ZCy16qtOu3G0Hf37s0B2opxbUd BXmjlIuiF4rvMhT3Q9YKFFLbqEXsgd70jbAMT4o09kT6wDEWZkWyWTQEbC6FnhOW tzMakZzQ75qut7e8l2P4Bj7UXsB/XmUJot7Q+2Ng1e+Kmerv870XxJRbB4R/T2lw +Jx1wo8lYQL4pIQQBeUCUdK/om1n6acKErDkFEezmrrYLuKIUBWaWcAn9O/ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeodXsaTcTvjs5Z+OLv+4/0V7BBswHwYDVR0j BBgwFoAULZ2RN9RCep004bFfFsXGiajFSdkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTUzNDFlOC0yMmQ4LTQ0OWMtYTc1My1lNDdiYmZjNDg1MzgvMC8yRDlEOTEzN0Q0 NDI3QTlEMzRFMUIxNUYxNkM1QzY4OUE4QzU0OUQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQ5RDkxMzdENDQyN0E5RDM0RTFCMTVGMTZDNUM2ODlBOEM1 NDlEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE1MzQxZTgtMjJkOC00NDljLWE3 NTMtZTQ3YmJmYzQ4NTM4LzAvMkQ5RDkxMzdENDQyN0E5RDM0RTFCMTVGMTZDNUM2 ODlBOEM1NDlEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEWB2Z9jPejoFrG2RiVXJ125fqX6SqDFMSCr 9khkA/eje36rsKcEtdjD2zGSVNnCP/IsZEl2SdEtvk2qmy5mhTKTszAnk+3IfeBe Uv+tXhOR2BhA3MofEIDJlvQthHgAv8kqoHGcBEjNleaTv2hv1Li4zd3Uyu/D93kr Ocut+K2ow6qYyNgfSMS/YwICgKkOf3FQWbvDfLb0vpUGDC/XS9CQp6YrPWmsasw+ PRf5Bb+Na5l2ZwmdlB7ghmC8w78M7vl5dA4+UJTfH0pGVwlAnYQ3wjdGmeGHcGf5 FeiOLEBUMhgUGI0fbr4m8QKj/ZtaS8oVytaJv7p8tZrnAm8WB7U= -----END CERTIFICATE-----Generated at Wed May 7 09:41:33 2025 by rpki-client