$ rpki-client -vvf repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft File: 2FB994CD1282292E6D2907FCECD7F9E472F49985.mft (raw, json) Hash identifier: oy7YioiJNb+mSEbo0htge5EbwO3cmMoRjbT78V+e29g= Subject key identifier: 6D:87:C8:88:15:AF:26:BC:90:D3:96:92:D6:C4:FF:7D:5B:2C:0D:61 Authority key identifier: 2F:B9:94:CD:12:82:29:2E:6D:29:07:FC:EC:D7:F9:E4:72:F4:99:85 Certificate issuer: /CN=2FB994CD1282292E6D2907FCECD7F9E472F49985 Certificate serial: 1F3A1CA0E86D5BCB64CECA650E6A9776F176F5D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft Manifest number: 04CD Signing time: Sun 04 May 2025 18:40:46 +0000 Manifest this update: Sun 04 May 2025 18:35:46 +0000 Manifest next update: Wed 07 May 2025 23:17:46 +0000 Files and hashes: 1: 3130332e3131302e31312e302f32342d3234203d3e20313331373137.roa (hash: IwHwotddAWU2g9udtUXGTuKj467I/RXi9GwfJR1ItSs=) 2: 3130332e3131302e382e302f32342d3234203d3e20313331373137.roa (hash: 6z/aBJVjmnV5y30TyBAs1DIg7YaA2W+Hxhks9f6rrXI=) 3: 3130332e3131302e382e302f32322d3232203d3e20313331373137.roa (hash: pX7k3ZuG4xOOUuk1ngzA+y7GWKvpGHKk6TxYVimyz5o=) 4: 3130332e3131302e392e302f32342d3234203d3e20313331373137.roa (hash: CAz4EFFuV39K7Yj6bXuCbRxkDhyk69KXBlvgMI1myCM=) 5: 3130332e3131302e31302e302f32342d3234203d3e20313331373137.roa (hash: StKC3RjUEcb6GVhgx3SU+vMU9RD+LiURtnpuaNC5b5E=) 6: 2FB994CD1282292E6D2907FCECD7F9E472F49985.crl (hash: odUIyaQlGIksqGlCoym3B0Q3qhs8WYRrw5/cZ4ybkPg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.crl rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 23:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:3a:1c:a0:e8:6d:5b:cb:64:ce:ca:65:0e:6a:97:76:f1:76:f5:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FB994CD1282292E6D2907FCECD7F9E472F49985 Validity Not Before: May 4 18:35:46 2025 GMT Not After : May 7 23:17:46 2025 GMT Subject: CN=6D87C88815AF26BC90D39692D6C4FF7D5B2C0D61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:06:3a:92:87:4a:01:cb:de:42:05:52:aa:f5: 5c:0a:e6:26:11:a6:f2:d9:75:22:56:a3:08:48:2b: f6:81:4d:e9:b3:10:69:8a:48:4f:3e:6a:0b:5c:81: 68:5e:18:31:2c:24:02:32:40:99:ba:10:df:00:0c: 87:f2:b5:7c:3e:f0:47:9d:70:a9:87:d3:a9:43:aa: a1:50:bd:13:b1:0d:f6:f2:b9:67:cf:82:5f:8c:08: d2:21:22:f7:96:a3:73:79:97:ec:6a:92:68:8b:ec: 4e:84:2f:ca:7e:1a:20:fe:58:07:8b:bb:d2:11:5f: da:36:19:86:cf:0d:12:89:6f:75:1f:2e:d1:a5:bb: d4:4b:ad:8a:f9:14:b9:ad:ae:86:c6:57:11:6f:a1: 0b:10:a6:9d:b0:9e:4b:3b:e9:3d:e5:6e:a7:f1:9a: de:43:0b:29:cd:53:30:3b:59:32:39:32:df:d6:31: c9:bb:5c:01:28:c0:41:3f:a8:bb:ed:dc:19:1a:4b: 43:15:47:8b:fd:10:13:7e:12:14:da:9c:94:28:af: 6c:0e:50:c2:24:38:12:3f:4c:76:0d:75:7a:32:c3: 89:31:ce:67:05:1b:01:ae:15:3d:64:9a:40:aa:6d: df:dc:50:52:ac:5f:8e:c3:c1:40:c6:b3:5f:c3:b2: 50:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:87:C8:88:15:AF:26:BC:90:D3:96:92:D6:C4:FF:7D:5B:2C:0D:61 X509v3 Authority Key Identifier: keyid:2F:B9:94:CD:12:82:29:2E:6D:29:07:FC:EC:D7:F9:E4:72:F4:99:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:ad:68:20:3a:b6:2f:1d:45:42:ad:13:88:62:b3:be:f2:d8: 83:38:b5:24:e9:5c:92:a1:d2:1b:3e:21:e6:24:dc:8b:3d:04: 43:a0:3b:7d:48:40:f8:fc:ba:a0:15:43:5e:92:ed:07:10:f1: 4a:0a:6e:5c:fd:bf:63:ba:fe:6e:c8:73:39:bd:fd:b9:d0:5e: da:3b:b4:f5:a8:70:6a:11:e9:03:49:7d:fd:05:cf:a0:32:9b: 2f:10:47:7f:6a:3a:59:bc:97:b2:b5:d2:d0:a3:1a:41:46:d6: 45:9b:95:13:6f:95:94:1a:4b:10:fc:85:99:f8:96:3c:5b:b8: ab:77:af:8c:f5:4b:27:21:3a:3c:80:01:6e:fc:20:b5:42:51: 3b:15:3a:9a:fa:f2:68:59:3f:03:53:34:2c:2f:ec:1c:37:84: 18:65:d2:a4:32:fb:14:86:aa:3d:c5:ce:7c:33:fc:24:fd:ee: 4c:96:c6:02:eb:d7:a9:5f:10:26:70:ad:9a:93:68:dd:c9:37: 78:d5:5f:df:5b:82:4b:73:7e:49:b1:0f:39:9b:db:97:c2:f4: e7:1d:d2:9a:ed:c3:69:21:56:e6:7b:5f:02:dd:cf:8e:90:ae: 37:d4:49:fa:00:aa:c8:10:4a:56:87:90:74:fa:ba:1f:0c:41: 05:6e:ff:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHzocoOhtW8tkzsplDmqXdvF29dEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZCOTk0Q0QxMjgyMjkyRTZEMjkwN0ZDRUNEN0Y5RTQ3 MkY0OTk4NTAeFw0yNTA1MDQxODM1NDZaFw0yNTA1MDcyMzE3NDZaMDMxMTAvBgNV BAMTKDZEODdDODg4MTVBRjI2QkM5MEQzOTY5MkQ2QzRGRjdENUIyQzBENjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/BjqSh0oBy95CBVKq9VwK5iYR pvLZdSJWowhIK/aBTemzEGmKSE8+agtcgWheGDEsJAIyQJm6EN8ADIfytXw+8Eed cKmH06lDqqFQvROxDfbyuWfPgl+MCNIhIveWo3N5l+xqkmiL7E6EL8p+GiD+WAeL u9IRX9o2GYbPDRKJb3UfLtGlu9RLrYr5FLmtrobGVxFvoQsQpp2wnks76T3lbqfx mt5DCynNUzA7WTI5Mt/WMcm7XAEowEE/qLvt3BkaS0MVR4v9EBN+EhTanJQor2wO UMIkOBI/THYNdXoyw4kxzmcFGwGuFT1kmkCqbd/cUFKsX47DwUDGs1/DslCRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbYfIiBWvJryQ05aS1sT/fVssDWEwHwYDVR0j BBgwFoAUL7mUzRKCKS5tKQf87Nf55HL0mYUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZGE3NzNkZC05NWFhLTQ0N2UtOTkzZC00Y2Y0YTEyNzNiMzEvMC8yRkI5OTRDRDEy ODIyOTJFNkQyOTA3RkNFQ0Q3RjlFNDcyRjQ5OTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkZCOTk0Q0QxMjgyMjkyRTZEMjkwN0ZDRUNEN0Y5RTQ3MkY0 OTk4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmRhNzczZGQtOTVhYS00NDdlLTk5 M2QtNGNmNGExMjczYjMxLzAvMkZCOTk0Q0QxMjgyMjkyRTZEMjkwN0ZDRUNEN0Y5 RTQ3MkY0OTk4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABqtaCA6ti8dRUKtE4his77y2IM4tSTpXJKh 0hs+IeYk3Is9BEOgO31IQPj8uqAVQ16S7QcQ8UoKblz9v2O6/m7Iczm9/bnQXto7 tPWocGoR6QNJff0Fz6Aymy8QR39qOlm8l7K10tCjGkFG1kWblRNvlZQaSxD8hZn4 ljxbuKt3r4z1SychOjyAAW78ILVCUTsVOpr68mhZPwNTNCwv7Bw3hBhl0qQy+xSG qj3Fznwz/CT97kyWxgLr16lfECZwrZqTaN3JN3jVX99bgktzfkmxDzmb25fC9Ocd 0prtw2khVuZ7XwLdz46QrjfUSfoAqsgQSlaHkHT6uh8MQQVu/3k= -----END CERTIFICATE-----Generated at Tue May 6 01:34:57 2025 by rpki-client