$ rpki-client -vvf repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft File: B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft (raw, json) Hash identifier: tc/pUWALnRueKGIagtcQ41JCIEwCQkCKzB7rCwj/KaE= Subject key identifier: EC:C3:24:12:5F:DB:66:86:99:52:75:86:BE:7B:4B:BD:19:58:E5:4D Authority key identifier: B2:FA:6D:D6:2C:0D:60:EA:AD:64:F6:B4:71:D2:2D:29:44:32:B7:B8 Certificate issuer: /CN=B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8 Certificate serial: 74AB3B98BD2A068A5AB3B9CFB2D39CCAB65EB9DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft Manifest number: 04D0 Signing time: Tue 06 May 2025 22:50:39 +0000 Manifest this update: Tue 06 May 2025 22:45:39 +0000 Manifest next update: Sat 10 May 2025 05:27:39 +0000 Files and hashes: 1: 3130332e3130362e3137322e302f32332d3234203d3e20313336383838.roa (hash: 14jGGBn2Kt0co6w/+KEhuzlWDhDnoT2pTYw5uk4snHY=) 2: 3130332e3130362e3137342e302f32342d3234203d3e20313336383838.roa (hash: x4cc1kbGeyzVURkk65Vy/+5L5MwnZDAtlAl9vg2PUts=) 3: B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.crl (hash: nc3CZ0hfWn3YDnAjgvujSq8VULWoIOPEKh+gEOZ74EU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.crl rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 05:27:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:ab:3b:98:bd:2a:06:8a:5a:b3:b9:cf:b2:d3:9c:ca:b6:5e:b9:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8 Validity Not Before: May 6 22:45:39 2025 GMT Not After : May 10 05:27:39 2025 GMT Subject: CN=ECC324125FDB668699527586BE7B4BBD1958E54D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0e:3e:ab:b0:15:d6:84:9a:b3:91:96:06:d4: 22:68:1f:4f:93:7f:6c:85:c0:ec:3b:48:8a:53:03: d8:9c:67:a5:5a:a8:da:c3:6e:fb:23:fe:35:78:3a: 50:15:c6:04:9e:00:d7:e1:6a:1c:a2:68:ec:5c:83: b8:3c:8b:b8:4a:df:a2:08:81:5c:5d:aa:e5:9f:63: 4c:0e:60:27:95:3d:4a:79:f5:f9:1c:d6:65:86:e2: d0:57:92:38:f4:68:b6:08:2b:58:a8:55:5a:36:fd: 9f:5c:df:b8:8e:ea:ac:88:79:97:e3:0c:ca:27:82: 95:75:04:f8:02:c6:97:d7:e6:b8:3d:cd:f7:33:76: 9a:d9:4a:f3:a4:06:62:70:dc:d8:1c:15:85:94:5b: f6:91:32:9d:c1:4b:b2:79:a0:ec:03:73:68:aa:70: fa:f5:65:aa:43:f0:f9:ff:19:b6:a5:f3:9c:3f:66: 19:ea:69:bd:6a:28:ee:a3:04:ec:2a:1e:b0:b5:21: d2:cc:32:30:ce:26:1e:9c:d5:b0:6f:ae:81:94:04: b3:d3:d5:a3:ce:7a:47:86:48:22:c6:fd:ea:2a:73: e1:22:e5:35:55:aa:e2:b0:bf:ee:d5:27:fc:b1:d6: 8e:54:4c:1b:98:46:cb:05:25:30:79:17:81:ca:7c: bc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C3:24:12:5F:DB:66:86:99:52:75:86:BE:7B:4B:BD:19:58:E5:4D X509v3 Authority Key Identifier: keyid:B2:FA:6D:D6:2C:0D:60:EA:AD:64:F6:B4:71:D2:2D:29:44:32:B7:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:f6:45:97:d4:ca:1f:0e:d5:16:f7:ba:f4:f8:6d:23:6d:50: f5:a8:17:13:5c:d6:e1:0e:a5:5a:18:12:f6:c8:ea:42:ef:f9: f7:e4:09:db:48:c7:2a:b5:e7:c6:3a:b9:9f:72:a2:c4:63:23: 1f:35:f2:31:b2:3b:45:00:87:d3:72:48:ea:5d:a8:83:15:52: 64:ad:e7:1d:27:1e:39:47:32:5d:e7:4e:20:6f:bd:9b:ab:f1: 49:8c:18:04:28:f5:3e:70:d1:65:be:89:f2:08:d5:a0:86:c4: d0:53:68:2a:b5:a0:1a:7b:9c:6f:29:78:f7:d3:7f:41:06:89: be:2f:a6:14:50:51:51:90:45:c0:3d:7c:cb:22:55:1a:72:0c: 5a:43:ba:22:6f:09:77:48:6f:cc:bd:1d:bd:6b:a4:f4:c8:02: c1:d1:1d:86:16:bf:03:e5:72:4c:fc:c7:72:a0:f2:f8:bd:5e: 14:2d:02:12:8f:ab:2b:05:99:54:76:14:a7:51:b0:d1:fb:a2: de:38:ee:f8:65:07:9a:50:fa:82:e7:ed:f9:51:5b:38:a7:92: bd:9d:b6:87:06:92:5f:97:9b:5d:fa:ca:eb:1e:af:11:10:cd: 0e:fa:c1:ca:cc:55:88:bc:36:6d:21:cb:0a:95:90:a5:7e:d2: f5:23:ea:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdKs7mL0qBopas7nPstOcyrZeud0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJGQTZERDYyQzBENjBFQUFENjRGNkI0NzFEMjJEMjk0 NDMyQjdCODAeFw0yNTA1MDYyMjQ1MzlaFw0yNTA1MTAwNTI3MzlaMDMxMTAvBgNV BAMTKEVDQzMyNDEyNUZEQjY2ODY5OTUyNzU4NkJFN0I0QkJEMTk1OEU1NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Dj6rsBXWhJqzkZYG1CJoH0+T f2yFwOw7SIpTA9icZ6VaqNrDbvsj/jV4OlAVxgSeANfhahyiaOxcg7g8i7hK36II gVxdquWfY0wOYCeVPUp59fkc1mWG4tBXkjj0aLYIK1ioVVo2/Z9c37iO6qyIeZfj DMongpV1BPgCxpfX5rg9zfczdprZSvOkBmJw3NgcFYWUW/aRMp3BS7J5oOwDc2iq cPr1ZapD8Pn/Gbal85w/Zhnqab1qKO6jBOwqHrC1IdLMMjDOJh6c1bBvroGUBLPT 1aPOekeGSCLG/eoqc+Ei5TVVquKwv+7VJ/yx1o5UTBuYRssFJTB5F4HKfLx7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7MMkEl/bZoaZUnWGvntLvRlY5U0wHwYDVR0j BBgwFoAUsvpt1iwNYOqtZPa0cdItKUQyt7gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmJkN2NmNi1mNTVhLTRiNzgtYTU4OC1kOTI2MWYxNWY3NjMvMC9CMkZBNkRENjJD MEQ2MEVBQUQ2NEY2QjQ3MUQyMkQyOTQ0MzJCN0I4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJGQTZERDYyQzBENjBFQUFENjRGNkI0NzFEMjJEMjk0NDMy QjdCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZiZDdjZjYtZjU1YS00Yjc4LWE1 ODgtZDkyNjFmMTVmNzYzLzAvQjJGQTZERDYyQzBENjBFQUFENjRGNkI0NzFEMjJE Mjk0NDMyQjdCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABr2RZfUyh8O1Rb3uvT4bSNtUPWoFxNc1uEO pVoYEvbI6kLv+ffkCdtIxyq158Y6uZ9yosRjIx818jGyO0UAh9NySOpdqIMVUmSt 5x0nHjlHMl3nTiBvvZur8UmMGAQo9T5w0WW+ifII1aCGxNBTaCq1oBp7nG8pePfT f0EGib4vphRQUVGQRcA9fMsiVRpyDFpDuiJvCXdIb8y9Hb1rpPTIAsHRHYYWvwPl ckz8x3Kg8vi9XhQtAhKPqysFmVR2FKdRsNH7ot447vhlB5pQ+oLn7flRWzinkr2d tocGkl+Xm136yuserxEQzQ76wcrMVYi8Nm0hywqVkKV+0vUj6tU= -----END CERTIFICATE-----Generated at Fri May 9 05:40:41 2025 by rpki-client