$ rpki-client -vvf repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft File: 2CCC85BF6CCD365701EFA75EE416D234F861385B.mft (raw, json) Hash identifier: i1eaNqqQWICUhUVpEtybk/Wk97OBgljU0fo0T8/vpKA= Subject key identifier: 46:13:1A:4A:F9:38:40:63:6C:F0:0A:13:B3:4D:30:62:C5:E4:A2:5D Authority key identifier: 2C:CC:85:BF:6C:CD:36:57:01:EF:A7:5E:E4:16:D2:34:F8:61:38:5B Certificate issuer: /CN=2CCC85BF6CCD365701EFA75EE416D234F861385B Certificate serial: 293268B9B272CCFBC670512A65F22D39EE1AA13A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft Manifest number: 81 Signing time: Wed 07 May 2025 08:32:13 +0000 Manifest this update: Wed 07 May 2025 08:27:13 +0000 Manifest next update: Sat 10 May 2025 12:38:13 +0000 Files and hashes: 1: 3136302e32352e3231392e302f32342d3234203d3e20313533303836.roa (hash: JTPBl2xXnGWTl8ZrptZDVbUzFDyRS3/D40BYMh+0i4U=) 2: 2CCC85BF6CCD365701EFA75EE416D234F861385B.crl (hash: JfzRclIc7OYs2Icv3TK1cqZgkeOEUDwx+2xJMNw3/e0=) 3: 3136302e32352e3231382e302f32342d3234203d3e20313533303836.roa (hash: Mr9+qsjEnJb2cnSB3AyArFy2+SWtmXNIU1+g9FxOCh0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.crl rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 12:38:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:32:68:b9:b2:72:cc:fb:c6:70:51:2a:65:f2:2d:39:ee:1a:a1:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CCC85BF6CCD365701EFA75EE416D234F861385B Validity Not Before: May 7 08:27:13 2025 GMT Not After : May 10 12:38:13 2025 GMT Subject: CN=46131A4AF93840636CF00A13B34D3062C5E4A25D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:90:39:61:d5:ea:c9:bc:9f:e1:6e:9f:93:c9: f3:b2:57:59:39:8e:a4:8d:e4:d8:6c:1e:cc:c7:b6: da:70:65:f4:9f:4f:81:3b:d1:1a:7c:a3:4a:2e:ee: fb:4a:b0:5a:5d:b2:c4:5c:b9:8f:41:6e:72:c0:8f: 5e:c9:c8:e2:9f:27:8b:f9:55:18:f7:42:74:8d:97: 06:c9:92:4b:57:8a:32:34:55:2b:75:60:15:02:57: 3b:7a:8c:52:fb:c0:75:fa:ac:77:1d:a5:77:ae:a2: 14:0e:17:d9:53:43:18:46:5c:84:ce:e2:84:87:9a: 72:37:6a:04:bd:03:17:cf:8b:70:3f:d7:bd:d8:e5: ea:7d:08:75:a1:ed:c8:24:af:50:4f:c7:63:ad:b3: 19:48:7f:91:54:bd:17:12:b2:c6:23:53:b7:7b:7e: 91:c3:05:b6:1c:4a:c2:bb:ea:5b:3a:51:fe:ee:b6: 15:89:c4:d0:c8:18:1d:96:b5:9a:46:77:b8:71:00: 16:2a:10:99:17:5c:5d:a4:2c:11:3d:12:aa:15:5f: e5:80:09:8c:52:86:3e:ed:d4:22:43:9c:6a:dd:16: 38:9f:f0:d2:45:11:a2:a6:43:73:0e:d8:09:61:4e: cc:ea:09:71:8c:8c:9b:fd:22:f2:8c:c2:2a:c2:9c: 13:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:13:1A:4A:F9:38:40:63:6C:F0:0A:13:B3:4D:30:62:C5:E4:A2:5D X509v3 Authority Key Identifier: keyid:2C:CC:85:BF:6C:CD:36:57:01:EF:A7:5E:E4:16:D2:34:F8:61:38:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:b5:f2:38:57:55:7a:26:b9:c4:b4:f7:9e:b5:ce:a2:59:cd: 93:a0:1c:73:f0:ef:fc:8f:fc:99:be:71:4f:83:dd:d0:0e:b6: cd:49:cd:75:2b:52:32:38:ed:55:a6:80:b3:ea:25:42:50:a3: 88:c5:59:cf:7b:0b:88:27:ed:06:63:48:97:98:4f:e2:3c:2e: 29:43:dd:e6:57:45:b8:65:00:8a:ba:65:1d:23:93:48:7f:ab: 5c:b6:ae:22:0a:2a:9f:8e:90:8a:55:2e:06:d7:8d:19:6d:d9: a4:43:17:e1:83:21:56:c2:e2:23:2a:8e:99:7e:eb:65:05:73: 78:17:ae:78:83:ad:1b:d0:a3:c0:43:5e:64:b0:b0:93:57:9f: 41:54:88:3f:52:9c:00:a4:ed:6d:20:e7:e4:21:23:73:b7:2a: 04:d7:fe:c5:3a:45:31:90:d6:6f:05:7b:4b:a4:89:9a:81:02: fd:7e:d4:83:98:e4:25:82:18:02:a4:5e:7e:99:45:4f:44:13: c6:ba:ad:60:87:4e:55:0e:e7:95:6f:fb:9b:b9:bb:ff:50:34: f9:2d:f7:3d:ba:c1:e3:21:a4:59:39:90:81:56:54:e9:f3:ad: f0:c1:49:be:85:94:81:56:f0:48:44:b8:36:a2:9f:f8:15:73: 02:32:2e:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKTJoubJyzPvGcFEqZfItOe4aoTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNDQzg1QkY2Q0NEMzY1NzAxRUZBNzVFRTQxNkQyMzRG ODYxMzg1QjAeFw0yNTA1MDcwODI3MTNaFw0yNTA1MTAxMjM4MTNaMDMxMTAvBgNV BAMTKDQ2MTMxQTRBRjkzODQwNjM2Q0YwMEExM0IzNEQzMDYyQzVFNEEyNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6kDlh1erJvJ/hbp+TyfOyV1k5 jqSN5NhsHszHttpwZfSfT4E70Rp8o0ou7vtKsFpdssRcuY9BbnLAj17JyOKfJ4v5 VRj3QnSNlwbJkktXijI0VSt1YBUCVzt6jFL7wHX6rHcdpXeuohQOF9lTQxhGXITO 4oSHmnI3agS9AxfPi3A/173Y5ep9CHWh7cgkr1BPx2OtsxlIf5FUvRcSssYjU7d7 fpHDBbYcSsK76ls6Uf7uthWJxNDIGB2WtZpGd7hxABYqEJkXXF2kLBE9EqoVX+WA CYxShj7t1CJDnGrdFjif8NJFEaKmQ3MO2AlhTszqCXGMjJv9IvKMwirCnBNRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURhMaSvk4QGNs8AoTs00wYsXkol0wHwYDVR0j BBgwFoAULMyFv2zNNlcB76de5BbSNPhhOFswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWYwN2YxOC01YzQ5LTQxMjktYWE1My03MDg1Y2NkNTdiNjMvMC8yQ0NDODVCRjZD Q0QzNjU3MDFFRkE3NUVFNDE2RDIzNEY4NjEzODVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkNDQzg1QkY2Q0NEMzY1NzAxRUZBNzVFRTQxNkQyMzRGODYx Mzg1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2FmMDdmMTgtNWM0OS00MTI5LWFh NTMtNzA4NWNjZDU3YjYzLzAvMkNDQzg1QkY2Q0NEMzY1NzAxRUZBNzVFRTQxNkQy MzRGODYxMzg1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMS18jhXVXomucS09561zqJZzZOgHHPw7/yP /Jm+cU+D3dAOts1JzXUrUjI47VWmgLPqJUJQo4jFWc97C4gn7QZjSJeYT+I8LilD 3eZXRbhlAIq6ZR0jk0h/q1y2riIKKp+OkIpVLgbXjRlt2aRDF+GDIVbC4iMqjpl+ 62UFc3gXrniDrRvQo8BDXmSwsJNXn0FUiD9SnACk7W0g5+QhI3O3KgTX/sU6RTGQ 1m8Fe0ukiZqBAv1+1IOY5CWCGAKkXn6ZRU9EE8a6rWCHTlUO55Vv+5u5u/9QNPkt 9z26weMhpFk5kIFWVOnzrfDBSb6FlIFW8EhEuDain/gVcwIyLnk= -----END CERTIFICATE-----Generated at Fri May 9 02:38:27 2025 by rpki-client