$ rpki-client -vvf repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft File: 2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft (raw, json) Hash identifier: 7xi2RfABbnFCsFaG6WNjPUgZkU6Baj6ieFTP2fVpkVo= Subject key identifier: 4C:CB:F4:29:98:E1:6D:79:E4:FC:2E:35:7D:4A:1C:93:7D:54:AE:D8 Authority key identifier: 2B:DF:AF:A7:0A:11:BF:BF:6C:98:2B:BF:2C:2C:08:4D:E8:0E:03:4E Certificate issuer: /CN=2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E Certificate serial: 5484C813025EAD736AB22A6221CEEFF8CDCFC461 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft Manifest number: 034A Signing time: Sat 10 May 2025 10:01:58 +0000 Manifest this update: Sat 10 May 2025 09:56:58 +0000 Manifest next update: Tue 13 May 2025 14:51:58 +0000 Files and hashes: 1: 2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl (hash: b+kkjAYxvYRKg2EsxlBQWws0FZ5PoIgZolP3fKSLJjQ=) 2: 3130332e3136392e322e302f32332d3234203d3e203137393935.roa (hash: +JB4xjkXbgweSU7X29CnYlRjnbB6M5XtdFb5z4Dimtg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 08:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:84:c8:13:02:5e:ad:73:6a:b2:2a:62:21:ce:ef:f8:cd:cf:c4:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E Validity Not Before: May 10 09:56:58 2025 GMT Not After : May 13 14:51:58 2025 GMT Subject: CN=4CCBF42998E16D79E4FC2E357D4A1C937D54AED8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fa:fb:b5:44:77:e1:f4:27:a9:bb:20:ca:90: eb:62:b3:7b:28:6f:1c:bb:80:4c:c1:9c:5c:4b:1f: 21:de:42:49:99:8e:7a:2f:48:ba:b8:45:7b:7f:08: 72:0a:72:62:d1:6f:2c:c1:cc:39:6c:1c:bd:4b:a4: 33:00:35:02:43:4e:75:ea:a2:d1:a4:60:5f:64:09: 03:e6:c3:31:d5:ef:7e:5d:22:c3:99:e7:ea:e8:07: 35:3e:da:78:6e:36:20:11:0a:75:49:9d:09:b0:f4: 3e:64:80:cb:fe:b8:30:e5:fe:b2:ea:73:dd:62:62: 38:f8:53:bc:11:a2:9d:ab:3a:cb:bc:84:06:99:ec: 9c:c2:6f:dd:f5:70:d9:97:8c:04:e2:0f:7f:1c:8c: 19:9d:60:6c:28:f7:aa:cb:08:a6:1b:b0:ab:27:c4: 54:e5:a3:f7:0d:53:ce:56:ca:9c:d5:34:94:58:c1: 02:ad:dc:a8:c8:01:ad:19:b8:9b:46:e7:80:f1:dd: 22:16:f3:35:88:90:db:eb:27:dc:33:c7:fe:73:ff: 9b:3f:a8:0f:cf:ab:dd:fb:65:47:04:df:61:eb:c2: 75:7a:21:21:4d:2e:95:95:6d:15:91:c0:31:c1:84: 9a:88:8d:ed:32:d7:f3:d5:06:53:f1:a3:65:9e:8b: cb:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:CB:F4:29:98:E1:6D:79:E4:FC:2E:35:7D:4A:1C:93:7D:54:AE:D8 X509v3 Authority Key Identifier: keyid:2B:DF:AF:A7:0A:11:BF:BF:6C:98:2B:BF:2C:2C:08:4D:E8:0E:03:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:cb:69:f8:bb:41:3b:2c:6e:ed:89:dc:6b:0a:d8:94:cb:ef: 09:6b:24:78:0b:28:ad:3b:7f:0d:7e:f1:3b:d1:81:7e:62:78: 7e:83:67:07:d0:5a:f7:fa:11:09:c9:8b:52:d9:bf:f0:5e:0d: 30:61:73:32:9b:44:7d:13:1f:39:32:6b:a0:36:fa:f9:d2:00: 1a:7e:9d:91:90:2e:3a:d5:00:71:8f:b8:b4:c0:e5:15:5e:59: e1:16:42:4a:92:a5:67:1e:bb:32:de:6b:4d:33:9a:9e:56:89: c2:d4:65:da:d4:57:71:2a:8b:bf:ec:52:ba:9c:23:db:3d:ae: ae:b7:1d:7f:69:e5:0d:94:5a:53:b4:72:0e:3a:09:ff:4e:99: c2:44:98:e7:e5:52:2c:66:a3:42:9f:59:f6:83:3c:7d:5a:bc: 56:cd:84:1f:f6:d0:ad:bd:7f:da:77:40:98:d7:93:48:ee:11: 5b:d2:a0:b9:30:33:5c:45:f9:ef:de:96:0d:1b:e1:3d:d9:bc: 58:9f:d6:7d:29:86:d2:e4:f5:10:65:ae:7a:17:59:a7:a9:7a: 01:3c:4a:32:96:04:15:74:51:46:77:87:f3:4f:ab:a3:85:29: 48:5f:0e:15:78:cb:a3:2e:b3:e2:94:60:73:75:7b:98:d5:81: 91:59:61:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVITIEwJerXNqsipiIc7v+M3PxGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4NERF ODBFMDM0RTAeFw0yNTA1MTAwOTU2NThaFw0yNTA1MTMxNDUxNThaMDMxMTAvBgNV BAMTKDRDQ0JGNDI5OThFMTZENzlFNEZDMkUzNTdENEExQzkzN0Q1NEFFRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM+vu1RHfh9CepuyDKkOtis3so bxy7gEzBnFxLHyHeQkmZjnovSLq4RXt/CHIKcmLRbyzBzDlsHL1LpDMANQJDTnXq otGkYF9kCQPmwzHV735dIsOZ5+roBzU+2nhuNiARCnVJnQmw9D5kgMv+uDDl/rLq c91iYjj4U7wRop2rOsu8hAaZ7JzCb931cNmXjATiD38cjBmdYGwo96rLCKYbsKsn xFTlo/cNU85WypzVNJRYwQKt3KjIAa0ZuJtG54Dx3SIW8zWIkNvrJ9wzx/5z/5s/ qA/Pq937ZUcE32HrwnV6ISFNLpWVbRWRwDHBhJqIje0y1/PVBlPxo2Wei8vzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTMv0KZjhbXnk/C41fUock31UrtgwHwYDVR0j BBgwFoAUK9+vpwoRv79smCu/LCwITegOA04wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmNkOWNlYS0zYmY0LTRhOWMtYWVlNi0wMDMzOWMwNjU1MGIvMC8yQkRGQUZBNzBB MTFCRkJGNkM5ODJCQkYyQzJDMDg0REU4MEUwMzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4NERFODBF MDM0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJjZDljZWEtM2JmNC00YTljLWFl ZTYtMDAzMzljMDY1NTBiLzAvMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4 NERFODBFMDM0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHHLafi7QTssbu2J3GsK2JTL7wlrJHgLKK07 fw1+8TvRgX5ieH6DZwfQWvf6EQnJi1LZv/BeDTBhczKbRH0THzkya6A2+vnSABp+ nZGQLjrVAHGPuLTA5RVeWeEWQkqSpWceuzLea00zmp5WicLUZdrUV3Eqi7/sUrqc I9s9rq63HX9p5Q2UWlO0cg46Cf9OmcJEmOflUixmo0KfWfaDPH1avFbNhB/20K29 f9p3QJjXk0juEVvSoLkwM1xF+e/elg0b4T3ZvFif1n0phtLk9RBlrnoXWaepegE8 SjKWBBV0UUZ3h/NPq6OFKUhfDhV4y6Mus+KUYHN1e5jVgZFZYdQ= -----END CERTIFICATE-----Generated at Sat May 10 19:17:10 2025 by rpki-client