$ rpki-client -vvf repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft File: 2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft (raw, json) Hash identifier: b+lJKItdRjhup9ZMdhvlgJSy9qWssDNJnIK4m+Ws50g= Subject key identifier: F4:27:60:CD:26:43:18:7D:FF:68:8D:04:C3:B8:05:62:4F:55:AD:6F Authority key identifier: 2A:F5:12:1C:D1:CF:A7:79:8C:C1:DD:77:7B:46:43:69:D1:DE:A6:C1 Certificate issuer: /CN=2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1 Certificate serial: 43BDD7CF8ACA9701B5EE51041FB62CA5D5E9B916 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft Manifest number: 021F Signing time: Thu 08 May 2025 11:01:10 +0000 Manifest this update: Thu 08 May 2025 10:56:10 +0000 Manifest next update: Sun 11 May 2025 20:09:10 +0000 Files and hashes: 1: 3130332e3134382e32342e302f32332d3234203d3e20313339393831.roa (hash: 6FLbYuy1S5qOt7tY0dfAZpELgfONO6cx6swxFm3099E=) 2: 323430353a633863303a3a2f33322d3332203d3e20313339393831.roa (hash: xAQ8nY4YiCbyThm1ahzRI7qCPhGk2b5venOiA8cHRk4=) 3: 2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl (hash: pu1udED7/kzpenR9Vd7xaK5USydCKc4XMlg0zYhm5Nc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 20:09:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:bd:d7:cf:8a:ca:97:01:b5:ee:51:04:1f:b6:2c:a5:d5:e9:b9:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1 Validity Not Before: May 8 10:56:10 2025 GMT Not After : May 11 20:09:10 2025 GMT Subject: CN=F42760CD2643187DFF688D04C3B805624F55AD6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8e:a5:b7:2a:23:74:2a:e4:ba:07:de:17:ad: 85:f9:2b:e9:82:53:0d:2a:27:f5:16:9f:d8:12:f2: 70:9e:5e:f8:33:6a:f9:e0:4f:2d:13:22:7a:04:3b: a0:ae:3e:b5:07:7e:e5:6a:4e:ae:44:74:56:ef:7c: e5:16:35:2d:52:70:1f:d0:50:72:92:f6:fb:1d:9f: c7:09:b1:a6:c5:ea:77:ab:5f:3e:62:4f:72:42:73: 66:8d:ba:23:5b:31:54:2b:62:66:ba:67:46:bc:58: f9:8f:f5:dc:d4:3d:31:df:a6:48:3e:78:4c:29:03: fa:ad:a8:62:c4:24:0c:9a:47:0b:35:4a:7e:6a:aa: 52:45:03:cb:7d:b6:5f:4f:8e:7a:b8:4a:62:a1:fd: 8f:9e:2f:c3:64:f6:5b:2a:57:f0:1f:ba:67:a4:88: 5b:c3:71:ff:3b:80:fd:f7:65:75:59:64:46:ec:85: f0:5f:0a:59:0a:9e:82:3d:a4:51:81:1f:3c:83:0a: ce:84:8d:25:66:50:57:cc:68:d9:10:3a:39:e7:24: b1:98:00:15:a0:8e:cc:87:9f:c4:28:a2:4c:5d:04: 91:a9:a8:d9:b8:50:9b:ce:97:f1:0f:82:3a:bf:70: 4b:6c:c6:d6:96:0a:5a:24:fd:57:83:5d:f8:10:1c: 65:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:27:60:CD:26:43:18:7D:FF:68:8D:04:C3:B8:05:62:4F:55:AD:6F X509v3 Authority Key Identifier: keyid:2A:F5:12:1C:D1:CF:A7:79:8C:C1:DD:77:7B:46:43:69:D1:DE:A6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:ab:24:0a:f7:b2:6b:3f:02:08:f4:43:53:39:80:48:80:b5: 5c:e8:72:60:31:75:e2:21:92:aa:c8:8c:11:b1:d7:d0:e0:b6: 5a:0b:42:a0:b8:e1:47:49:58:15:0a:f5:42:4a:4c:d0:98:51: 26:34:c1:6d:05:ef:df:b5:97:e3:ee:c9:49:f8:dc:4c:22:8e: 51:80:6b:fb:96:15:6c:33:42:9b:29:1e:9e:12:4a:1d:43:67: 1d:1d:6e:3b:37:00:8f:3f:c8:ca:69:48:5a:fa:d5:3e:6e:6f: 1b:9b:da:a8:08:da:be:b1:4a:ef:c4:d1:dc:8a:50:68:7e:b4: e5:17:d7:fc:6e:c4:30:de:2d:cf:9f:85:18:41:7b:2e:05:db: 0d:04:8a:06:4c:de:a2:57:1f:c1:8f:8f:87:63:c1:08:2f:cd: 74:5a:85:e5:ae:bf:b4:62:80:e6:e4:2a:5a:ea:89:a1:bd:6f: 36:be:ce:1e:3e:57:63:ff:4c:0c:90:a3:cd:c4:84:9f:23:75: b3:3f:2f:df:d3:25:bd:70:d6:07:30:50:82:81:95:db:42:d4: 36:22:8e:cc:f9:22:1a:39:f2:88:63:f5:da:c4:e6:df:4e:27: 1c:2d:10:71:39:ba:c9:21:63:3a:58:a5:b6:27:79:08:a0:8d: 76:21:87:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ73Xz4rKlwG17lEEH7YspdXpuRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQzNjlE MURFQTZDMTAeFw0yNTA1MDgxMDU2MTBaFw0yNTA1MTEyMDA5MTBaMDMxMTAvBgNV BAMTKEY0Mjc2MENEMjY0MzE4N0RGRjY4OEQwNEMzQjgwNTYyNEY1NUFENkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAjqW3KiN0KuS6B94XrYX5K+mC Uw0qJ/UWn9gS8nCeXvgzavngTy0TInoEO6CuPrUHfuVqTq5EdFbvfOUWNS1ScB/Q UHKS9vsdn8cJsabF6nerXz5iT3JCc2aNuiNbMVQrYma6Z0a8WPmP9dzUPTHfpkg+ eEwpA/qtqGLEJAyaRws1Sn5qqlJFA8t9tl9Pjnq4SmKh/Y+eL8Nk9lsqV/Afumek iFvDcf87gP33ZXVZZEbshfBfClkKnoI9pFGBHzyDCs6EjSVmUFfMaNkQOjnnJLGY ABWgjsyHn8QookxdBJGpqNm4UJvOl/EPgjq/cEtsxtaWClok/VeDXfgQHGXTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9CdgzSZDGH3/aI0Ew7gFYk9VrW8wHwYDVR0j BBgwFoAUKvUSHNHPp3mMwd13e0ZDadHepsEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OTJlMDdmOC0xYTQ4LTQzOTEtYTZhNS04ZTRlMzljODU4OGEvMC8yQUY1MTIxQ0Qx Q0ZBNzc5OENDMURENzc3QjQ2NDM2OUQxREVBNkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQzNjlEMURF QTZDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTkyZTA3ZjgtMWE0OC00MzkxLWE2 YTUtOGU0ZTM5Yzg1ODhhLzAvMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQz NjlEMURFQTZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAICrJAr3sms/Agj0Q1M5gEiAtVzocmAxdeIh kqrIjBGx19DgtloLQqC44UdJWBUK9UJKTNCYUSY0wW0F79+1l+PuyUn43EwijlGA a/uWFWwzQpspHp4SSh1DZx0dbjs3AI8/yMppSFr61T5ubxub2qgI2r6xSu/E0dyK UGh+tOUX1/xuxDDeLc+fhRhBey4F2w0EigZM3qJXH8GPj4djwQgvzXRaheWuv7Ri gObkKlrqiaG9bza+zh4+V2P/TAyQo83EhJ8jdbM/L9/TJb1w1gcwUIKBldtC1DYi jsz5Iho58ohj9drE5t9OJxwtEHE5uskhYzpYpbYneQigjXYhh3M= -----END CERTIFICATE-----Generated at Sat May 10 08:29:38 2025 by rpki-client