$ rpki-client -vvf repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft File: 2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft (raw, json) Hash identifier: s/H4WYdQzfuf8y47Nu9BINVCNuJhbr+oMuP7Yc/yM7o= Subject key identifier: BF:EF:E3:B8:9A:62:0D:21:8F:75:2A:5C:80:91:18:27:22:17:07:BB Authority key identifier: 2B:0D:3D:70:A0:27:B5:3C:7A:D2:17:FE:22:CA:0E:D1:11:FD:F3:B0 Certificate issuer: /CN=2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0 Certificate serial: 33F924E694AE34F8C54FAD66C9496B89BBFF7DBD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft Manifest number: 55 Signing time: Tue 06 May 2025 23:41:48 +0000 Manifest this update: Tue 06 May 2025 23:36:48 +0000 Manifest next update: Sat 10 May 2025 02:30:48 +0000 Files and hashes: 1: 2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.crl (hash: usvSyUnBsKF79zYh6RvP7So2gJPyu6qXZhynusfr0iw=) 2: 3130332e3232352e31372e302f32342d3234203d3e20313532303632.roa (hash: P8QCMdvNkcGuA4F0hmx15JmIaSEyGRAUfWjBJiusufQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.crl rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 02:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:f9:24:e6:94:ae:34:f8:c5:4f:ad:66:c9:49:6b:89:bb:ff:7d:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0 Validity Not Before: May 6 23:36:48 2025 GMT Not After : May 10 02:30:48 2025 GMT Subject: CN=BFEFE3B89A620D218F752A5C80911827221707BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:69:59:36:bf:c9:97:3c:0d:f2:a2:4e:b3:a3: da:62:63:94:b6:79:cd:40:d4:be:51:db:51:02:72: 51:7f:c9:4c:ff:81:9c:44:03:78:f1:57:b2:be:f5: dd:7c:a0:c7:93:d9:54:94:30:05:27:f2:7f:42:96: 04:b3:30:9b:5f:f7:0b:5e:3b:e8:56:c2:87:62:36: 28:70:2e:4c:84:2a:0c:bf:c6:15:bc:f6:19:80:03: 19:3e:13:dc:6c:0d:f9:1a:a0:6a:d9:94:3d:f7:c2: 58:1b:10:89:24:b3:3c:40:f3:e7:ef:46:76:7a:10: 6c:a6:60:23:e7:d4:ad:3b:eb:f7:fa:55:67:57:05: 6a:2b:83:ec:1d:87:06:94:8f:85:db:a7:a5:d2:32: eb:a2:84:15:69:ef:22:13:e3:ba:46:d5:64:f6:75: 7b:dc:99:2b:03:1e:4c:04:55:d3:92:e0:1e:0d:2c: af:b4:75:2d:60:14:73:b8:b8:0c:f8:b0:f4:8c:a3: b3:ae:8f:6b:89:dc:06:60:a1:58:d4:d0:5d:87:03: 69:36:4e:49:1e:ba:16:e2:05:73:d6:10:b6:a2:ff: 46:4f:0b:75:4f:0d:6e:cd:02:5f:00:4e:07:86:44: 1a:10:e6:e7:7c:08:e9:27:06:91:65:13:4d:12:e9: f1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:EF:E3:B8:9A:62:0D:21:8F:75:2A:5C:80:91:18:27:22:17:07:BB X509v3 Authority Key Identifier: keyid:2B:0D:3D:70:A0:27:B5:3C:7A:D2:17:FE:22:CA:0E:D1:11:FD:F3:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:fe:86:16:e6:47:7e:58:72:fe:e4:ac:cc:dc:b8:79:42:2a: 0f:c0:d3:c5:a0:ef:7a:03:c3:5f:e3:9e:9f:95:18:2c:b3:23: d1:89:c1:19:2c:c3:bf:8f:71:71:7c:65:e0:93:cc:cf:ac:d1: f9:9f:a8:93:8e:12:ed:6d:36:5a:dd:ca:10:74:be:e3:60:b3: d4:5c:71:54:2d:cd:6c:d3:85:0e:04:b9:48:56:3b:73:8d:5b: f1:14:4c:ba:d4:21:10:fc:f6:0d:2c:b0:de:f4:1d:33:8e:32: fe:0c:5c:84:2e:dd:c3:fc:a1:56:f7:3c:7a:bf:7a:03:46:c1: 71:a2:44:09:74:3c:5b:b4:f6:7d:b3:c3:c9:fc:78:4d:d2:63: ff:95:eb:a7:ce:5d:b4:fc:c4:d0:94:a3:e2:b2:a6:3a:05:6b: 95:d4:3f:dd:03:a0:f1:c3:b6:0d:a4:2f:86:e2:63:4f:9c:b8: 73:cc:13:7c:23:c8:92:21:73:fc:cb:b1:34:8d:71:ea:4c:87: 73:e9:ac:d8:14:de:05:49:1f:0e:80:3b:e2:7b:ba:b8:00:de: 97:1a:f4:60:94:7c:69:b3:1f:a2:fa:02:a4:50:b2:ef:ea:3b: 90:5e:5d:3c:1d:37:04:21:43:6a:06:5f:50:a7:a0:57:70:1a: 03:43:0e:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM/kk5pSuNPjFT61myUlribv/fb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIwRDNENzBBMDI3QjUzQzdBRDIxN0ZFMjJDQTBFRDEx MUZERjNCMDAeFw0yNTA1MDYyMzM2NDhaFw0yNTA1MTAwMjMwNDhaMDMxMTAvBgNV BAMTKEJGRUZFM0I4OUE2MjBEMjE4Rjc1MkE1QzgwOTExODI3MjIxNzA3QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSaVk2v8mXPA3yok6zo9piY5S2 ec1A1L5R21ECclF/yUz/gZxEA3jxV7K+9d18oMeT2VSUMAUn8n9ClgSzMJtf9wte O+hWwodiNihwLkyEKgy/xhW89hmAAxk+E9xsDfkaoGrZlD33wlgbEIkkszxA8+fv RnZ6EGymYCPn1K076/f6VWdXBWorg+wdhwaUj4Xbp6XSMuuihBVp7yIT47pG1WT2 dXvcmSsDHkwEVdOS4B4NLK+0dS1gFHO4uAz4sPSMo7Ouj2uJ3AZgoVjU0F2HA2k2 TkkeuhbiBXPWELai/0ZPC3VPDW7NAl8ATgeGRBoQ5ud8COknBpFlE00S6fE/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv+/juJpiDSGPdSpcgJEYJyIXB7swHwYDVR0j BBgwFoAUKw09cKAntTx60hf+IsoO0RH987AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzcyZDNmNS1kZDUzLTRiNzQtOTQ3Yy02YmI1MTBmNGY1MDMvMC8yQjBEM0Q3MEEw MjdCNTNDN0FEMjE3RkUyMkNBMEVEMTExRkRGM0IwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkIwRDNENzBBMDI3QjUzQzdBRDIxN0ZFMjJDQTBFRDExMUZE RjNCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWM3MmQzZjUtZGQ1My00Yjc0LTk0 N2MtNmJiNTEwZjRmNTAzLzAvMkIwRDNENzBBMDI3QjUzQzdBRDIxN0ZFMjJDQTBF RDExMUZERjNCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFv+hhbmR35Ycv7krMzcuHlCKg/A08Wg73oD w1/jnp+VGCyzI9GJwRksw7+PcXF8ZeCTzM+s0fmfqJOOEu1tNlrdyhB0vuNgs9Rc cVQtzWzThQ4EuUhWO3ONW/EUTLrUIRD89g0ssN70HTOOMv4MXIQu3cP8oVb3PHq/ egNGwXGiRAl0PFu09n2zw8n8eE3SY/+V66fOXbT8xNCUo+KypjoFa5XUP90DoPHD tg2kL4biY0+cuHPME3wjyJIhc/zLsTSNcepMh3PprNgU3gVJHw6AO+J7urgA3pca 9GCUfGmzH6L6AqRQsu/qO5BeXTwdNwQhQ2oGX1CnoFdwGgNDDr4= -----END CERTIFICATE-----Generated at Wed May 7 20:03:22 2025 by rpki-client