$ rpki-client -vvf repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft File: 2BB2F216687C4268643F593811E7E886DCD6CBFA.mft (raw, json) Hash identifier: EqsjslPXuqmQpuSzPSATDRM/j3IYanhmoz6F5EYfizE= Subject key identifier: 10:E4:38:08:D0:21:02:B0:82:8C:C1:4D:A1:C1:12:3D:7E:A4:B9:C5 Authority key identifier: 2B:B2:F2:16:68:7C:42:68:64:3F:59:38:11:E7:E8:86:DC:D6:CB:FA Certificate issuer: /CN=2BB2F216687C4268643F593811E7E886DCD6CBFA Certificate serial: 12B9FD98EFC9E0D5CA4A5871B9B43EEAA8F34A9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft Manifest number: 01C3 Signing time: Sat 10 May 2025 13:12:06 +0000 Manifest this update: Sat 10 May 2025 13:07:06 +0000 Manifest next update: Tue 13 May 2025 21:19:06 +0000 Files and hashes: 1: 2BB2F216687C4268643F593811E7E886DCD6CBFA.crl (hash: 6CaJanzI48rJ4H0DeWQYuiR8yz1JgZ2MjCNsi92vpkg=) 2: 323030313a6466313a6134303a3a2f34382d3438203d3e20313431363432.roa (hash: fFX2S0yuCGbDsYrqvIvfedkBEVG6E8+DQx58RVmq88I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.crl rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 21:19:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:b9:fd:98:ef:c9:e0:d5:ca:4a:58:71:b9:b4:3e:ea:a8:f3:4a:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB2F216687C4268643F593811E7E886DCD6CBFA Validity Not Before: May 10 13:07:06 2025 GMT Not After : May 13 21:19:06 2025 GMT Subject: CN=10E43808D02102B0828CC14DA1C1123D7EA4B9C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8b:82:e7:39:18:66:2a:d5:e3:39:79:9a:f7: c6:15:59:d2:41:87:1f:ca:07:91:69:7d:aa:f6:19: 85:ea:71:ed:91:5b:3a:35:df:c7:92:71:0e:c3:c5: de:c6:c8:2c:62:ff:40:9d:ad:38:51:3f:39:71:81: cc:47:f9:72:b3:b7:bd:9e:c0:d3:67:fe:6c:57:7b: 77:c4:ff:eb:2a:76:d6:b0:78:c1:52:5a:80:b3:59: 10:2e:2c:de:c1:e6:c3:a3:16:09:94:9f:65:d1:8e: e0:5c:b3:ee:d5:e0:fe:a1:e1:f2:f1:74:99:d1:4d: e3:db:cb:88:e3:e1:45:55:70:e9:e9:78:e8:4d:ca: 7b:33:55:d6:eb:1d:94:f3:a1:3a:01:61:9c:87:97: a0:c3:68:bf:34:11:66:68:59:5f:86:76:1c:4c:f5: 46:d9:93:2c:58:44:30:9a:d6:2a:e6:ee:5a:ae:40: 35:d5:f5:e6:1d:64:3e:40:26:6c:be:a0:81:92:0a: c3:17:e9:11:dc:1a:55:20:c7:df:14:f6:f5:15:8a: d5:86:d8:ad:dc:cc:05:2b:09:ec:bc:62:5c:4d:b2: f1:c1:2b:db:cb:6f:99:d5:b7:1b:c6:00:6f:da:dc: 80:20:01:1e:1a:df:30:a0:f7:f1:3a:82:98:ca:73: 5e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E4:38:08:D0:21:02:B0:82:8C:C1:4D:A1:C1:12:3D:7E:A4:B9:C5 X509v3 Authority Key Identifier: keyid:2B:B2:F2:16:68:7C:42:68:64:3F:59:38:11:E7:E8:86:DC:D6:CB:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:a0:08:20:db:fd:9e:60:03:6a:12:68:15:f2:d2:1d:2b:89: f9:c1:3c:ae:7e:86:83:a6:5a:50:68:50:f9:d8:8d:08:96:ca: 00:14:44:66:46:92:e6:2e:6c:82:2c:0d:f4:0d:d4:a2:eb:b3: a4:cc:7b:49:a7:42:7a:b3:0e:ed:cf:52:4c:ae:0b:78:a8:53: d3:0e:26:de:8e:01:c0:4e:68:a5:cb:1c:48:57:92:ef:b7:af: 3e:67:c5:dd:eb:13:25:5e:ef:92:0a:88:fb:1d:7d:be:13:e9: 35:83:c6:6a:2f:c6:aa:70:1e:0f:9a:88:28:f0:7e:d6:1b:bc: 9e:18:db:a1:03:43:78:ee:70:84:9d:8c:9e:16:98:b2:5e:6a: 42:5d:5e:4c:d9:fa:bb:1b:f1:5f:90:64:04:ce:c6:b5:26:13: 3d:48:25:ea:13:45:18:9f:47:89:38:d2:a9:47:c6:34:f5:18: fa:6f:51:4e:f3:c2:a7:d9:1e:ae:87:05:f5:1d:e6:a1:68:c0: 31:9b:13:1b:bf:a8:92:8a:42:d8:ae:c7:b4:d0:df:8d:ad:b0: 3d:03:6b:b6:0d:13:be:cf:12:95:a8:e3:96:bb:bf:01:f1:bc: fc:ce:b8:28:0b:41:fe:06:71:ab:62:38:2c:16:49:8b:3e:f9: a0:aa:ab:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUErn9mO/J4NXKSlhxubQ+6qjzSp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCMkYyMTY2ODdDNDI2ODY0M0Y1OTM4MTFFN0U4ODZE Q0Q2Q0JGQTAeFw0yNTA1MTAxMzA3MDZaFw0yNTA1MTMyMTE5MDZaMDMxMTAvBgNV BAMTKDEwRTQzODA4RDAyMTAyQjA4MjhDQzE0REExQzExMjNEN0VBNEI5QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAi4LnORhmKtXjOXma98YVWdJB hx/KB5Fpfar2GYXqce2RWzo138eScQ7Dxd7GyCxi/0CdrThRPzlxgcxH+XKzt72e wNNn/mxXe3fE/+sqdtaweMFSWoCzWRAuLN7B5sOjFgmUn2XRjuBcs+7V4P6h4fLx dJnRTePby4jj4UVVcOnpeOhNynszVdbrHZTzoToBYZyHl6DDaL80EWZoWV+GdhxM 9UbZkyxYRDCa1irm7lquQDXV9eYdZD5AJmy+oIGSCsMX6RHcGlUgx98U9vUVitWG 2K3czAUrCey8YlxNsvHBK9vLb5nVtxvGAG/a3IAgAR4a3zCg9/E6gpjKc153AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEOQ4CNAhArCCjMFNocESPX6kucUwHwYDVR0j BBgwFoAUK7LyFmh8QmhkP1k4EefohtzWy/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmFmZGY1MC1kZjUxLTQ5NWEtYjFiMC1hMTNhMDEzOWFiMTUvMC8yQkIyRjIxNjY4 N0M0MjY4NjQzRjU5MzgxMUU3RTg4NkRDRDZDQkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJCMkYyMTY2ODdDNDI2ODY0M0Y1OTM4MTFFN0U4ODZEQ0Q2 Q0JGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJhZmRmNTAtZGY1MS00OTVhLWIx YjAtYTEzYTAxMzlhYjE1LzAvMkJCMkYyMTY2ODdDNDI2ODY0M0Y1OTM4MTFFN0U4 ODZEQ0Q2Q0JGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFqgCCDb/Z5gA2oSaBXy0h0rifnBPK5+hoOm WlBoUPnYjQiWygAURGZGkuYubIIsDfQN1KLrs6TMe0mnQnqzDu3PUkyuC3ioU9MO Jt6OAcBOaKXLHEhXku+3rz5nxd3rEyVe75IKiPsdfb4T6TWDxmovxqpwHg+aiCjw ftYbvJ4Y26EDQ3jucISdjJ4WmLJeakJdXkzZ+rsb8V+QZATOxrUmEz1IJeoTRRif R4k40qlHxjT1GPpvUU7zwqfZHq6HBfUd5qFowDGbExu/qJKKQtiux7TQ342tsD0D a7YNE77PEpWo45a7vwHxvPzOuCgLQf4GcatiOCwWSYs++aCqqyE= -----END CERTIFICATE-----Generated at Sat May 10 23:15:50 2025 by rpki-client