$ rpki-client -vvf repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft File: 2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft (raw, json) Hash identifier: r//nzuWFNaYRO39VUN79FfNVwEXc3YZzY9M/bWQq56w= Subject key identifier: FA:C9:95:CA:54:2A:2E:63:94:CE:B9:BE:D8:FD:52:D4:0F:5A:82:DE Authority key identifier: 2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6 Certificate issuer: /CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6 Certificate serial: 2CE43B213EA2369405C9190DC3F1672075E5C54C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft Manifest number: 0333 Signing time: Wed 14 May 2025 04:31:51 +0000 Manifest this update: Wed 14 May 2025 04:26:51 +0000 Manifest next update: Sat 17 May 2025 16:12:51 +0000 Files and hashes: 1: 3130332e3233312e38322e302f32342d3234203d3e20313331373335.roa (hash: +ZL/jR4jkHL38m4yhCnPzcMy2A6pqHCMxHZrb0m8ttA=) 2: 3130332e3233312e38302e302f32342d3234203d3e20313331373335.roa (hash: etlEVL/G6ecv5pikZQs/QfSTGNp1Hz5OKi7d2dSKjks=) 3: 2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl (hash: gk64Pb62c/igNyWxbRkZAGWENielDaVWPmbx5QiFc4g=) 4: 3130332e3233312e38312e302f32342d3234203d3e20313331373335.roa (hash: cHq0w9NeVR2kphOoYMXZeSGQxfdQLrs5CAZ+diGk+MY=) 5: 3130332e3233312e38332e302f32342d3234203d3e20313331373335.roa (hash: aea2W9WYQPl/1TtNtg5p/r8zRHe+55gj7tNmZIC5BG8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:12:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:e4:3b:21:3e:a2:36:94:05:c9:19:0d:c3:f1:67:20:75:e5:c5:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6 Validity Not Before: May 14 04:26:51 2025 GMT Not After : May 17 16:12:51 2025 GMT Subject: CN=FAC995CA542A2E6394CEB9BED8FD52D40F5A82DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:06:4b:0a:1b:14:ac:c8:06:a2:c0:57:ea:d1: b1:ff:95:69:36:ae:74:e4:30:25:e3:05:17:ef:d2: dc:5c:d3:8d:7d:3e:f2:e8:39:df:cc:5c:a9:c1:45: b5:08:51:20:9d:dc:21:76:6b:81:84:61:c8:47:80: e4:74:51:84:ec:6f:a6:23:3d:a2:27:fd:a4:fb:cc: 57:2b:af:d8:92:36:68:05:46:3c:89:39:6b:7e:11: fd:91:d7:cf:18:8e:e8:1e:f1:7a:11:f3:6f:60:a0: 5a:9c:d8:52:18:03:04:20:03:e8:0e:d5:5c:96:40: 98:67:d8:ae:b0:6d:c7:18:42:8f:00:e8:01:c9:93: c8:77:cf:7f:de:34:b7:f3:b2:04:a8:1f:80:94:f2: 98:0d:16:b3:22:e0:46:9b:d0:31:c6:2a:1a:9e:4f: 47:26:50:61:47:a8:4c:8f:44:89:6a:e0:0f:ce:0b: 0f:83:9b:e2:50:7a:dc:ac:f2:a9:62:f9:0b:56:6d: db:a5:89:57:9d:f5:83:e1:ec:6e:49:32:a8:f6:68: 85:d8:6b:0c:ea:98:d6:c3:89:09:24:f9:7d:55:bd: 52:32:47:78:44:f0:dd:22:ee:bf:d4:a2:07:e6:88: f2:55:f0:55:08:50:0b:12:5a:51:96:1a:15:cb:2e: 4f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C9:95:CA:54:2A:2E:63:94:CE:B9:BE:D8:FD:52:D4:0F:5A:82:DE X509v3 Authority Key Identifier: keyid:2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:a0:08:da:42:f5:b9:18:84:12:22:17:3b:42:1b:72:05:8a: ac:51:8c:ee:f1:f2:ff:46:e5:d2:5e:98:00:e9:c1:34:3a:d0: b3:97:00:db:c0:92:03:62:4a:60:28:12:b6:93:d6:a7:cf:ee: 6c:ad:a9:32:8a:c0:9e:55:db:5c:df:19:6c:59:56:ef:77:4b: b2:f2:f1:30:f2:d3:cb:75:d0:e9:da:59:a7:99:fa:89:1d:9a: b3:b0:86:c2:70:43:d7:94:6a:3a:8d:7e:97:7f:f4:77:e7:b4: 8a:7d:d6:91:eb:d0:12:0b:7e:b3:36:36:f7:a5:be:81:ff:a8: 36:0d:c7:df:5d:7b:95:0d:46:f3:59:04:eb:0a:28:d4:81:9c: b0:81:f9:a3:3c:d7:35:a7:c4:26:e6:9b:5b:ae:57:8b:f1:81: ac:cc:0a:be:9b:4c:07:38:c9:49:f1:46:5a:23:3c:b4:22:d2: 4a:42:3f:8e:78:59:45:59:34:5c:36:35:ae:32:f4:71:1c:7a: 64:54:09:4b:b1:f7:b3:52:56:a1:8a:22:67:56:8a:a9:1a:0b: 8e:fa:19:3b:ed:e7:0b:f2:ec:24:a4:62:e6:78:2c:e7:cc:5b: 21:3e:25:52:7f:06:5a:19:f9:8b:45:45:f0:6e:99:07:39:db: 60:54:cf:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULOQ7IT6iNpQFyRkNw/FnIHXlxUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3REU1 RDdBNjNBNjAeFw0yNTA1MTQwNDI2NTFaFw0yNTA1MTcxNjEyNTFaMDMxMTAvBgNV BAMTKEZBQzk5NUNBNTQyQTJFNjM5NENFQjlCRUQ4RkQ1MkQ0MEY1QTgyREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiBksKGxSsyAaiwFfq0bH/lWk2 rnTkMCXjBRfv0txc0419PvLoOd/MXKnBRbUIUSCd3CF2a4GEYchHgOR0UYTsb6Yj PaIn/aT7zFcrr9iSNmgFRjyJOWt+Ef2R188Yjuge8XoR829goFqc2FIYAwQgA+gO 1VyWQJhn2K6wbccYQo8A6AHJk8h3z3/eNLfzsgSoH4CU8pgNFrMi4Eab0DHGKhqe T0cmUGFHqEyPRIlq4A/OCw+Dm+JQetys8qli+QtWbduliVed9YPh7G5JMqj2aIXY awzqmNbDiQkk+X1VvVIyR3hE8N0i7r/UogfmiPJV8FUIUAsSWlGWGhXLLk/FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+smVylQqLmOUzrm+2P1S1A9agt4wHwYDVR0j BBgwFoAUK7E4J0I1dRQdoPHFezPn3l16Y6YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTQ5M2JlMS1mMDY0LTQ5ZTYtOTQ5YS1jYjNlY2JmYzhmNDYvMC8yQkIxMzgyNzQy MzU3NTE0MURBMEYxQzU3QjMzRTdERTVEN0E2M0E2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3REU1RDdB NjNBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGE0OTNiZTEtZjA2NC00OWU2LTk0 OWEtY2IzZWNiZmM4ZjQ2LzAvMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3 REU1RDdBNjNBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAygCNpC9bkYhBIiFztCG3IFiqxRjO7x8v9G 5dJemADpwTQ60LOXANvAkgNiSmAoEraT1qfP7mytqTKKwJ5V21zfGWxZVu93S7Ly 8TDy08t10OnaWaeZ+okdmrOwhsJwQ9eUajqNfpd/9HfntIp91pHr0BILfrM2Nvel voH/qDYNx99de5UNRvNZBOsKKNSBnLCB+aM81zWnxCbmm1uuV4vxgazMCr6bTAc4 yUnxRlojPLQi0kpCP454WUVZNFw2Na4y9HEcemRUCUux97NSVqGKImdWiqkaC476 GTvt5wvy7CSkYuZ4LOfMWyE+JVJ/BloZ+YtFRfBumQc522BUz1o= -----END CERTIFICATE-----Generated at Wed May 14 22:26:49 2025 by rpki-client