$ rpki-client -vvf repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft File: 2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft (raw, json) Hash identifier: 36osmkkGDvBbetJeMpWB4+D1cwgO82GvIHoNW+YtVEw= Subject key identifier: E7:64:86:CA:3E:6E:0C:9C:49:5B:0A:A7:88:EA:1C:45:AA:59:08:7B Authority key identifier: 2F:24:A2:04:48:06:30:1E:B7:FA:6C:E5:C8:52:1F:E0:39:41:B7:BA Certificate issuer: /CN=2F24A2044806301EB7FA6CE5C8521FE03941B7BA Certificate serial: 6EE882AFD8550E740B24F0F25E7054D36B69B987 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft Manifest number: CF Signing time: Sat 03 May 2025 08:31:22 +0000 Manifest this update: Sat 03 May 2025 08:26:22 +0000 Manifest next update: Tue 06 May 2025 20:26:22 +0000 Files and hashes: 1: 2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl (hash: Pq2AzD85UxzwdenaxxbQ+ncT+snCb2Maef/4+2Uq61A=) 2: 3130332e3138342e35372e302f32342d3234203d3e20313532333532.roa (hash: X5jcqVTllqsiihg+7l6qTb+EAVnsgGJI9/U4b928wFE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 20:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:e8:82:af:d8:55:0e:74:0b:24:f0:f2:5e:70:54:d3:6b:69:b9:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F24A2044806301EB7FA6CE5C8521FE03941B7BA Validity Not Before: May 3 08:26:22 2025 GMT Not After : May 6 20:26:22 2025 GMT Subject: CN=E76486CA3E6E0C9C495B0AA788EA1C45AA59087B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9d:c5:09:25:c1:2c:55:59:41:64:00:1d:39: fd:b8:62:94:42:aa:b3:3c:50:ab:0b:1f:51:8f:32: 6d:9e:4b:ae:71:60:2d:4b:48:5a:3a:56:5a:a1:06: 2e:93:c2:19:96:92:d4:26:74:77:3e:ef:13:7d:26: 9f:13:b2:15:8e:a0:67:e3:35:12:d0:26:72:7f:49: 6d:5a:fc:a6:5f:c0:41:3c:77:9f:e9:87:e7:ae:ac: 4b:9b:03:7e:14:b7:51:56:37:df:92:a9:94:ad:45: 41:88:3f:22:a5:c2:1e:0b:96:ef:6b:35:99:6a:d6: 0b:a8:4a:bd:1c:5a:00:78:ff:18:a1:38:e2:5c:a8: 47:62:8f:4a:d5:2b:af:b2:89:aa:c7:ed:3b:7f:53: 6f:43:61:f1:2c:91:ea:cd:8e:ae:c2:83:9b:1a:df: 4b:95:c2:41:22:42:e9:56:aa:d0:a2:ab:93:dd:35: c2:03:4a:2c:84:29:76:c1:7d:b0:3e:34:6c:b6:9b: cf:9a:d8:08:8c:69:a0:30:52:9e:a8:2a:f8:cb:36: 60:90:31:0f:2c:e3:8b:e5:e7:79:4c:cb:b8:c6:c1: c5:3b:07:1d:a6:82:29:df:49:de:e7:10:74:e0:bc: 3e:49:40:39:40:b1:e1:f8:5f:94:99:84:57:b0:72: 4a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:64:86:CA:3E:6E:0C:9C:49:5B:0A:A7:88:EA:1C:45:AA:59:08:7B X509v3 Authority Key Identifier: keyid:2F:24:A2:04:48:06:30:1E:B7:FA:6C:E5:C8:52:1F:E0:39:41:B7:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:9d:03:9a:3d:0e:62:ba:cc:11:89:7c:d2:3e:52:10:c6:18: fa:c6:24:46:c9:59:8d:27:f6:ab:aa:c2:a4:76:3f:11:ac:44: f8:60:8b:5d:3c:c8:0c:91:4a:bf:53:fb:1a:87:c4:c5:b7:20: 73:f1:aa:7f:89:fc:31:b2:0c:da:55:c6:27:1f:48:30:bf:44: 3c:38:9e:af:42:fd:54:8f:cf:af:2a:38:7f:05:44:01:5d:74: db:8d:53:7e:ba:97:af:a8:e8:7c:82:dc:1a:41:5f:8c:51:0a: a2:48:07:d9:28:c5:46:63:3f:ac:e6:a9:f4:94:82:ca:cb:d2: f7:29:19:28:33:e5:24:e5:06:73:39:68:6c:a1:51:a8:4e:37: 2e:e0:7e:9e:1f:f8:a6:95:e0:c7:69:a4:5a:62:80:5e:8b:a7: 45:2a:b0:9c:a5:a5:25:79:b2:08:f7:84:e2:67:1f:66:f1:81: 68:cf:02:66:f3:e4:7d:f6:2b:f6:80:39:76:e2:ec:a4:93:68: 42:ce:f5:15:b2:72:9b:b7:bc:61:02:90:67:e2:6a:cb:2d:09: cc:c4:3f:0d:90:a8:04:fe:df:97:3d:91:ad:b0:42:a0:a1:c9: a4:f5:cc:37:ab:40:29:16:ed:d2:40:1d:a8:d0:fb:6b:84:2f: 63:a8:c6:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbuiCr9hVDnQLJPDyXnBU02tpuYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFGRTAz OTQxQjdCQTAeFw0yNTA1MDMwODI2MjJaFw0yNTA1MDYyMDI2MjJaMDMxMTAvBgNV BAMTKEU3NjQ4NkNBM0U2RTBDOUM0OTVCMEFBNzg4RUExQzQ1QUE1OTA4N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSncUJJcEsVVlBZAAdOf24YpRC qrM8UKsLH1GPMm2eS65xYC1LSFo6VlqhBi6TwhmWktQmdHc+7xN9Jp8TshWOoGfj NRLQJnJ/SW1a/KZfwEE8d5/ph+eurEubA34Ut1FWN9+SqZStRUGIPyKlwh4Llu9r NZlq1guoSr0cWgB4/xihOOJcqEdij0rVK6+yiarH7Tt/U29DYfEskerNjq7Cg5sa 30uVwkEiQulWqtCiq5PdNcIDSiyEKXbBfbA+NGy2m8+a2AiMaaAwUp6oKvjLNmCQ MQ8s44vl53lMy7jGwcU7Bx2mginfSd7nEHTgvD5JQDlAseH4X5SZhFewckpDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU52SGyj5uDJxJWwqniOocRapZCHswHwYDVR0j BBgwFoAULySiBEgGMB63+mzlyFIf4DlBt7owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWEyOTI5Yy02MDg4LTRjYjUtODNjNi1mNGEzNTZiMjBmOWQvMC8yRjI0QTIwNDQ4 MDYzMDFFQjdGQTZDRTVDODUyMUZFMDM5NDFCN0JBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFGRTAzOTQx QjdCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFhMjkyOWMtNjA4OC00Y2I1LTgz YzYtZjRhMzU2YjIwZjlkLzAvMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFG RTAzOTQxQjdCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHqdA5o9DmK6zBGJfNI+UhDGGPrGJEbJWY0n 9quqwqR2PxGsRPhgi108yAyRSr9T+xqHxMW3IHPxqn+J/DGyDNpVxicfSDC/RDw4 nq9C/VSPz68qOH8FRAFddNuNU366l6+o6HyC3BpBX4xRCqJIB9koxUZjP6zmqfSU gsrL0vcpGSgz5STlBnM5aGyhUahONy7gfp4f+KaV4MdppFpigF6Lp0UqsJylpSV5 sgj3hOJnH2bxgWjPAmbz5H32K/aAOXbi7KSTaELO9RWycpu3vGECkGfiasstCczE Pw2QqAT+35c9ka2wQqChyaT1zDerQCkW7dJAHajQ+2uEL2OoxpU= -----END CERTIFICATE-----Generated at Tue May 6 07:37:08 2025 by rpki-client