$ rpki-client -vvf repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft File: 2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft (raw, json) Hash identifier: JLGdW6ygyC0CblMKeSOFjrK1AkYEoaFfODH5CdW5BM0= Subject key identifier: 97:10:3C:E0:83:CC:AA:B7:AC:C8:A5:61:FA:B3:F1:5A:14:DC:05:57 Authority key identifier: 2B:69:EA:50:8D:C6:2D:34:C2:B3:CA:4F:BA:57:BF:3A:FF:FD:49:94 Certificate issuer: /CN=2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994 Certificate serial: 77993FCE08C9F6A6D24D20E254E257A94DEBE7B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft Manifest number: 0432 Signing time: Sat 10 May 2025 16:01:07 +0000 Manifest this update: Sat 10 May 2025 15:56:07 +0000 Manifest next update: Wed 14 May 2025 03:56:07 +0000 Files and hashes: 1: 2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.crl (hash: Sh2OhmAl3KRvsCLlrI3CyEJFh6jT2ojQnyD729OUl6s=) 2: 323030313a6466353a653238303a3a2f34382d3438203d3e20313431363430.roa (hash: +ZHphLOhvruOuJkUwXhmKIA/kEZXmDLtlpGcK4ZlSQI=) 3: 3130332e3136322e31392e302f32342d3234203d3e20313431363430.roa (hash: dsIKfbnR+pN9Hwy4NZz2+3xuPhAknppnbWGiA908HyE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.crl rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 03:56:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:99:3f:ce:08:c9:f6:a6:d2:4d:20:e2:54:e2:57:a9:4d:eb:e7:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994 Validity Not Before: May 10 15:56:07 2025 GMT Not After : May 14 03:56:07 2025 GMT Subject: CN=97103CE083CCAAB7ACC8A561FAB3F15A14DC0557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cf:3b:fe:6e:0b:75:28:b0:d9:c1:6e:95:c0: 2b:af:16:1b:e6:2d:ea:ba:e2:4c:65:2f:0c:f8:03: b5:0f:ee:08:2b:20:42:db:00:96:e1:53:79:87:3d: bc:35:58:e8:31:36:94:c3:d9:81:d8:3f:e8:45:4d: d2:7b:30:a7:8a:f6:07:bb:45:b7:42:0b:5b:10:91: ed:4d:17:40:97:df:ce:58:f2:92:19:ed:82:0b:16: aa:ba:38:d0:5f:94:67:89:cf:d6:cb:e7:1e:bb:99: 6d:6e:00:c3:ef:43:bd:40:72:e3:13:96:b8:e0:f5: d0:31:0b:f9:1c:89:cb:82:00:1c:7f:6f:2d:e5:17: ff:f7:21:42:b2:43:1a:33:08:bc:a5:d0:6b:74:e6: ef:ad:c8:ec:e6:46:83:42:80:89:78:c6:94:ec:0e: b3:3e:c1:5f:98:b7:fc:c4:ff:a3:41:e4:5a:97:ee: 2c:3e:ae:09:50:96:b1:ee:e5:0f:aa:69:37:f5:12: 0e:fa:23:c6:6f:c7:35:94:d7:29:3f:f3:0a:50:dc: 04:44:49:a1:19:74:22:ba:fb:bf:6b:f7:8c:20:e2: b3:80:1c:a8:e6:88:d7:c4:01:27:e9:66:2f:1a:a6: fc:b0:25:f5:40:4e:f9:87:3c:78:be:25:ed:4f:87: 5b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:10:3C:E0:83:CC:AA:B7:AC:C8:A5:61:FA:B3:F1:5A:14:DC:05:57 X509v3 Authority Key Identifier: keyid:2B:69:EA:50:8D:C6:2D:34:C2:B3:CA:4F:BA:57:BF:3A:FF:FD:49:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:1e:fb:5a:c3:cb:43:7c:78:e0:49:24:27:5a:43:7a:31:95: 8c:a5:39:5f:ae:07:1f:05:d9:f6:31:1d:14:19:d2:65:92:05: df:aa:cc:80:83:8a:19:3e:d1:c0:f7:a4:0e:4a:8a:b7:08:2c: 5a:2c:72:7e:4a:5a:a3:6f:da:86:75:d1:ec:6c:a1:b2:00:22: e3:86:6c:0a:3c:00:83:f8:70:44:4d:2b:0e:f8:e5:f9:8e:d5: 19:89:02:08:d3:a9:62:d1:da:8d:d1:ff:df:4a:f6:16:26:ca: a3:37:ec:73:3e:63:96:ce:30:73:c0:5d:bc:53:3a:9c:2c:4f: 8d:84:b7:20:39:e1:bc:f8:83:34:0a:6d:15:be:92:6c:16:f2: cb:11:b7:1f:9d:1f:75:8c:b0:16:2c:0b:74:9b:86:bf:59:cd: b2:77:a5:6d:d9:87:c3:1b:18:ae:48:d6:d7:a0:af:6a:19:b5: 4a:60:10:b9:2e:74:06:7f:15:8b:3b:69:18:75:a9:06:13:d8: 84:b9:01:85:71:50:0a:5e:61:13:3e:61:4a:eb:8a:2f:9e:4f: 22:c8:7f:b2:4a:16:da:e0:9c:8a:cf:1a:fc:ec:b6:72:18:11: 1d:da:62:1c:d2:5c:1f:e2:c9:bf:b5:a0:e7:f7:43:04:e1:76: df:43:d7:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd5k/zgjJ9qbSTSDiVOJXqU3r57YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI2OUVBNTA4REM2MkQzNEMyQjNDQTRGQkE1N0JGM0FG RkZENDk5NDAeFw0yNTA1MTAxNTU2MDdaFw0yNTA1MTQwMzU2MDdaMDMxMTAvBgNV BAMTKDk3MTAzQ0UwODNDQ0FBQjdBQ0M4QTU2MUZBQjNGMTVBMTREQzA1NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGzzv+bgt1KLDZwW6VwCuvFhvm Leq64kxlLwz4A7UP7ggrIELbAJbhU3mHPbw1WOgxNpTD2YHYP+hFTdJ7MKeK9ge7 RbdCC1sQke1NF0CX385Y8pIZ7YILFqq6ONBflGeJz9bL5x67mW1uAMPvQ71AcuMT lrjg9dAxC/kcicuCABx/by3lF//3IUKyQxozCLyl0Gt05u+tyOzmRoNCgIl4xpTs DrM+wV+Yt/zE/6NB5FqX7iw+rglQlrHu5Q+qaTf1Eg76I8ZvxzWU1yk/8wpQ3ARE SaEZdCK6+79r94wg4rOAHKjmiNfEASfpZi8apvywJfVATvmHPHi+Je1Ph1vjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlxA84IPMqresyKVh+rPxWhTcBVcwHwYDVR0j BBgwFoAUK2nqUI3GLTTCs8pPule/Ov/9SZQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2M2MzdiZC01OTcxLTQyNjQtOTk3YS03NDlkODA0YTY4NTgvMC8yQjY5RUE1MDhE QzYyRDM0QzJCM0NBNEZCQTU3QkYzQUZGRkQ0OTk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkI2OUVBNTA4REM2MkQzNEMyQjNDQTRGQkE1N0JGM0FGRkZE NDk5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWNjNjM3YmQtNTk3MS00MjY0LTk5 N2EtNzQ5ZDgwNGE2ODU4LzAvMkI2OUVBNTA4REM2MkQzNEMyQjNDQTRGQkE1N0JG M0FGRkZENDk5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADYe+1rDy0N8eOBJJCdaQ3oxlYylOV+uBx8F 2fYxHRQZ0mWSBd+qzICDihk+0cD3pA5KircILFoscn5KWqNv2oZ10exsobIAIuOG bAo8AIP4cERNKw745fmO1RmJAgjTqWLR2o3R/99K9hYmyqM37HM+Y5bOMHPAXbxT OpwsT42EtyA54bz4gzQKbRW+kmwW8ssRtx+dH3WMsBYsC3Sbhr9ZzbJ3pW3Zh8Mb GK5I1tegr2oZtUpgELkudAZ/FYs7aRh1qQYT2IS5AYVxUApeYRM+YUrrii+eTyLI f7JKFtrgnIrPGvzstnIYER3aYhzSXB/iyb+1oOf3QwThdt9D120= -----END CERTIFICATE-----Generated at Mon May 12 06:27:52 2025 by rpki-client