$ rpki-client -vvf repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft File: 2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft (raw, json) Hash identifier: NJyM5wVh3vqBDumFXR998ZrGBkByR2pNwppuK+L5s7M= Subject key identifier: 06:66:81:AE:5A:39:D2:B2:A2:E9:EE:FB:1B:B1:78:E3:FA:01:C7:63 Authority key identifier: 2D:6F:96:FA:63:0E:A7:AE:0A:2B:12:2B:6F:04:CC:4F:5F:32:CE:B5 Certificate issuer: /CN=2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5 Certificate serial: 06D79079C448D003F8A32C4C6AA74556C4A11F15 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft Manifest number: 01D3 Signing time: Wed 07 May 2025 03:00:53 +0000 Manifest this update: Wed 07 May 2025 02:55:53 +0000 Manifest next update: Sat 10 May 2025 12:11:53 +0000 Files and hashes: 1: 3130332e3139312e36312e302f32342d3234203d3e20313430343233.roa (hash: GKmBfpKDeFOAn/hth0t5+jc0CLfcCDiIkzuoYyGRF6A=) 2: 3130332e3139312e36302e302f32332d3234203d3e20313430343233.roa (hash: B7I4pT8xixNUOiX63bEN83in57afrlzmDDKwQ4/5sls=) 3: 3130332e3139312e36302e302f32342d3234203d3e20313430343233.roa (hash: sSH+72BWEr4MQc7BgNlbk4H5MkWrjKvE4wSUUqHwmBM=) 4: 2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl (hash: 2O+ZtFFSo5ADB0Izl3+0Z6pGIR3Z4jPHb/PRAehu4Us=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 12:11:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:d7:90:79:c4:48:d0:03:f8:a3:2c:4c:6a:a7:45:56:c4:a1:1f:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5 Validity Not Before: May 7 02:55:53 2025 GMT Not After : May 10 12:11:53 2025 GMT Subject: CN=066681AE5A39D2B2A2E9EEFB1BB178E3FA01C763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ab:36:38:c7:e5:80:86:f8:5b:47:da:04:f8: 67:9b:e2:05:46:5e:01:c2:08:05:98:bb:eb:e4:d0: f0:49:04:6f:ac:d3:4a:f2:a5:40:fd:cd:ac:5b:4d: 95:b2:96:6a:ad:fe:ec:f8:e8:90:4c:57:bb:e3:88: 39:c7:16:68:52:8f:fb:b9:5b:6e:df:6a:bd:84:31: 31:7c:0a:80:9f:05:11:7b:fa:c6:8f:d6:29:fb:33: 7d:e5:72:f4:ec:f7:b1:3e:23:c0:94:d8:01:99:0b: d4:2f:b1:a8:3e:27:19:68:5e:37:e8:6f:15:63:ca: 06:56:45:4c:24:a5:27:0d:37:29:e6:b5:0b:30:3d: 8f:f6:9c:a2:d1:e1:ed:73:13:5f:13:c1:13:61:39: d8:ea:a0:30:d8:2e:32:18:43:1e:82:e0:8a:a3:e6: d0:c7:57:ac:64:98:ab:06:b8:de:cf:43:d3:75:96: 27:22:98:6a:aa:b3:8f:25:13:89:f9:76:37:78:6d: 1f:00:67:4a:6b:98:1d:66:30:a2:25:71:a6:71:f5: b0:1a:25:76:f1:bc:e2:c4:25:a4:fa:d3:4a:0a:75: 7a:de:15:30:db:f4:76:24:53:29:8e:be:6e:43:0b: a7:f0:85:f2:d8:b9:04:60:8c:88:5e:62:99:0c:02: e1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:66:81:AE:5A:39:D2:B2:A2:E9:EE:FB:1B:B1:78:E3:FA:01:C7:63 X509v3 Authority Key Identifier: keyid:2D:6F:96:FA:63:0E:A7:AE:0A:2B:12:2B:6F:04:CC:4F:5F:32:CE:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:d3:46:db:54:ec:35:f8:12:2d:40:42:36:45:d6:ab:d2:02: 49:5a:cd:bd:a8:1f:20:1b:30:6e:df:4f:7c:0f:f0:9a:f8:a3: 8a:14:80:0b:48:96:f1:b9:94:ea:f3:9f:71:c4:9f:28:6e:c3: cd:ee:03:58:ff:31:04:74:81:fe:7a:54:07:87:04:0a:64:67: 1a:a5:ab:d4:6e:98:99:52:10:a8:89:30:ef:ca:10:7f:fc:86: dd:a8:8e:c7:ae:a5:59:b6:16:eb:4c:1d:cb:4d:f6:bd:ae:2c: f8:e0:44:c7:32:bb:be:6d:3a:98:69:05:2b:f9:e9:54:08:50: e3:0a:9b:04:c9:b1:ab:8b:ce:ba:a4:69:64:69:5b:1b:aa:e7: 93:e5:e1:3f:94:fb:83:a8:b5:fd:e3:22:f1:00:5b:9e:7f:14: 40:1f:93:e9:3d:dd:57:eb:f5:cf:d6:10:67:ab:54:a0:79:8e: ef:e3:ba:f8:dd:31:c6:26:d8:56:b9:f9:07:d2:57:88:13:7f: 0c:09:ed:78:cc:ae:b7:3a:b9:d5:08:68:2c:ee:6e:b2:bf:f1: f3:d7:2a:cf:48:e8:b0:17:cb:3e:04:13:39:cc:94:53:b0:a1: 59:21:d6:4a:49:1b:d9:93:cc:ce:4a:0e:d9:79:de:b1:6a:1e: 65:2a:66:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBteQecRI0AP4oyxMaqdFVsShHxUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNENDNEY1 RjMyQ0VCNTAeFw0yNTA1MDcwMjU1NTNaFw0yNTA1MTAxMjExNTNaMDMxMTAvBgNV BAMTKDA2NjY4MUFFNUEzOUQyQjJBMkU5RUVGQjFCQjE3OEUzRkEwMUM3NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKqzY4x+WAhvhbR9oE+Geb4gVG XgHCCAWYu+vk0PBJBG+s00rypUD9zaxbTZWylmqt/uz46JBMV7vjiDnHFmhSj/u5 W27far2EMTF8CoCfBRF7+saP1in7M33lcvTs97E+I8CU2AGZC9Qvsag+JxloXjfo bxVjygZWRUwkpScNNynmtQswPY/2nKLR4e1zE18TwRNhOdjqoDDYLjIYQx6C4Iqj 5tDHV6xkmKsGuN7PQ9N1licimGqqs48lE4n5djd4bR8AZ0prmB1mMKIlcaZx9bAa JXbxvOLEJaT600oKdXreFTDb9HYkUymOvm5DC6fwhfLYuQRgjIheYpkMAuEBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBmaBrlo50rKi6e77G7F44/oBx2MwHwYDVR0j BBgwFoAULW+W+mMOp64KKxIrbwTMT18yzrUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTM0ZDJkOC0zNGFmLTQ3NTctOGFkOS05MmRhMzVkOTIxNjgvMC8yRDZGOTZGQTYz MEVBN0FFMEEyQjEyMkI2RjA0Q0M0RjVGMzJDRUI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNENDNEY1RjMy Q0VCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUzNGQyZDgtMzRhZi00NzU3LThh ZDktOTJkYTM1ZDkyMTY4LzAvMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNEND NEY1RjMyQ0VCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI7TRttU7DX4Ei1AQjZF1qvSAklazb2oHyAb MG7fT3wP8Jr4o4oUgAtIlvG5lOrzn3HEnyhuw83uA1j/MQR0gf56VAeHBApkZxql q9RumJlSEKiJMO/KEH/8ht2ojseupVm2FutMHctN9r2uLPjgRMcyu75tOphpBSv5 6VQIUOMKmwTJsauLzrqkaWRpWxuq55Pl4T+U+4Ootf3jIvEAW55/FEAfk+k93Vfr 9c/WEGerVKB5ju/juvjdMcYm2Fa5+QfSV4gTfwwJ7XjMrrc6udUIaCzubrK/8fPX Ks9I6LAXyz4EEznMlFOwoVkh1kpJG9mTzM5KDtl53rFqHmUqZqo= -----END CERTIFICATE-----Generated at Thu May 8 04:15:34 2025 by rpki-client