$ rpki-client -vvf repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft File: 2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft (raw, json) Hash identifier: AIcYhzVQUiY5rgfj7rCwdMxlszzMljUDMQRbBV6QgHM= Subject key identifier: 5B:07:71:9B:7B:D2:4D:83:E9:E2:63:0F:87:C2:C9:69:88:6E:00:54 Authority key identifier: 2C:B2:1E:F3:36:B6:AB:46:40:E4:61:96:01:E0:F6:48:8C:B8:FD:52 Certificate issuer: /CN=2CB21EF336B6AB4640E4619601E0F6488CB8FD52 Certificate serial: 2B897CBAFAE19C84BB19D1342BB3827522D99133 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft Manifest number: 02FE Signing time: Thu 08 May 2025 14:12:14 +0000 Manifest this update: Thu 08 May 2025 14:07:14 +0000 Manifest next update: Mon 12 May 2025 02:00:14 +0000 Files and hashes: 1: 3130332e3136302e31322e302f32332d3234203d3e20313331313131.roa (hash: xmfvEBw1P8sSqglSjh5fK7KpklmguFj/KUnvIPf2TYo=) 2: 2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl (hash: uGAkduasepj0ZrfC4VAFDXQ3xHY0IyWTlUaEh9z2iTU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 15:40:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:89:7c:ba:fa:e1:9c:84:bb:19:d1:34:2b:b3:82:75:22:d9:91:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CB21EF336B6AB4640E4619601E0F6488CB8FD52 Validity Not Before: May 8 14:07:14 2025 GMT Not After : May 12 02:00:14 2025 GMT Subject: CN=5B07719B7BD24D83E9E2630F87C2C969886E0054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:81:c0:4c:3e:53:ba:b8:15:97:39:a0:e6:fb: 01:39:6f:f4:a8:72:a4:38:5b:0a:7f:2b:a3:24:05: 28:dc:0f:d2:4e:4f:38:13:a1:de:94:2d:d7:ff:2b: bb:47:ce:db:fd:e1:19:8c:02:f4:41:19:87:37:79: 80:e3:4a:d0:8e:65:c3:9b:7c:7e:18:a2:69:00:78: c3:02:69:20:80:16:e8:37:06:24:5a:1a:91:5e:ff: 0d:00:4e:35:ff:75:40:4f:e1:41:ed:52:e6:e0:85: 70:e5:78:17:5d:48:f7:5a:a8:45:0e:fa:08:7a:80: c1:15:44:cb:ea:1b:0c:6b:4a:65:76:2c:29:a7:cc: f5:83:d4:27:0f:f9:29:7d:bc:1d:d2:04:4b:78:a1: 4f:15:3a:f4:c0:f2:92:f8:22:2f:67:6a:e6:c1:a1: f7:35:ca:25:98:4b:c7:e4:3b:76:81:a1:ce:27:77: 90:ea:0c:a5:3d:8e:83:3f:86:2c:be:72:37:63:65: 41:19:96:f6:52:5e:27:52:81:98:aa:82:ec:f4:52: 0c:f8:7d:f6:a7:0b:a5:28:be:3e:f2:69:02:cc:06: 65:dc:9c:8f:92:ea:6f:eb:ae:71:a3:4f:23:fd:20: 44:a9:e0:47:22:26:93:ff:dd:c9:10:ef:f4:e1:48: 5c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:07:71:9B:7B:D2:4D:83:E9:E2:63:0F:87:C2:C9:69:88:6E:00:54 X509v3 Authority Key Identifier: keyid:2C:B2:1E:F3:36:B6:AB:46:40:E4:61:96:01:E0:F6:48:8C:B8:FD:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:50:18:a4:ec:db:e1:42:47:b7:09:06:a3:15:48:08:44:2b: e3:3e:58:d0:ec:5d:ca:3d:a1:b8:5e:5e:04:70:d4:f9:83:3f: eb:96:c7:23:39:4c:8d:d7:3f:92:32:c9:b9:93:77:3f:50:50: af:ac:2f:51:4c:d4:c4:5e:87:81:f6:eb:1e:bf:f4:ed:35:d1: 4b:0b:3a:da:9c:21:8b:2f:04:5d:47:df:e3:73:ef:6a:9d:97: 7d:93:0a:4d:bb:55:9e:e2:1b:1e:ea:f0:dc:63:fa:72:61:90: ce:1b:6f:ca:26:31:f5:78:d3:f5:a9:5c:3c:40:29:11:2a:52: 57:04:82:bd:74:98:61:f5:3b:3b:f6:6e:b0:63:c8:dd:ba:8c: c4:d7:94:89:0c:db:ec:df:1c:45:f1:14:71:6e:fd:da:89:c8: ff:7d:01:57:cc:67:bf:b4:65:10:8f:51:30:e7:8e:59:3f:56: 9c:72:2b:59:9b:c6:29:7e:cd:71:e3:63:5e:2b:d5:8b:06:a2: ce:12:9d:5a:4f:86:06:11:d0:f5:88:a9:75:4a:59:33:f1:da: 21:a8:b3:7c:cc:54:e0:42:58:df:5a:d4:a9:04:19:65:62:2b: 85:0d:72:9e:66:bf:bd:6f:9a:b2:cb:09:a1:a6:20:f6:ec:6e: 5a:be:c9:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK4l8uvrhnIS7GdE0K7OCdSLZkTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2NDg4 Q0I4RkQ1MjAeFw0yNTA1MDgxNDA3MTRaFw0yNTA1MTIwMjAwMTRaMDMxMTAvBgNV BAMTKDVCMDc3MTlCN0JEMjREODNFOUUyNjMwRjg3QzJDOTY5ODg2RTAwNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/gcBMPlO6uBWXOaDm+wE5b/So cqQ4Wwp/K6MkBSjcD9JOTzgTod6ULdf/K7tHztv94RmMAvRBGYc3eYDjStCOZcOb fH4YomkAeMMCaSCAFug3BiRaGpFe/w0ATjX/dUBP4UHtUubghXDleBddSPdaqEUO +gh6gMEVRMvqGwxrSmV2LCmnzPWD1CcP+Sl9vB3SBEt4oU8VOvTA8pL4Ii9naubB ofc1yiWYS8fkO3aBoc4nd5DqDKU9joM/hiy+cjdjZUEZlvZSXidSgZiqguz0Ugz4 ffanC6Uovj7yaQLMBmXcnI+S6m/rrnGjTyP9IESp4EciJpP/3ckQ7/ThSFzfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWwdxm3vSTYPp4mMPh8LJaYhuAFQwHwYDVR0j BBgwFoAULLIe8za2q0ZA5GGWAeD2SIy4/VIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGM2Zjc3MC02ODZhLTQ1ZWYtOGRmYi0wYzNhODdkM2Q4ZGEvMC8yQ0IyMUVGMzM2 QjZBQjQ2NDBFNDYxOTYwMUUwRjY0ODhDQjhGRDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2NDg4Q0I4 RkQ1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRjNmY3NzAtNjg2YS00NWVmLThk ZmItMGMzYTg3ZDNkOGRhLzAvMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2 NDg4Q0I4RkQ1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEtQGKTs2+FCR7cJBqMVSAhEK+M+WNDsXco9 obheXgRw1PmDP+uWxyM5TI3XP5IyybmTdz9QUK+sL1FM1MReh4H26x6/9O010UsL OtqcIYsvBF1H3+Nz72qdl32TCk27VZ7iGx7q8Nxj+nJhkM4bb8omMfV40/WpXDxA KREqUlcEgr10mGH1Ozv2brBjyN26jMTXlIkM2+zfHEXxFHFu/dqJyP99AVfMZ7+0 ZRCPUTDnjlk/VpxyK1mbxil+zXHjY14r1YsGos4SnVpPhgYR0PWIqXVKWTPx2iGo s3zMVOBCWN9a1KkEGWViK4UNcp5mv71vmrLLCaGmIPbsblq+yYA= -----END CERTIFICATE-----Generated at Thu May 8 19:21:27 2025 by rpki-client