$ rpki-client -vvf repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft File: 2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft (raw, json) Hash identifier: oDhPaxbNZWJWRDO9Bzqbq1ZQiStIJ/b6H8HzTthIpSI= Subject key identifier: 16:C2:87:FE:1E:38:7C:0C:7C:FC:55:A8:9D:A8:8D:07:3E:B1:CA:CD Authority key identifier: 2A:62:B9:64:EC:86:44:7D:C2:2D:DE:70:DC:35:17:F0:CF:7C:9A:CD Certificate issuer: /CN=2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD Certificate serial: 06D627495C375D816CDA4F0668BA0D2D2608D635 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft Manifest number: 94 Signing time: Tue 06 May 2025 18:30:34 +0000 Manifest this update: Tue 06 May 2025 18:25:34 +0000 Manifest next update: Fri 09 May 2025 22:52:34 +0000 Files and hashes: 1: 2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.crl (hash: ZJC7PexqLMZvk/0ejcvGHy6lUwGFbbYFvu4cz01hzGk=) 2: 3135372e36362e3132332e302f32342d3234203d3e20313532373731.roa (hash: dk9lT4c8YPePQBplMSb9peNtJTmkudz4Yd6u9d5dqKU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.crl rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 22:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:d6:27:49:5c:37:5d:81:6c:da:4f:06:68:ba:0d:2d:26:08:d6:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD Validity Not Before: May 6 18:25:34 2025 GMT Not After : May 9 22:52:34 2025 GMT Subject: CN=16C287FE1E387C0C7CFC55A89DA88D073EB1CACD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:45:63:85:88:11:48:a7:d7:6e:ad:73:ac:a3: e4:a8:97:cb:2e:55:05:af:42:26:57:cb:83:17:a8: af:7d:64:24:21:19:a6:52:d0:d6:ed:96:2c:9c:a5: 68:22:25:51:b7:a4:c6:17:74:23:a3:0f:c7:ae:c6: ca:b4:02:1a:0a:5f:d0:a9:27:e3:02:37:f2:71:78: 75:91:82:9c:20:47:80:23:39:86:d8:87:07:49:72: c2:82:30:25:65:3d:d3:7d:bb:a5:f2:f7:2e:00:c1: be:fe:1d:b7:3b:37:53:d5:9c:fa:e5:bb:e3:20:37: 61:72:c2:b9:9f:c3:e3:bd:a8:11:f8:02:39:ad:ad: f0:ca:be:f7:30:f6:5b:e4:18:ff:29:dd:1f:fb:5f: b6:85:52:5e:5b:dc:87:c3:75:2e:f1:e4:06:a8:8d: 82:12:65:ec:b9:a7:69:9a:45:b5:e5:73:ce:41:df: 90:04:21:6f:be:84:3e:26:c0:39:6a:e6:b5:f5:7c: 50:ff:97:e1:89:17:a8:17:81:1f:e0:47:a9:6a:8b: af:33:c5:6a:c4:3d:f1:c2:8b:e4:bf:de:30:d3:dc: 0a:52:da:2d:d3:6e:81:d6:df:78:1a:7c:a3:dd:36: 6e:1b:71:e4:8c:ed:10:65:c4:99:2d:32:db:ec:08: a5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C2:87:FE:1E:38:7C:0C:7C:FC:55:A8:9D:A8:8D:07:3E:B1:CA:CD X509v3 Authority Key Identifier: keyid:2A:62:B9:64:EC:86:44:7D:C2:2D:DE:70:DC:35:17:F0:CF:7C:9A:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:8f:c9:95:0b:f7:f3:e7:6c:de:46:f9:8c:38:83:2a:bf:20: 28:ea:ab:6b:44:1b:ef:38:c0:72:d0:6e:42:22:59:1f:15:39: 8c:f3:bb:24:6d:b8:75:b3:10:c6:30:bf:89:ec:5a:77:1a:5d: 9f:71:5f:a7:4f:35:7e:78:67:f9:60:34:bd:86:0d:fe:86:c4: 1c:be:80:5a:1b:58:db:63:8d:a0:0d:bf:45:e2:8f:e0:be:22: ad:67:51:a6:15:98:91:b9:d3:e4:02:97:8c:47:c3:23:f7:35: b8:87:18:06:e0:d9:a0:a4:cd:62:16:05:73:5e:6f:70:70:c7: c2:3f:84:d4:c4:aa:19:f5:9c:ac:2e:69:9b:c9:35:bc:48:c6: 37:e5:ce:75:e1:06:00:1c:37:23:57:e8:70:07:e4:79:3f:ee: 21:81:4d:62:a4:36:2a:ff:d3:01:74:d9:3a:ca:a3:3a:84:af: 74:43:75:81:b5:bb:71:af:2f:f9:57:5c:37:49:e0:71:3a:58: d4:12:2c:61:76:d1:6f:ed:5b:e2:e5:67:67:d8:bc:b2:bc:ef: 5a:8c:4f:ab:21:84:12:1a:4c:83:cb:f0:74:ce:91:29:07:ff: b2:1c:bf:75:85:83:62:ad:80:ab:5e:37:5b:2b:35:2b:58:07: bf:13:4f:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBtYnSVw3XYFs2k8GaLoNLSYI1jUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE2MkI5NjRFQzg2NDQ3REMyMkRERTcwREMzNTE3RjBD RjdDOUFDRDAeFw0yNTA1MDYxODI1MzRaFw0yNTA1MDkyMjUyMzRaMDMxMTAvBgNV BAMTKDE2QzI4N0ZFMUUzODdDMEM3Q0ZDNTVBODlEQTg4RDA3M0VCMUNBQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkRWOFiBFIp9durXOso+Sol8su VQWvQiZXy4MXqK99ZCQhGaZS0NbtliycpWgiJVG3pMYXdCOjD8euxsq0AhoKX9Cp J+MCN/JxeHWRgpwgR4AjOYbYhwdJcsKCMCVlPdN9u6Xy9y4Awb7+Hbc7N1PVnPrl u+MgN2Fywrmfw+O9qBH4AjmtrfDKvvcw9lvkGP8p3R/7X7aFUl5b3IfDdS7x5Aao jYISZey5p2maRbXlc85B35AEIW++hD4mwDlq5rX1fFD/l+GJF6gXgR/gR6lqi68z xWrEPfHCi+S/3jDT3ApS2i3TboHW33gafKPdNm4bceSM7RBlxJktMtvsCKVbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFsKH/h44fAx8/FWonaiNBz6xys0wHwYDVR0j BBgwFoAUKmK5ZOyGRH3CLd5w3DUX8M98ms0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWIwODg0NS1kZjgyLTQ0YzItOTc2ZC02ZDc0YjgxMTY2ZjQvMC8yQTYyQjk2NEVD ODY0NDdEQzIyRERFNzBEQzM1MTdGMENGN0M5QUNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkE2MkI5NjRFQzg2NDQ3REMyMkRERTcwREMzNTE3RjBDRjdD OUFDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFiMDg4NDUtZGY4Mi00NGMyLTk3 NmQtNmQ3NGI4MTE2NmY0LzAvMkE2MkI5NjRFQzg2NDQ3REMyMkRERTcwREMzNTE3 RjBDRjdDOUFDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIaPyZUL9/PnbN5G+Yw4gyq/ICjqq2tEG+84 wHLQbkIiWR8VOYzzuyRtuHWzEMYwv4nsWncaXZ9xX6dPNX54Z/lgNL2GDf6GxBy+ gFobWNtjjaANv0Xij+C+Iq1nUaYVmJG50+QCl4xHwyP3NbiHGAbg2aCkzWIWBXNe b3Bwx8I/hNTEqhn1nKwuaZvJNbxIxjflznXhBgAcNyNX6HAH5Hk/7iGBTWKkNir/ 0wF02TrKozqEr3RDdYG1u3GvL/lXXDdJ4HE6WNQSLGF20W/tW+LlZ2fYvLK871qM T6shhBIaTIPL8HTOkSkH/7Icv3WFg2KtgKteN1srNStYB78TT6c= -----END CERTIFICATE-----Generated at Wed May 7 17:51:34 2025 by rpki-client