$ rpki-client -vvf repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft File: 2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft (raw, json) Hash identifier: RHTf4wAGbx6gvjvTJhyVLX903GQc9XJJsL8F+wqOp2Q= Subject key identifier: A5:30:17:18:D8:45:7C:71:EF:A7:E2:E8:D6:F7:84:D2:13:1E:1B:6C Authority key identifier: 2C:9C:8D:6A:DB:43:A7:5F:1D:FA:48:05:3B:0E:13:BF:E4:BD:35:0A Certificate issuer: /CN=2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A Certificate serial: 515A8729B5529160D2D6AE671541BD009827D8EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft Manifest number: 46 Signing time: Fri 09 May 2025 12:41:55 +0000 Manifest this update: Fri 09 May 2025 12:36:55 +0000 Manifest next update: Mon 12 May 2025 19:27:55 +0000 Files and hashes: 1: 3136302e32322e39342e302f32332d3233203d3e20313533313130.roa (hash: NjyYz1ga8Qpztk8z2OnelqpIaeIr9KbAHbFDRDS0sFY=) 2: 3136302e32322e39352e302f32342d3234203d3e20313533313130.roa (hash: twzSlBh0NN1lf3cw6Hfv5Bifh4nztMxRMAZ/HjKNRio=) 3: 2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.crl (hash: QHDGqfymaSP7F8BlhSTaynhKbpk5NvzRyrZqL1vbfJ8=) 4: 3136302e32322e39342e302f32342d3234203d3e20313533313130.roa (hash: ss2EJAnpKFiDc20LCUbPWRGzhNcuFuLtxPENwLK+/ro=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.crl rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 11:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:5a:87:29:b5:52:91:60:d2:d6:ae:67:15:41:bd:00:98:27:d8:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A Validity Not Before: May 9 12:36:55 2025 GMT Not After : May 12 19:27:55 2025 GMT Subject: CN=A5301718D8457C71EFA7E2E8D6F784D2131E1B6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ad:30:2e:2d:9b:64:3d:b4:aa:f1:e8:40:4a: 96:2e:d6:ae:29:9b:9d:c7:52:e4:3f:be:e4:f8:f2: 30:b2:b9:62:37:e6:38:56:61:21:da:e9:c9:92:ca: a7:46:5d:ff:d1:70:fe:2b:ac:3c:8a:8c:e3:a1:5d: 62:40:2b:16:0f:4c:b3:4b:3f:49:fd:cc:86:b1:1e: f2:22:c7:cf:2b:98:24:27:b1:d1:e8:39:a6:dc:69: 33:da:6f:9d:9f:50:c5:fe:f2:e8:c9:90:bd:9a:61: a6:c8:0d:d4:26:2b:3f:10:f9:19:d2:a2:37:e6:c9: 27:37:63:cc:3a:8c:f5:d0:b1:a8:e8:4c:22:3c:c7: d0:c1:05:95:f8:03:17:e4:b6:94:6f:25:56:f5:0e: 91:de:48:81:9d:f1:3c:5b:d5:8f:c5:c1:fc:55:f7: d8:af:e7:92:c5:77:fa:c5:53:af:e3:6a:23:e7:39: 81:aa:67:ff:b5:1a:6e:d7:5f:0c:99:ac:e8:e7:91: 6e:e3:57:1b:4b:cf:89:e3:ea:66:fc:b6:e5:91:58: 3e:1b:47:0c:e7:7a:3e:98:de:7b:07:bf:1d:6a:50: 7d:74:4c:38:ab:34:5d:27:6b:c1:d4:10:5d:fe:cb: 22:77:1e:cb:83:93:09:d5:18:b1:ab:72:94:95:7c: e2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:30:17:18:D8:45:7C:71:EF:A7:E2:E8:D6:F7:84:D2:13:1E:1B:6C X509v3 Authority Key Identifier: keyid:2C:9C:8D:6A:DB:43:A7:5F:1D:FA:48:05:3B:0E:13:BF:E4:BD:35:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:9a:ba:f0:3a:64:9e:91:82:4c:54:23:31:68:21:dd:1a:85: 6b:c8:87:6e:0b:f3:07:26:76:af:0b:0a:cd:ed:1e:0d:83:89: 0e:d9:0c:fb:81:3d:90:ff:cc:cf:8c:3e:f1:16:67:7e:7f:ac: f0:3e:00:dd:ff:b5:e4:57:d7:f2:6c:f7:1b:f8:73:cf:98:f5: 9f:a5:72:ff:51:fa:37:26:a1:1e:7d:a8:65:2d:75:84:8c:83: 18:b3:3c:2f:10:e0:56:a1:d3:df:0c:fe:13:c7:59:12:ba:f9: 15:0c:a2:6d:49:fb:9c:8f:f8:10:5f:7e:61:18:8d:60:b9:d8: 9d:d1:00:88:b3:be:bc:86:63:6e:68:61:73:a4:58:d8:51:03: 9b:23:c9:c3:cf:ad:0e:dd:96:e9:37:d0:8b:22:e5:85:a8:4d: 0b:82:7b:b7:06:70:43:a8:6a:f8:ae:8c:0d:3e:76:e0:ca:3c: 45:4b:d5:f7:7c:f7:21:fa:4a:73:b9:39:f7:18:ef:1b:d7:65: 85:e2:64:f7:9e:2e:81:71:6f:bd:df:d6:99:07:e7:05:b3:c8: 18:1f:8b:34:f9:6e:43:fd:be:63:e7:72:90:03:28:9a:a9:64: a5:0a:03:fe:fd:38:30:81:34:1b:23:11:b6:ad:46:c8:ec:fe: a9:d4:6c:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUVqHKbVSkWDS1q5nFUG9AJgn2OowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM5QzhENkFEQjQzQTc1RjFERkE0ODA1M0IwRTEzQkZF NEJEMzUwQTAeFw0yNTA1MDkxMjM2NTVaFw0yNTA1MTIxOTI3NTVaMDMxMTAvBgNV BAMTKEE1MzAxNzE4RDg0NTdDNzFFRkE3RTJFOEQ2Rjc4NEQyMTMxRTFCNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdrTAuLZtkPbSq8ehASpYu1q4p m53HUuQ/vuT48jCyuWI35jhWYSHa6cmSyqdGXf/RcP4rrDyKjOOhXWJAKxYPTLNL P0n9zIaxHvIix88rmCQnsdHoOabcaTPab52fUMX+8ujJkL2aYabIDdQmKz8Q+RnS ojfmySc3Y8w6jPXQsajoTCI8x9DBBZX4AxfktpRvJVb1DpHeSIGd8Txb1Y/FwfxV 99iv55LFd/rFU6/jaiPnOYGqZ/+1Gm7XXwyZrOjnkW7jVxtLz4nj6mb8tuWRWD4b Rwznej6Y3nsHvx1qUH10TDirNF0na8HUEF3+yyJ3HsuDkwnVGLGrcpSVfOLhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpTAXGNhFfHHvp+Lo1veE0hMeG2wwHwYDVR0j BBgwFoAULJyNattDp18d+kgFOw4Tv+S9NQowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTA3NzM4Ni0zMDFiLTRmZjEtODcxYi02MjMyYjVmM2JlMDkvMC8yQzlDOEQ2QURC NDNBNzVGMURGQTQ4MDUzQjBFMTNCRkU0QkQzNTBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkM5QzhENkFEQjQzQTc1RjFERkE0ODA1M0IwRTEzQkZFNEJE MzUwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWEwNzczODYtMzAxYi00ZmYxLTg3 MWItNjIzMmI1ZjNiZTA5LzAvMkM5QzhENkFEQjQzQTc1RjFERkE0ODA1M0IwRTEz QkZFNEJEMzUwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKKauvA6ZJ6RgkxUIzFoId0ahWvIh24L8wcm dq8LCs3tHg2DiQ7ZDPuBPZD/zM+MPvEWZ35/rPA+AN3/teRX1/Js9xv4c8+Y9Z+l cv9R+jcmoR59qGUtdYSMgxizPC8Q4Fah098M/hPHWRK6+RUMom1J+5yP+BBffmEY jWC52J3RAIizvryGY25oYXOkWNhRA5sjycPPrQ7dluk30Isi5YWoTQuCe7cGcEOo aviujA0+duDKPEVL1fd89yH6SnO5OfcY7xvXZYXiZPeeLoFxb73f1pkH5wWzyBgf izT5bkP9vmPncpADKJqpZKUKA/79ODCBNBsjEbatRsjs/qnUbKk= -----END CERTIFICATE-----Generated at Sat May 10 06:54:40 2025 by rpki-client