$ rpki-client -vvf repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft File: 2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft (raw, json) Hash identifier: YPj21jp1ZcpBhRtKOdVV0JhHask+Rx3/cpYaG7AAEx0= Subject key identifier: D9:D7:83:46:4A:63:7B:EB:53:EB:D6:53:3D:32:9E:E8:83:F8:CD:1A Authority key identifier: 2B:15:30:AD:20:AC:1F:2F:7F:2E:A2:EB:AA:E7:07:D0:E1:28:A1:DC Certificate issuer: /CN=2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC Certificate serial: 6DD22C0C17FFBAC0259255112417019166BC8500 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft Manifest number: 02F0 Signing time: Mon 05 May 2025 03:12:15 +0000 Manifest this update: Mon 05 May 2025 03:07:15 +0000 Manifest next update: Thu 08 May 2025 04:36:15 +0000 Files and hashes: 1: 2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl (hash: cN0nNCiIDl5Li360cUTqifsb+u/loOkwoQHO47022nc=) 2: 3130332e3137322e31372e302f32342d3234203d3e20313432333831.roa (hash: DVIrghrEW7VwPIX0cx9PZe/9iJL/OmwC/t6EzXjRAD8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 04:36:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:d2:2c:0c:17:ff:ba:c0:25:92:55:11:24:17:01:91:66:bc:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC Validity Not Before: May 5 03:07:15 2025 GMT Not After : May 8 04:36:15 2025 GMT Subject: CN=D9D783464A637BEB53EBD6533D329EE883F8CD1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d0:3f:47:f8:aa:f8:1b:0b:e4:cb:2b:8e:d9: ff:ed:31:18:4d:28:1e:7b:cf:14:b8:f1:e4:dd:9d: 34:22:bd:a0:43:11:4e:6a:60:39:60:6d:2f:94:de: da:07:1a:c6:ba:98:91:9f:79:59:95:1e:c2:00:6c: 0f:3e:db:86:56:31:e9:80:04:0e:dd:68:71:52:05: 67:e2:97:0c:ec:85:c7:8a:7f:81:c6:c4:8e:58:d5: 8c:59:da:37:9a:16:39:e8:8c:7e:b3:9e:27:3f:4c: 68:94:4e:2f:6d:20:a1:a4:80:70:7c:0c:8b:8c:21: 07:b6:33:20:0e:a2:34:fb:fc:b0:7a:d2:ff:ad:90: dc:db:6e:2e:9f:c3:12:56:b7:28:4e:65:70:92:2c: 20:f7:ea:eb:1f:a6:5e:5c:aa:32:2a:16:e3:d8:1e: b9:4a:b1:64:f4:d2:82:ae:25:d6:e0:08:23:4d:ce: fe:a1:bb:48:2d:db:53:27:80:3f:27:01:e5:d4:3b: 8d:fa:41:bd:38:13:b2:11:c8:6c:48:2a:20:5c:ac: bd:18:54:5e:5f:05:d7:28:8d:08:37:8a:b0:60:7d: ef:25:86:4b:15:aa:a6:2c:e6:f7:5a:af:bf:7f:cc: a0:0b:fc:10:99:5f:42:2a:15:87:ac:dc:a0:53:99: ae:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D7:83:46:4A:63:7B:EB:53:EB:D6:53:3D:32:9E:E8:83:F8:CD:1A X509v3 Authority Key Identifier: keyid:2B:15:30:AD:20:AC:1F:2F:7F:2E:A2:EB:AA:E7:07:D0:E1:28:A1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:5d:7f:10:ff:28:8c:4f:df:22:71:03:75:5e:32:47:72:4b: 47:8d:6a:94:93:ee:e4:7a:42:c5:dd:ef:81:af:59:c2:dc:77: c3:58:9a:04:f3:61:0f:d0:7d:0d:71:18:c0:2b:06:e5:1d:1d: c1:f6:bb:85:34:ab:06:6b:96:b4:85:e1:c9:d0:c4:bc:b3:d8: 3f:7b:7f:00:3f:96:91:53:69:e9:56:c7:92:63:a0:dc:29:07: 82:d2:1a:b0:c9:6e:14:83:a8:ab:9d:fd:fb:d8:2b:2c:35:3b: b2:f8:94:25:f0:e2:89:14:52:b9:ed:7d:08:ce:87:95:59:0a: 33:2c:5f:ee:f7:c2:86:10:ec:98:a2:e0:c7:66:14:4c:da:02: 70:a4:de:52:b2:d1:87:28:f2:cf:ca:b9:ae:a6:c3:58:4f:2b: e6:7d:73:dc:3d:a5:8c:2d:75:df:da:aa:40:b0:69:7c:a0:38: 1f:86:e6:c6:6b:f2:1f:94:7d:a9:cf:d9:30:99:1a:28:3b:84: e9:54:86:0e:52:35:10:68:3c:af:cd:a5:6f:2b:95:87:90:52: 7a:55:df:e0:61:5b:d3:54:88:1c:fa:02:ae:c6:be:d2:fc:de: ac:d1:b6:9c:42:5e:2f:89:10:0a:6d:50:2e:bd:94:b6:c9:7c: f0:17:df:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbdIsDBf/usAlklURJBcBkWa8hQAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3RDBF MTI4QTFEQzAeFw0yNTA1MDUwMzA3MTVaFw0yNTA1MDgwNDM2MTVaMDMxMTAvBgNV BAMTKEQ5RDc4MzQ2NEE2MzdCRUI1M0VCRDY1MzNEMzI5RUU4ODNGOENEMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC90D9H+Kr4GwvkyyuO2f/tMRhN KB57zxS48eTdnTQivaBDEU5qYDlgbS+U3toHGsa6mJGfeVmVHsIAbA8+24ZWMemA BA7daHFSBWfilwzshceKf4HGxI5Y1YxZ2jeaFjnojH6znic/TGiUTi9tIKGkgHB8 DIuMIQe2MyAOojT7/LB60v+tkNzbbi6fwxJWtyhOZXCSLCD36usfpl5cqjIqFuPY HrlKsWT00oKuJdbgCCNNzv6hu0gt21MngD8nAeXUO436Qb04E7IRyGxIKiBcrL0Y VF5fBdcojQg3irBgfe8lhksVqqYs5vdar79/zKAL/BCZX0IqFYes3KBTma4VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2deDRkpje+tT69ZTPTKe6IP4zRowHwYDVR0j BBgwFoAUKxUwrSCsHy9/LqLrqucH0OEoodwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NjY4ODU0YS0zZjI0LTQwYjEtODBjZC1lNjM2YWE3ZThiMWMvMC8yQjE1MzBBRDIw QUMxRjJGN0YyRUEyRUJBQUU3MDdEMEUxMjhBMURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3RDBFMTI4 QTFEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjY2ODg1NGEtM2YyNC00MGIxLTgw Y2QtZTYzNmFhN2U4YjFjLzAvMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3 RDBFMTI4QTFEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABRdfxD/KIxP3yJxA3VeMkdyS0eNapST7uR6 QsXd74GvWcLcd8NYmgTzYQ/QfQ1xGMArBuUdHcH2u4U0qwZrlrSF4cnQxLyz2D97 fwA/lpFTaelWx5JjoNwpB4LSGrDJbhSDqKud/fvYKyw1O7L4lCXw4okUUrntfQjO h5VZCjMsX+73woYQ7Jii4MdmFEzaAnCk3lKy0Yco8s/Kua6mw1hPK+Z9c9w9pYwt dd/aqkCwaXygOB+G5sZr8h+UfanP2TCZGig7hOlUhg5SNRBoPK/NpW8rlYeQUnpV 3+BhW9NUiBz6Aq7GvtL83qzRtpxCXi+JEAptUC69lLbJfPAX3/g= -----END CERTIFICATE-----Generated at Tue May 6 11:49:20 2025 by rpki-client