$ rpki-client -vvf repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft File: 2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft (raw, json) Hash identifier: +I0DtB0vy5PjkEEnNIfrXPO5VgXyu+Sue40F3XPkjH8= Subject key identifier: 86:73:C0:A0:C8:E3:3A:F8:12:C4:6B:2F:E2:AE:A5:DB:6B:AE:3E:03 Authority key identifier: 2D:51:7D:C0:24:CE:FC:FA:F8:0C:F7:FD:39:22:46:89:4E:94:F1:2F Certificate issuer: /CN=2D517DC024CEFCFAF80CF7FD392246894E94F12F Certificate serial: 717D9BFF4B1C8E7527EE701B64B805EEB6E0F842 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft Manifest number: C8 Signing time: Wed 04 Jun 2025 18:50:50 +0000 Manifest this update: Wed 04 Jun 2025 18:45:50 +0000 Manifest next update: Sat 07 Jun 2025 22:23:50 +0000 Files and hashes: 1: 2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl (hash: /Sl3Eo8vnyYM8YQe8fz2mW0W/Y+q//EFk8H+mJ22QRY=) 2: 3130332e3135362e3131302e302f32342d3234203d3e20313431303839.roa (hash: oX2rRL4yj7u4AFId0yrPwmCzP4drZZYO3pu9upGhNCY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 22:23:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:7d:9b:ff:4b:1c:8e:75:27:ee:70:1b:64:b8:05:ee:b6:e0:f8:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D517DC024CEFCFAF80CF7FD392246894E94F12F Validity Not Before: Jun 4 18:45:50 2025 GMT Not After : Jun 7 22:23:50 2025 GMT Subject: CN=8673C0A0C8E33AF812C46B2FE2AEA5DB6BAE3E03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:33:a3:d5:d6:03:cb:f8:13:7b:73:96:d7:8a: 16:1e:0a:db:b4:37:a9:69:e2:42:85:02:81:cc:ca: 2a:5b:4c:da:14:e5:e0:69:27:44:2c:93:53:ee:a9: 9b:0f:48:f5:ec:08:a5:c7:8e:2e:81:06:6b:c3:4b: 10:2a:53:08:f5:ef:dc:16:6c:9e:cc:24:06:20:87: 73:e4:04:7f:ec:f4:af:85:d1:90:e5:f3:dc:98:ca: 7c:3f:3c:80:f1:06:51:34:9e:47:d3:24:69:4e:5b: 8f:a8:6f:fa:48:8a:6b:b9:5e:24:14:53:85:bc:bd: 51:9c:ac:59:8c:75:7b:9b:4c:cf:f9:f3:5f:74:2e: a5:df:1d:83:f8:2f:3e:8e:af:83:b7:60:48:5d:0d: e5:d1:c9:e9:00:38:f3:34:27:ee:fb:c1:d2:03:52: d2:11:eb:e1:1f:f9:8d:63:18:a5:d3:6f:3b:9d:5f: fd:6c:92:65:fc:35:51:2a:7c:35:3b:ba:ae:d8:d5: e1:f6:d8:ce:fe:42:db:e6:70:a9:d8:8d:9f:b0:91: 1e:f2:55:98:f9:4b:4b:a3:0b:ba:f1:b4:76:bf:f4: 3a:50:f9:1f:49:12:51:46:0f:01:25:d7:fa:b1:67: c4:74:81:2f:a6:0b:9b:e8:99:ff:b3:bd:83:b0:b3: 8d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:73:C0:A0:C8:E3:3A:F8:12:C4:6B:2F:E2:AE:A5:DB:6B:AE:3E:03 X509v3 Authority Key Identifier: keyid:2D:51:7D:C0:24:CE:FC:FA:F8:0C:F7:FD:39:22:46:89:4E:94:F1:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:a9:ae:2c:e1:14:e8:db:be:dc:ff:ba:d9:6e:7a:98:70:6f: 1a:b0:07:61:d1:a2:de:4a:21:18:94:64:2b:5f:28:28:e9:6e: 9e:c3:55:e5:19:fb:1a:1a:53:99:c0:c2:f4:98:f8:ce:8b:0b: 8d:f5:fc:95:9c:38:24:b5:32:e3:49:d6:ea:5e:71:c6:13:2c: df:f9:45:74:71:31:5f:8c:63:65:fb:90:c2:d8:7e:8a:9a:76: c2:61:f0:54:e0:fb:aa:8b:d0:86:96:49:63:ca:19:fc:86:52: 90:12:35:f9:ee:2a:54:64:b0:5e:d8:78:1e:4f:ec:71:e2:2b: da:2d:8b:ab:07:78:2b:a4:28:39:6d:2f:63:7a:b0:2c:04:e8: 4d:6d:6c:ac:bf:55:1a:20:99:0c:9d:df:76:c9:7c:ac:ce:a4: 29:0c:50:1a:c6:59:ae:15:1f:86:0f:4c:c8:8d:4c:4b:74:35: 8f:6d:87:2e:6d:53:1d:96:44:aa:4c:d6:62:15:0e:a5:52:ea: 40:fc:d5:77:a7:2d:02:f7:1b:b1:8b:39:c6:39:da:3f:38:fa: 53:ce:83:8a:5f:5a:90:cd:0d:dd:e3:da:43:4e:08:27:f0:7d: 70:f1:c9:28:6d:eb:66:cc:41:99:ec:18:6f:7b:65:fc:d0:82: e3:ff:63:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcX2b/0scjnUn7nAbZLgF7rbg+EIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2ODk0 RTk0RjEyRjAeFw0yNTA2MDQxODQ1NTBaFw0yNTA2MDcyMjIzNTBaMDMxMTAvBgNV BAMTKDg2NzNDMEEwQzhFMzNBRjgxMkM0NkIyRkUyQUVBNURCNkJBRTNFMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJM6PV1gPL+BN7c5bXihYeCtu0 N6lp4kKFAoHMyipbTNoU5eBpJ0Qsk1PuqZsPSPXsCKXHji6BBmvDSxAqUwj179wW bJ7MJAYgh3PkBH/s9K+F0ZDl89yYynw/PIDxBlE0nkfTJGlOW4+ob/pIimu5XiQU U4W8vVGcrFmMdXubTM/58190LqXfHYP4Lz6Or4O3YEhdDeXRyekAOPM0J+77wdID UtIR6+Ef+Y1jGKXTbzudX/1skmX8NVEqfDU7uq7Y1eH22M7+QtvmcKnYjZ+wkR7y VZj5S0ujC7rxtHa/9DpQ+R9JElFGDwEl1/qxZ8R0gS+mC5vomf+zvYOws42JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhnPAoMjjOvgSxGsv4q6l22uuPgMwHwYDVR0j BBgwFoAULVF9wCTO/Pr4DPf9OSJGiU6U8S8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDMzYTFjNi0wZjcwLTRjOTgtOTZiMC1jYWI1ODEyNmFiOTQvMC8yRDUxN0RDMDI0 Q0VGQ0ZBRjgwQ0Y3RkQzOTIyNDY4OTRFOTRGMTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2ODk0RTk0 RjEyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQzM2ExYzYtMGY3MC00Yzk4LTk2 YjAtY2FiNTgxMjZhYjk0LzAvMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2 ODk0RTk0RjEyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI+prizhFOjbvtz/utluephwbxqwB2HRot5K IRiUZCtfKCjpbp7DVeUZ+xoaU5nAwvSY+M6LC431/JWcOCS1MuNJ1upeccYTLN/5 RXRxMV+MY2X7kMLYfoqadsJh8FTg+6qL0IaWSWPKGfyGUpASNfnuKlRksF7YeB5P 7HHiK9oti6sHeCukKDltL2N6sCwE6E1tbKy/VRogmQyd33bJfKzOpCkMUBrGWa4V H4YPTMiNTEt0NY9thy5tUx2WRKpM1mIVDqVS6kD81XenLQL3G7GLOcY52j84+lPO g4pfWpDNDd3j2kNOCCfwfXDxySht62bMQZnsGG97ZfzQguP/Y3w= -----END CERTIFICATE-----Generated at Thu Jun 5 18:26:47 2025 by rpki-client