$ rpki-client -vvf repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft File: 2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft (raw, json) Hash identifier: fWQFuJb/57Rtl50nNNylOkJqN6HSu59PLf+H8uOlBSk= Subject key identifier: CD:A7:C6:B5:B4:35:91:9F:07:EB:19:F0:E0:9F:66:3C:CA:5C:D9:86 Authority key identifier: 2D:51:7D:C0:24:CE:FC:FA:F8:0C:F7:FD:39:22:46:89:4E:94:F1:2F Certificate issuer: /CN=2D517DC024CEFCFAF80CF7FD392246894E94F12F Certificate serial: 7F3AFA9A460C9239DB3F61614E16D6E6535E9CF4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft Manifest number: B2 Signing time: Wed 16 Apr 2025 03:50:50 +0000 Manifest this update: Wed 16 Apr 2025 03:45:50 +0000 Manifest next update: Sat 19 Apr 2025 14:48:50 +0000 Files and hashes: 1: 3130332e3135362e3131302e302f32342d3234203d3e20313431303839.roa (hash: oX2rRL4yj7u4AFId0yrPwmCzP4drZZYO3pu9upGhNCY=) 2: 2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl (hash: 9KCmPtfu8QZmkyfT/zhQgP39ZuHZRYkaGjRJONhrQ88=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 14:48:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:3a:fa:9a:46:0c:92:39:db:3f:61:61:4e:16:d6:e6:53:5e:9c:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D517DC024CEFCFAF80CF7FD392246894E94F12F Validity Not Before: Apr 16 03:45:50 2025 GMT Not After : Apr 19 14:48:50 2025 GMT Subject: CN=CDA7C6B5B435919F07EB19F0E09F663CCA5CD986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e0:cc:9f:b1:6e:aa:c7:3a:bc:0f:6d:2e:f1: be:64:61:bb:04:1d:47:3b:21:23:6e:5b:39:d4:2b: 69:5a:15:7a:11:33:5f:ee:5e:54:5a:02:86:ad:fc: 59:8e:9f:af:67:7b:b5:c2:c2:3b:d9:97:23:9b:a2: a7:b0:1b:dd:b9:1c:19:22:fb:6c:69:2e:88:57:be: 34:e8:a5:31:23:61:3c:0e:72:b0:59:f0:7b:83:b8: fb:11:ac:3e:00:07:60:ea:a9:99:cf:88:1a:95:4e: 57:ec:5f:64:05:98:d8:3d:9c:0d:cb:41:00:55:d0: e2:eb:bd:23:05:a4:86:b7:59:02:42:2a:b2:8e:ba: 89:59:8b:44:ba:be:aa:e9:e5:71:d0:b0:f4:27:5c: bb:52:53:20:07:8d:b1:f8:fa:d9:ee:0b:6c:37:18: 2c:da:1d:b4:fb:24:2e:1d:cc:af:cf:a8:a9:d1:52: a8:d4:02:17:7d:6d:0c:fc:fb:b4:99:91:a6:d7:be: 61:b6:4a:df:5b:84:88:28:7f:9c:10:50:09:60:ad: f7:01:5a:5b:02:f2:0c:b2:73:97:11:36:2a:da:77: 0e:67:b8:28:db:f0:cb:9d:a0:28:74:b9:2c:3d:eb: d4:1d:48:71:5c:9a:ad:8b:fe:fc:21:5f:78:08:71: 87:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A7:C6:B5:B4:35:91:9F:07:EB:19:F0:E0:9F:66:3C:CA:5C:D9:86 X509v3 Authority Key Identifier: keyid:2D:51:7D:C0:24:CE:FC:FA:F8:0C:F7:FD:39:22:46:89:4E:94:F1:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:87:d6:7b:9a:65:53:89:4f:aa:36:88:e8:63:5e:81:23:3d: 46:30:91:17:78:32:43:2c:6f:61:cc:39:90:12:e6:dd:37:75: 76:e4:b5:a3:82:a5:7c:a2:2a:97:06:46:50:67:a0:0d:c0:30: c3:5e:6c:5a:9b:ca:b1:6d:97:d3:8e:17:df:1d:48:a8:9d:0a: 48:38:1d:36:d3:17:0a:df:21:68:8c:bf:63:c5:7c:7a:1b:13: 74:e4:22:5f:33:68:01:a1:d6:61:c5:c4:8f:bc:f8:27:84:83: f8:48:76:27:89:6a:b6:ef:00:06:2e:2b:2b:f4:41:0d:75:c4: 4e:1a:41:62:2a:26:46:cc:07:0b:0e:2e:1b:6d:86:0d:b7:f2: ad:7d:27:0a:02:17:70:37:cc:c1:87:02:a8:07:cd:20:b1:35: 3a:58:fc:7c:f5:58:59:0d:98:46:a7:96:2a:c5:53:38:31:91: bc:ba:ce:aa:fc:08:01:75:60:f5:1e:29:a1:d0:55:ea:5a:75: a0:ff:b8:f7:f0:06:c1:02:f8:61:78:d1:d9:68:13:d1:7c:ae: a5:50:89:23:84:06:ab:58:d6:8b:3a:45:ed:c7:5a:9d:73:e5: ca:54:44:24:e0:e0:31:43:86:86:70:59:6d:7a:17:cf:a0:2c: 2a:46:24:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfzr6mkYMkjnbP2FhThbW5lNenPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2ODk0 RTk0RjEyRjAeFw0yNTA0MTYwMzQ1NTBaFw0yNTA0MTkxNDQ4NTBaMDMxMTAvBgNV BAMTKENEQTdDNkI1QjQzNTkxOUYwN0VCMTlGMEUwOUY2NjNDQ0E1Q0Q5ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP4MyfsW6qxzq8D20u8b5kYbsE HUc7ISNuWznUK2laFXoRM1/uXlRaAoat/FmOn69ne7XCwjvZlyOboqewG925HBki +2xpLohXvjTopTEjYTwOcrBZ8HuDuPsRrD4AB2DqqZnPiBqVTlfsX2QFmNg9nA3L QQBV0OLrvSMFpIa3WQJCKrKOuolZi0S6vqrp5XHQsPQnXLtSUyAHjbH4+tnuC2w3 GCzaHbT7JC4dzK/PqKnRUqjUAhd9bQz8+7SZkabXvmG2St9bhIgof5wQUAlgrfcB WlsC8gyyc5cRNiradw5nuCjb8MudoCh0uSw969QdSHFcmq2L/vwhX3gIcYffAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzafGtbQ1kZ8H6xnw4J9mPMpc2YYwHwYDVR0j BBgwFoAULVF9wCTO/Pr4DPf9OSJGiU6U8S8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDMzYTFjNi0wZjcwLTRjOTgtOTZiMC1jYWI1ODEyNmFiOTQvMC8yRDUxN0RDMDI0 Q0VGQ0ZBRjgwQ0Y3RkQzOTIyNDY4OTRFOTRGMTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2ODk0RTk0 RjEyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQzM2ExYzYtMGY3MC00Yzk4LTk2 YjAtY2FiNTgxMjZhYjk0LzAvMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2 ODk0RTk0RjEyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGuH1nuaZVOJT6o2iOhjXoEjPUYwkRd4MkMs b2HMOZAS5t03dXbktaOCpXyiKpcGRlBnoA3AMMNebFqbyrFtl9OOF98dSKidCkg4 HTbTFwrfIWiMv2PFfHobE3TkIl8zaAGh1mHFxI+8+CeEg/hIdieJarbvAAYuKyv0 QQ11xE4aQWIqJkbMBwsOLhtthg238q19JwoCF3A3zMGHAqgHzSCxNTpY/Hz1WFkN mEanlirFUzgxkby6zqr8CAF1YPUeKaHQVepadaD/uPfwBsEC+GF40dloE9F8rqVQ iSOEBqtY1os6Re3HWp1z5cpURCTg4DFDhoZwWW16F8+gLCpGJGY= -----END CERTIFICATE-----Generated at Thu Apr 17 22:30:39 2025 by rpki-client