$ rpki-client -vvf repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft File: 2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft (raw, json) Hash identifier: FRgSXwB3sVru4g8Zh9wuM1cVVqdnkBQCt1Ht7B8k1w4= Subject key identifier: 98:D7:C2:8B:0E:DA:E5:BC:F9:29:BD:FE:AE:3C:E2:8C:F9:71:EA:33 Authority key identifier: 2A:06:B4:29:F7:0B:86:9F:9E:70:FB:36:95:16:74:F7:D8:A4:AC:4E Certificate issuer: /CN=2A06B429F70B869F9E70FB36951674F7D8A4AC4E Certificate serial: 128DDBC5ABAB4C2E38EAC14AEBCAF5FECA39B929 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft Manifest number: E3 Signing time: Thu 03 Apr 2025 17:02:14 +0000 Manifest this update: Thu 03 Apr 2025 16:57:14 +0000 Manifest next update: Sun 06 Apr 2025 20:17:14 +0000 Files and hashes: 1: 3130332e3135312e32342e302f32342d3234203d3e20313530353332.roa (hash: 3tho/NQEZ7clEuLXEou7D6b7IKWMhHVDrU5KgBLQwQM=) 2: 2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl (hash: YA52taI8OhuXpSHnY4CYOCghaWVoR1eOhaXGfNTvvYs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 20:17:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:8d:db:c5:ab:ab:4c:2e:38:ea:c1:4a:eb:ca:f5:fe:ca:39:b9:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A06B429F70B869F9E70FB36951674F7D8A4AC4E Validity Not Before: Apr 3 16:57:14 2025 GMT Not After : Apr 6 20:17:14 2025 GMT Subject: CN=98D7C28B0EDAE5BCF929BDFEAE3CE28CF971EA33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9f:b5:f6:70:c8:8c:38:e4:5b:e6:fb:a2:ad: 47:fa:59:08:c0:cb:1a:9a:c2:ea:ab:0a:dc:bd:f0: 8c:4a:ef:56:03:fd:f2:4f:4a:f6:e8:88:2c:cf:e0: 30:9b:31:72:45:fe:c5:36:c1:9b:3a:bd:9f:bf:bb: f2:5d:08:34:2c:aa:b6:9c:7e:2f:bb:30:97:41:91: 91:fd:a1:8d:18:09:04:99:ca:81:c2:4f:1f:d8:5c: 90:74:97:07:0b:07:82:a9:54:28:ae:70:34:29:4c: 6a:d5:23:10:fb:00:04:7d:71:10:b5:aa:79:77:5f: 85:b4:d7:63:dd:e9:29:0a:47:90:a8:1d:5c:70:8f: 7f:12:de:fb:d3:c8:f0:40:9b:ef:c8:8b:5d:d1:32: 7e:b8:45:4e:f1:78:5b:b5:2c:98:a8:9e:e5:a6:df: 66:52:95:6e:63:af:da:49:92:38:18:62:9f:22:ef: 2e:74:e8:71:ed:7b:41:1e:27:8d:ab:bb:e3:f2:11: 52:8b:1c:1e:44:42:e9:e1:30:6c:06:42:b0:fc:8b: c9:25:00:e6:e0:8c:74:2c:3c:ee:bf:d0:38:0b:d8: 9d:77:65:72:ca:a3:ae:7f:7f:6a:9f:05:f5:be:ed: 7a:f9:96:ac:7a:e0:61:ec:d6:23:59:21:e1:92:30: 4b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D7:C2:8B:0E:DA:E5:BC:F9:29:BD:FE:AE:3C:E2:8C:F9:71:EA:33 X509v3 Authority Key Identifier: keyid:2A:06:B4:29:F7:0B:86:9F:9E:70:FB:36:95:16:74:F7:D8:A4:AC:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:d4:88:01:6f:f5:ab:56:09:77:99:cd:ee:12:c1:17:32:89: 58:7c:82:e9:60:8f:ef:7e:9d:a8:33:59:ab:1e:90:e1:f8:a0: 82:73:93:10:19:4b:11:32:8e:21:21:90:0b:b0:54:41:9f:c9: 4a:96:8b:01:46:8e:4f:71:2e:18:a5:d0:84:48:b3:c3:9a:6e: e4:4d:49:c2:bc:28:16:c6:f0:f5:ac:30:e4:a8:b7:b2:ef:73: dc:f9:bd:f4:a2:3e:c6:b6:07:69:21:d4:43:ff:99:cf:bf:b6: c9:71:10:4d:c9:17:ea:31:50:fe:30:8d:11:f8:93:b6:fd:36: 4a:7b:36:12:74:6b:dd:93:80:d5:e2:15:0e:4f:d5:7d:b3:7f: 90:88:c7:3f:3b:c8:18:a8:76:00:43:aa:41:01:1e:0c:c7:1f: 02:a9:10:b3:bf:d5:01:5e:5f:65:83:fe:2a:e8:89:97:f9:bb: ee:4a:d0:2a:98:86:04:fc:9a:00:8b:cc:d6:c0:62:c2:9b:35: 70:32:91:4f:fb:ea:fa:16:c0:5a:d6:21:e7:78:4b:f2:0c:53: 7c:f1:89:ba:c4:81:4d:40:fe:4c:f2:b9:43:93:4d:f1:c2:f4: 81:dc:94:96:a3:a8:e6:24:d1:5f:4e:67:68:a9:80:59:cc:31: 90:70:ba:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEo3bxaurTC446sFK68r1/so5uSkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEwNkI0MjlGNzBCODY5RjlFNzBGQjM2OTUxNjc0RjdE OEE0QUM0RTAeFw0yNTA0MDMxNjU3MTRaFw0yNTA0MDYyMDE3MTRaMDMxMTAvBgNV BAMTKDk4RDdDMjhCMEVEQUU1QkNGOTI5QkRGRUFFM0NFMjhDRjk3MUVBMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHn7X2cMiMOORb5vuirUf6WQjA yxqawuqrCty98IxK71YD/fJPSvboiCzP4DCbMXJF/sU2wZs6vZ+/u/JdCDQsqrac fi+7MJdBkZH9oY0YCQSZyoHCTx/YXJB0lwcLB4KpVCiucDQpTGrVIxD7AAR9cRC1 qnl3X4W012Pd6SkKR5CoHVxwj38S3vvTyPBAm+/Ii13RMn64RU7xeFu1LJionuWm 32ZSlW5jr9pJkjgYYp8i7y506HHte0EeJ42ru+PyEVKLHB5EQunhMGwGQrD8i8kl AObgjHQsPO6/0DgL2J13ZXLKo65/f2qfBfW+7Xr5lqx64GHs1iNZIeGSMEsFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmNfCiw7a5bz5Kb3+rjzijPlx6jMwHwYDVR0j BBgwFoAUKga0KfcLhp+ecPs2lRZ099ikrE4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjVhNDdiNi01NTEzLTQ2MTAtOTRjZi0xZmVlYzRlZWVjZjMvMC8yQTA2QjQyOUY3 MEI4NjlGOUU3MEZCMzY5NTE2NzRGN0Q4QTRBQzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkEwNkI0MjlGNzBCODY5RjlFNzBGQjM2OTUxNjc0RjdEOEE0 QUM0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI1YTQ3YjYtNTUxMy00NjEwLTk0 Y2YtMWZlZWM0ZWVlY2YzLzAvMkEwNkI0MjlGNzBCODY5RjlFNzBGQjM2OTUxNjc0 RjdEOEE0QUM0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI/UiAFv9atWCXeZze4SwRcyiVh8gulgj+9+ nagzWasekOH4oIJzkxAZSxEyjiEhkAuwVEGfyUqWiwFGjk9xLhil0IRIs8OabuRN ScK8KBbG8PWsMOSot7Lvc9z5vfSiPsa2B2kh1EP/mc+/tslxEE3JF+oxUP4wjRH4 k7b9Nkp7NhJ0a92TgNXiFQ5P1X2zf5CIxz87yBiodgBDqkEBHgzHHwKpELO/1QFe X2WD/iroiZf5u+5K0CqYhgT8mgCLzNbAYsKbNXAykU/76voWwFrWIed4S/IMU3zx ibrEgU1A/kzyuUOTTfHC9IHclJajqOYk0V9OZ2ipgFnMMZBwuq0= -----END CERTIFICATE-----Generated at Sat Apr 5 16:42:12 2025 by rpki-client