$ rpki-client -vvf repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft File: 2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft (raw, json) Hash identifier: dDgK36+7oERXLMtgOFnTddTB9QIiCovatcrFJE9F9jU= Subject key identifier: 46:E7:B9:29:C0:B2:BA:1E:47:87:8A:86:07:74:73:5B:27:77:41:46 Authority key identifier: 2A:06:B4:29:F7:0B:86:9F:9E:70:FB:36:95:16:74:F7:D8:A4:AC:4E Certificate issuer: /CN=2A06B429F70B869F9E70FB36951674F7D8A4AC4E Certificate serial: 1596A52E19CD129F7200FEAE82714918ED442E76 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft Manifest number: FE Signing time: Wed 04 Jun 2025 14:32:12 +0000 Manifest this update: Wed 04 Jun 2025 14:27:12 +0000 Manifest next update: Sat 07 Jun 2025 19:51:12 +0000 Files and hashes: 1: 3130332e3135312e32342e302f32342d3234203d3e20313530353332.roa (hash: 3tho/NQEZ7clEuLXEou7D6b7IKWMhHVDrU5KgBLQwQM=) 2: 2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl (hash: qdHxQzYVrqe+YRym8t4J9G7rkejwRQ6SuRp9+Wrz1wE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 19:51:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:96:a5:2e:19:cd:12:9f:72:00:fe:ae:82:71:49:18:ed:44:2e:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A06B429F70B869F9E70FB36951674F7D8A4AC4E Validity Not Before: Jun 4 14:27:12 2025 GMT Not After : Jun 7 19:51:12 2025 GMT Subject: CN=46E7B929C0B2BA1E47878A860774735B27774146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:33:a2:3f:22:fb:3d:e4:66:d3:60:67:03:f0: a9:32:5b:b0:7e:4d:57:1c:8b:38:66:d3:87:ac:d4: 3d:2f:cc:5d:c9:a1:29:96:8a:76:6a:19:72:7f:d5: 78:3b:52:3e:e7:2b:e6:66:c9:1e:1d:40:5c:0e:cf: 94:be:a5:8e:44:da:f9:0a:f7:3b:dd:94:17:2e:b7: a3:d2:fb:ac:f8:45:c7:b6:8f:9c:4e:76:76:cf:f9: 62:50:1d:ed:c2:4d:29:84:e8:68:ee:f9:b2:59:aa: 43:a9:90:ee:da:4e:67:48:1c:7f:48:a7:4a:ac:83: 42:76:08:ba:75:86:28:c2:c7:3a:1b:8f:0d:41:a2: 33:c0:ad:e5:72:33:5d:f9:6f:5e:60:a6:d8:82:ce: ea:b3:3f:9a:d2:96:fa:2c:f5:ce:90:a9:f4:52:2a: 16:12:55:5f:89:0c:e8:22:ba:f5:60:10:b4:58:18: 4d:73:27:73:ee:bb:d2:7c:6c:cb:27:fd:ff:96:92: 95:bd:60:17:f4:4a:47:1a:5a:81:ee:bc:dd:6d:31: 5c:4e:ef:6f:fe:bf:8a:00:97:67:de:a2:23:e1:b5: fa:ba:32:b9:2d:d2:a5:43:6f:9e:0d:05:10:a4:09: cf:ff:90:11:ba:d7:db:9b:ea:3f:62:ff:1d:d1:d8: af:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E7:B9:29:C0:B2:BA:1E:47:87:8A:86:07:74:73:5B:27:77:41:46 X509v3 Authority Key Identifier: keyid:2A:06:B4:29:F7:0B:86:9F:9E:70:FB:36:95:16:74:F7:D8:A4:AC:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:f4:eb:af:47:19:27:58:e3:83:a8:39:16:72:07:3d:e1:28: 25:4c:39:0b:99:d8:b3:7e:d4:e8:e2:80:d1:48:21:b6:3b:0b: 37:fc:fd:2e:49:2c:d3:18:28:02:92:30:f2:bb:34:49:a3:ca: 89:bd:63:50:78:39:b7:ce:ee:37:c7:e3:69:59:c2:c7:e8:7c: 8f:08:33:5b:f1:c3:ae:62:db:fb:ae:5f:63:5a:e3:24:55:dd: e5:c4:dd:fc:ea:62:86:ad:bb:60:a9:d7:39:7b:ca:86:fc:e1: 69:6f:33:5e:2e:28:05:51:89:89:d8:aa:45:88:80:63:84:8c: e3:81:d1:c1:fa:e3:fe:b2:ea:7f:a0:8f:88:a0:da:96:18:b3: 35:28:6e:8a:52:d8:13:a5:94:95:ed:76:54:48:60:4e:f7:a0: a4:f1:45:4b:d9:f2:79:fb:2c:dd:3c:c9:29:3b:52:5b:05:a7: fe:a8:f7:18:99:24:1c:1b:37:76:2c:32:78:7c:b7:d2:5c:8b: 94:48:70:20:e9:08:94:34:bd:cc:cf:3c:ef:1d:b4:72:a0:75: e6:9a:7e:75:bd:9d:d7:ea:1d:5f:59:89:fe:bf:aa:c9:be:4d: e6:80:5f:65:ff:62:56:a8:e6:14:45:0c:c9:f2:54:bc:71:f0: 55:e5:a8:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFZalLhnNEp9yAP6ugnFJGO1ELnYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEwNkI0MjlGNzBCODY5RjlFNzBGQjM2OTUxNjc0RjdE OEE0QUM0RTAeFw0yNTA2MDQxNDI3MTJaFw0yNTA2MDcxOTUxMTJaMDMxMTAvBgNV BAMTKDQ2RTdCOTI5QzBCMkJBMUU0Nzg3OEE4NjA3NzQ3MzVCMjc3NzQxNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxM6I/Ivs95GbTYGcD8KkyW7B+ TVccizhm04es1D0vzF3JoSmWinZqGXJ/1Xg7Uj7nK+ZmyR4dQFwOz5S+pY5E2vkK 9zvdlBcut6PS+6z4Rce2j5xOdnbP+WJQHe3CTSmE6Gju+bJZqkOpkO7aTmdIHH9I p0qsg0J2CLp1hijCxzobjw1BojPAreVyM135b15gptiCzuqzP5rSlvos9c6QqfRS KhYSVV+JDOgiuvVgELRYGE1zJ3Puu9J8bMsn/f+WkpW9YBf0SkcaWoHuvN1tMVxO 72/+v4oAl2feoiPhtfq6Mrkt0qVDb54NBRCkCc//kBG619ub6j9i/x3R2K9LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURue5KcCyuh5Hh4qGB3RzWyd3QUYwHwYDVR0j BBgwFoAUKga0KfcLhp+ecPs2lRZ099ikrE4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjVhNDdiNi01NTEzLTQ2MTAtOTRjZi0xZmVlYzRlZWVjZjMvMC8yQTA2QjQyOUY3 MEI4NjlGOUU3MEZCMzY5NTE2NzRGN0Q4QTRBQzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkEwNkI0MjlGNzBCODY5RjlFNzBGQjM2OTUxNjc0RjdEOEE0 QUM0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI1YTQ3YjYtNTUxMy00NjEwLTk0 Y2YtMWZlZWM0ZWVlY2YzLzAvMkEwNkI0MjlGNzBCODY5RjlFNzBGQjM2OTUxNjc0 RjdEOEE0QUM0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJD0669HGSdY44OoORZyBz3hKCVMOQuZ2LN+ 1OjigNFIIbY7Czf8/S5JLNMYKAKSMPK7NEmjyom9Y1B4ObfO7jfH42lZwsfofI8I M1vxw65i2/uuX2Na4yRV3eXE3fzqYoatu2Cp1zl7yob84WlvM14uKAVRiYnYqkWI gGOEjOOB0cH64/6y6n+gj4ig2pYYszUobopS2BOllJXtdlRIYE73oKTxRUvZ8nn7 LN08ySk7UlsFp/6o9xiZJBwbN3YsMnh8t9Jci5RIcCDpCJQ0vczPPO8dtHKgdeaa fnW9ndfqHV9Zif6/qsm+TeaAX2X/Ylao5hRFDMnyVLxx8FXlqHI= -----END CERTIFICATE-----Generated at Thu Jun 5 18:40:39 2025 by rpki-client