$ rpki-client -vvf repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft File: 2FB994CD1282292E6D2907FCECD7F9E472F49985.mft (raw, json) Hash identifier: queT8F9DOAoOX5qfoPxdt+IVGccwukLKFksPj6MibDc= Subject key identifier: B2:06:80:FE:2B:1F:F4:78:73:4C:7E:CC:FB:06:EB:C7:2D:7E:0A:5B Authority key identifier: 2F:B9:94:CD:12:82:29:2E:6D:29:07:FC:EC:D7:F9:E4:72:F4:99:85 Certificate issuer: /CN=2FB994CD1282292E6D2907FCECD7F9E472F49985 Certificate serial: 4C31C76C97CF3368F919D932F079FB1FC83B5539 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft Manifest number: 04DB Signing time: Wed 04 Jun 2025 03:20:45 +0000 Manifest this update: Wed 04 Jun 2025 03:15:45 +0000 Manifest next update: Sat 07 Jun 2025 09:55:45 +0000 Files and hashes: 1: 3130332e3131302e382e302f32322d3232203d3e20313331373137.roa (hash: aTbEH2RiVh4K07qhKRGxV184e2sOPaIMjUhuR94+WEU=) 2: 2FB994CD1282292E6D2907FCECD7F9E472F49985.crl (hash: Q/7fSXE6esrZuP7r+W8nyyXYiekK3sU+FNZEGV8mHFI=) 3: 3130332e3131302e392e302f32342d3234203d3e20313331373137.roa (hash: E2uu1x+I6SmKuq0aJgDdyKaobr6kyHxRsZ9a/8jvA7A=) 4: 3130332e3131302e31302e302f32342d3234203d3e20313331373137.roa (hash: Gcf2m6wvxledkwR1qQNWFpogqDCtyqIrxx7PKSay3xY=) 5: 3130332e3131302e31312e302f32342d3234203d3e20313331373137.roa (hash: gVdR11t5fw1Z3vuhsrv3YNa5sWCtSlARbhSmJWiHvO4=) 6: 3130332e3131302e382e302f32342d3234203d3e20313331373137.roa (hash: MJzwkeAeDIIHbvzCyYoNIOj+cbb5++mSci1EoFNlAV0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.crl rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 09:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:31:c7:6c:97:cf:33:68:f9:19:d9:32:f0:79:fb:1f:c8:3b:55:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FB994CD1282292E6D2907FCECD7F9E472F49985 Validity Not Before: Jun 4 03:15:45 2025 GMT Not After : Jun 7 09:55:45 2025 GMT Subject: CN=B20680FE2B1FF478734C7ECCFB06EBC72D7E0A5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:45:56:64:f0:c7:af:23:fb:90:15:c1:31:29: fc:d6:1e:26:27:70:5e:d6:2f:0a:cd:a5:96:e1:4b: 33:10:fd:65:f3:f2:42:60:2c:47:32:88:13:35:b8: 14:30:68:e2:5a:fc:c3:9c:62:03:5a:95:8b:be:48: 96:36:9f:a8:69:e9:ee:bd:71:7b:d5:15:c1:b3:c1: 66:05:97:f0:be:0c:fd:25:f6:ab:75:45:8a:1f:11: e7:18:e0:7c:02:2a:83:49:9e:40:4d:c4:71:c8:0b: df:be:d7:04:88:0c:12:b7:60:ab:dd:41:4a:88:bc: b0:cf:1c:32:8f:aa:e0:d3:20:21:28:47:18:86:d8: eb:72:04:f0:e3:da:df:96:ac:d8:06:17:9d:ab:78: c4:b8:07:db:11:ec:91:86:58:e3:74:2f:71:55:9c: 9d:f6:31:8a:e2:2a:77:00:58:6e:0e:06:a0:cf:c4: 80:fb:d7:af:6a:22:6b:4b:19:cf:20:bb:c7:6e:de: c4:10:bd:57:90:c0:48:9c:e8:e2:d0:9a:b0:cf:d5: ec:2c:cb:de:e1:25:d8:22:bd:31:79:2f:cb:5a:ac: 75:02:80:fd:34:f8:56:af:d7:67:53:b5:32:b5:8a: b4:75:5a:03:1e:93:25:8e:d0:c3:76:c7:32:2b:f4: 03:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:06:80:FE:2B:1F:F4:78:73:4C:7E:CC:FB:06:EB:C7:2D:7E:0A:5B X509v3 Authority Key Identifier: keyid:2F:B9:94:CD:12:82:29:2E:6D:29:07:FC:EC:D7:F9:E4:72:F4:99:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:45:9a:31:ed:52:85:bd:ac:53:32:63:32:62:98:3a:5b:9b: 63:7d:27:82:ec:16:a1:d2:00:86:1f:c5:5b:6d:4f:ba:9b:42: 50:da:6b:ac:5d:93:1d:50:1d:0d:de:3f:0c:14:73:a4:b3:29: 5e:99:43:34:6e:7b:c5:ef:0c:84:f9:47:00:4f:dd:b0:be:72: 44:99:c9:ab:a8:df:64:cf:96:0b:96:2d:38:26:36:a3:26:2a: 97:65:70:49:ca:ba:8f:7f:fd:4e:4a:a3:c7:8b:ee:19:5f:62: 47:eb:e9:d5:80:47:15:2c:d6:f5:03:7c:7d:6f:f2:04:dd:1e: ef:52:7c:71:80:aa:04:ae:39:55:68:79:11:3d:ba:81:cf:a0: 25:88:b8:c2:bb:d3:bf:7f:83:a5:7d:a3:71:f2:67:65:1e:7f: b8:75:a6:a8:9a:b3:e5:61:c1:08:11:82:05:02:c2:e1:dd:3c: d8:33:09:d2:6e:90:bc:d4:6b:94:78:a8:fd:3e:36:2d:e5:22: ca:5e:8f:00:d8:4d:f2:4f:03:40:fc:94:9d:43:f4:b8:f7:f1: 37:1b:56:d6:f0:25:b7:98:42:c9:91:45:59:71:81:67:58:97: 8c:e6:88:6d:d2:13:63:4a:33:1e:4a:9d:31:8a:1d:d2:ef:d4: 54:9e:ff:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTDHHbJfPM2j5Gdky8Hn7H8g7VTkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZCOTk0Q0QxMjgyMjkyRTZEMjkwN0ZDRUNEN0Y5RTQ3 MkY0OTk4NTAeFw0yNTA2MDQwMzE1NDVaFw0yNTA2MDcwOTU1NDVaMDMxMTAvBgNV BAMTKEIyMDY4MEZFMkIxRkY0Nzg3MzRDN0VDQ0ZCMDZFQkM3MkQ3RTBBNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVRVZk8MevI/uQFcExKfzWHiYn cF7WLwrNpZbhSzMQ/WXz8kJgLEcyiBM1uBQwaOJa/MOcYgNalYu+SJY2n6hp6e69 cXvVFcGzwWYFl/C+DP0l9qt1RYofEecY4HwCKoNJnkBNxHHIC9++1wSIDBK3YKvd QUqIvLDPHDKPquDTICEoRxiG2OtyBPDj2t+WrNgGF52reMS4B9sR7JGGWON0L3FV nJ32MYriKncAWG4OBqDPxID7169qImtLGc8gu8du3sQQvVeQwEic6OLQmrDP1ews y97hJdgivTF5L8tarHUCgP00+Fav12dTtTK1irR1WgMekyWO0MN2xzIr9AMLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsgaA/isf9HhzTH7M+wbrxy1+ClswHwYDVR0j BBgwFoAUL7mUzRKCKS5tKQf87Nf55HL0mYUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZGE3NzNkZC05NWFhLTQ0N2UtOTkzZC00Y2Y0YTEyNzNiMzEvMC8yRkI5OTRDRDEy ODIyOTJFNkQyOTA3RkNFQ0Q3RjlFNDcyRjQ5OTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkZCOTk0Q0QxMjgyMjkyRTZEMjkwN0ZDRUNEN0Y5RTQ3MkY0 OTk4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmRhNzczZGQtOTVhYS00NDdlLTk5 M2QtNGNmNGExMjczYjMxLzAvMkZCOTk0Q0QxMjgyMjkyRTZEMjkwN0ZDRUNEN0Y5 RTQ3MkY0OTk4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACZFmjHtUoW9rFMyYzJimDpbm2N9J4LsFqHS AIYfxVttT7qbQlDaa6xdkx1QHQ3ePwwUc6SzKV6ZQzRue8XvDIT5RwBP3bC+ckSZ yauo32TPlguWLTgmNqMmKpdlcEnKuo9//U5Ko8eL7hlfYkfr6dWARxUs1vUDfH1v 8gTdHu9SfHGAqgSuOVVoeRE9uoHPoCWIuMK7079/g6V9o3HyZ2Uef7h1pqias+Vh wQgRggUCwuHdPNgzCdJukLzUa5R4qP0+Ni3lIspejwDYTfJPA0D8lJ1D9Lj38Tcb VtbwJbeYQsmRRVlxgWdYl4zmiG3SE2NKMx5KnTGKHdLv1FSe/1w= -----END CERTIFICATE-----Generated at Thu Jun 5 18:35:45 2025 by rpki-client