$ rpki-client -vvf repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft File: 2FB994CD1282292E6D2907FCECD7F9E472F49985.mft (raw, json) Hash identifier: PepfeLoAQ/BxwAQxFHX9Q50jgN/a5y1Dve+8Rn0PmQw= Subject key identifier: E0:2B:0B:FA:36:2A:9B:5A:B2:B2:82:92:30:21:5A:E4:4D:9F:08:FF Authority key identifier: 2F:B9:94:CD:12:82:29:2E:6D:29:07:FC:EC:D7:F9:E4:72:F4:99:85 Certificate issuer: /CN=2FB994CD1282292E6D2907FCECD7F9E472F49985 Certificate serial: 0A72D3A5FBF4B1F6FCDB40B9B7BE4548EDFEAF90 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft Manifest number: 04C0 Signing time: Sat 05 Apr 2025 02:20:45 +0000 Manifest this update: Sat 05 Apr 2025 02:15:45 +0000 Manifest next update: Tue 08 Apr 2025 08:34:45 +0000 Files and hashes: 1: 3130332e3131302e392e302f32342d3234203d3e20313331373137.roa (hash: CAz4EFFuV39K7Yj6bXuCbRxkDhyk69KXBlvgMI1myCM=) 2: 3130332e3131302e382e302f32322d3232203d3e20313331373137.roa (hash: pX7k3ZuG4xOOUuk1ngzA+y7GWKvpGHKk6TxYVimyz5o=) 3: 3130332e3131302e31312e302f32342d3234203d3e20313331373137.roa (hash: IwHwotddAWU2g9udtUXGTuKj467I/RXi9GwfJR1ItSs=) 4: 3130332e3131302e31302e302f32342d3234203d3e20313331373137.roa (hash: StKC3RjUEcb6GVhgx3SU+vMU9RD+LiURtnpuaNC5b5E=) 5: 2FB994CD1282292E6D2907FCECD7F9E472F49985.crl (hash: 9ose6uN77qlP7By8293sNKkSQQ9Q2jTfaU+DeXpQwPw=) 6: 3130332e3131302e382e302f32342d3234203d3e20313331373137.roa (hash: 6z/aBJVjmnV5y30TyBAs1DIg7YaA2W+Hxhks9f6rrXI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.crl rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 08:34:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:72:d3:a5:fb:f4:b1:f6:fc:db:40:b9:b7:be:45:48:ed:fe:af:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FB994CD1282292E6D2907FCECD7F9E472F49985 Validity Not Before: Apr 5 02:15:45 2025 GMT Not After : Apr 8 08:34:45 2025 GMT Subject: CN=E02B0BFA362A9B5AB2B2829230215AE44D9F08FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:97:26:7a:64:e1:8e:61:f6:2f:a4:a8:ad:e0: 46:61:7b:d2:27:b8:d7:2f:e1:51:fc:cf:2b:a0:6c: b1:6e:ee:dc:8d:7a:62:c6:64:47:dd:5e:2f:9d:fe: 14:d7:d7:d6:ce:3d:a9:19:3a:be:51:d2:75:04:19: 5c:bc:16:cd:19:51:8e:72:4a:eb:74:da:ac:03:dd: 04:45:4b:6a:50:70:ec:c6:23:69:c1:a9:0c:73:4b: 75:98:04:5a:12:af:2f:24:92:aa:49:05:f7:11:56: 46:9b:3f:6a:63:fb:d6:88:53:8f:1e:3d:7b:c7:04: 36:66:59:33:7d:89:1a:e2:49:0f:51:62:c0:23:84: 49:ab:54:9e:de:32:5b:7a:73:b5:91:ff:10:90:fb: d0:fd:48:2c:4b:a7:07:ae:a6:6e:d6:68:e0:44:38: 5e:77:53:55:c5:72:64:bf:ae:b1:d5:71:74:3c:c8: d3:dc:83:ae:c0:b3:01:24:a4:12:74:25:16:06:30: 52:13:0b:d2:4d:00:c9:7f:53:83:78:fb:3f:01:21: 6e:da:29:a1:f3:5e:38:c5:ff:12:84:5f:46:76:72: 60:5d:b3:75:5a:19:e2:43:6d:77:ed:e0:e8:a1:81: 3d:d0:a6:ce:ca:6b:99:e0:d9:9d:46:17:1f:80:38: 7f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:2B:0B:FA:36:2A:9B:5A:B2:B2:82:92:30:21:5A:E4:4D:9F:08:FF X509v3 Authority Key Identifier: keyid:2F:B9:94:CD:12:82:29:2E:6D:29:07:FC:EC:D7:F9:E4:72:F4:99:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:4c:05:ff:53:3d:5e:88:95:69:cd:1b:02:50:79:fe:9c:a9: 6e:b4:b8:93:50:71:c5:3d:6c:38:6e:e5:a1:c0:72:50:bb:91: c4:39:70:3e:7b:f1:53:1d:ae:99:e9:82:15:15:61:01:1b:4c: 76:25:47:23:59:c2:c3:6c:40:25:fa:80:7d:5c:28:7a:3d:2a: 13:ba:96:a2:58:60:c2:32:90:97:4d:e6:72:dd:66:c3:77:44: 9a:07:e6:49:6e:66:b0:28:e1:a8:0d:42:6d:4a:89:d0:1e:b3: 53:51:c7:f8:70:46:c8:ca:5a:73:6b:cd:6e:5b:c7:48:05:ff: 0b:b3:ce:e7:50:f6:c4:42:0b:2e:21:9c:ae:f0:ce:27:72:4e: 74:3a:99:45:7f:0a:37:75:f1:9c:2e:1e:a8:79:cb:3d:50:17: 51:0e:5a:65:2c:3b:bc:f1:7c:38:b4:9c:9a:b9:fe:38:c4:e8: e6:6f:98:41:6b:14:06:91:a6:27:ad:ed:e3:31:f2:1d:53:d3: fe:89:1a:1d:15:01:c3:bc:e2:47:cb:08:60:a5:52:b2:47:6a: 45:c5:49:5f:cf:d0:a0:75:33:9d:16:8b:01:01:36:c1:5d:3b: 21:d1:12:c2:81:67:d5:8b:81:89:58:f1:25:5c:be:62:ef:46: b8:2a:ba:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCnLTpfv0sfb820C5t75FSO3+r5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZCOTk0Q0QxMjgyMjkyRTZEMjkwN0ZDRUNEN0Y5RTQ3 MkY0OTk4NTAeFw0yNTA0MDUwMjE1NDVaFw0yNTA0MDgwODM0NDVaMDMxMTAvBgNV BAMTKEUwMkIwQkZBMzYyQTlCNUFCMkIyODI5MjMwMjE1QUU0NEQ5RjA4RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYlyZ6ZOGOYfYvpKit4EZhe9In uNcv4VH8zyugbLFu7tyNemLGZEfdXi+d/hTX19bOPakZOr5R0nUEGVy8Fs0ZUY5y Sut02qwD3QRFS2pQcOzGI2nBqQxzS3WYBFoSry8kkqpJBfcRVkabP2pj+9aIU48e PXvHBDZmWTN9iRriSQ9RYsAjhEmrVJ7eMlt6c7WR/xCQ+9D9SCxLpweupm7WaOBE OF53U1XFcmS/rrHVcXQ8yNPcg67AswEkpBJ0JRYGMFITC9JNAMl/U4N4+z8BIW7a KaHzXjjF/xKEX0Z2cmBds3VaGeJDbXft4OihgT3Qps7Ka5ng2Z1GFx+AOH8zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4CsL+jYqm1qysoKSMCFa5E2fCP8wHwYDVR0j BBgwFoAUL7mUzRKCKS5tKQf87Nf55HL0mYUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZGE3NzNkZC05NWFhLTQ0N2UtOTkzZC00Y2Y0YTEyNzNiMzEvMC8yRkI5OTRDRDEy ODIyOTJFNkQyOTA3RkNFQ0Q3RjlFNDcyRjQ5OTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkZCOTk0Q0QxMjgyMjkyRTZEMjkwN0ZDRUNEN0Y5RTQ3MkY0 OTk4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmRhNzczZGQtOTVhYS00NDdlLTk5 M2QtNGNmNGExMjczYjMxLzAvMkZCOTk0Q0QxMjgyMjkyRTZEMjkwN0ZDRUNEN0Y5 RTQ3MkY0OTk4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFpMBf9TPV6IlWnNGwJQef6cqW60uJNQccU9 bDhu5aHAclC7kcQ5cD578VMdrpnpghUVYQEbTHYlRyNZwsNsQCX6gH1cKHo9KhO6 lqJYYMIykJdN5nLdZsN3RJoH5kluZrAo4agNQm1KidAes1NRx/hwRsjKWnNrzW5b x0gF/wuzzudQ9sRCCy4hnK7wzidyTnQ6mUV/Cjd18ZwuHqh5yz1QF1EOWmUsO7zx fDi0nJq5/jjE6OZvmEFrFAaRpiet7eMx8h1T0/6JGh0VAcO84kfLCGClUrJHakXF SV/P0KB1M50WiwEBNsFdOyHREsKBZ9WLgYlY8SVcvmLvRrgqug0= -----END CERTIFICATE-----Generated at Mon Apr 7 08:22:15 2025 by rpki-client