$ rpki-client -vvf repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.mft File: 2AAFA81414EDCB1032235F2240FE06773F3E6F16.mft (raw, json) Hash identifier: PZm8TGo5zqsexee0Q9iKw0pwLobB7WqmeW4SIxSFcZ8= Subject key identifier: B2:A3:2A:4C:71:70:85:35:12:07:63:E2:F0:EF:69:03:36:A5:72:E7 Authority key identifier: 2A:AF:A8:14:14:ED:CB:10:32:23:5F:22:40:FE:06:77:3F:3E:6F:16 Certificate issuer: /CN=2AAFA81414EDCB1032235F2240FE06773F3E6F16 Certificate serial: 7602A10721339AD13DB2AB3C1F98A3EB6A59F740 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AAFA81414EDCB1032235F2240FE06773F3E6F16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.mft Manifest number: 0149 Signing time: Sat 05 Apr 2025 22:00:38 +0000 Manifest this update: Sat 05 Apr 2025 21:55:38 +0000 Manifest next update: Wed 09 Apr 2025 05:40:38 +0000 Files and hashes: 1: 2AAFA81414EDCB1032235F2240FE06773F3E6F16.crl (hash: J3s/o/uk3YNMi7gQlwd3AIRmg2eCn9kN8uzO0k4B26Y=) 2: 3130332e3137372e3231392e302f32342d3234203d3e20313331373639.roa (hash: fU1tQ4gaeWNhq2F1RA67XHvI+/xcbSrzocYJJCxhg9Q=) 3: 3130332e3137372e3231382e302f32342d3234203d3e20313331373639.roa (hash: geET9/YOwUtWNeEIEWu0ZCElrUfY/yNFJvOG/4u0aBI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.crl rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AAFA81414EDCB1032235F2240FE06773F3E6F16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 05:40:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:02:a1:07:21:33:9a:d1:3d:b2:ab:3c:1f:98:a3:eb:6a:59:f7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AAFA81414EDCB1032235F2240FE06773F3E6F16 Validity Not Before: Apr 5 21:55:38 2025 GMT Not After : Apr 9 05:40:38 2025 GMT Subject: CN=B2A32A4C71708535120763E2F0EF690336A572E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e5:f9:4a:e6:cc:dc:0f:52:24:20:87:88:9e: 31:11:a0:87:a0:32:bd:f4:95:12:e3:e5:08:1c:09: 27:1e:71:ad:79:cf:30:2b:a8:2e:ff:73:29:37:87: 4c:0e:9f:b7:a8:1d:f9:b9:ba:85:9b:0d:2a:52:c6: 55:8e:a9:12:de:71:91:c6:46:12:1c:48:31:94:70: e2:7a:6b:2f:8f:60:47:7b:d5:33:b7:b5:83:8a:6f: 42:45:1a:46:13:a4:67:bc:49:7a:42:69:ef:56:e6: 7b:05:90:e7:81:64:96:b1:15:e8:db:74:0c:06:6d: df:9c:97:e0:dd:ee:cd:11:eb:f1:94:70:03:ca:0f: 0e:07:f8:26:56:e1:e3:eb:67:30:0c:95:49:66:50: ab:3b:c0:2e:a8:6d:5f:54:62:4b:f8:28:12:cf:46: 87:16:84:6b:1b:bc:c3:4d:64:b0:31:a0:28:ca:02: fd:fe:33:7a:5e:4d:4e:ff:2a:f9:90:21:9d:e4:eb: ae:d4:5c:b1:7f:da:9e:89:3a:5f:90:54:2b:e2:e7: 9d:cd:41:f8:d9:e6:86:64:a3:ee:ce:b8:45:48:8f: 4c:fb:39:45:8e:fc:b5:e4:73:69:02:1a:44:2a:c6: cf:cc:a2:b0:b5:09:ab:03:78:7f:33:e7:4d:79:02: 96:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A3:2A:4C:71:70:85:35:12:07:63:E2:F0:EF:69:03:36:A5:72:E7 X509v3 Authority Key Identifier: keyid:2A:AF:A8:14:14:ED:CB:10:32:23:5F:22:40:FE:06:77:3F:3E:6F:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AAFA81414EDCB1032235F2240FE06773F3E6F16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:af:d2:0a:5c:92:0e:73:73:76:b4:f5:ba:ab:21:84:d9:3c: 23:3c:b4:07:5e:85:da:a9:11:66:b9:42:f5:ac:a7:53:03:2c: 17:90:e0:23:1d:8c:e2:34:1d:6b:54:6a:ae:b2:f6:07:3e:22: 57:d4:34:1c:15:5e:67:55:3e:2f:5a:c3:ce:30:76:d8:69:04: b2:b2:8f:23:c7:b2:1e:b0:36:4a:fa:14:85:e8:64:93:44:c0: d2:b1:4d:fe:91:19:3a:43:26:f6:6b:f8:3a:dd:32:52:27:39: 62:55:35:93:30:04:1b:9b:2b:51:8b:11:b1:9d:79:90:a4:2d: 24:f5:1d:93:bb:e1:79:f7:94:fb:30:98:f1:b8:af:50:44:11: 4d:8c:0c:75:29:3c:31:0d:cf:a3:94:e3:b2:04:d8:29:53:e9: fb:16:72:64:86:1e:6f:3d:c5:dc:6d:fe:2e:c2:1b:20:3c:4a: 9b:6a:36:93:54:52:2b:70:e2:a2:a3:dd:73:db:ed:51:5e:36: 92:c8:95:9e:13:a4:7b:ba:5f:f0:ff:a6:71:7b:49:a2:a5:d7: f4:6d:2a:81:43:d8:0d:11:13:61:f2:db:dd:fd:44:e0:fb:be: 29:33:c4:40:e5:18:c8:b4:39:46:77:59:d5:d6:f7:cb:0c:d9: eb:e6:fd:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdgKhByEzmtE9sqs8H5ij62pZ90AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBRkE4MTQxNEVEQ0IxMDMyMjM1RjIyNDBGRTA2Nzcz RjNFNkYxNjAeFw0yNTA0MDUyMTU1MzhaFw0yNTA0MDkwNTQwMzhaMDMxMTAvBgNV BAMTKEIyQTMyQTRDNzE3MDg1MzUxMjA3NjNFMkYwRUY2OTAzMzZBNTcyRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+5flK5szcD1IkIIeInjERoIeg Mr30lRLj5QgcCSceca15zzArqC7/cyk3h0wOn7eoHfm5uoWbDSpSxlWOqRLecZHG RhIcSDGUcOJ6ay+PYEd71TO3tYOKb0JFGkYTpGe8SXpCae9W5nsFkOeBZJaxFejb dAwGbd+cl+Dd7s0R6/GUcAPKDw4H+CZW4ePrZzAMlUlmUKs7wC6obV9UYkv4KBLP RocWhGsbvMNNZLAxoCjKAv3+M3peTU7/KvmQIZ3k667UXLF/2p6JOl+QVCvi553N QfjZ5oZko+7OuEVIj0z7OUWO/LXkc2kCGkQqxs/MorC1CasDeH8z5015ApbnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsqMqTHFwhTUSB2Pi8O9pAzalcucwHwYDVR0j BBgwFoAUKq+oFBTtyxAyI18iQP4Gdz8+bxYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWI4ZTYwZi1mOTkzLTQ1MzQtOWRhMC1mMjg1YTg2MDNmNjkvMC8yQUFGQTgxNDE0 RURDQjEwMzIyMzVGMjI0MEZFMDY3NzNGM0U2RjE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkFBRkE4MTQxNEVEQ0IxMDMyMjM1RjIyNDBGRTA2NzczRjNF NkYxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2FiOGU2MGYtZjk5My00NTM0LTlk YTAtZjI4NWE4NjAzZjY5LzAvMkFBRkE4MTQxNEVEQ0IxMDMyMjM1RjIyNDBGRTA2 NzczRjNFNkYxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG6v0gpckg5zc3a09bqrIYTZPCM8tAdehdqp EWa5QvWsp1MDLBeQ4CMdjOI0HWtUaq6y9gc+IlfUNBwVXmdVPi9aw84wdthpBLKy jyPHsh6wNkr6FIXoZJNEwNKxTf6RGTpDJvZr+DrdMlInOWJVNZMwBBubK1GLEbGd eZCkLST1HZO74Xn3lPswmPG4r1BEEU2MDHUpPDENz6OU47IE2ClT6fsWcmSGHm89 xdxt/i7CGyA8SptqNpNUUitw4qKj3XPb7VFeNpLIlZ4TpHu6X/D/pnF7SaKl1/Rt KoFD2A0RE2Hy2939ROD7vikzxEDlGMi0OUZ3WdXW98sM2evm/TA= -----END CERTIFICATE-----Generated at Mon Apr 7 13:07:26 2025 by rpki-client