$ rpki-client -vvf repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft File: 2993EFF92300988A33773DD8C4B502F74B907112.mft (raw, json) Hash identifier: COzL1A7lDjAdi+iUdZZa8jvDz15rcWtF6DLyHhX9tXo= Subject key identifier: 05:89:AE:DF:F1:CF:F8:FD:2F:E6:04:46:6E:A8:68:DC:18:A3:D1:10 Authority key identifier: 29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12 Certificate issuer: /CN=2993EFF92300988A33773DD8C4B502F74B907112 Certificate serial: 4505BC78B3A5F3CF612F8C6C5B7B2EA706054CFE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer Subject info access: rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft Manifest number: 01A2 Signing time: Thu 17 Apr 2025 03:52:12 +0000 Manifest this update: Thu 17 Apr 2025 03:47:12 +0000 Manifest next update: Sun 20 Apr 2025 13:41:12 +0000 Files and hashes: 1: 3130332e3130352e37382e302f32342d3234203d3e20313336383734.roa (hash: HyOmqTBNJysFk0nvijg1y0JCQQaN+Dk9utcTlFmaQHY=) 2: 2993EFF92300988A33773DD8C4B502F74B907112.crl (hash: J1jC3p2Rd2viBLlVNXIUgFGivo969PEe1rZ+tZRDDsU=) 3: 323430323a326334303a3a2f34382d3438203d3e20313336383734.roa (hash: DPykOYeFqNoag7xb92W8/PrEblwWpE1eWB5cwaAPFZY=) 4: 3130332e3130352e37392e302f32342d3234203d3e20313336383734.roa (hash: TT7MUwzbMrgBN8oEIAyXqU2sblUIPBHys6QVI7/dQqE=) 5: 3130332e3130352e37362e302f32332d3234203d3e20313336383734.roa (hash: Jdxi2ld+DrcEuncfblvPGye54qLDFL//BHCw7NiVlyE=) 6: 3130332e3130352e37362e302f32342d3234203d3e203535363736.roa (hash: UUqUhVxo4riOoAS8LfSUq3H3CWxdpGF4ZToXB6Mfx1U=) 7: 3130332e3130352e37362e302f32342d3234203d3e20313336383734.roa (hash: KvURdCiLhHkbUOwAzv8M2lOHWbthmo9CgPxXvVYh4Sg=) 8: 3130332e3130352e37372e302f32342d3234203d3e203535363736.roa (hash: q2JzAJ4KWuMy8UNkflOx1INP6Nh24QMXd1+kRMj9Nio=) 9: 323430323a326334303a3a2f34382d3438203d3e203535363736.roa (hash: Cry5tI26ZFq+xJIM45fHnqWQpQQD1hwh8FhbwaGJxgw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.crl rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 13:41:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:05:bc:78:b3:a5:f3:cf:61:2f:8c:6c:5b:7b:2e:a7:06:05:4c:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2993EFF92300988A33773DD8C4B502F74B907112 Validity Not Before: Apr 17 03:47:12 2025 GMT Not After : Apr 20 13:41:12 2025 GMT Subject: CN=0589AEDFF1CFF8FD2FE604466EA868DC18A3D110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:d7:e8:92:97:f5:a8:69:9f:a1:83:6f:14:4b: ff:01:f6:f8:98:0b:2a:f8:b2:08:83:70:f1:75:99: a4:23:54:74:f0:e0:2f:07:5b:79:fe:e0:bc:1e:61: 36:d6:d4:83:61:48:05:f3:ca:c8:4d:8f:07:33:c1: 6f:98:65:03:69:69:aa:7e:9e:4d:96:a2:a8:8d:89: 5a:78:65:95:52:00:66:65:9d:f4:1e:cf:29:58:e5: b8:98:0a:da:f9:6c:99:51:ce:2d:f5:20:c7:ff:10: 6e:70:38:06:35:1e:70:ca:e4:4a:f8:21:c7:83:6b: 80:62:3b:7a:f9:30:83:07:0c:80:26:5a:41:21:bd: 0c:4c:4f:35:0e:f8:dc:c0:ba:24:fd:e3:47:1b:62: 76:34:12:5a:f7:5f:38:49:1e:7c:a4:b2:0e:e7:cf: 4b:19:c6:fc:6e:ab:59:86:36:74:92:62:92:83:ce: d0:e0:68:a7:b6:ac:02:de:e8:09:ad:a3:5b:ef:a6: f8:b8:18:a2:2f:16:46:a9:1d:01:f4:5a:00:da:bc: 44:88:45:f9:c9:f2:d1:7e:8c:47:a5:30:0e:e5:3b: a3:1e:8f:3d:f1:6e:8f:f2:f9:33:da:6d:96:e8:86: b9:bd:c7:0d:ff:aa:22:d1:df:f7:f2:c4:93:61:81: cb:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:89:AE:DF:F1:CF:F8:FD:2F:E6:04:46:6E:A8:68:DC:18:A3:D1:10 X509v3 Authority Key Identifier: keyid:29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:ef:41:ae:26:5e:5c:69:dd:08:d5:72:12:da:e9:b2:ea:0c: 26:4a:da:9c:07:7f:6a:5a:da:b4:68:e1:55:eb:bd:b5:3c:ec: a1:5e:29:34:81:be:b9:80:9e:91:a7:37:c3:05:6d:22:d4:90: 0b:27:e9:fb:a6:28:cb:77:e2:34:87:cc:19:d6:45:b0:2c:da: c4:78:fa:ee:0d:65:f8:a2:01:34:8c:cf:d0:10:e8:18:30:36: e9:7b:8a:8a:4a:06:ee:60:e5:b4:ab:48:31:f6:86:4f:4e:32: 0a:ee:7e:ea:0c:04:65:6c:c4:10:4d:74:e8:71:1b:fc:73:90: bb:91:24:63:cf:e5:7b:fa:8d:8d:d5:6b:07:b2:fb:28:e5:58: 41:84:30:2d:21:81:f0:75:7f:2f:62:28:16:40:9a:e3:02:d0: 13:79:18:97:ca:c7:89:98:eb:5c:60:b3:0c:2e:c3:02:32:14: 4f:c3:23:e0:5c:cd:22:0a:d6:ea:1c:9b:14:03:cd:7a:10:49: ad:78:63:b5:51:23:d6:94:5c:df:9d:29:c3:a5:14:a0:44:65: f8:46:76:7a:7b:d1:14:b0:14:0d:9b:2c:83:86:10:cc:e9:20: ed:88:be:ae:ae:26:7b:ab:07:08:72:b0:4a:59:f3:e1:eb:7d: f4:a9:6f:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURQW8eLOl889hL4xsW3supwYFTP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk5M0VGRjkyMzAwOTg4QTMzNzczREQ4QzRCNTAyRjc0 QjkwNzExMjAeFw0yNTA0MTcwMzQ3MTJaFw0yNTA0MjAxMzQxMTJaMDMxMTAvBgNV BAMTKDA1ODlBRURGRjFDRkY4RkQyRkU2MDQ0NjZFQTg2OERDMThBM0QxMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy1+iSl/WoaZ+hg28US/8B9viY Cyr4sgiDcPF1maQjVHTw4C8HW3n+4LweYTbW1INhSAXzyshNjwczwW+YZQNpaap+ nk2WoqiNiVp4ZZVSAGZlnfQezylY5biYCtr5bJlRzi31IMf/EG5wOAY1HnDK5Er4 IceDa4BiO3r5MIMHDIAmWkEhvQxMTzUO+NzAuiT940cbYnY0Elr3XzhJHnyksg7n z0sZxvxuq1mGNnSSYpKDztDgaKe2rALe6Amto1vvpvi4GKIvFkapHQH0WgDavESI RfnJ8tF+jEelMA7lO6Mejz3xbo/y+TPabZbohrm9xw3/qiLR3/fyxJNhgctTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBYmu3/HP+P0v5gRGbqho3Bij0RAwHwYDVR0j BBgwFoAUKZPv+SMAmIozdz3YxLUC90uQcRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzdiYzNkMi00YWIzLTRjZmItOTIyMi02NmM2ZWE5NDQ3ZTMvMC8yOTkzRUZGOTIz MDA5ODhBMzM3NzNERDhDNEI1MDJGNzRCOTA3MTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk5M0VGRjkyMzAwOTg4QTMzNzczREQ4QzRCNTAyRjc0Qjkw NzExMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc3YmMzZDItNGFiMy00Y2ZiLTky MjItNjZjNmVhOTQ0N2UzLzAvMjk5M0VGRjkyMzAwOTg4QTMzNzczREQ4QzRCNTAy Rjc0QjkwNzExMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAPvQa4mXlxp3QjVchLa6bLqDCZK2pwHf2pa 2rRo4VXrvbU87KFeKTSBvrmAnpGnN8MFbSLUkAsn6fumKMt34jSHzBnWRbAs2sR4 +u4NZfiiATSMz9AQ6BgwNul7iopKBu5g5bSrSDH2hk9OMgrufuoMBGVsxBBNdOhx G/xzkLuRJGPP5Xv6jY3Vawey+yjlWEGEMC0hgfB1fy9iKBZAmuMC0BN5GJfKx4mY 61xgswwuwwIyFE/DI+BczSIK1uocmxQDzXoQSa14Y7VRI9aUXN+dKcOlFKBEZfhG dnp70RSwFA2bLIOGEMzpIO2Ivq6uJnurBwhysEpZ8+HrffSpb/4= -----END CERTIFICATE-----Generated at Sat Apr 19 12:16:27 2025 by rpki-client