$ rpki-client -vvf repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft File: 2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft (raw, json) Hash identifier: EhH2sFe45v/g7iV/hbL2UKYFnT9Hj9bub/Or87+HrPY= Subject key identifier: D9:9A:A7:C4:40:47:5F:18:02:00:1A:B3:22:99:9C:DD:AF:41:33:C2 Authority key identifier: 2B:DF:AF:A7:0A:11:BF:BF:6C:98:2B:BF:2C:2C:08:4D:E8:0E:03:4E Certificate issuer: /CN=2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E Certificate serial: 5621E5D3942B6F0F9A79CDF733E3610B0A5A7AC1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft Manifest number: 0356 Signing time: Fri 06 Jun 2025 19:02:10 +0000 Manifest this update: Fri 06 Jun 2025 18:57:10 +0000 Manifest next update: Mon 09 Jun 2025 23:07:10 +0000 Files and hashes: 1: 3130332e3136392e322e302f32332d3234203d3e203137393935.roa (hash: +JB4xjkXbgweSU7X29CnYlRjnbB6M5XtdFb5z4Dimtg=) 2: 2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl (hash: 8i3FSi/en7fAiCHHeiOz76p9xovaJ2inZjpkgFPINNc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 23:07:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:21:e5:d3:94:2b:6f:0f:9a:79:cd:f7:33:e3:61:0b:0a:5a:7a:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E Validity Not Before: Jun 6 18:57:10 2025 GMT Not After : Jun 9 23:07:10 2025 GMT Subject: CN=D99AA7C440475F1802001AB322999CDDAF4133C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7c:bc:ac:1d:d7:6e:c4:ce:0b:a6:0c:f3:28: 52:c5:47:c9:4c:6e:1e:61:15:6f:a7:ae:ab:d6:ef: c8:b9:18:4e:65:7e:1e:f8:bc:15:b7:b6:3e:e2:01: be:56:f0:66:2d:66:57:55:8c:61:ba:f9:b9:d3:b0: 71:b3:d5:4c:f1:1d:e0:37:d0:66:9b:2b:ed:5e:88: 26:3a:06:9d:81:77:15:c9:53:f1:39:ec:1b:fd:a8: bb:25:8b:c4:1e:73:14:7c:7a:cf:71:0c:57:70:3d: a1:28:c0:7f:67:aa:2f:5e:83:48:b3:44:c9:f7:78: a9:3d:3b:24:16:7d:68:eb:7f:af:e2:ee:0e:b1:7b: b4:b9:d1:c6:41:8b:f3:40:37:d6:9b:2b:76:a9:99: 9a:75:83:9e:4c:5f:b6:51:d3:70:4a:39:57:ee:a9: 19:75:71:0d:5b:6b:5e:dd:be:aa:8f:a0:c1:a6:84: 69:4d:26:04:77:fc:cc:98:04:e0:9f:54:7e:56:b2: 55:66:30:44:5f:d2:92:4b:d0:8d:6c:50:eb:64:94: 51:3a:01:bc:18:9b:98:45:18:6e:e3:4d:99:5d:31: ce:5f:5c:cc:53:e6:ac:ec:2c:01:e4:d2:08:c3:25: de:14:88:2f:62:79:cc:0b:1a:8c:4a:cf:a9:4f:37: b5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:9A:A7:C4:40:47:5F:18:02:00:1A:B3:22:99:9C:DD:AF:41:33:C2 X509v3 Authority Key Identifier: keyid:2B:DF:AF:A7:0A:11:BF:BF:6C:98:2B:BF:2C:2C:08:4D:E8:0E:03:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:78:6d:f7:b3:4f:6d:f6:67:f9:12:bf:4a:55:2a:2c:4d:8a: ad:9b:be:d8:27:12:90:c9:ec:46:0c:f2:39:e9:98:f5:c0:2e: c9:05:3f:9c:8f:89:77:ec:fa:ba:6a:fa:90:ee:21:2c:dd:35: 4c:53:37:31:25:54:18:77:c9:0c:a0:54:40:f8:c3:bc:85:ea: f9:59:00:30:a6:3b:e7:17:a5:ec:db:43:aa:88:61:6c:1e:58: 94:6b:64:d8:66:9f:9f:91:46:70:e9:fb:af:cf:32:65:f0:81: e8:f9:ea:b0:1f:67:70:d4:a7:d9:9f:36:b4:0e:56:a1:59:12: 78:ce:a5:ee:6a:8d:6f:8e:22:4d:7b:6e:c6:7e:45:89:2a:0d: d2:a6:32:1a:89:7a:a7:e5:88:91:9f:12:41:ee:ea:ee:00:23: 0f:00:f6:24:3e:09:22:24:f1:85:6f:8f:ff:e0:e2:b3:90:f1: 97:e8:d1:c4:d9:84:ec:ae:62:af:79:46:2b:4d:6d:11:77:8c: 44:cc:d7:f6:e5:93:7f:e5:b5:85:cb:08:af:c9:42:73:f5:30: e4:9c:a6:18:4b:68:56:48:93:e1:c3:59:64:01:76:57:49:93: 88:a3:3b:71:66:e3:cd:95:7e:31:6d:e5:ae:f5:5f:09:f7:f5: de:a2:de:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUViHl05Qrbw+aec33M+NhCwpaesEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4NERF ODBFMDM0RTAeFw0yNTA2MDYxODU3MTBaFw0yNTA2MDkyMzA3MTBaMDMxMTAvBgNV BAMTKEQ5OUFBN0M0NDA0NzVGMTgwMjAwMUFCMzIyOTk5Q0REQUY0MTMzQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVfLysHdduxM4LpgzzKFLFR8lM bh5hFW+nrqvW78i5GE5lfh74vBW3tj7iAb5W8GYtZldVjGG6+bnTsHGz1UzxHeA3 0GabK+1eiCY6Bp2BdxXJU/E57Bv9qLsli8QecxR8es9xDFdwPaEowH9nqi9eg0iz RMn3eKk9OyQWfWjrf6/i7g6xe7S50cZBi/NAN9abK3apmZp1g55MX7ZR03BKOVfu qRl1cQ1ba17dvqqPoMGmhGlNJgR3/MyYBOCfVH5WslVmMERf0pJL0I1sUOtklFE6 AbwYm5hFGG7jTZldMc5fXMxT5qzsLAHk0gjDJd4UiC9iecwLGoxKz6lPN7XFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2ZqnxEBHXxgCABqzIpmc3a9BM8IwHwYDVR0j BBgwFoAUK9+vpwoRv79smCu/LCwITegOA04wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmNkOWNlYS0zYmY0LTRhOWMtYWVlNi0wMDMzOWMwNjU1MGIvMC8yQkRGQUZBNzBB MTFCRkJGNkM5ODJCQkYyQzJDMDg0REU4MEUwMzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4NERFODBF MDM0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJjZDljZWEtM2JmNC00YTljLWFl ZTYtMDAzMzljMDY1NTBiLzAvMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4 NERFODBFMDM0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ14bfezT232Z/kSv0pVKixNiq2bvtgnEpDJ 7EYM8jnpmPXALskFP5yPiXfs+rpq+pDuISzdNUxTNzElVBh3yQygVED4w7yF6vlZ ADCmO+cXpezbQ6qIYWweWJRrZNhmn5+RRnDp+6/PMmXwgej56rAfZ3DUp9mfNrQO VqFZEnjOpe5qjW+OIk17bsZ+RYkqDdKmMhqJeqfliJGfEkHu6u4AIw8A9iQ+CSIk 8YVvj//g4rOQ8Zfo0cTZhOyuYq95RitNbRF3jETM1/blk3/ltYXLCK/JQnP1MOSc phhLaFZIk+HDWWQBdldJk4ijO3Fm482VfjFt5a71Xwn39d6i3lE= -----END CERTIFICATE-----Generated at Sun Jun 8 14:48:43 2025 by rpki-client