$ rpki-client -vvf repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft File: 2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft (raw, json) Hash identifier: pwHYkg00WNCQpri3Ir/c/9SA48ROeeyOCqOoS0mV9dI= Subject key identifier: 5F:A9:2E:BB:58:29:6A:54:7B:C4:1C:A0:83:B2:24:B6:D8:94:51:69 Authority key identifier: 2A:F5:12:1C:D1:CF:A7:79:8C:C1:DD:77:7B:46:43:69:D1:DE:A6:C1 Certificate issuer: /CN=2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1 Certificate serial: 238A2A9410E12CEB8DCB1F629A743F49F04CCE93 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft Manifest number: 0210 Signing time: Thu 03 Apr 2025 21:11:09 +0000 Manifest this update: Thu 03 Apr 2025 21:06:09 +0000 Manifest next update: Mon 07 Apr 2025 00:13:09 +0000 Files and hashes: 1: 2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl (hash: 41hucM6BmmRa9oua+l6e9p+E36D0kyhKFtis7wMGaAI=) 2: 3130332e3134382e32342e302f32332d3234203d3e20313339393831.roa (hash: 6FLbYuy1S5qOt7tY0dfAZpELgfONO6cx6swxFm3099E=) 3: 323430353a633863303a3a2f33322d3332203d3e20313339393831.roa (hash: xAQ8nY4YiCbyThm1ahzRI7qCPhGk2b5venOiA8cHRk4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 00:13:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:8a:2a:94:10:e1:2c:eb:8d:cb:1f:62:9a:74:3f:49:f0:4c:ce:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1 Validity Not Before: Apr 3 21:06:09 2025 GMT Not After : Apr 7 00:13:09 2025 GMT Subject: CN=5FA92EBB58296A547BC41CA083B224B6D8945169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3c:31:09:8f:42:0f:72:2f:fd:0a:df:34:a6: 08:10:ef:b5:f5:64:75:c5:fe:14:62:c6:57:af:7a: 1a:d8:ff:80:01:0d:88:0d:f3:2e:42:b8:de:2d:31: 03:5b:ae:9d:c7:1c:20:24:92:b4:50:33:e4:7e:49: e6:4a:5c:06:36:2e:6e:ab:ab:8f:c1:20:ed:1d:7d: 1f:4a:c3:59:ae:f0:0b:6e:d6:36:b8:f1:9d:f3:bd: 51:6e:df:f8:81:51:33:5e:e7:c8:b2:46:d3:95:37: 39:3a:bb:0e:e4:d8:4e:7d:85:94:64:07:b3:5f:d1: e9:fd:1c:76:d8:9b:db:01:13:ab:9a:27:d4:6a:bd: 55:71:ae:d1:e2:35:d1:19:b7:c2:2c:d0:b2:f7:6a: c1:bb:52:53:af:4d:22:b3:47:9b:c8:19:32:6e:9d: d0:36:7e:68:9c:90:97:97:84:fe:08:08:db:c1:a6: 08:2f:05:1b:ff:da:96:ad:b7:ca:b6:d9:1f:65:e5: ad:00:22:b8:17:4e:b2:92:34:34:58:3a:a9:bc:86: 8a:02:25:40:b6:5f:dd:24:eb:26:58:ba:c6:54:bc: f5:c2:61:f4:38:94:b8:67:2e:f3:21:7e:3f:18:9a: 95:de:1e:26:74:e1:f8:35:f4:8f:d8:59:4d:47:5c: aa:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A9:2E:BB:58:29:6A:54:7B:C4:1C:A0:83:B2:24:B6:D8:94:51:69 X509v3 Authority Key Identifier: keyid:2A:F5:12:1C:D1:CF:A7:79:8C:C1:DD:77:7B:46:43:69:D1:DE:A6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:26:d7:41:7f:1a:d6:1b:87:70:1f:97:2d:31:e3:33:55:1f: b4:71:fb:6c:d6:a3:4b:8c:7e:67:0b:24:b2:13:15:9b:ed:70: b9:a9:3d:19:cd:4d:07:a5:dc:cc:9a:3a:c7:0f:3a:f0:0c:d0: 79:02:7d:f9:56:fe:a6:0b:72:3f:c8:8a:c7:f9:98:07:50:d7: 77:3d:2c:57:e9:5c:61:86:5d:73:b7:e7:36:b2:66:49:7e:05: 77:91:de:d0:8d:e3:9a:d1:2f:4c:92:cf:fc:d8:4d:96:b6:32: fc:65:f0:bf:db:a6:05:1f:09:ec:f7:51:89:69:0a:3d:0b:b1: f7:e7:a6:d8:a2:c0:ea:39:10:b8:df:a6:bd:2a:b5:0d:85:35: 7c:9a:3d:e5:4f:fc:76:a0:3a:4a:3c:f9:e8:b6:80:b2:dd:b0: f9:38:a7:d8:c2:6b:05:fd:b9:38:52:16:d7:8d:a7:27:33:78: e3:c8:f6:d6:be:5b:04:6a:a7:9c:93:2a:6d:6e:f6:a7:b4:e4: c8:1e:1e:ca:92:a2:28:4d:b2:1a:b9:e8:dc:cc:b2:31:45:ba: d4:a4:e5:eb:09:b7:98:bd:20:7f:02:cd:3d:e1:1a:e6:09:78: cf:ec:3d:57:a4:ef:f7:07:f0:95:4e:91:d6:9f:dd:1d:5b:8c: bc:f2:93:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI4oqlBDhLOuNyx9imnQ/SfBMzpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQzNjlE MURFQTZDMTAeFw0yNTA0MDMyMTA2MDlaFw0yNTA0MDcwMDEzMDlaMDMxMTAvBgNV BAMTKDVGQTkyRUJCNTgyOTZBNTQ3QkM0MUNBMDgzQjIyNEI2RDg5NDUxNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtPDEJj0IPci/9Ct80pggQ77X1 ZHXF/hRixlevehrY/4ABDYgN8y5CuN4tMQNbrp3HHCAkkrRQM+R+SeZKXAY2Lm6r q4/BIO0dfR9Kw1mu8Atu1ja48Z3zvVFu3/iBUTNe58iyRtOVNzk6uw7k2E59hZRk B7Nf0en9HHbYm9sBE6uaJ9RqvVVxrtHiNdEZt8Is0LL3asG7UlOvTSKzR5vIGTJu ndA2fmickJeXhP4ICNvBpggvBRv/2patt8q22R9l5a0AIrgXTrKSNDRYOqm8hooC JUC2X90k6yZYusZUvPXCYfQ4lLhnLvMhfj8YmpXeHiZ04fg19I/YWU1HXKrnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX6kuu1gpalR7xBygg7IkttiUUWkwHwYDVR0j BBgwFoAUKvUSHNHPp3mMwd13e0ZDadHepsEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OTJlMDdmOC0xYTQ4LTQzOTEtYTZhNS04ZTRlMzljODU4OGEvMC8yQUY1MTIxQ0Qx Q0ZBNzc5OENDMURENzc3QjQ2NDM2OUQxREVBNkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQzNjlEMURF QTZDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTkyZTA3ZjgtMWE0OC00MzkxLWE2 YTUtOGU0ZTM5Yzg1ODhhLzAvMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQz NjlEMURFQTZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL0m10F/GtYbh3Afly0x4zNVH7Rx+2zWo0uM fmcLJLITFZvtcLmpPRnNTQel3MyaOscPOvAM0HkCfflW/qYLcj/Iisf5mAdQ13c9 LFfpXGGGXXO35zayZkl+BXeR3tCN45rRL0ySz/zYTZa2Mvxl8L/bpgUfCez3UYlp Cj0LsffnptiiwOo5ELjfpr0qtQ2FNXyaPeVP/HagOko8+ei2gLLdsPk4p9jCawX9 uThSFteNpyczeOPI9ta+WwRqp5yTKm1u9qe05MgeHsqSoihNshq56NzMsjFFutSk 5esJt5i9IH8CzT3hGuYJeM/sPVek7/cH8JVOkdaf3R1bjLzykxE= -----END CERTIFICATE-----Generated at Sat Apr 5 21:18:01 2025 by rpki-client