$ rpki-client -vvf repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft File: 2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft (raw, json) Hash identifier: Vfzqh5nwbb8deROnLNc+6XXRKP5xJoQobwx/ZrisO3E= Subject key identifier: BE:6A:E7:14:94:3C:B4:DA:1B:2E:72:EC:16:90:3C:32:2E:A8:BE:F3 Authority key identifier: 2A:F5:12:1C:D1:CF:A7:79:8C:C1:DD:77:7B:46:43:69:D1:DE:A6:C1 Certificate issuer: /CN=2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1 Certificate serial: 57B531C10DC5C72565BF12710209144E032D9576 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft Manifest number: 022B Signing time: Wed 04 Jun 2025 03:21:10 +0000 Manifest this update: Wed 04 Jun 2025 03:16:10 +0000 Manifest next update: Sat 07 Jun 2025 12:50:10 +0000 Files and hashes: 1: 323430353a633863303a3a2f33322d3332203d3e20313339393831.roa (hash: xAQ8nY4YiCbyThm1ahzRI7qCPhGk2b5venOiA8cHRk4=) 2: 2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl (hash: 0crSswiWsdDiYuLJ7nfQesCWS2VkV0osNXjvxg2H+aA=) 3: 3130332e3134382e32342e302f32332d3234203d3e20313339393831.roa (hash: 6FLbYuy1S5qOt7tY0dfAZpELgfONO6cx6swxFm3099E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 12:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:b5:31:c1:0d:c5:c7:25:65:bf:12:71:02:09:14:4e:03:2d:95:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1 Validity Not Before: Jun 4 03:16:10 2025 GMT Not After : Jun 7 12:50:10 2025 GMT Subject: CN=BE6AE714943CB4DA1B2E72EC16903C322EA8BEF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:61:56:17:b5:b5:37:64:92:de:af:c6:97:38: 01:72:c7:b3:b3:53:aa:26:97:6f:0b:44:fd:f2:24: ad:c5:0e:cc:03:a0:a2:17:f1:6d:85:92:6a:dc:30: 7d:d9:8f:37:77:10:4f:18:6a:3c:72:5a:5d:44:8b: 2e:d0:e7:ba:af:ae:fc:ac:2e:44:f7:94:5c:aa:3c: f5:a3:2e:0c:e0:6b:a8:28:7e:c1:10:0f:ad:3f:26: 2d:a2:cb:0f:e6:6d:f2:55:4f:fc:ca:dc:2a:22:54: 5a:67:9c:8d:2e:74:14:c1:f7:92:4e:8b:51:73:22: cb:5f:ca:83:d7:e4:8a:b4:7a:7e:46:46:3b:15:78: 7a:13:94:95:d5:5d:3a:c6:6f:41:9b:43:7d:f6:90: 20:66:c0:a9:98:4e:38:f9:bc:a7:90:cb:74:52:22: 14:5b:82:71:83:a4:b6:3b:2b:d2:fe:60:2f:0a:82: c1:3e:9b:5f:f0:9b:12:f8:8f:f2:46:80:3d:9c:d8: 2c:a1:f6:86:27:8e:c7:5c:16:e1:76:9f:ae:96:42: 29:9a:d5:90:97:6f:fc:b2:bb:45:53:78:1f:9a:bf: c1:4e:e6:a2:d5:20:05:22:7b:73:c8:c8:c6:71:d2: 94:76:e5:34:29:4f:2d:25:aa:fb:fd:4f:37:67:a9: 80:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:6A:E7:14:94:3C:B4:DA:1B:2E:72:EC:16:90:3C:32:2E:A8:BE:F3 X509v3 Authority Key Identifier: keyid:2A:F5:12:1C:D1:CF:A7:79:8C:C1:DD:77:7B:46:43:69:D1:DE:A6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:bd:c5:9b:72:6f:84:9f:1f:ff:cb:5d:e0:fa:41:e2:77:77: 47:81:5c:b9:9d:6b:aa:92:7b:9d:72:33:ac:12:89:ba:c0:13: 46:1e:a8:79:c2:c7:e5:ef:08:b2:fb:72:8e:7f:b4:d3:d0:f8: 67:ac:18:96:d7:d1:f5:0a:11:e6:62:a4:aa:c4:ef:c4:b1:04: 73:9b:04:d4:28:b7:be:4a:3c:78:f0:e0:34:8f:bb:a5:49:c4: fe:42:32:c5:8d:81:53:8b:01:72:d1:84:a5:89:37:13:4d:31: 6d:10:e1:83:09:3c:6e:5a:d8:35:c6:a1:80:3c:a4:34:31:3f: 2f:f3:08:7a:98:c0:a1:a8:af:81:11:2f:e8:a9:82:33:d8:43: a0:33:67:cf:61:82:98:99:77:9d:0e:75:99:a4:81:59:3d:ff: db:54:47:dd:d4:59:40:90:2a:bc:8d:eb:55:31:28:4c:ae:ff: 77:f8:c5:f4:71:c9:13:4d:f2:11:dc:76:dc:3a:7c:e3:16:83: 07:17:00:8a:60:c9:ff:8b:11:75:ed:23:30:5a:2d:65:56:ec: ac:ca:a5:76:4f:76:6a:78:0d:e1:c6:5b:50:4c:9a:f2:5b:9e: 6d:e2:af:4c:f5:a4:e8:a1:27:ff:5f:63:2f:55:39:12:b2:d4: b0:4f:94:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV7UxwQ3FxyVlvxJxAgkUTgMtlXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQzNjlE MURFQTZDMTAeFw0yNTA2MDQwMzE2MTBaFw0yNTA2MDcxMjUwMTBaMDMxMTAvBgNV BAMTKEJFNkFFNzE0OTQzQ0I0REExQjJFNzJFQzE2OTAzQzMyMkVBOEJFRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOYVYXtbU3ZJLer8aXOAFyx7Oz U6oml28LRP3yJK3FDswDoKIX8W2FkmrcMH3Zjzd3EE8YajxyWl1Eiy7Q57qvrvys LkT3lFyqPPWjLgzga6gofsEQD60/Ji2iyw/mbfJVT/zK3CoiVFpnnI0udBTB95JO i1FzIstfyoPX5Iq0en5GRjsVeHoTlJXVXTrGb0GbQ332kCBmwKmYTjj5vKeQy3RS IhRbgnGDpLY7K9L+YC8KgsE+m1/wmxL4j/JGgD2c2Cyh9oYnjsdcFuF2n66WQima 1ZCXb/yyu0VTeB+av8FO5qLVIAUie3PIyMZx0pR25TQpTy0lqvv9TzdnqYDrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvmrnFJQ8tNobLnLsFpA8Mi6ovvMwHwYDVR0j BBgwFoAUKvUSHNHPp3mMwd13e0ZDadHepsEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OTJlMDdmOC0xYTQ4LTQzOTEtYTZhNS04ZTRlMzljODU4OGEvMC8yQUY1MTIxQ0Qx Q0ZBNzc5OENDMURENzc3QjQ2NDM2OUQxREVBNkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQzNjlEMURF QTZDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTkyZTA3ZjgtMWE0OC00MzkxLWE2 YTUtOGU0ZTM5Yzg1ODhhLzAvMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQz NjlEMURFQTZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHi9xZtyb4SfH//LXeD6QeJ3d0eBXLmda6qS e51yM6wSibrAE0YeqHnCx+XvCLL7co5/tNPQ+GesGJbX0fUKEeZipKrE78SxBHOb BNQot75KPHjw4DSPu6VJxP5CMsWNgVOLAXLRhKWJNxNNMW0Q4YMJPG5a2DXGoYA8 pDQxPy/zCHqYwKGor4ERL+ipgjPYQ6AzZ89hgpiZd50OdZmkgVk9/9tUR93UWUCQ KryN61UxKEyu/3f4xfRxyRNN8hHcdtw6fOMWgwcXAIpgyf+LEXXtIzBaLWVW7KzK pXZPdmp4DeHGW1BMmvJbnm3ir0z1pOihJ/9fYy9VORKy1LBPlG0= -----END CERTIFICATE-----Generated at Thu Jun 5 19:39:58 2025 by rpki-client