$ rpki-client -vvf repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft File: 2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft (raw, json) Hash identifier: 9R3/UbTW3oZs1pYUlk5HhEdqrC0nyWTxC4D6/Uv8z4w= Subject key identifier: A2:66:1A:7B:4B:6A:66:4A:93:B6:C0:58:63:FA:D4:F5:B1:C1:48:80 Authority key identifier: 2A:A6:E6:5B:86:E4:42:3A:EC:7D:02:D8:5B:43:BA:00:80:12:D2:9D Certificate issuer: /CN=2AA6E65B86E4423AEC7D02D85B43BA008012D29D Certificate serial: 17376D0F010F5141FBB971AA1C408E30E25F6E17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft Manifest number: 0165 Signing time: Sat 05 Apr 2025 03:41:04 +0000 Manifest this update: Sat 05 Apr 2025 03:36:04 +0000 Manifest next update: Tue 08 Apr 2025 12:32:04 +0000 Files and hashes: 1: 2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl (hash: tGXDxT318CIASIvBqZai9+RP5zr6lxZC0K2ni3jRFVA=) 2: 3130332e3132392e34382e302f32332d3234203d3e20313335343738.roa (hash: nuG2thm0oiOwKnakW1lHLkXwPbpo6Y7ruJlmvamdekA=) 3: 3130332e3132392e35302e302f32332d3234203d3e20313335343738.roa (hash: RsQS9pXwEYaCDD5cA+PCEhqN7yNzqnOa8ujUnr88Njo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:37:6d:0f:01:0f:51:41:fb:b9:71:aa:1c:40:8e:30:e2:5f:6e:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AA6E65B86E4423AEC7D02D85B43BA008012D29D Validity Not Before: Apr 5 03:36:04 2025 GMT Not After : Apr 8 12:32:04 2025 GMT Subject: CN=A2661A7B4B6A664A93B6C05863FAD4F5B1C14880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e6:12:ce:fd:55:1e:76:b9:1f:de:d3:c8:70: 30:d8:81:ec:ae:7f:96:0e:a7:ef:50:fc:4e:65:67: 33:9d:ac:77:b0:0d:82:6c:ca:2c:e0:69:b0:65:32: 0b:b1:0d:57:93:be:79:28:59:3d:e1:45:58:39:f0: cc:8c:16:0b:7e:98:58:ba:3c:36:14:be:f1:46:14: 61:41:5d:69:fb:bc:35:39:c9:75:11:92:ab:64:06: 61:03:8b:ef:07:55:53:eb:78:12:36:14:37:73:c4: 48:92:fd:c4:de:fe:01:e4:f0:48:57:3e:c3:35:1c: 2b:2d:88:8a:c3:be:82:10:57:fe:25:67:10:cc:05: a9:3f:a6:f0:8b:19:9f:69:8c:a2:c1:81:21:f2:6a: 7f:7e:70:3d:95:a0:67:25:b2:c8:e1:0a:e5:26:d6: d9:0f:2c:b6:3a:5f:fc:fa:5e:5b:1c:ec:12:e4:cf: 0a:0a:7e:87:88:fa:62:7d:b1:f5:4b:f8:ed:0d:8a: f7:6f:42:2a:3b:41:8f:3e:70:f8:c3:ea:29:3b:d8: 86:83:5d:c8:98:93:20:b7:0c:1a:80:d3:52:e6:23: 9d:78:36:9d:62:ea:6c:96:c0:32:84:e9:5d:12:94: 8a:2b:b1:55:de:d4:56:ff:2a:a1:ac:08:ec:eb:bc: df:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:66:1A:7B:4B:6A:66:4A:93:B6:C0:58:63:FA:D4:F5:B1:C1:48:80 X509v3 Authority Key Identifier: keyid:2A:A6:E6:5B:86:E4:42:3A:EC:7D:02:D8:5B:43:BA:00:80:12:D2:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:b4:a4:df:1e:72:d8:74:1e:b3:84:ec:a4:24:13:73:80:2e: f4:fa:ba:b0:c8:de:25:01:e8:f3:8a:0c:90:43:e2:4f:6e:49: fe:ee:3e:88:8c:cd:25:83:90:c6:73:a0:5b:74:30:51:f5:1b: 24:7f:fb:3f:bd:b9:0c:d7:67:9b:f5:7f:f1:4c:61:36:27:10: 81:3c:09:c0:68:7e:01:f4:b0:d9:d9:79:9b:ea:de:b4:fe:6c: 10:4e:6e:05:58:cb:6e:d6:9e:ad:74:3a:80:bc:e1:e3:2e:06: c6:91:96:c3:b2:8e:c2:52:5d:cb:93:13:e5:40:0d:2b:80:4d: c0:f3:66:44:21:fe:b2:24:47:75:9a:f8:0b:9f:8b:2a:ae:57: 50:0b:8b:aa:a8:31:6c:44:fe:56:ce:38:2d:2a:5c:8d:73:4d: 6c:c1:70:5d:f9:de:42:13:68:35:4d:9f:28:1a:5b:5c:be:1f: 94:4a:c6:96:16:c8:56:a0:7e:63:01:b7:c8:3c:ad:b7:d6:b8: 8f:fe:97:7e:47:99:e2:fe:cf:42:93:21:a1:ad:e8:a7:45:97: bf:bb:ca:1f:33:0e:99:86:44:fc:4a:af:95:06:5a:96:fb:33: 09:7c:9d:41:25:31:35:b4:de:33:12:87:23:57:60:60:92:ad: 58:ad:85:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFzdtDwEPUUH7uXGqHECOMOJfbhcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBNkU2NUI4NkU0NDIzQUVDN0QwMkQ4NUI0M0JBMDA4 MDEyRDI5RDAeFw0yNTA0MDUwMzM2MDRaFw0yNTA0MDgxMjMyMDRaMDMxMTAvBgNV BAMTKEEyNjYxQTdCNEI2QTY2NEE5M0I2QzA1ODYzRkFENEY1QjFDMTQ4ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl5hLO/VUedrkf3tPIcDDYgeyu f5YOp+9Q/E5lZzOdrHewDYJsyizgabBlMguxDVeTvnkoWT3hRVg58MyMFgt+mFi6 PDYUvvFGFGFBXWn7vDU5yXURkqtkBmEDi+8HVVPreBI2FDdzxEiS/cTe/gHk8EhX PsM1HCstiIrDvoIQV/4lZxDMBak/pvCLGZ9pjKLBgSHyan9+cD2VoGclssjhCuUm 1tkPLLY6X/z6Xlsc7BLkzwoKfoeI+mJ9sfVL+O0NivdvQio7QY8+cPjD6ik72IaD XciYkyC3DBqA01LmI514Np1i6myWwDKE6V0SlIorsVXe1Fb/KqGsCOzrvN/RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUomYae0tqZkqTtsBYY/rU9bHBSIAwHwYDVR0j BBgwFoAUKqbmW4bkQjrsfQLYW0O6AIAS0p0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTZiZmY5ZC1mYjEzLTQ3YjktOWNjMC1kZDZhMDczMGExYzYvMC8yQUE2RTY1Qjg2 RTQ0MjNBRUM3RDAyRDg1QjQzQkEwMDgwMTJEMjlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkFBNkU2NUI4NkU0NDIzQUVDN0QwMkQ4NUI0M0JBMDA4MDEy RDI5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U2YmZmOWQtZmIxMy00N2I5LTlj YzAtZGQ2YTA3MzBhMWM2LzAvMkFBNkU2NUI4NkU0NDIzQUVDN0QwMkQ4NUI0M0JB MDA4MDEyRDI5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJq0pN8ecth0HrOE7KQkE3OALvT6urDI3iUB 6POKDJBD4k9uSf7uPoiMzSWDkMZzoFt0MFH1GyR/+z+9uQzXZ5v1f/FMYTYnEIE8 CcBofgH0sNnZeZvq3rT+bBBObgVYy27Wnq10OoC84eMuBsaRlsOyjsJSXcuTE+VA DSuATcDzZkQh/rIkR3Wa+AufiyquV1ALi6qoMWxE/lbOOC0qXI1zTWzBcF353kIT aDVNnygaW1y+H5RKxpYWyFagfmMBt8g8rbfWuI/+l35HmeL+z0KTIaGt6KdFl7+7 yh8zDpmGRPxKr5UGWpb7Mwl8nUElMTW03jMShyNXYGCSrVithZ4= -----END CERTIFICATE-----Generated at Sat Apr 5 16:38:24 2025 by rpki-client