$ rpki-client -vvf repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft File: 2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft (raw, json) Hash identifier: yjZne3fKmjaOEaADPSkmuzNZFvGbGIfsJo7zCV5v38U= Subject key identifier: 46:6E:CF:97:A4:B9:55:BE:44:A0:60:37:91:86:26:FD:F7:5F:FA:33 Authority key identifier: 2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6 Certificate issuer: /CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6 Certificate serial: 4FE51389D8B45E79617B7301BDF3A3E2CE6DAAFA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft Manifest number: 0340 Signing time: Mon 09 Jun 2025 16:51:23 +0000 Manifest this update: Mon 09 Jun 2025 16:46:23 +0000 Manifest next update: Thu 12 Jun 2025 18:39:23 +0000 Files and hashes: 1: 3130332e3233312e38312e302f32342d3234203d3e20313331373335.roa (hash: cHq0w9NeVR2kphOoYMXZeSGQxfdQLrs5CAZ+diGk+MY=) 2: 3130332e3233312e38332e302f32342d3234203d3e20313331373335.roa (hash: UN6dazoYFxgS6jdi8SmiPFiRAzrs0mSEhCBMn6iEnws=) 3: 3130332e3233312e38322e302f32342d3234203d3e20313331373335.roa (hash: 8zUKTcgIM2YuD1hdzVzeO7drrLCkIVs9L0M7lsGNsV4=) 4: 2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl (hash: 3L28ZTTQAaDrd24yNSSc5cNCaYZKrLYE26o6Qrid618=) 5: 3130332e3233312e38302e302f32342d3234203d3e20313331373335.roa (hash: etlEVL/G6ecv5pikZQs/QfSTGNp1Hz5OKi7d2dSKjks=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 18:39:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:e5:13:89:d8:b4:5e:79:61:7b:73:01:bd:f3:a3:e2:ce:6d:aa:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6 Validity Not Before: Jun 9 16:46:23 2025 GMT Not After : Jun 12 18:39:23 2025 GMT Subject: CN=466ECF97A4B955BE44A06037918626FDF75FFA33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4e:38:19:aa:0b:35:fa:6a:c4:9f:6b:51:b1: 1a:91:62:ff:4e:35:b7:3b:85:42:23:de:43:19:c0: ed:ab:a9:19:a4:00:c5:b0:1b:c4:14:10:1c:d8:51: f4:55:1f:f4:91:73:a2:b4:f7:f2:f9:92:ec:98:7c: 70:87:bf:56:7b:60:72:67:fd:b0:a4:dc:af:3f:40: a1:f9:d7:8d:4b:2b:ae:19:a0:cf:24:30:3a:1f:e1: 2a:b0:64:88:fc:f0:ba:37:82:89:1a:00:4d:5d:55: 4c:8b:14:3b:af:5a:a0:ef:ee:d3:4f:39:57:51:07: cd:89:5d:80:cf:c6:d7:10:7e:5b:28:aa:27:72:69: f9:5d:6e:ca:b9:9f:50:7b:69:ee:b0:a7:cf:05:16: 06:8d:33:23:2c:d9:d4:84:5d:ec:6e:d3:a3:d3:c4: 37:c7:b3:55:fc:c3:04:dc:e9:20:2c:35:9f:4b:59: 93:62:a8:96:b5:2d:16:bf:2d:bc:e0:cc:2e:c6:c5: f9:c6:bb:74:4c:8d:97:28:5a:a7:65:d9:61:f1:1b: 21:70:97:0c:fb:5d:4d:e1:f5:5b:6a:0b:3d:05:02: 91:79:49:fb:a2:6d:12:bf:7e:a0:4a:28:30:38:b1: 92:d3:6a:ff:04:75:99:7e:8d:17:b5:70:79:36:8e: a2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:6E:CF:97:A4:B9:55:BE:44:A0:60:37:91:86:26:FD:F7:5F:FA:33 X509v3 Authority Key Identifier: keyid:2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:17:80:38:75:1a:14:78:9a:98:9a:3f:40:1e:40:01:d0:2f: ed:b0:5a:a8:21:48:ba:6c:1f:3f:69:80:d4:f8:c8:de:1b:d1: d4:d1:b3:47:49:34:6c:15:d3:67:8e:a6:9e:9a:13:af:2b:93: 1e:cf:c7:b2:c8:e7:d0:d6:d7:4b:cb:e4:b0:a2:a3:71:32:c5: 4d:f9:92:9e:5d:9a:b7:61:1c:7b:30:a8:c7:60:50:af:9a:05: 5a:6c:a7:73:5a:db:19:64:f0:bc:eb:df:13:ae:04:cd:72:b2: f2:b3:82:f2:ec:e8:32:22:4b:c1:b0:d0:bb:17:cd:5a:f5:8e: 32:de:a4:dd:27:b1:f2:3b:1c:3d:53:64:b9:40:8d:cc:53:0d: 82:40:e1:47:80:c3:3b:30:83:63:1c:b5:9f:e7:e3:da:ab:29: 79:8b:5d:87:95:b6:f6:48:32:a7:52:fa:d6:89:d4:e0:19:29: 9a:cc:3c:37:e9:8a:62:cd:2c:b9:28:5c:2d:48:53:64:e4:9f: 9f:5a:9a:e6:09:38:5b:03:0c:0f:5e:b4:fd:42:59:23:03:95: 7e:dd:e5:ce:48:4d:3c:e7:8d:80:47:9a:56:a7:81:ca:e0:02: 08:79:44:ae:c0:fc:ab:52:55:0e:df:fb:05:55:a2:a1:1e:b5: 32:14:c5:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT+UTidi0Xnlhe3MBvfOj4s5tqvowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3REU1 RDdBNjNBNjAeFw0yNTA2MDkxNjQ2MjNaFw0yNTA2MTIxODM5MjNaMDMxMTAvBgNV BAMTKDQ2NkVDRjk3QTRCOTU1QkU0NEEwNjAzNzkxODYyNkZERjc1RkZBMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2TjgZqgs1+mrEn2tRsRqRYv9O Nbc7hUIj3kMZwO2rqRmkAMWwG8QUEBzYUfRVH/SRc6K09/L5kuyYfHCHv1Z7YHJn /bCk3K8/QKH5141LK64ZoM8kMDof4SqwZIj88Lo3gokaAE1dVUyLFDuvWqDv7tNP OVdRB82JXYDPxtcQflsoqidyafldbsq5n1B7ae6wp88FFgaNMyMs2dSEXexu06PT xDfHs1X8wwTc6SAsNZ9LWZNiqJa1LRa/LbzgzC7GxfnGu3RMjZcoWqdl2WHxGyFw lwz7XU3h9VtqCz0FApF5SfuibRK/fqBKKDA4sZLTav8EdZl+jRe1cHk2jqIpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURm7Pl6S5Vb5EoGA3kYYm/fdf+jMwHwYDVR0j BBgwFoAUK7E4J0I1dRQdoPHFezPn3l16Y6YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTQ5M2JlMS1mMDY0LTQ5ZTYtOTQ5YS1jYjNlY2JmYzhmNDYvMC8yQkIxMzgyNzQy MzU3NTE0MURBMEYxQzU3QjMzRTdERTVEN0E2M0E2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3REU1RDdB NjNBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGE0OTNiZTEtZjA2NC00OWU2LTk0 OWEtY2IzZWNiZmM4ZjQ2LzAvMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3 REU1RDdBNjNBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAIXgDh1GhR4mpiaP0AeQAHQL+2wWqghSLps Hz9pgNT4yN4b0dTRs0dJNGwV02eOpp6aE68rkx7Px7LI59DW10vL5LCio3EyxU35 kp5dmrdhHHswqMdgUK+aBVpsp3Na2xlk8Lzr3xOuBM1ysvKzgvLs6DIiS8Gw0LsX zVr1jjLepN0nsfI7HD1TZLlAjcxTDYJA4UeAwzswg2MctZ/n49qrKXmLXYeVtvZI MqdS+taJ1OAZKZrMPDfpimLNLLkoXC1IU2Tkn59amuYJOFsDDA9etP1CWSMDlX7d 5c5ITTznjYBHmlangcrgAgh5RK7A/KtSVQ7f+wVVoqEetTIUxQ8= -----END CERTIFICATE-----Generated at Wed Jun 11 11:27:02 2025 by rpki-client