$ rpki-client -vvf repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft File: 2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft (raw, json) Hash identifier: nzE9cIo1kE4zOEAj/K/v+vBIwSkbZEIhZh0HhMczq4A= Subject key identifier: A2:9D:99:DE:AA:2B:D5:45:DB:48:39:57:4E:2B:00:B7:1D:CA:6E:8B Authority key identifier: 2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6 Certificate issuer: /CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6 Certificate serial: 530DBA6046D86CC9D308CAE17DAB2238463FCA66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft Manifest number: 0329 Signing time: Mon 21 Apr 2025 15:51:23 +0000 Manifest this update: Mon 21 Apr 2025 15:46:23 +0000 Manifest next update: Thu 24 Apr 2025 22:35:23 +0000 Files and hashes: 1: 3130332e3233312e38322e302f32342d3234203d3e20313331373335.roa (hash: +ZL/jR4jkHL38m4yhCnPzcMy2A6pqHCMxHZrb0m8ttA=) 2: 3130332e3233312e38332e302f32342d3234203d3e20313331373335.roa (hash: aea2W9WYQPl/1TtNtg5p/r8zRHe+55gj7tNmZIC5BG8=) 3: 3130332e3233312e38312e302f32342d3234203d3e20313331373335.roa (hash: cHq0w9NeVR2kphOoYMXZeSGQxfdQLrs5CAZ+diGk+MY=) 4: 2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl (hash: 5+Aut+/aYMs9hLzccTmCKTlxlrXxJNUmlUiUt3DJUM4=) 5: 3130332e3233312e38302e302f32342d3234203d3e20313331373335.roa (hash: etlEVL/G6ecv5pikZQs/QfSTGNp1Hz5OKi7d2dSKjks=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 22:35:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:0d:ba:60:46:d8:6c:c9:d3:08:ca:e1:7d:ab:22:38:46:3f:ca:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6 Validity Not Before: Apr 21 15:46:23 2025 GMT Not After : Apr 24 22:35:23 2025 GMT Subject: CN=A29D99DEAA2BD545DB4839574E2B00B71DCA6E8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ae:fa:91:15:76:e7:6e:a8:81:4f:a5:86:41: 13:23:44:9d:db:4e:37:03:83:50:13:2d:0a:8a:12: 38:1b:34:06:6f:75:85:cf:73:cc:fe:9b:ea:5c:63: 8d:e8:72:a9:9e:86:d9:40:34:9f:02:1a:c8:4f:1a: f2:56:5e:4a:17:73:92:7c:a1:58:d3:a0:08:d9:e1: 63:cf:5f:2b:44:58:2a:f0:1c:26:98:c3:49:23:cc: c5:22:ec:1d:6e:98:33:4a:c5:10:f6:eb:25:6d:f8: 7f:f5:8f:aa:a0:dc:ec:d0:9b:5e:98:63:48:74:df: 77:60:4a:20:6a:5f:dd:95:1e:b3:52:62:75:9f:fe: 94:78:fb:c0:af:4d:e2:cb:59:bf:f8:a0:25:84:fb: 08:61:54:71:92:4f:68:36:80:f4:ca:b5:7b:e0:2b: c9:d5:ce:92:32:d5:3c:52:a6:4e:e0:1c:d8:88:f4: ac:24:be:e6:40:1d:50:d2:40:39:19:9e:96:ec:ab: 75:b6:f6:8b:ab:96:ad:c2:18:ed:3c:71:14:a3:b0: 56:6c:7b:93:3e:b4:d2:d9:54:44:d6:f7:2a:fb:c3: a0:14:40:d7:c1:ec:bf:03:d6:05:d6:9b:e9:e6:cc: 07:3a:a4:a3:8e:65:5b:78:d5:b4:02:46:0b:f2:97: 0b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:9D:99:DE:AA:2B:D5:45:DB:48:39:57:4E:2B:00:B7:1D:CA:6E:8B X509v3 Authority Key Identifier: keyid:2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:ce:57:6e:69:70:1f:51:69:ee:4d:ce:3c:1c:48:85:1f:31: b8:bd:dd:99:99:a9:74:a3:70:e9:d1:c2:db:46:90:94:be:e7: 05:63:f0:7c:dc:a6:a7:21:29:5f:31:3a:8b:62:7d:db:b9:cb: ce:1e:b3:6f:3d:45:2b:f4:5e:cf:45:28:2d:c7:bd:b0:f4:17: b2:87:64:f3:79:f2:ec:39:c6:d9:de:3e:2c:e1:e0:96:76:3e: 49:53:fd:9a:83:79:02:b9:2a:a3:f0:77:b3:87:89:6f:e9:85: 81:43:f9:47:14:c6:e2:ba:f9:27:7e:d8:00:37:0c:84:c9:8a: 6f:da:01:9e:36:28:1e:77:00:ed:77:59:6e:4f:43:39:c8:ca: f6:d4:3b:32:b7:d4:72:b0:91:b4:02:b2:66:b2:60:93:f6:97: fb:11:d0:16:08:85:99:47:4e:cf:aa:4f:98:2d:ea:05:4e:8e: 2d:2a:77:0d:75:7e:ac:33:e6:c9:5b:90:e6:ab:e5:65:2f:51: 98:c0:14:57:5e:3e:04:0b:b7:32:c1:83:75:4b:b2:d8:92:41: ae:55:7f:51:64:b9:ac:e7:60:43:b8:71:27:3c:ee:84:59:c1: 2d:8e:b8:3b:9b:82:a2:b0:3a:93:63:3d:e8:cb:c0:5b:e7:6d: f2:c5:79:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUw26YEbYbMnTCMrhfasiOEY/ymYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3REU1 RDdBNjNBNjAeFw0yNTA0MjExNTQ2MjNaFw0yNTA0MjQyMjM1MjNaMDMxMTAvBgNV BAMTKEEyOUQ5OURFQUEyQkQ1NDVEQjQ4Mzk1NzRFMkIwMEI3MURDQTZFOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzrvqRFXbnbqiBT6WGQRMjRJ3b TjcDg1ATLQqKEjgbNAZvdYXPc8z+m+pcY43ocqmehtlANJ8CGshPGvJWXkoXc5J8 oVjToAjZ4WPPXytEWCrwHCaYw0kjzMUi7B1umDNKxRD26yVt+H/1j6qg3OzQm16Y Y0h033dgSiBqX92VHrNSYnWf/pR4+8CvTeLLWb/4oCWE+whhVHGST2g2gPTKtXvg K8nVzpIy1TxSpk7gHNiI9KwkvuZAHVDSQDkZnpbsq3W29ourlq3CGO08cRSjsFZs e5M+tNLZVETW9yr7w6AUQNfB7L8D1gXWm+nmzAc6pKOOZVt41bQCRgvylwshAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUop2Z3qor1UXbSDlXTisAtx3KboswHwYDVR0j BBgwFoAUK7E4J0I1dRQdoPHFezPn3l16Y6YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTQ5M2JlMS1mMDY0LTQ5ZTYtOTQ5YS1jYjNlY2JmYzhmNDYvMC8yQkIxMzgyNzQy MzU3NTE0MURBMEYxQzU3QjMzRTdERTVEN0E2M0E2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3REU1RDdB NjNBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGE0OTNiZTEtZjA2NC00OWU2LTk0 OWEtY2IzZWNiZmM4ZjQ2LzAvMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3 REU1RDdBNjNBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAETOV25pcB9Rae5NzjwcSIUfMbi93ZmZqXSj cOnRwttGkJS+5wVj8HzcpqchKV8xOotifdu5y84es289RSv0Xs9FKC3HvbD0F7KH ZPN58uw5xtnePizh4JZ2PklT/ZqDeQK5KqPwd7OHiW/phYFD+UcUxuK6+Sd+2AA3 DITJim/aAZ42KB53AO13WW5PQznIyvbUOzK31HKwkbQCsmayYJP2l/sR0BYIhZlH Ts+qT5gt6gVOji0qdw11fqwz5slbkOar5WUvUZjAFFdePgQLtzLBg3VLstiSQa5V f1FkuaznYEO4cSc87oRZwS2OuDubgqKwOpNjPejLwFvnbfLFeeY= -----END CERTIFICATE-----Generated at Tue Apr 22 01:07:23 2025 by rpki-client