$ rpki-client -vvf repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.mft File: 2FD08E6755CF1CCAAF9D5834449797848A706B57.mft (raw, json) Hash identifier: RI+PWZxCdGg0NpcXNSM7+sTRBb07VeDn3SheNkfB53g= Subject key identifier: 4B:B0:6C:B0:1A:B8:D5:2B:D2:EE:8C:83:C6:3D:8B:73:90:D1:54:F3 Authority key identifier: 2F:D0:8E:67:55:CF:1C:CA:AF:9D:58:34:44:97:97:84:8A:70:6B:57 Certificate issuer: /CN=2FD08E6755CF1CCAAF9D5834449797848A706B57 Certificate serial: 545CB0EFDD6DE13833B95CFE4AD6F6620C20E428 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FD08E6755CF1CCAAF9D5834449797848A706B57.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.mft Manifest number: 036D Signing time: Sat 19 Apr 2025 21:21:54 +0000 Manifest this update: Sat 19 Apr 2025 21:16:54 +0000 Manifest next update: Wed 23 Apr 2025 06:12:54 +0000 Files and hashes: 1: 3130332e3136332e3232382e302f32342d3234203d3e20313431383935.roa (hash: wfB/tzQBppuc1HMLNKZS8DgmDxNdzRsLM2dhnwxSWec=) 2: 2FD08E6755CF1CCAAF9D5834449797848A706B57.crl (hash: wP+tdvSdeTgxHH74BQ4j90NlgJpHKVXCmpLY1IPC2d8=) 3: 3130332e3136332e3232382e302f32332d3233203d3e20313431383935.roa (hash: +8jSV/P+qx2iDLcVmAlWUEpzsefjQgC+GskbssdGlnA=) 4: 3130332e3136332e3232392e302f32342d3234203d3e20313431383935.roa (hash: hZedPSTR08Zc5q3i4frxXXEyzM8AAXb/PDgw+Iy1Wv4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.crl rsync://repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FD08E6755CF1CCAAF9D5834449797848A706B57.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 06:12:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:5c:b0:ef:dd:6d:e1:38:33:b9:5c:fe:4a:d6:f6:62:0c:20:e4:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FD08E6755CF1CCAAF9D5834449797848A706B57 Validity Not Before: Apr 19 21:16:54 2025 GMT Not After : Apr 23 06:12:54 2025 GMT Subject: CN=4BB06CB01AB8D52BD2EE8C83C63D8B7390D154F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:34:41:cf:22:55:db:4b:0a:bf:4b:dd:5d:0b: 29:74:2c:7b:6a:2b:82:6d:c8:49:71:ea:a9:e0:20: a9:80:e9:32:39:cc:89:09:31:a5:6e:64:bc:71:71: ce:95:c1:9b:c7:69:9e:18:c6:b2:90:3f:62:f1:f7: a8:57:15:88:40:5b:ad:cd:6c:a9:2c:2b:24:1e:ef: ca:4a:70:7d:4c:9e:1b:3f:e1:1d:88:15:74:04:80: 24:70:32:fd:17:51:b1:de:9e:d9:98:10:ec:11:2a: 1a:bd:01:a4:21:0f:87:cf:02:41:18:32:68:90:5c: e9:f7:53:32:59:21:69:fe:c7:56:0c:d9:5b:5d:c9: 0a:e4:5a:ed:0e:7c:fb:1e:2f:b0:7c:f5:cc:21:1f: f8:91:6c:c6:47:04:56:64:9e:a4:01:08:60:25:21: 44:1c:d1:ee:8f:05:b2:4f:ab:6c:5c:53:0c:5b:2b: be:e0:17:37:4f:34:dd:2c:40:0b:09:39:f3:e1:37: 1e:df:f9:f5:b8:90:2e:cc:06:de:79:99:e0:0b:17: e8:58:d1:2a:24:68:1e:86:28:95:67:77:b9:51:ff: 0c:27:ae:8c:cc:f4:ed:8c:3c:c5:a5:34:29:1c:8a: 73:29:56:ce:3e:4b:73:38:80:18:9f:6b:0e:70:00: 1c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:B0:6C:B0:1A:B8:D5:2B:D2:EE:8C:83:C6:3D:8B:73:90:D1:54:F3 X509v3 Authority Key Identifier: keyid:2F:D0:8E:67:55:CF:1C:CA:AF:9D:58:34:44:97:97:84:8A:70:6B:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FD08E6755CF1CCAAF9D5834449797848A706B57.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:03:f1:c1:b7:f1:be:38:ca:42:aa:1c:8a:fa:9f:95:09:88: 43:c7:a3:52:99:39:33:f6:e4:12:a9:cd:87:8b:f1:b9:f7:77: 2a:25:0d:c4:99:48:88:aa:d0:31:bd:22:4a:c5:ee:ac:52:f9: 87:45:e1:48:1e:90:90:b8:e1:a2:ff:c5:fe:da:60:15:d6:6d: 6d:95:7a:26:4a:10:4a:bc:b7:47:f6:7a:95:f4:2f:53:e7:cf: f7:bd:8a:8f:7d:a1:46:80:fe:f0:f1:84:40:51:b5:5e:61:6b: f1:71:72:b4:3e:29:c8:8e:c1:ba:9a:23:c7:5b:cf:ed:dc:bf: 59:70:5a:2b:c4:88:01:0c:9b:f3:48:15:63:69:ee:0e:f1:d2: e7:a8:4b:7f:58:89:f2:87:c9:d5:1a:6f:de:a1:b5:24:be:eb: fb:19:73:f6:17:db:32:e9:28:23:29:9a:df:8f:45:0f:98:93: d8:6a:b3:7e:a9:09:cd:06:08:8f:a5:a0:55:18:8c:22:e6:26: 5b:ee:6d:84:16:78:81:d4:4b:8f:a8:7a:cc:5d:7d:fc:2e:e1: e7:03:9f:78:0c:26:4e:98:fa:04:89:d6:98:41:3e:7a:d5:02: c4:38:00:b5:5f:01:d9:9d:30:fb:97:b7:04:99:3d:48:4b:a1: eb:63:bf:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVFyw791t4TgzuVz+Stb2Ygwg5CgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZEMDhFNjc1NUNGMUNDQUFGOUQ1ODM0NDQ5Nzk3ODQ4 QTcwNkI1NzAeFw0yNTA0MTkyMTE2NTRaFw0yNTA0MjMwNjEyNTRaMDMxMTAvBgNV BAMTKDRCQjA2Q0IwMUFCOEQ1MkJEMkVFOEM4M0M2M0Q4QjczOTBEMTU0RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiNEHPIlXbSwq/S91dCyl0LHtq K4JtyElx6qngIKmA6TI5zIkJMaVuZLxxcc6VwZvHaZ4YxrKQP2Lx96hXFYhAW63N bKksKyQe78pKcH1Mnhs/4R2IFXQEgCRwMv0XUbHentmYEOwRKhq9AaQhD4fPAkEY MmiQXOn3UzJZIWn+x1YM2VtdyQrkWu0OfPseL7B89cwhH/iRbMZHBFZknqQBCGAl IUQc0e6PBbJPq2xcUwxbK77gFzdPNN0sQAsJOfPhNx7f+fW4kC7MBt55meALF+hY 0SokaB6GKJVnd7lR/wwnrozM9O2MPMWlNCkcinMpVs4+S3M4gBifaw5wABw7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS7BssBq41SvS7oyDxj2Lc5DRVPMwHwYDVR0j BBgwFoAUL9COZ1XPHMqvnVg0RJeXhIpwa1cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2QwZDdmYS1kNmY4LTRjMjItYjQ4YS01OGI4ZWQ4ZWRkYTcvMC8yRkQwOEU2NzU1 Q0YxQ0NBQUY5RDU4MzQ0NDk3OTc4NDhBNzA2QjU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkZEMDhFNjc1NUNGMUNDQUFGOUQ1ODM0NDQ5Nzk3ODQ4QTcw NkI1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGNkMGQ3ZmEtZDZmOC00YzIyLWI0 OGEtNThiOGVkOGVkZGE3LzAvMkZEMDhFNjc1NUNGMUNDQUFGOUQ1ODM0NDQ5Nzk3 ODQ4QTcwNkI1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKwD8cG38b44ykKqHIr6n5UJiEPHo1KZOTP2 5BKpzYeL8bn3dyolDcSZSIiq0DG9IkrF7qxS+YdF4UgekJC44aL/xf7aYBXWbW2V eiZKEEq8t0f2epX0L1Pnz/e9io99oUaA/vDxhEBRtV5ha/FxcrQ+KciOwbqaI8db z+3cv1lwWivEiAEMm/NIFWNp7g7x0ueoS39YifKHydUab96htSS+6/sZc/YX2zLp KCMpmt+PRQ+Yk9hqs36pCc0GCI+loFUYjCLmJlvubYQWeIHUS4+oesxdffwu4ecD n3gMJk6Y+gSJ1phBPnrVAsQ4ALVfAdmdMPuXtwSZPUhLoetjv0U= -----END CERTIFICATE-----Generated at Sun Apr 20 02:00:57 2025 by rpki-client