$ rpki-client -vvf repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.mft File: 2FD08E6755CF1CCAAF9D5834449797848A706B57.mft (raw, json) Hash identifier: E97iSBZLAnSJ922SwzuO38RJIHcFRYZhd5uBMMKu/jA= Subject key identifier: EC:C5:FB:F3:A0:EC:52:49:BC:53:5F:3E:51:09:47:FC:B4:8F:53:A1 Authority key identifier: 2F:D0:8E:67:55:CF:1C:CA:AF:9D:58:34:44:97:97:84:8A:70:6B:57 Certificate issuer: /CN=2FD08E6755CF1CCAAF9D5834449797848A706B57 Certificate serial: 419858554187A832A06BF590105BD0F3B9A2D837 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FD08E6755CF1CCAAF9D5834449797848A706B57.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.mft Manifest number: 0383 Signing time: Sat 07 Jun 2025 06:02:25 +0000 Manifest this update: Sat 07 Jun 2025 05:57:25 +0000 Manifest next update: Tue 10 Jun 2025 13:50:25 +0000 Files and hashes: 1: 3130332e3136332e3232392e302f32342d3234203d3e20313431383935.roa (hash: 73VvZzU4m43+fgjvOlr3Vv7ZHMtLS9jm+/QTGsOwFck=) 2: 3130332e3136332e3232382e302f32332d3233203d3e20313431383935.roa (hash: +8jSV/P+qx2iDLcVmAlWUEpzsefjQgC+GskbssdGlnA=) 3: 3130332e3136332e3232382e302f32342d3234203d3e20313431383935.roa (hash: QZlEVkF+HK3hEYAiWRapnYHmq7/bX0k5ZRTsDh0lSOE=) 4: 2FD08E6755CF1CCAAF9D5834449797848A706B57.crl (hash: fWa8yDYl64M1c38DvjKuG1Mpsiy8+6ncTfu9HNmYU7o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.crl rsync://repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FD08E6755CF1CCAAF9D5834449797848A706B57.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 13:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:98:58:55:41:87:a8:32:a0:6b:f5:90:10:5b:d0:f3:b9:a2:d8:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FD08E6755CF1CCAAF9D5834449797848A706B57 Validity Not Before: Jun 7 05:57:25 2025 GMT Not After : Jun 10 13:50:25 2025 GMT Subject: CN=ECC5FBF3A0EC5249BC535F3E510947FCB48F53A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:68:ef:16:f3:8c:58:47:d2:ea:1c:3e:f1:01: 9c:74:e7:d1:6a:9c:15:c7:9a:be:e1:fc:f8:2b:94: 63:6c:96:52:7f:d5:5b:4d:bc:9d:dd:b7:d1:0a:c3: 6c:bd:df:4b:fa:fb:89:07:3c:8a:6d:f0:52:41:b9: 3c:2a:18:a5:11:f9:6d:be:f9:0c:fc:24:a8:59:c0: 3f:dd:2b:26:49:fd:90:66:a5:ba:4f:50:f5:e7:2a: e9:04:d0:ca:df:af:e5:2c:70:80:9a:15:d3:79:a7: c5:a0:5d:1f:dc:f7:f4:e7:c7:89:15:e4:54:98:bc: fd:62:f0:f9:0a:e4:2c:ff:4f:bb:40:77:c2:bf:81: af:5f:5e:84:91:54:d8:8d:3e:4d:bd:80:22:2c:3b: 85:64:e2:38:df:77:0e:af:89:4d:8d:06:f3:a5:72: 21:7e:f8:82:55:e0:21:65:22:f3:31:c0:48:31:61: 93:09:98:27:cb:08:5d:93:5c:71:f3:66:28:3b:83: b9:d7:a5:63:74:c0:0c:f7:90:a9:c0:41:5e:9c:ea: cf:f3:75:c8:49:30:68:25:b9:4b:ae:3a:ee:2b:69: af:5c:7e:38:ad:67:93:80:45:f0:18:0d:2e:d9:7e: 7f:aa:c6:1d:81:bb:48:6b:94:6b:97:4f:7e:0b:88: 70:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C5:FB:F3:A0:EC:52:49:BC:53:5F:3E:51:09:47:FC:B4:8F:53:A1 X509v3 Authority Key Identifier: keyid:2F:D0:8E:67:55:CF:1C:CA:AF:9D:58:34:44:97:97:84:8A:70:6B:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FD08E6755CF1CCAAF9D5834449797848A706B57.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:7c:e0:b1:c2:f0:2f:85:aa:3d:b7:fc:19:76:f9:3e:29:ab: 67:74:23:45:9f:69:26:dd:26:04:28:f6:f5:1f:16:bc:8f:13: b7:a2:cf:dd:73:9f:f6:19:49:99:d8:9e:4f:bd:31:56:5d:28: 61:ad:7c:11:dc:12:b7:5f:10:2f:fd:53:f1:5b:a2:c4:90:c2: 77:1b:41:0d:c3:38:e6:4f:2e:cc:a6:f6:bf:b6:a5:06:ef:e2: 3f:93:b8:9f:51:7e:85:c7:2d:48:71:84:f2:5d:c2:88:4d:a1: 67:f3:3a:09:0b:ef:b6:20:94:3c:fc:9d:4a:11:8f:8c:f4:0c: ee:e2:b2:ce:14:5e:fb:65:94:64:e9:db:35:b7:a2:e8:39:02: 71:98:85:1e:ee:5e:b4:2a:66:f2:47:4f:c8:ee:d9:ac:84:4e: 8e:d2:d6:dc:88:b3:25:cd:49:65:8d:6c:ee:e9:34:ec:bc:40: 23:36:99:31:b3:2f:77:3a:d4:7f:2c:ff:ef:dd:48:cf:65:51: ec:4b:bc:df:32:ed:be:5f:a4:ca:47:24:36:ad:50:78:3a:a6: ee:64:60:c9:30:8b:1b:cd:c6:ac:10:e7:fa:5f:e3:50:10:94: d1:a7:5e:ae:6f:04:b8:e2:b5:29:61:0b:c9:9d:59:77:54:a3: e9:2d:c5:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQZhYVUGHqDKga/WQEFvQ87mi2DcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZEMDhFNjc1NUNGMUNDQUFGOUQ1ODM0NDQ5Nzk3ODQ4 QTcwNkI1NzAeFw0yNTA2MDcwNTU3MjVaFw0yNTA2MTAxMzUwMjVaMDMxMTAvBgNV BAMTKEVDQzVGQkYzQTBFQzUyNDlCQzUzNUYzRTUxMDk0N0ZDQjQ4RjUzQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWaO8W84xYR9LqHD7xAZx059Fq nBXHmr7h/PgrlGNsllJ/1VtNvJ3dt9EKw2y930v6+4kHPIpt8FJBuTwqGKUR+W2+ +Qz8JKhZwD/dKyZJ/ZBmpbpPUPXnKukE0Mrfr+UscICaFdN5p8WgXR/c9/Tnx4kV 5FSYvP1i8PkK5Cz/T7tAd8K/ga9fXoSRVNiNPk29gCIsO4Vk4jjfdw6viU2NBvOl ciF++IJV4CFlIvMxwEgxYZMJmCfLCF2TXHHzZig7g7nXpWN0wAz3kKnAQV6c6s/z dchJMGgluUuuOu4raa9cfjitZ5OARfAYDS7Zfn+qxh2Bu0hrlGuXT34LiHCfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7MX786DsUkm8U18+UQlH/LSPU6EwHwYDVR0j BBgwFoAUL9COZ1XPHMqvnVg0RJeXhIpwa1cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2QwZDdmYS1kNmY4LTRjMjItYjQ4YS01OGI4ZWQ4ZWRkYTcvMC8yRkQwOEU2NzU1 Q0YxQ0NBQUY5RDU4MzQ0NDk3OTc4NDhBNzA2QjU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkZEMDhFNjc1NUNGMUNDQUFGOUQ1ODM0NDQ5Nzk3ODQ4QTcw NkI1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGNkMGQ3ZmEtZDZmOC00YzIyLWI0 OGEtNThiOGVkOGVkZGE3LzAvMkZEMDhFNjc1NUNGMUNDQUFGOUQ1ODM0NDQ5Nzk3 ODQ4QTcwNkI1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABB84LHC8C+Fqj23/Bl2+T4pq2d0I0WfaSbd JgQo9vUfFryPE7eiz91zn/YZSZnYnk+9MVZdKGGtfBHcErdfEC/9U/FbosSQwncb QQ3DOOZPLsym9r+2pQbv4j+TuJ9RfoXHLUhxhPJdwohNoWfzOgkL77YglDz8nUoR j4z0DO7iss4UXvtllGTp2zW3oug5AnGYhR7uXrQqZvJHT8ju2ayETo7S1tyIsyXN SWWNbO7pNOy8QCM2mTGzL3c61H8s/+/dSM9lUexLvN8y7b5fpMpHJDatUHg6pu5k YMkwixvNxqwQ5/pf41AQlNGnXq5vBLjitSlhC8mdWXdUo+ktxRg= -----END CERTIFICATE-----Generated at Sun Jun 8 05:11:12 2025 by rpki-client