$ rpki-client -vvf repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.mft File: 2FD08E6755CF1CCAAF9D5834449797848A706B57.mft (raw, json) Hash identifier: bsx25zuk6GtNO0iyFv25jaVdjUCGNeQ8XWSLKethrgE= Subject key identifier: 19:AE:64:42:56:61:31:E2:9A:D5:EC:46:4F:23:0C:80:C6:8F:D8:76 Authority key identifier: 2F:D0:8E:67:55:CF:1C:CA:AF:9D:58:34:44:97:97:84:8A:70:6B:57 Certificate issuer: /CN=2FD08E6755CF1CCAAF9D5834449797848A706B57 Certificate serial: 7B715E6159AD0D4B1E6D1ECA568BBDBF6D8FEAC2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FD08E6755CF1CCAAF9D5834449797848A706B57.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.mft Manifest number: 0352 Signing time: Tue 18 Feb 2025 10:41:56 +0000 Manifest this update: Tue 18 Feb 2025 10:36:56 +0000 Manifest next update: Fri 21 Feb 2025 16:10:56 +0000 Files and hashes: 1: 3130332e3136332e3232382e302f32342d3234203d3e20313431383935.roa (hash: wfB/tzQBppuc1HMLNKZS8DgmDxNdzRsLM2dhnwxSWec=) 2: 3130332e3136332e3232382e302f32332d3233203d3e20313431383935.roa (hash: +8jSV/P+qx2iDLcVmAlWUEpzsefjQgC+GskbssdGlnA=) 3: 3130332e3136332e3232392e302f32342d3234203d3e20313431383935.roa (hash: hZedPSTR08Zc5q3i4frxXXEyzM8AAXb/PDgw+Iy1Wv4=) 4: 2FD08E6755CF1CCAAF9D5834449797848A706B57.crl (hash: iEZ36F8Ct/8xTc8jn7fvU3RVhf4MHIjnd0MqTLacwFQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.crl rsync://repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FD08E6755CF1CCAAF9D5834449797848A706B57.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 16:10:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:71:5e:61:59:ad:0d:4b:1e:6d:1e:ca:56:8b:bd:bf:6d:8f:ea:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FD08E6755CF1CCAAF9D5834449797848A706B57 Validity Not Before: Feb 18 10:36:56 2025 GMT Not After : Feb 21 16:10:56 2025 GMT Subject: CN=19AE6442566131E29AD5EC464F230C80C68FD876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e2:02:eb:e7:83:38:31:8c:02:78:9a:b7:38: 11:69:0c:63:64:04:be:90:80:da:e0:5c:10:91:6c: af:1e:2a:c1:4a:3f:86:5f:41:c9:5c:c0:c6:73:3e: 25:6c:4e:b1:cb:df:03:73:cf:ac:87:b2:cc:0b:de: 7f:70:f0:88:18:a3:b5:f3:65:26:60:5b:06:d9:63: c7:d3:02:43:7b:85:54:5a:5a:f5:8e:2a:43:7d:26: 6c:cf:13:85:e5:7e:3c:3c:11:a9:be:00:9a:26:6a: 23:75:88:58:d7:e5:46:0d:0a:76:ab:25:20:fd:9f: 30:18:4c:9a:42:26:94:6e:39:4c:4c:97:53:09:d6: dc:fe:36:d2:2f:00:48:1c:f8:eb:ce:44:8d:dd:8f: e5:0c:22:78:1f:1a:3c:77:03:3d:7b:d6:15:af:7f: 1f:37:3d:08:20:b8:e0:57:36:ec:ba:bc:e3:30:2c: b8:1b:8a:fb:2b:04:60:3d:f0:6b:1a:c5:c5:76:6e: 22:5c:6e:0b:ec:18:46:0a:0c:51:e1:1c:64:f9:7b: 36:cc:c4:38:10:33:22:86:9f:fd:11:2d:ff:1a:66: 1b:19:b6:98:a1:0f:09:fa:ef:f5:b7:27:ad:3b:5d: 23:4e:a8:c2:af:ca:7e:f4:98:b3:07:0a:2f:41:fe: b7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:AE:64:42:56:61:31:E2:9A:D5:EC:46:4F:23:0C:80:C6:8F:D8:76 X509v3 Authority Key Identifier: keyid:2F:D0:8E:67:55:CF:1C:CA:AF:9D:58:34:44:97:97:84:8A:70:6B:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FD08E6755CF1CCAAF9D5834449797848A706B57.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:b3:c1:79:b0:fc:70:15:25:a1:22:51:c5:43:9a:ae:23:2b: 86:58:f2:ba:06:38:8e:e2:9a:ee:37:ca:ed:b0:a6:09:65:db: 71:52:d2:8b:79:99:73:4e:62:bb:32:01:8f:97:2b:6c:49:22: ea:07:27:e1:b5:89:ec:b3:f1:cd:fa:0c:17:58:dd:c2:1d:85: 98:ab:5c:cd:29:44:eb:eb:f5:03:58:b3:7c:e0:c3:dc:08:62: 0a:a6:46:b0:5b:06:d8:1c:6a:cf:5b:12:68:0c:bb:1a:cc:dd: a7:5b:ee:96:66:40:dc:12:10:e6:ee:3d:8e:9f:f5:ba:27:4f: 8e:68:4b:16:f1:4d:2a:66:4b:aa:56:2a:d0:10:be:69:43:98: c0:2b:c9:5b:98:65:54:69:8d:90:46:5a:86:31:7e:06:7a:56: f2:09:d8:83:8f:2b:f9:49:5d:3d:76:7c:24:06:42:9d:57:f6: 68:c9:9b:65:34:cf:36:21:9e:a7:33:e3:b6:86:6b:90:0d:1d: 26:ac:4b:a1:32:c0:82:37:0e:85:53:a5:85:ce:ae:32:0a:ff: 51:d0:b9:dc:26:f0:2f:f3:d0:b5:f9:fc:e4:15:fe:6f:b5:34: 5c:4f:5e:c9:f4:43:77:9b:52:08:e1:d0:ec:72:48:17:1c:e4: 64:bc:8a:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe3FeYVmtDUsebR7KVou9v22P6sIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZEMDhFNjc1NUNGMUNDQUFGOUQ1ODM0NDQ5Nzk3ODQ4 QTcwNkI1NzAeFw0yNTAyMTgxMDM2NTZaFw0yNTAyMjExNjEwNTZaMDMxMTAvBgNV BAMTKDE5QUU2NDQyNTY2MTMxRTI5QUQ1RUM0NjRGMjMwQzgwQzY4RkQ4NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS4gLr54M4MYwCeJq3OBFpDGNk BL6QgNrgXBCRbK8eKsFKP4ZfQclcwMZzPiVsTrHL3wNzz6yHsswL3n9w8IgYo7Xz ZSZgWwbZY8fTAkN7hVRaWvWOKkN9JmzPE4Xlfjw8Eam+AJomaiN1iFjX5UYNCnar JSD9nzAYTJpCJpRuOUxMl1MJ1tz+NtIvAEgc+OvORI3dj+UMIngfGjx3Az171hWv fx83PQgguOBXNuy6vOMwLLgbivsrBGA98GsaxcV2biJcbgvsGEYKDFHhHGT5ezbM xDgQMyKGn/0RLf8aZhsZtpihDwn67/W3J607XSNOqMKvyn70mLMHCi9B/rdxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGa5kQlZhMeKa1exGTyMMgMaP2HYwHwYDVR0j BBgwFoAUL9COZ1XPHMqvnVg0RJeXhIpwa1cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2QwZDdmYS1kNmY4LTRjMjItYjQ4YS01OGI4ZWQ4ZWRkYTcvMC8yRkQwOEU2NzU1 Q0YxQ0NBQUY5RDU4MzQ0NDk3OTc4NDhBNzA2QjU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkZEMDhFNjc1NUNGMUNDQUFGOUQ1ODM0NDQ5Nzk3ODQ4QTcw NkI1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGNkMGQ3ZmEtZDZmOC00YzIyLWI0 OGEtNThiOGVkOGVkZGE3LzAvMkZEMDhFNjc1NUNGMUNDQUFGOUQ1ODM0NDQ5Nzk3 ODQ4QTcwNkI1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADqzwXmw/HAVJaEiUcVDmq4jK4ZY8roGOI7i mu43yu2wpgll23FS0ot5mXNOYrsyAY+XK2xJIuoHJ+G1ieyz8c36DBdY3cIdhZir XM0pROvr9QNYs3zgw9wIYgqmRrBbBtgcas9bEmgMuxrM3adb7pZmQNwSEObuPY6f 9bonT45oSxbxTSpmS6pWKtAQvmlDmMAryVuYZVRpjZBGWoYxfgZ6VvIJ2IOPK/lJ XT12fCQGQp1X9mjJm2U0zzYhnqcz47aGa5ANHSasS6EywII3DoVTpYXOrjIK/1HQ udwm8C/z0LX5/OQV/m+1NFxPXsn0Q3ebUgjh0OxySBcc5GS8ipM= -----END CERTIFICATE-----Generated at Wed Feb 19 22:02:05 2025 by rpki-client