$ rpki-client -vvf repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft File: 2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft (raw, json) Hash identifier: LJXewc/yOXgF4RwYxy0MNl5pOY92WzrZNWRbdpXdnNc= Subject key identifier: 26:39:28:B6:79:27:92:3A:89:6C:2A:E5:B3:7D:32:B2:16:68:8F:9C Authority key identifier: 2B:69:EA:50:8D:C6:2D:34:C2:B3:CA:4F:BA:57:BF:3A:FF:FD:49:94 Certificate issuer: /CN=2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994 Certificate serial: 51F5BCCE090642FC18E932A23AA739828672BD04 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft Manifest number: 040E Signing time: Mon 17 Feb 2025 00:41:08 +0000 Manifest this update: Mon 17 Feb 2025 00:36:08 +0000 Manifest next update: Thu 20 Feb 2025 11:13:08 +0000 Files and hashes: 1: 2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.crl (hash: 30RtQfV/LiEUMlluEXzhCfOsS1NpWqw4P3h95AN3P2I=) 2: 323030313a6466353a653238303a3a2f34382d3438203d3e20313431363430.roa (hash: +ZHphLOhvruOuJkUwXhmKIA/kEZXmDLtlpGcK4ZlSQI=) 3: 3130332e3136322e31392e302f32342d3234203d3e20313431363430.roa (hash: dsIKfbnR+pN9Hwy4NZz2+3xuPhAknppnbWGiA908HyE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.crl rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Feb 2025 11:13:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:f5:bc:ce:09:06:42:fc:18:e9:32:a2:3a:a7:39:82:86:72:bd:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994 Validity Not Before: Feb 17 00:36:08 2025 GMT Not After : Feb 20 11:13:08 2025 GMT Subject: CN=263928B67927923A896C2AE5B37D32B216688F9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fa:0d:a4:a1:b0:31:41:88:b1:0d:a6:5b:74: dc:8f:df:27:36:cd:af:42:4b:51:b8:66:1f:31:76: d2:5f:77:0b:77:c9:16:b5:e1:58:dd:86:de:a3:21: 9b:a4:64:69:d9:e9:68:f5:76:fb:35:2d:c8:82:e6: 05:41:6c:ad:f3:22:c0:db:bf:33:99:43:54:41:2a: 67:29:e8:76:c1:b2:97:b8:ce:a3:ac:a3:06:09:4e: 3b:13:2d:0c:49:f9:d6:01:7e:ce:5c:1b:2c:25:53: c7:e1:83:b5:a6:0b:18:56:a4:0a:56:f3:cc:7e:8d: 17:9c:45:a6:4e:8b:14:19:77:49:20:b3:10:0e:8a: 84:bb:ff:49:49:8b:01:ae:dd:7f:ac:eb:d0:51:24: 81:12:b9:31:0e:ec:31:8b:76:ba:a9:c9:b6:d6:ed: fa:af:5d:21:30:4e:9d:fd:76:c5:1d:5e:1a:75:0c: 09:5f:eb:21:04:6a:15:e4:0c:a1:ad:e2:99:14:68: cd:6e:e4:4b:bb:e3:bf:02:34:ed:c3:35:51:c1:be: 2b:a7:97:ae:d7:a2:5b:3a:fe:74:18:00:4d:72:24: 3b:6b:60:1d:e9:50:50:27:98:52:bd:5f:d4:a2:a2: 93:ed:44:19:d2:3c:ab:87:61:e4:c1:cf:24:f7:76: e6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:39:28:B6:79:27:92:3A:89:6C:2A:E5:B3:7D:32:B2:16:68:8F:9C X509v3 Authority Key Identifier: keyid:2B:69:EA:50:8D:C6:2D:34:C2:B3:CA:4F:BA:57:BF:3A:FF:FD:49:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:4a:08:64:10:83:12:80:7d:ed:ff:c6:f9:15:fc:00:31:68: b0:db:8b:5e:a3:a5:84:85:e2:67:dc:54:57:da:80:59:ac:08: 49:c1:08:26:a8:27:33:98:99:ff:8a:67:7e:cc:5b:3a:64:80: 9e:02:2b:61:c8:28:2b:72:7a:34:99:ee:4b:3b:fa:de:24:9c: 67:84:b1:63:70:b1:b6:d6:95:60:59:f5:91:1e:5c:04:05:2e: 96:f4:78:ee:37:65:fc:47:db:d7:85:47:63:86:49:18:9e:0e: 47:98:87:9c:7d:17:b4:41:8d:19:4b:fa:5e:09:aa:30:0a:18: 2b:a3:d8:50:29:65:4a:26:02:5f:60:51:92:27:f1:13:0e:8f: 14:37:51:65:2f:d3:7b:6d:d2:5a:97:8a:95:91:de:2a:21:62: 5c:dd:16:2c:cc:fb:8d:b0:89:51:86:fe:2b:cc:91:2e:0d:ea: 8e:c6:ab:b3:a6:33:81:be:87:e6:f4:04:9a:ed:bc:18:da:d7: 60:d2:cc:71:fd:2f:94:09:b2:d6:a3:bf:97:de:21:b4:cd:eb: 5d:87:6c:42:00:b6:9f:c6:6a:30:91:0b:e3:43:b2:fd:b3:c1: 4e:6d:c7:09:92:f5:a2:62:55:61:47:f0:2f:0b:f6:8d:e5:56: e7:25:3b:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUfW8zgkGQvwY6TKiOqc5goZyvQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI2OUVBNTA4REM2MkQzNEMyQjNDQTRGQkE1N0JGM0FG RkZENDk5NDAeFw0yNTAyMTcwMDM2MDhaFw0yNTAyMjAxMTEzMDhaMDMxMTAvBgNV BAMTKDI2MzkyOEI2NzkyNzkyM0E4OTZDMkFFNUIzN0QzMkIyMTY2ODhGOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8+g2kobAxQYixDaZbdNyP3yc2 za9CS1G4Zh8xdtJfdwt3yRa14Vjdht6jIZukZGnZ6Wj1dvs1LciC5gVBbK3zIsDb vzOZQ1RBKmcp6HbBspe4zqOsowYJTjsTLQxJ+dYBfs5cGywlU8fhg7WmCxhWpApW 88x+jRecRaZOixQZd0kgsxAOioS7/0lJiwGu3X+s69BRJIESuTEO7DGLdrqpybbW 7fqvXSEwTp39dsUdXhp1DAlf6yEEahXkDKGt4pkUaM1u5Eu7478CNO3DNVHBviun l67Xols6/nQYAE1yJDtrYB3pUFAnmFK9X9SiopPtRBnSPKuHYeTBzyT3duaZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJjkotnknkjqJbCrls30yshZoj5wwHwYDVR0j BBgwFoAUK2nqUI3GLTTCs8pPule/Ov/9SZQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2M2MzdiZC01OTcxLTQyNjQtOTk3YS03NDlkODA0YTY4NTgvMC8yQjY5RUE1MDhE QzYyRDM0QzJCM0NBNEZCQTU3QkYzQUZGRkQ0OTk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkI2OUVBNTA4REM2MkQzNEMyQjNDQTRGQkE1N0JGM0FGRkZE NDk5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWNjNjM3YmQtNTk3MS00MjY0LTk5 N2EtNzQ5ZDgwNGE2ODU4LzAvMkI2OUVBNTA4REM2MkQzNEMyQjNDQTRGQkE1N0JG M0FGRkZENDk5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC9KCGQQgxKAfe3/xvkV/AAxaLDbi16jpYSF 4mfcVFfagFmsCEnBCCaoJzOYmf+KZ37MWzpkgJ4CK2HIKCtyejSZ7ks7+t4knGeE sWNwsbbWlWBZ9ZEeXAQFLpb0eO43ZfxH29eFR2OGSRieDkeYh5x9F7RBjRlL+l4J qjAKGCuj2FApZUomAl9gUZIn8RMOjxQ3UWUv03tt0lqXipWR3iohYlzdFizM+42w iVGG/ivMkS4N6o7Gq7OmM4G+h+b0BJrtvBja12DSzHH9L5QJstajv5feIbTN612H bEIAtp/GajCRC+NDsv2zwU5txwmS9aJiVWFH8C8L9o3lVuclO8I= -----END CERTIFICATE-----Generated at Wed Feb 19 22:21:44 2025 by rpki-client