$ rpki-client -vvf repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft File: 2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft (raw, json) Hash identifier: LzxzHUe3EnGPaHDaLa9GqSli7XQNr1hQkbY2Sfv02G0= Subject key identifier: A3:2D:72:F7:B2:E4:74:95:38:ED:64:7D:3F:E0:84:E8:C8:E5:12:AF Authority key identifier: 2B:69:EA:50:8D:C6:2D:34:C2:B3:CA:4F:BA:57:BF:3A:FF:FD:49:94 Certificate issuer: /CN=2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994 Certificate serial: 3D65BB72E699D6259A3BE142A4EFC5860DD5144C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft Manifest number: 0429 Signing time: Sat 19 Apr 2025 19:31:05 +0000 Manifest this update: Sat 19 Apr 2025 19:26:05 +0000 Manifest next update: Wed 23 Apr 2025 03:09:05 +0000 Files and hashes: 1: 2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.crl (hash: A5jrk6xAQMBg3WU0Gl6V7W61Lg+ojMhZgOhv+ySgvow=) 2: 3130332e3136322e31392e302f32342d3234203d3e20313431363430.roa (hash: dsIKfbnR+pN9Hwy4NZz2+3xuPhAknppnbWGiA908HyE=) 3: 323030313a6466353a653238303a3a2f34382d3438203d3e20313431363430.roa (hash: +ZHphLOhvruOuJkUwXhmKIA/kEZXmDLtlpGcK4ZlSQI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.crl rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 03:09:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:65:bb:72:e6:99:d6:25:9a:3b:e1:42:a4:ef:c5:86:0d:d5:14:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994 Validity Not Before: Apr 19 19:26:05 2025 GMT Not After : Apr 23 03:09:05 2025 GMT Subject: CN=A32D72F7B2E4749538ED647D3FE084E8C8E512AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:58:5b:d0:b4:cf:fd:3d:11:20:06:86:ba:05: dd:e5:46:98:a7:30:99:75:cd:87:ad:55:53:a1:96: a6:31:47:bd:11:57:66:6f:19:e5:9f:d4:c2:47:44: 34:42:2c:87:64:e8:54:16:98:dc:b0:25:c8:5f:cd: 34:0a:ac:f6:b8:20:94:c6:fb:2e:fb:6f:69:6b:bf: 9c:9a:4e:a4:92:76:4d:2e:8d:2a:cf:77:ef:46:81: c4:3b:b2:12:aa:c9:f7:3f:16:62:a6:97:db:2e:60: 21:72:be:11:a1:58:e2:de:ff:25:4b:f3:4f:f5:8d: ed:c1:ad:05:05:0c:b2:d7:0c:ba:c7:3c:45:50:f6: f9:d5:3e:71:ed:7a:76:74:c7:0d:dc:75:40:6f:32: a9:f5:3f:c1:57:7f:64:6e:3f:62:ec:68:61:68:30: 1b:a9:e3:74:47:77:86:b0:c6:26:e9:a5:c5:78:a1: aa:f2:78:6a:11:0e:bc:2b:f2:ac:ef:92:65:c1:1d: 52:bb:4a:0c:23:00:f2:cb:95:7f:8e:c1:8e:0f:c7: e2:d7:5a:f4:1d:c2:a1:2c:04:d4:f0:f9:65:07:e6: 92:14:7e:63:3d:23:4e:fa:f9:50:7f:44:53:be:95: d2:6b:4e:e3:04:fe:35:21:12:51:bf:eb:92:53:35: 1a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:2D:72:F7:B2:E4:74:95:38:ED:64:7D:3F:E0:84:E8:C8:E5:12:AF X509v3 Authority Key Identifier: keyid:2B:69:EA:50:8D:C6:2D:34:C2:B3:CA:4F:BA:57:BF:3A:FF:FD:49:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:ad:81:a4:db:ac:3a:da:ba:ea:95:bf:42:cd:57:43:b9:c9: fe:52:44:ef:d6:b3:7d:d9:b0:12:56:96:c6:55:47:d5:00:8c: 01:d1:ff:40:7f:d8:a9:96:30:47:42:53:05:52:f7:61:8c:20: 6b:35:dc:94:85:23:3e:0a:cb:f4:b3:fb:f3:e9:e7:c9:cd:04: e3:eb:cb:8b:d9:65:62:7c:21:3c:7f:d2:5f:ca:26:7b:53:e4: 7e:ca:dd:ed:98:f2:ac:32:39:25:52:09:85:09:3c:e8:86:2e: 53:48:0b:16:aa:6d:b4:0d:88:66:32:ab:b9:a3:42:84:5a:dc: 00:2b:95:48:65:0e:34:87:21:d6:2f:93:87:66:43:c7:48:0a: 82:2d:fc:da:0f:6e:35:21:c4:1d:9d:a6:44:3b:3b:17:2d:31: f7:bb:f8:24:6b:94:59:ab:2e:46:89:0b:d9:55:38:04:61:88: 0a:57:d6:f1:60:fc:14:84:d5:6f:0f:da:1d:99:7f:45:0b:52: 25:35:56:25:99:32:89:09:5a:ff:e9:e7:07:58:a7:52:df:67: 82:2a:ef:26:a4:e9:a8:87:1d:9b:1b:c3:5a:9e:93:82:e4:f7: a2:11:e4:03:76:73:07:00:aa:e5:a8:10:5c:93:9b:94:51:3e: 9d:9b:6e:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPWW7cuaZ1iWaO+FCpO/Fhg3VFEwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI2OUVBNTA4REM2MkQzNEMyQjNDQTRGQkE1N0JGM0FG RkZENDk5NDAeFw0yNTA0MTkxOTI2MDVaFw0yNTA0MjMwMzA5MDVaMDMxMTAvBgNV BAMTKEEzMkQ3MkY3QjJFNDc0OTUzOEVENjQ3RDNGRTA4NEU4QzhFNTEyQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVWFvQtM/9PREgBoa6Bd3lRpin MJl1zYetVVOhlqYxR70RV2ZvGeWf1MJHRDRCLIdk6FQWmNywJchfzTQKrPa4IJTG +y77b2lrv5yaTqSSdk0ujSrPd+9GgcQ7shKqyfc/FmKml9suYCFyvhGhWOLe/yVL 80/1je3BrQUFDLLXDLrHPEVQ9vnVPnHtenZ0xw3cdUBvMqn1P8FXf2RuP2LsaGFo MBup43RHd4awxibppcV4oaryeGoRDrwr8qzvkmXBHVK7SgwjAPLLlX+OwY4Px+LX WvQdwqEsBNTw+WUH5pIUfmM9I076+VB/RFO+ldJrTuME/jUhElG/65JTNRqDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoy1y97LkdJU47WR9P+CE6MjlEq8wHwYDVR0j BBgwFoAUK2nqUI3GLTTCs8pPule/Ov/9SZQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2M2MzdiZC01OTcxLTQyNjQtOTk3YS03NDlkODA0YTY4NTgvMC8yQjY5RUE1MDhE QzYyRDM0QzJCM0NBNEZCQTU3QkYzQUZGRkQ0OTk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkI2OUVBNTA4REM2MkQzNEMyQjNDQTRGQkE1N0JGM0FGRkZE NDk5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWNjNjM3YmQtNTk3MS00MjY0LTk5 N2EtNzQ5ZDgwNGE2ODU4LzAvMkI2OUVBNTA4REM2MkQzNEMyQjNDQTRGQkE1N0JG M0FGRkZENDk5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH+tgaTbrDrauuqVv0LNV0O5yf5SRO/Ws33Z sBJWlsZVR9UAjAHR/0B/2KmWMEdCUwVS92GMIGs13JSFIz4Ky/Sz+/Pp58nNBOPr y4vZZWJ8ITx/0l/KJntT5H7K3e2Y8qwyOSVSCYUJPOiGLlNICxaqbbQNiGYyq7mj QoRa3AArlUhlDjSHIdYvk4dmQ8dICoIt/NoPbjUhxB2dpkQ7OxctMfe7+CRrlFmr LkaJC9lVOARhiApX1vFg/BSE1W8P2h2Zf0ULUiU1ViWZMokJWv/p5wdYp1LfZ4Iq 7yak6aiHHZsbw1qek4Lk96IR5AN2cwcAquWoEFyTm5RRPp2bbpo= -----END CERTIFICATE-----Generated at Mon Apr 21 10:57:59 2025 by rpki-client