$ rpki-client -vvf repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft File: 2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft (raw, json) Hash identifier: h4SdAj7TmmjLXKBF8m6RrcZZ2R900GsawnzHWFkFO2g= Subject key identifier: A4:73:2A:FF:B9:93:DD:88:4D:A3:1F:ED:79:D9:0E:FD:40:4B:9B:0C Authority key identifier: 2C:B2:1E:F3:36:B6:AB:46:40:E4:61:96:01:E0:F6:48:8C:B8:FD:52 Certificate issuer: /CN=2CB21EF336B6AB4640E4619601E0F6488CB8FD52 Certificate serial: 51DEE400BEE5D0487BED9D84F7F847CCCB2A3953 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft Manifest number: 030B Signing time: Thu 05 Jun 2025 15:21:58 +0000 Manifest this update: Thu 05 Jun 2025 15:16:58 +0000 Manifest next update: Mon 09 Jun 2025 02:08:58 +0000 Files and hashes: 1: 2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl (hash: LgGyFxFyddxHyC28P1GzpLWEhdAT7UaX+H7b+s+/YfY=) 2: 3130332e3136302e31322e302f32332d3234203d3e20313331313131.roa (hash: 2TjUbAwclmvFhuQfA5b8APF/xfL7qfTm8NzkksHu4ng=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 19:48:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:de:e4:00:be:e5:d0:48:7b:ed:9d:84:f7:f8:47:cc:cb:2a:39:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CB21EF336B6AB4640E4619601E0F6488CB8FD52 Validity Not Before: Jun 5 15:16:58 2025 GMT Not After : Jun 9 02:08:58 2025 GMT Subject: CN=A4732AFFB993DD884DA31FED79D90EFD404B9B0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:72:06:e4:6b:80:f9:55:40:9d:54:1a:4d:c4: ab:78:74:3d:e3:31:7e:c3:7b:09:5a:da:fb:3e:fc: ff:cf:d7:d8:90:87:a9:33:5b:ca:0e:70:23:cc:34: d3:e4:5b:73:54:fd:22:0e:be:70:fd:01:52:bf:d3: ef:6e:2a:63:46:51:b7:56:34:3c:c0:4d:42:41:24: 49:fb:64:ae:ba:57:a8:55:48:af:2c:e1:ad:3e:5f: 91:89:52:dc:4c:10:b8:f4:4e:7c:90:a0:1c:f3:7f: 95:15:32:d3:6d:1a:eb:3b:f7:f5:92:31:4a:0c:b4: 4e:84:fa:14:28:45:44:02:dd:4b:b1:67:ba:77:db: 3d:40:5e:ca:45:ee:23:56:54:0a:76:fb:0b:09:f0: 81:6b:17:6b:d5:27:ab:f9:62:4c:9a:e6:ca:41:12: 27:ec:2c:4d:96:0a:77:2e:59:df:a7:4c:75:88:b9: 9c:f9:2f:20:ae:aa:c8:2f:6c:23:0f:94:d2:0f:47: 0e:53:88:c6:7c:26:eb:b1:6f:2e:98:d7:49:93:f5: ce:0a:c3:06:31:02:8b:b6:93:b4:e9:b6:66:d0:1e: 22:46:a9:46:48:3e:2b:ef:b2:b9:cc:c1:c4:82:2a: ce:6e:d3:4c:82:d1:66:3b:20:b5:c4:a0:ed:f5:1f: 08:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:73:2A:FF:B9:93:DD:88:4D:A3:1F:ED:79:D9:0E:FD:40:4B:9B:0C X509v3 Authority Key Identifier: keyid:2C:B2:1E:F3:36:B6:AB:46:40:E4:61:96:01:E0:F6:48:8C:B8:FD:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:0e:d7:8a:43:1b:a6:3a:e8:10:e5:f3:7d:9f:aa:b2:07:d2: c1:d3:69:f4:04:52:0d:30:95:e0:f9:96:13:1c:37:f5:ef:36: fc:7b:9b:6e:43:17:40:bc:62:5b:9c:8e:b4:a0:75:64:1d:66: 5b:77:3c:e0:9f:c2:29:cd:63:4c:23:d7:96:eb:02:fe:6f:9e: bb:b6:11:8f:9b:ee:7b:a8:c8:78:ae:fb:70:5d:80:a5:37:a5: ad:d0:42:6d:67:09:b2:d7:d2:22:45:5a:20:a5:a3:4b:f4:02: 93:86:9d:a9:e8:de:52:3a:7e:d3:d6:e8:a6:70:24:98:dc:32: 8a:e3:92:c9:18:e2:89:a9:96:51:9f:d6:16:ff:b5:15:4d:ea: 25:fe:5d:4b:ec:7c:53:8b:2f:31:40:35:04:05:6e:5f:12:0a: f7:67:19:df:6f:f8:90:22:98:3c:dd:6a:ce:54:9a:f8:38:b5: 97:2e:f2:5f:2a:02:31:ed:18:b0:26:65:a0:0d:c2:6d:59:99: be:4a:a0:31:94:ad:6a:a2:ee:7e:8c:29:9d:b8:87:29:9d:98: d4:fb:4a:28:b4:f6:a6:da:e5:e7:ea:58:1d:e0:11:3d:31:8b: 53:73:3c:9f:19:c5:54:73:90:40:06:da:03:3e:f9:c7:96:01: 52:07:58:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUd7kAL7l0Eh77Z2E9/hHzMsqOVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2NDg4 Q0I4RkQ1MjAeFw0yNTA2MDUxNTE2NThaFw0yNTA2MDkwMjA4NThaMDMxMTAvBgNV BAMTKEE0NzMyQUZGQjk5M0REODg0REEzMUZFRDc5RDkwRUZENDA0QjlCMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0cgbka4D5VUCdVBpNxKt4dD3j MX7Dewla2vs+/P/P19iQh6kzW8oOcCPMNNPkW3NU/SIOvnD9AVK/0+9uKmNGUbdW NDzATUJBJEn7ZK66V6hVSK8s4a0+X5GJUtxMELj0TnyQoBzzf5UVMtNtGus79/WS MUoMtE6E+hQoRUQC3UuxZ7p32z1AXspF7iNWVAp2+wsJ8IFrF2vVJ6v5Ykya5spB EifsLE2WCncuWd+nTHWIuZz5LyCuqsgvbCMPlNIPRw5TiMZ8Juuxby6Y10mT9c4K wwYxAou2k7TptmbQHiJGqUZIPivvsrnMwcSCKs5u00yC0WY7ILXEoO31HwhjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpHMq/7mT3YhNox/tedkO/UBLmwwwHwYDVR0j BBgwFoAULLIe8za2q0ZA5GGWAeD2SIy4/VIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGM2Zjc3MC02ODZhLTQ1ZWYtOGRmYi0wYzNhODdkM2Q4ZGEvMC8yQ0IyMUVGMzM2 QjZBQjQ2NDBFNDYxOTYwMUUwRjY0ODhDQjhGRDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2NDg4Q0I4 RkQ1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRjNmY3NzAtNjg2YS00NWVmLThk ZmItMGMzYTg3ZDNkOGRhLzAvMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2 NDg4Q0I4RkQ1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACMO14pDG6Y66BDl832fqrIH0sHTafQEUg0w leD5lhMcN/XvNvx7m25DF0C8YlucjrSgdWQdZlt3POCfwinNY0wj15brAv5vnru2 EY+b7nuoyHiu+3BdgKU3pa3QQm1nCbLX0iJFWiClo0v0ApOGnano3lI6ftPW6KZw JJjcMorjkskY4ompllGf1hb/tRVN6iX+XUvsfFOLLzFANQQFbl8SCvdnGd9v+JAi mDzdas5Umvg4tZcu8l8qAjHtGLAmZaANwm1Zmb5KoDGUrWqi7n6MKZ24hymdmNT7 Sii09qba5efqWB3gET0xi1NzPJ8ZxVRzkEAG2gM++ceWAVIHWKM= -----END CERTIFICATE-----Generated at Thu Jun 5 18:37:20 2025 by rpki-client