$ rpki-client -vvf repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft File: 2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft (raw, json) Hash identifier: PtSzdLlT7aGSxKQFlZymZbUUOAkB3FYJiJSbM71yrR0= Subject key identifier: C2:53:7D:BD:DD:D7:CE:AA:40:52:D2:4D:DC:C1:14:14:10:40:1E:50 Authority key identifier: 2A:62:B9:64:EC:86:44:7D:C2:2D:DE:70:DC:35:17:F0:CF:7C:9A:CD Certificate issuer: /CN=2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD Certificate serial: 232C940DF3CE9C8E973DBF64C0EC0CC60C363396 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft Manifest number: 87 Signing time: Tue 08 Apr 2025 09:00:34 +0000 Manifest this update: Tue 08 Apr 2025 08:55:34 +0000 Manifest next update: Fri 11 Apr 2025 18:58:34 +0000 Files and hashes: 1: 3135372e36362e3132332e302f32342d3234203d3e20313532373731.roa (hash: dk9lT4c8YPePQBplMSb9peNtJTmkudz4Yd6u9d5dqKU=) 2: 2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.crl (hash: EG3qRMhTflEBNvw5WPtcen01JD9UWigX+H1BgWHkhhU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.crl rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:58:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:2c:94:0d:f3:ce:9c:8e:97:3d:bf:64:c0:ec:0c:c6:0c:36:33:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD Validity Not Before: Apr 8 08:55:34 2025 GMT Not After : Apr 11 18:58:34 2025 GMT Subject: CN=C2537DBDDDD7CEAA4052D24DDCC1141410401E50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fc:ca:ba:f5:ab:f1:83:4b:30:1e:d3:d9:51: 15:10:b9:fb:4d:30:ca:f7:3c:04:83:b6:f5:f8:3a: 2d:8c:e1:36:ad:62:c8:03:b7:e0:ee:73:83:8b:a0: 73:b8:63:b1:96:39:3b:8b:5a:ba:ba:25:07:e1:e4: c5:bf:51:3f:0b:92:e9:8d:63:ee:42:1f:1d:f0:a4: ea:ae:d1:fe:c2:e7:5c:1d:75:a9:bb:b3:09:98:b0: 2d:4a:dc:69:62:95:ad:df:a7:79:5d:dd:c3:9e:93: 3d:56:c2:49:88:ba:34:4c:12:1a:48:79:54:97:24: e0:88:74:70:2e:16:e8:94:46:d9:8b:23:60:54:74: 4f:6c:0b:03:1c:4c:c4:25:aa:5e:ed:db:0a:6a:7a: ab:3b:fd:e7:0d:c9:d6:ef:6a:de:6c:ac:91:08:95: 81:a5:7e:ff:34:4b:8e:92:89:93:1f:f1:7c:8e:cf: 0c:22:40:d5:a2:e6:e1:c8:57:27:21:01:f1:f0:3b: a2:c0:92:8a:ae:0c:3d:32:77:4c:f6:9a:05:e0:f5: e2:dd:11:98:b0:43:3b:f7:9f:7d:b1:53:76:9e:33: 9a:eb:a7:7e:fe:35:37:0f:2b:fb:65:ae:39:dc:66: b8:13:a8:87:24:c1:ec:79:a3:6a:8f:f2:3a:7b:98: 58:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:53:7D:BD:DD:D7:CE:AA:40:52:D2:4D:DC:C1:14:14:10:40:1E:50 X509v3 Authority Key Identifier: keyid:2A:62:B9:64:EC:86:44:7D:C2:2D:DE:70:DC:35:17:F0:CF:7C:9A:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:53:bf:d3:10:8b:3e:b8:e6:5e:36:18:3f:e9:4c:97:dd:ee: 03:f7:7a:c6:84:49:71:1b:7c:5c:5f:2c:86:b6:e1:25:fd:db: f7:50:36:33:c3:c2:0d:3f:a7:ba:21:f8:4e:bf:ee:7c:10:e1: bd:e1:7d:05:87:64:d2:04:1c:d5:f1:26:4f:69:28:68:f8:30: 7c:45:52:72:bf:f3:10:c4:49:a1:4c:55:03:9c:77:0d:cc:8d: ef:f7:ef:43:76:3a:2a:fd:9f:63:b1:aa:46:8b:45:90:c2:0d: 80:a2:30:36:4f:e9:c4:29:71:1b:60:a2:66:7e:22:fe:45:1c: 04:97:ee:78:68:1a:f4:12:64:fa:fd:b4:76:7e:b2:d0:08:46: 02:6d:d1:e4:b4:3c:83:d8:05:ff:28:f2:f4:7a:78:0c:d1:f3: 81:9b:fe:8f:97:58:a3:9b:d7:1b:f6:46:54:dd:5b:99:9e:3a: d5:ed:94:6b:2d:5b:85:cc:76:b1:52:17:ce:e3:03:13:70:94: ff:ea:e1:33:ae:e6:53:64:17:b7:50:9b:16:bc:77:f9:1d:31: f3:2a:ae:05:5d:21:e5:5c:37:47:f0:d9:4c:8c:1c:dd:03:97: 4c:27:4d:c3:57:16:96:24:50:12:10:2c:82:45:29:c5:b8:b9: 2f:5a:01:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIyyUDfPOnI6XPb9kwOwMxgw2M5YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE2MkI5NjRFQzg2NDQ3REMyMkRERTcwREMzNTE3RjBD RjdDOUFDRDAeFw0yNTA0MDgwODU1MzRaFw0yNTA0MTExODU4MzRaMDMxMTAvBgNV BAMTKEMyNTM3REJEREREN0NFQUE0MDUyRDI0RERDQzExNDE0MTA0MDFFNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl/Mq69avxg0swHtPZURUQuftN MMr3PASDtvX4Oi2M4TatYsgDt+Duc4OLoHO4Y7GWOTuLWrq6JQfh5MW/UT8LkumN Y+5CHx3wpOqu0f7C51wddam7swmYsC1K3Glila3fp3ld3cOekz1WwkmIujRMEhpI eVSXJOCIdHAuFuiURtmLI2BUdE9sCwMcTMQlql7t2wpqeqs7/ecNydbvat5srJEI lYGlfv80S46SiZMf8XyOzwwiQNWi5uHIVychAfHwO6LAkoquDD0yd0z2mgXg9eLd EZiwQzv3n32xU3aeM5rrp37+NTcPK/tlrjncZrgTqIckwex5o2qP8jp7mFiDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwlN9vd3XzqpAUtJN3MEUFBBAHlAwHwYDVR0j BBgwFoAUKmK5ZOyGRH3CLd5w3DUX8M98ms0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWIwODg0NS1kZjgyLTQ0YzItOTc2ZC02ZDc0YjgxMTY2ZjQvMC8yQTYyQjk2NEVD ODY0NDdEQzIyRERFNzBEQzM1MTdGMENGN0M5QUNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkE2MkI5NjRFQzg2NDQ3REMyMkRERTcwREMzNTE3RjBDRjdD OUFDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFiMDg4NDUtZGY4Mi00NGMyLTk3 NmQtNmQ3NGI4MTE2NmY0LzAvMkE2MkI5NjRFQzg2NDQ3REMyMkRERTcwREMzNTE3 RjBDRjdDOUFDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA5Tv9MQiz645l42GD/pTJfd7gP3esaESXEb fFxfLIa24SX92/dQNjPDwg0/p7oh+E6/7nwQ4b3hfQWHZNIEHNXxJk9pKGj4MHxF UnK/8xDESaFMVQOcdw3Mje/370N2Oir9n2OxqkaLRZDCDYCiMDZP6cQpcRtgomZ+ Iv5FHASX7nhoGvQSZPr9tHZ+stAIRgJt0eS0PIPYBf8o8vR6eAzR84Gb/o+XWKOb 1xv2RlTdW5meOtXtlGstW4XMdrFSF87jAxNwlP/q4TOu5lNkF7dQmxa8d/kdMfMq rgVdIeVcN0fw2UyMHN0Dl0wnTcNXFpYkUBIQLIJFKcW4uS9aAZc= -----END CERTIFICATE-----Generated at Wed Apr 9 16:41:05 2025 by rpki-client