$ rpki-client -vvf repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft File: 2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft (raw, json) Hash identifier: SFbMLDzFXtGncjl3aVY9Iho2Okbe8zaRXA/M0nbUg6M= Subject key identifier: 34:90:A1:E8:95:2F:41:F5:98:00:07:C2:F6:8F:8F:27:F2:0B:C5:AA Authority key identifier: 2D:EC:7D:B2:A5:C9:62:CF:A5:3D:57:8D:EA:7D:C8:43:83:A6:33:D4 Certificate issuer: /CN=2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4 Certificate serial: 068ECC8C1DEE2006E5CBD3EA08570BC5F2436AA0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft Manifest number: 0494 Signing time: Sat 05 Apr 2025 14:01:20 +0000 Manifest this update: Sat 05 Apr 2025 13:56:20 +0000 Manifest next update: Tue 08 Apr 2025 18:26:20 +0000 Files and hashes: 1: 323430343a613463303a3a2f33322d3438203d3e20313338383232.roa (hash: zibfZf7uhnHSJmYE9o2ZdTLhnmN7F6Ep7luCbEj5RWk=) 2: 3130332e3133372e33382e302f32332d3234203d3e20313338383232.roa (hash: ZO/4r1QW7PbqkUrgmkz1NwMVckJQtyEJBY4MqqOROpA=) 3: 2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.crl (hash: Hnp+JeZITuAaLRxvZhkXIJbAyib/raG3x7B+O4Y35bY=) 4: 323430343a613463303a666163653a3a2f34382d3438203d3e20313338383232.roa (hash: 8BcFapwe+X3BcAcYyUi0aKlB+9OoLNEUNoO57IgvOug=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.crl rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:8e:cc:8c:1d:ee:20:06:e5:cb:d3:ea:08:57:0b:c5:f2:43:6a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4 Validity Not Before: Apr 5 13:56:20 2025 GMT Not After : Apr 8 18:26:20 2025 GMT Subject: CN=3490A1E8952F41F5980007C2F68F8F27F20BC5AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:41:8c:d5:2a:52:c6:18:59:46:ed:9d:29:17: 0a:3c:6a:ed:a6:7f:6a:00:66:f5:c9:cb:e4:e2:e2: 49:5e:75:94:fa:a0:a4:4e:f4:ee:91:c4:68:9d:bd: 2b:13:4d:5d:6e:13:df:b9:0f:10:72:42:1f:88:96: 3e:9c:b0:60:be:f1:22:33:e8:92:70:2d:f5:4b:ed: 35:78:f0:52:0f:2a:57:f5:ec:c7:7b:c1:41:43:60: 41:35:21:76:4b:61:23:d8:13:95:9d:31:f2:dc:25: 75:55:31:81:17:95:7d:a4:83:ed:37:e8:44:b8:5f: db:0b:28:a1:3d:3e:0f:af:dc:43:d0:d0:d9:16:f7: 7c:25:c3:d4:19:ab:73:2d:db:48:a0:2a:f2:8b:58: 0b:f7:8c:7a:7f:33:13:34:7d:35:3b:8f:07:18:ea: 44:37:6f:f3:36:ec:ed:11:51:74:72:38:17:e9:b9: c8:d8:90:61:b4:71:0a:0e:5f:78:ad:dc:e9:14:59: b5:31:b9:42:77:60:4f:3e:66:9c:dc:92:d7:81:a2: 02:bd:78:e4:04:84:8b:fd:ff:20:26:4d:8d:ff:9a: 27:16:e3:17:f5:be:12:e0:9a:48:63:96:43:7d:53: a1:8a:ca:88:11:3c:fd:94:96:97:6d:aa:d3:a8:56: 33:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:90:A1:E8:95:2F:41:F5:98:00:07:C2:F6:8F:8F:27:F2:0B:C5:AA X509v3 Authority Key Identifier: keyid:2D:EC:7D:B2:A5:C9:62:CF:A5:3D:57:8D:EA:7D:C8:43:83:A6:33:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:ae:6c:0c:81:ed:06:08:20:0d:94:91:c6:e0:dc:3d:5a:de: fd:75:a6:14:d9:e2:b0:b6:f2:ee:82:0c:c9:26:50:89:78:64: 44:86:e2:a1:f8:9c:9f:6d:6c:f3:d0:b0:f1:6c:66:df:5f:5a: e3:83:0b:2a:70:34:3a:33:10:7a:de:83:1e:7f:13:85:22:90: f1:86:a7:b3:89:a6:22:db:72:42:36:0a:64:f0:bc:a1:1b:c8: 9f:3e:c5:56:44:1c:0e:49:fa:83:ad:b1:02:05:0e:72:5c:f6: f6:80:ce:2b:ef:6f:26:07:10:5e:b7:2e:bf:4f:01:c6:c1:f6: 49:7d:07:70:7b:14:d9:99:09:59:ba:65:ce:95:23:f9:a1:a4: 59:e3:92:72:90:02:3c:9a:28:c5:66:37:60:86:ff:43:68:1e: ce:9e:35:99:df:b3:7c:0e:42:36:00:25:a9:4b:d5:9e:84:cc: 30:87:53:9a:63:3b:c8:41:22:5c:6c:57:c9:ff:e8:27:c2:74: 6d:fb:2f:ec:58:b0:3c:f8:63:5e:aa:ab:44:f9:05:5d:7f:2c: e6:06:35:5a:8e:6c:fc:fa:2b:a9:78:90:fa:86:6a:81:a3:9a: 71:a7:ff:92:56:ae:54:d6:37:5b:23:8c:d2:3a:92:86:1e:06: a0:7c:d6:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBo7MjB3uIAbly9PqCFcLxfJDaqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRFQzdEQjJBNUM5NjJDRkE1M0Q1NzhERUE3REM4NDM4 M0E2MzNENDAeFw0yNTA0MDUxMzU2MjBaFw0yNTA0MDgxODI2MjBaMDMxMTAvBgNV BAMTKDM0OTBBMUU4OTUyRjQxRjU5ODAwMDdDMkY2OEY4RjI3RjIwQkM1QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAQYzVKlLGGFlG7Z0pFwo8au2m f2oAZvXJy+Ti4kledZT6oKRO9O6RxGidvSsTTV1uE9+5DxByQh+Ilj6csGC+8SIz 6JJwLfVL7TV48FIPKlf17Md7wUFDYEE1IXZLYSPYE5WdMfLcJXVVMYEXlX2kg+03 6ES4X9sLKKE9Pg+v3EPQ0NkW93wlw9QZq3Mt20igKvKLWAv3jHp/MxM0fTU7jwcY 6kQ3b/M27O0RUXRyOBfpucjYkGG0cQoOX3it3OkUWbUxuUJ3YE8+ZpzckteBogK9 eOQEhIv9/yAmTY3/micW4xf1vhLgmkhjlkN9U6GKyogRPP2UlpdtqtOoVjOnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNJCh6JUvQfWYAAfC9o+PJ/ILxaowHwYDVR0j BBgwFoAULex9sqXJYs+lPVeN6n3IQ4OmM9QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l M2JiZjFkYS1lMzE3LTQ4ZWYtYWQ2ZC1mZThhOGJmMDg0MDAvMC8yREVDN0RCMkE1 Qzk2MkNGQTUzRDU3OERFQTdEQzg0MzgzQTYzM0Q0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkRFQzdEQjJBNUM5NjJDRkE1M0Q1NzhERUE3REM4NDM4M0E2 MzNENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTNiYmYxZGEtZTMxNy00OGVmLWFk NmQtZmU4YThiZjA4NDAwLzAvMkRFQzdEQjJBNUM5NjJDRkE1M0Q1NzhERUE3REM4 NDM4M0E2MzNENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANCubAyB7QYIIA2Ukcbg3D1a3v11phTZ4rC2 8u6CDMkmUIl4ZESG4qH4nJ9tbPPQsPFsZt9fWuODCypwNDozEHregx5/E4UikPGG p7OJpiLbckI2CmTwvKEbyJ8+xVZEHA5J+oOtsQIFDnJc9vaAzivvbyYHEF63Lr9P AcbB9kl9B3B7FNmZCVm6Zc6VI/mhpFnjknKQAjyaKMVmN2CG/0NoHs6eNZnfs3wO QjYAJalL1Z6EzDCHU5pjO8hBIlxsV8n/6CfCdG37L+xYsDz4Y16qq0T5BV1/LOYG NVqObPz6K6l4kPqGaoGjmnGn/5JWrlTWN1sjjNI6koYeBqB81po= -----END CERTIFICATE-----Generated at Sat Apr 5 16:48:56 2025 by rpki-client