$ rpki-client -vvf repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft File: 2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft (raw, json) Hash identifier: 3W69RolYCdMmNWjCrB+C/LaKoYoHaasokgFQNCttvFU= Subject key identifier: 70:C6:16:91:AB:98:88:40:33:54:AC:4C:D0:05:EB:93:BB:15:02:E2 Authority key identifier: 2C:9C:8D:6A:DB:43:A7:5F:1D:FA:48:05:3B:0E:13:BF:E4:BD:35:0A Certificate issuer: /CN=2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A Certificate serial: 24F59A23E7F18F81329BD33565BAAE01AB77976C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft Manifest number: 3D Signing time: Fri 18 Apr 2025 21:31:53 +0000 Manifest this update: Fri 18 Apr 2025 21:26:53 +0000 Manifest next update: Tue 22 Apr 2025 06:07:53 +0000 Files and hashes: 1: 3136302e32322e39352e302f32342d3234203d3e20313533313130.roa (hash: twzSlBh0NN1lf3cw6Hfv5Bifh4nztMxRMAZ/HjKNRio=) 2: 3136302e32322e39342e302f32342d3234203d3e20313533313130.roa (hash: ss2EJAnpKFiDc20LCUbPWRGzhNcuFuLtxPENwLK+/ro=) 3: 2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.crl (hash: uCmegizxOA7r8xfpxsvtHwXF2Fv+bDdjMQe4+Fgxr8o=) 4: 3136302e32322e39342e302f32332d3233203d3e20313533313130.roa (hash: NjyYz1ga8Qpztk8z2OnelqpIaeIr9KbAHbFDRDS0sFY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.crl rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 06:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:f5:9a:23:e7:f1:8f:81:32:9b:d3:35:65:ba:ae:01:ab:77:97:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A Validity Not Before: Apr 18 21:26:53 2025 GMT Not After : Apr 22 06:07:53 2025 GMT Subject: CN=70C61691AB9888403354AC4CD005EB93BB1502E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a1:a0:3a:6e:34:d0:71:2d:6a:ee:f2:c5:3a: b2:6b:c6:1f:a2:b6:95:82:47:90:d7:24:5d:f7:ec: 58:01:6b:7d:8a:0b:58:c0:c8:c6:e0:a5:19:8e:63: 1e:e7:e6:e4:86:18:51:de:f3:26:9a:c6:1d:af:1c: 70:44:7d:97:08:8f:49:d5:18:b4:f5:fd:5e:9d:42: c4:15:4d:18:bd:d8:36:e9:5a:9a:c0:6d:e6:6b:73: d7:2b:0c:1a:7f:81:97:06:a7:fa:63:96:17:bc:69: 0e:84:d7:70:55:cb:37:0c:c5:53:84:3a:a6:0c:fd: 8e:5a:a4:0d:1f:dd:5f:2c:40:bf:d1:00:27:55:d3: df:9e:a4:f7:c2:0b:60:4a:32:b4:e9:33:a9:e8:9a: ec:55:48:5f:f0:73:6e:46:c2:5d:aa:39:3f:92:46: 16:8f:e8:16:44:79:87:0e:38:a5:c3:48:ab:82:10: f0:a1:bd:e5:67:39:b4:34:81:84:0f:f3:81:f0:a9: 56:19:3d:54:0f:f8:41:51:f8:dc:ef:fa:52:3d:76: 9a:38:7f:27:22:26:ee:3d:ac:5b:e4:eb:32:de:6d: 5a:49:b9:bb:e1:5b:ac:22:20:cb:3e:eb:df:72:ef: be:ee:6c:a4:1f:b1:c4:6c:04:58:84:6b:44:08:23: af:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C6:16:91:AB:98:88:40:33:54:AC:4C:D0:05:EB:93:BB:15:02:E2 X509v3 Authority Key Identifier: keyid:2C:9C:8D:6A:DB:43:A7:5F:1D:FA:48:05:3B:0E:13:BF:E4:BD:35:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:55:4b:16:60:3c:fc:2f:62:00:ac:e0:3f:a3:65:49:50:53: 39:08:34:21:e2:66:5f:41:0a:48:64:e6:cc:22:bd:7c:32:76: ac:a1:7b:9f:ec:5a:38:ed:57:92:77:49:8a:50:3f:8b:0d:65: a0:33:b6:e2:d5:11:10:7f:9b:14:41:57:9a:cb:6e:db:c3:e5: 6c:e9:83:6d:e3:cc:c4:db:4a:a9:70:54:c5:6e:32:25:7a:3e: c7:19:b3:f0:58:c8:0c:b0:dd:7b:29:81:cc:b1:87:56:b6:b9: 42:0c:94:d8:a6:43:e7:40:60:5e:68:e4:17:2d:3f:3e:26:24: ba:ec:95:c6:86:a5:ae:62:fe:17:8f:05:ec:59:d4:0f:b2:9f: 27:92:f8:b5:46:a2:15:e3:b6:97:2c:f7:66:50:8a:b7:15:3d: 5c:44:c6:b1:66:71:6d:fd:53:d2:5a:d4:1c:73:57:0d:73:b4: fd:94:3a:cf:8f:0d:67:fa:56:97:b5:64:bd:12:af:42:1c:c5: 17:34:9d:6d:ce:8e:03:ec:b1:88:d0:ab:fd:e2:23:ae:ee:41: a4:a9:de:c3:27:ec:87:7c:a7:cd:67:0d:09:13:2b:d6:19:30: f0:b8:d6:4d:ec:a2:f5:18:0f:57:83:48:f8:89:d3:ce:91:30: d8:7d:75:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJPWaI+fxj4Eym9M1ZbquAat3l2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM5QzhENkFEQjQzQTc1RjFERkE0ODA1M0IwRTEzQkZF NEJEMzUwQTAeFw0yNTA0MTgyMTI2NTNaFw0yNTA0MjIwNjA3NTNaMDMxMTAvBgNV BAMTKDcwQzYxNjkxQUI5ODg4NDAzMzU0QUM0Q0QwMDVFQjkzQkIxNTAyRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDooaA6bjTQcS1q7vLFOrJrxh+i tpWCR5DXJF337FgBa32KC1jAyMbgpRmOYx7n5uSGGFHe8yaaxh2vHHBEfZcIj0nV GLT1/V6dQsQVTRi92DbpWprAbeZrc9crDBp/gZcGp/pjlhe8aQ6E13BVyzcMxVOE OqYM/Y5apA0f3V8sQL/RACdV09+epPfCC2BKMrTpM6nomuxVSF/wc25Gwl2qOT+S RhaP6BZEeYcOOKXDSKuCEPChveVnObQ0gYQP84HwqVYZPVQP+EFR+Nzv+lI9dpo4 fyciJu49rFvk6zLebVpJubvhW6wiIMs+699y777ubKQfscRsBFiEa0QII69xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcMYWkauYiEAzVKxM0AXrk7sVAuIwHwYDVR0j BBgwFoAULJyNattDp18d+kgFOw4Tv+S9NQowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTA3NzM4Ni0zMDFiLTRmZjEtODcxYi02MjMyYjVmM2JlMDkvMC8yQzlDOEQ2QURC NDNBNzVGMURGQTQ4MDUzQjBFMTNCRkU0QkQzNTBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkM5QzhENkFEQjQzQTc1RjFERkE0ODA1M0IwRTEzQkZFNEJE MzUwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWEwNzczODYtMzAxYi00ZmYxLTg3 MWItNjIzMmI1ZjNiZTA5LzAvMkM5QzhENkFEQjQzQTc1RjFERkE0ODA1M0IwRTEz QkZFNEJEMzUwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANtVSxZgPPwvYgCs4D+jZUlQUzkINCHiZl9B Ckhk5swivXwydqyhe5/sWjjtV5J3SYpQP4sNZaAztuLVERB/mxRBV5rLbtvD5Wzp g23jzMTbSqlwVMVuMiV6PscZs/BYyAyw3Xspgcyxh1a2uUIMlNimQ+dAYF5o5Bct Pz4mJLrslcaGpa5i/hePBexZ1A+ynyeS+LVGohXjtpcs92ZQircVPVxExrFmcW39 U9Ja1BxzVw1ztP2UOs+PDWf6Vpe1ZL0Sr0IcxRc0nW3OjgPssYjQq/3iI67uQaSp 3sMn7Id8p81nDQkTK9YZMPC41k3sovUYD1eDSPiJ086RMNh9dQ4= -----END CERTIFICATE-----Generated at Sun Apr 20 12:59:51 2025 by rpki-client