$ rpki-client -vvf repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft File: 2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft (raw, json) Hash identifier: 3tWm52fD/yLSxBjqbV7tWM4L37Q7r8QVPqBfdHGU3bo= Subject key identifier: 54:BC:9E:F4:30:6A:85:08:3D:8A:D4:ED:86:BA:32:BE:A0:A4:CF:5B Authority key identifier: 2B:15:30:AD:20:AC:1F:2F:7F:2E:A2:EB:AA:E7:07:D0:E1:28:A1:DC Certificate issuer: /CN=2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC Certificate serial: 6B50F71AE60A4194005B90ED7A2267D1DEC84CCC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft Manifest number: 02FD Signing time: Tue 03 Jun 2025 18:16:14 +0000 Manifest this update: Tue 03 Jun 2025 18:11:14 +0000 Manifest next update: Sat 07 Jun 2025 03:03:14 +0000 Files and hashes: 1: 3130332e3137322e31372e302f32342d3234203d3e20313432333831.roa (hash: DVIrghrEW7VwPIX0cx9PZe/9iJL/OmwC/t6EzXjRAD8=) 2: 2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl (hash: x5xP/eTuIGUdk6Zxd8JjW8Rh6fwjFHv09bf9ygSnS4A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:03:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:50:f7:1a:e6:0a:41:94:00:5b:90:ed:7a:22:67:d1:de:c8:4c:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC Validity Not Before: Jun 3 18:11:14 2025 GMT Not After : Jun 7 03:03:14 2025 GMT Subject: CN=54BC9EF4306A85083D8AD4ED86BA32BEA0A4CF5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:87:28:6d:61:a4:48:a3:a5:58:62:02:f0:92: 23:47:97:37:a4:4a:82:2c:88:5f:ac:25:6e:5c:25: b4:f5:44:a2:a9:35:0a:e8:f8:90:a9:d5:3a:13:3b: 9b:61:4c:6a:78:28:9c:d5:cc:92:fa:d3:a7:a5:a0: 65:be:cf:bc:56:20:bf:89:41:a4:86:c2:64:e3:4a: 17:95:98:17:a1:c0:f1:53:18:88:ab:84:da:f5:2a: d0:bc:59:ee:87:d9:e0:40:8a:4e:3b:eb:b9:c3:ae: 49:e8:ea:a4:12:50:29:b5:75:14:60:d0:f6:0b:02: 6a:0e:ff:a9:0c:f0:96:1f:20:e2:db:40:ad:f4:b3: 2d:c9:6b:c6:d8:e5:b4:02:ca:48:dc:50:04:31:2f: 50:58:74:3a:93:a2:88:88:ac:f1:88:ef:d7:34:42: c5:a3:1e:59:05:df:38:e1:9e:fd:10:b9:ec:fe:b9: a5:1c:34:96:88:2a:b1:e9:3e:55:7e:4c:09:c3:3e: 9a:75:ca:b9:57:4e:93:30:02:34:80:f5:6c:2f:90: 90:69:20:a6:61:49:4f:21:ba:bf:c4:1e:9b:6a:cd: 72:ed:dd:12:ad:1a:ed:d6:4c:69:d5:f7:57:fd:d1: 62:21:4b:14:c8:6e:ab:fc:9c:1d:90:a0:f4:e2:f1: f1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:BC:9E:F4:30:6A:85:08:3D:8A:D4:ED:86:BA:32:BE:A0:A4:CF:5B X509v3 Authority Key Identifier: keyid:2B:15:30:AD:20:AC:1F:2F:7F:2E:A2:EB:AA:E7:07:D0:E1:28:A1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:71:5e:f1:37:7c:40:30:f2:fa:b8:3f:13:a7:14:21:51:ff: c4:67:cc:03:cc:20:e6:80:f6:0d:d4:5c:58:a9:dd:54:07:c6: 63:83:8e:a3:a5:95:9b:3c:1f:03:13:c4:f5:48:8d:52:a0:b7: 88:43:fb:ce:4e:6c:b4:af:d8:4b:32:0e:d3:0e:7a:25:a0:64: da:54:9e:4a:c1:10:7d:38:f7:00:41:de:cd:5e:08:9a:b5:ac: d5:9b:35:31:37:40:20:23:0f:22:8b:57:cf:59:b2:62:1a:95: d1:e8:f9:6d:a5:c7:79:a1:58:d1:9a:2e:ab:d4:78:d3:0a:c2: 4a:43:b8:e4:07:a6:3a:d1:88:05:52:97:fe:61:0c:b4:90:49: 18:f8:ba:0f:20:ec:ee:d6:9a:96:c2:80:e8:a3:36:3d:72:a9: 2c:71:c8:68:b9:38:0a:f5:d3:5a:47:71:3f:3f:d6:7a:a9:b2: 48:c5:51:70:f9:f8:5e:e7:d6:63:50:54:5d:fc:ce:a9:56:e0: 54:95:5e:28:1a:88:bd:5d:8e:20:5b:cf:87:99:b5:8c:a8:2d: 3b:a4:41:7c:f6:50:d1:17:9c:9e:96:7d:68:d6:f7:9a:0c:1d: 3d:89:48:af:9f:b7:21:fa:27:ba:da:26:c4:bd:50:bc:ba:d5: ca:76:45:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa1D3GuYKQZQAW5DteiJn0d7ITMwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3RDBF MTI4QTFEQzAeFw0yNTA2MDMxODExMTRaFw0yNTA2MDcwMzAzMTRaMDMxMTAvBgNV BAMTKDU0QkM5RUY0MzA2QTg1MDgzRDhBRDRFRDg2QkEzMkJFQTBBNENGNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDchyhtYaRIo6VYYgLwkiNHlzek SoIsiF+sJW5cJbT1RKKpNQro+JCp1ToTO5thTGp4KJzVzJL606eloGW+z7xWIL+J QaSGwmTjSheVmBehwPFTGIirhNr1KtC8We6H2eBAik4767nDrkno6qQSUCm1dRRg 0PYLAmoO/6kM8JYfIOLbQK30sy3Ja8bY5bQCykjcUAQxL1BYdDqTooiIrPGI79c0 QsWjHlkF3zjhnv0Quez+uaUcNJaIKrHpPlV+TAnDPpp1yrlXTpMwAjSA9WwvkJBp IKZhSU8hur/EHptqzXLt3RKtGu3WTGnV91f90WIhSxTIbqv8nB2QoPTi8fH3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVLye9DBqhQg9itTthroyvqCkz1swHwYDVR0j BBgwFoAUKxUwrSCsHy9/LqLrqucH0OEoodwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NjY4ODU0YS0zZjI0LTQwYjEtODBjZC1lNjM2YWE3ZThiMWMvMC8yQjE1MzBBRDIw QUMxRjJGN0YyRUEyRUJBQUU3MDdEMEUxMjhBMURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3RDBFMTI4 QTFEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjY2ODg1NGEtM2YyNC00MGIxLTgw Y2QtZTYzNmFhN2U4YjFjLzAvMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3 RDBFMTI4QTFEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJlxXvE3fEAw8vq4PxOnFCFR/8RnzAPMIOaA 9g3UXFip3VQHxmODjqOllZs8HwMTxPVIjVKgt4hD+85ObLSv2EsyDtMOeiWgZNpU nkrBEH049wBB3s1eCJq1rNWbNTE3QCAjDyKLV89ZsmIaldHo+W2lx3mhWNGaLqvU eNMKwkpDuOQHpjrRiAVSl/5hDLSQSRj4ug8g7O7WmpbCgOijNj1yqSxxyGi5OAr1 01pHcT8/1nqpskjFUXD5+F7n1mNQVF38zqlW4FSVXigaiL1djiBbz4eZtYyoLTuk QXz2UNEXnJ6WfWjW95oMHT2JSK+ftyH6J7raJsS9ULy61cp2Rck= -----END CERTIFICATE-----Generated at Thu Jun 5 18:12:09 2025 by rpki-client