$ rpki-client -vvf repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft File: 2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft (raw, json) Hash identifier: wyV6FuCkovtndXa/bKUi7k9mB+BfUNs6tCNlA6leNg0= Subject key identifier: 68:E3:BF:CF:9A:E6:B9:B9:54:76:1A:A3:B4:48:C2:CF:29:8A:4C:AA Authority key identifier: 2E:C7:21:F6:FC:61:6A:1B:E2:D9:38:F2:1E:AF:2E:82:E8:05:98:1E Certificate issuer: /CN=2EC721F6FC616A1BE2D938F21EAF2E82E805981E Certificate serial: 0724D1968DA8DBDB95B6D45AE51BC5DA985D6F66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft Manifest number: 7A Signing time: Tue 05 Aug 2025 11:21:53 +0000 Manifest this update: Tue 05 Aug 2025 11:16:53 +0000 Manifest next update: Fri 08 Aug 2025 13:17:53 +0000 Files and hashes: 1: 3136302e3138372e3137342e302f32342d3234203d3e20313533313335.roa (hash: dQxSegWij3q6Phuhy7HWSdyNiX1g+CStiuMeHg3r0H4=) 2: 2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl (hash: ll0wvZ/aYwGPSxr6jFwFm5sc9ygZ2P/aOulmA9KK380=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 09:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:24:d1:96:8d:a8:db:db:95:b6:d4:5a:e5:1b:c5:da:98:5d:6f:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EC721F6FC616A1BE2D938F21EAF2E82E805981E Validity Not Before: Aug 5 11:16:53 2025 GMT Not After : Aug 8 13:17:53 2025 GMT Subject: CN=68E3BFCF9AE6B9B954761AA3B448C2CF298A4CAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:dd:ef:f4:0e:1d:3e:c6:a4:2f:8c:dd:92:50: d5:2a:70:58:9f:6c:56:ba:e8:a2:eb:cf:96:e6:42: 24:f6:3a:a5:a3:c0:d6:2f:95:4c:0b:94:52:26:c6: 5a:c1:95:2b:27:5d:03:0c:05:83:a7:ca:ee:d5:e6: f8:bd:a6:c6:94:fa:2a:f2:73:f1:44:24:df:8c:8c: 95:ce:e4:84:4f:96:2e:96:14:8a:f8:06:21:57:75: 0c:ab:e8:f4:40:7f:6e:e4:cc:96:00:eb:18:d4:83: 72:f9:0a:20:90:74:44:d6:01:67:61:84:79:df:bc: 29:da:b0:65:dd:4f:07:9d:3b:6b:f9:9e:71:fe:a1: 0a:26:4a:9c:4d:97:e9:e4:3a:ab:d8:3a:81:c0:6d: a6:bd:d8:05:10:1b:02:f6:9c:f6:19:3b:81:34:28: f2:fa:65:be:fa:38:7b:79:e9:81:a0:34:e3:ea:60: ff:81:5a:87:6a:0a:3a:41:e9:61:09:a5:fd:62:1a: 04:0d:1f:21:26:7b:4a:f7:5b:87:8e:7f:22:80:59: a0:9e:7f:1b:4d:0c:a7:04:99:3b:a4:9a:88:db:97: 5a:1d:16:39:d2:b2:87:71:6e:fb:7d:0a:95:ff:a1: 10:7b:b7:9a:e9:76:e2:04:1d:f9:0b:6e:8c:38:32: 30:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E3:BF:CF:9A:E6:B9:B9:54:76:1A:A3:B4:48:C2:CF:29:8A:4C:AA X509v3 Authority Key Identifier: keyid:2E:C7:21:F6:FC:61:6A:1B:E2:D9:38:F2:1E:AF:2E:82:E8:05:98:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:92:d7:43:20:5e:7d:98:20:ff:28:41:a6:bf:77:13:db:f8: bd:bb:ec:c9:bc:87:72:13:52:e3:a7:b4:d0:d3:ce:98:fb:36: 6e:f9:e1:30:6e:6d:b2:37:b1:da:d1:f9:37:cb:54:11:72:db: f7:dd:a7:ff:4e:6a:23:01:bc:d7:6f:23:42:88:15:f9:82:fc: 14:aa:23:df:63:32:47:02:da:5c:64:70:95:1e:d4:ad:f6:83: bb:e7:1d:89:4c:25:f3:43:9f:cf:13:6b:da:b6:d9:52:5c:7d: 89:ea:6a:4e:81:f6:4e:b5:30:73:77:7b:40:b8:1d:79:a2:f8: 4a:99:29:09:f5:6d:6a:21:d3:f2:52:af:22:f0:3f:b4:16:b7: 8e:6b:57:10:79:a1:aa:b3:61:d6:37:77:af:2d:b4:24:38:f7: d0:1e:0e:25:a0:9e:6d:24:3a:ce:81:5d:d8:2c:3f:7e:7b:a0: d6:a7:84:35:67:99:f4:54:6f:2c:a9:5c:7f:77:f1:31:36:33: 2a:da:94:10:b2:79:c6:4b:a1:f4:68:5b:93:a9:3d:71:c6:ad: 0f:e4:7d:bf:e0:3f:4a:fc:ee:4f:f8:68:b1:ad:22:33:c2:de: d6:e7:71:b1:e8:5f:e0:b8:6b:de:fe:a4:88:7c:7e:8f:b1:6b: 38:9b:18:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUByTRlo2o29uVttRa5RvF2phdb2YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJFODJF ODA1OTgxRTAeFw0yNTA4MDUxMTE2NTNaFw0yNTA4MDgxMzE3NTNaMDMxMTAvBgNV BAMTKDY4RTNCRkNGOUFFNkI5Qjk1NDc2MUFBM0I0NDhDMkNGMjk4QTRDQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA3e/0Dh0+xqQvjN2SUNUqcFif bFa66KLrz5bmQiT2OqWjwNYvlUwLlFImxlrBlSsnXQMMBYOnyu7V5vi9psaU+iry c/FEJN+MjJXO5IRPli6WFIr4BiFXdQyr6PRAf27kzJYA6xjUg3L5CiCQdETWAWdh hHnfvCnasGXdTwedO2v5nnH+oQomSpxNl+nkOqvYOoHAbaa92AUQGwL2nPYZO4E0 KPL6Zb76OHt56YGgNOPqYP+BWodqCjpB6WEJpf1iGgQNHyEme0r3W4eOfyKAWaCe fxtNDKcEmTukmojbl1odFjnSsodxbvt9CpX/oRB7t5rpduIEHfkLbow4MjCJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaOO/z5rmublUdhqjtEjCzymKTKowHwYDVR0j BBgwFoAULsch9vxhahvi2TjyHq8ugugFmB4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODg1M2FhYi04ZDZjLTQ1N2YtOWQ1Ny00ODRhY2FjZWE5ZDgvMC8yRUM3MjFGNkZD NjE2QTFCRTJEOTM4RjIxRUFGMkU4MkU4MDU5ODFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJFODJFODA1 OTgxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTg4NTNhYWItOGQ2Yy00NTdmLTlk NTctNDg0YWNhY2VhOWQ4LzAvMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJF ODJFODA1OTgxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACyS10MgXn2YIP8oQaa/dxPb+L277Mm8h3IT UuOntNDTzpj7Nm754TBubbI3sdrR+TfLVBFy2/fdp/9OaiMBvNdvI0KIFfmC/BSq I99jMkcC2lxkcJUe1K32g7vnHYlMJfNDn88Ta9q22VJcfYnqak6B9k61MHN3e0C4 HXmi+EqZKQn1bWoh0/JSryLwP7QWt45rVxB5oaqzYdY3d68ttCQ499AeDiWgnm0k Os6BXdgsP357oNanhDVnmfRUbyypXH938TE2MyralBCyecZLofRoW5OpPXHGrQ/k fb/gP0r87k/4aLGtIjPC3tbncbHoX+C4a97+pIh8fo+xazibGDs= -----END CERTIFICATE-----Generated at Wed Aug 6 18:29:53 2025 by rpki-client