$ rpki-client -vvf repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft File: 2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft (raw, json) Hash identifier: p6wbC0oWnPShYSN8ZX88PnsPHvXLiTnFLXt1hfZYPyg= Subject key identifier: B3:DE:C5:A1:20:88:0C:03:DC:06:CA:FA:9D:30:8D:4A:8C:3F:8C:4E Authority key identifier: 2E:C7:21:F6:FC:61:6A:1B:E2:D9:38:F2:1E:AF:2E:82:E8:05:98:1E Certificate issuer: /CN=2EC721F6FC616A1BE2D938F21EAF2E82E805981E Certificate serial: 224FD2AEFD6FECB67F8BB95DD9DCA1846AC08797 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft Manifest number: 64 Signing time: Sun 15 Jun 2025 15:41:52 +0000 Manifest this update: Sun 15 Jun 2025 15:36:52 +0000 Manifest next update: Wed 18 Jun 2025 19:25:52 +0000 Files and hashes: 1: 2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl (hash: ++Z0G9zT+t/dCTmlNhfDEohFJ4zo1wbQI1CnrzC89gQ=) 2: 3136302e3138372e3137342e302f32342d3234203d3e20313533313335.roa (hash: dQxSegWij3q6Phuhy7HWSdyNiX1g+CStiuMeHg3r0H4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 16:52:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:4f:d2:ae:fd:6f:ec:b6:7f:8b:b9:5d:d9:dc:a1:84:6a:c0:87:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EC721F6FC616A1BE2D938F21EAF2E82E805981E Validity Not Before: Jun 15 15:36:52 2025 GMT Not After : Jun 18 19:25:52 2025 GMT Subject: CN=B3DEC5A120880C03DC06CAFA9D308D4A8C3F8C4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a5:4e:bf:a7:92:fb:13:9b:a4:e8:11:18:3b: 6f:44:99:82:23:b5:9c:5f:9c:74:71:b7:9f:91:67: 0b:de:28:c9:31:6e:99:ed:67:73:31:bf:ce:b2:9e: d4:e9:74:19:4f:ba:a4:88:13:52:21:5b:36:12:15: fe:bb:c3:b3:10:fb:d1:04:5c:fd:ec:6f:b6:b7:78: a2:ac:dc:f4:8f:2b:3c:1c:41:1b:3f:ee:65:66:e6: 94:1c:92:6e:81:39:22:ce:83:bd:60:f6:71:44:1d: 41:f1:a5:8d:d4:03:d5:b0:70:d3:6e:a0:e0:c9:c9: 64:a7:4f:fc:75:bb:06:f6:97:c3:1d:14:0d:13:7c: bb:45:2d:fc:a9:43:67:d8:01:31:1f:15:35:6e:2c: e6:8d:94:34:ee:cc:4d:5b:d2:9f:b7:13:bf:80:e4: 73:0a:20:2d:e9:89:f2:4d:41:6e:a7:fb:64:bc:f3: 57:8a:31:f2:bb:ba:13:9c:8c:1a:57:df:64:d5:24: 5f:82:48:35:20:41:16:4f:2d:c8:9e:b4:97:39:c6: 3c:98:99:36:a8:6d:17:55:17:13:60:54:d4:44:e3: b2:20:f0:34:3a:ed:39:9a:1c:52:80:e6:10:85:90: 3b:cf:2e:36:b9:26:ed:2b:82:8b:ae:df:cf:ca:93: 23:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:DE:C5:A1:20:88:0C:03:DC:06:CA:FA:9D:30:8D:4A:8C:3F:8C:4E X509v3 Authority Key Identifier: keyid:2E:C7:21:F6:FC:61:6A:1B:E2:D9:38:F2:1E:AF:2E:82:E8:05:98:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:1b:7b:95:e4:ba:62:e9:72:19:40:48:27:b0:fe:5e:e1:48: 3b:92:ff:59:85:05:72:67:04:8d:9d:c0:ba:81:a1:59:1a:83: 2d:86:ed:dc:6f:e6:36:ee:57:db:c5:23:9f:c7:84:2c:b8:fb: 66:71:a9:1a:14:6f:66:24:53:ca:74:67:83:20:8b:65:ca:2c: 2d:2d:69:44:19:19:d5:1b:ac:a1:96:d1:1d:3c:d8:75:2d:c0: 9d:b1:c9:db:1e:19:ec:40:18:57:3f:2a:c4:27:72:93:28:3f: 84:c3:88:2e:f5:48:02:9c:b2:0d:be:46:27:83:8f:9c:52:b9: 64:4b:26:1e:3c:23:ed:3b:66:d4:64:b6:dd:36:6e:58:c8:32: 62:ce:fc:ad:5b:d7:a5:c2:39:62:77:41:a3:9f:da:76:5a:36: 0b:dc:06:ad:95:f4:92:e6:f2:4a:fa:d1:6e:02:c6:c5:17:1b: c8:b9:a0:88:1c:49:70:0f:20:ca:30:89:29:eb:36:0a:a6:db: ae:2b:fc:43:5a:0d:18:9a:da:3c:25:71:54:82:10:7a:2c:c1: 81:8c:fe:5c:6f:e3:d9:b3:35:c5:c9:6c:16:7b:5d:f1:65:6b: 8e:69:0c:27:bb:00:c4:e9:7a:84:db:b1:8f:4c:b4:40:c7:49: 7b:6f:96:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIk/Srv1v7LZ/i7ld2dyhhGrAh5cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJFODJF ODA1OTgxRTAeFw0yNTA2MTUxNTM2NTJaFw0yNTA2MTgxOTI1NTJaMDMxMTAvBgNV BAMTKEIzREVDNUExMjA4ODBDMDNEQzA2Q0FGQTlEMzA4RDRBOEMzRjhDNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEpU6/p5L7E5uk6BEYO29EmYIj tZxfnHRxt5+RZwveKMkxbpntZ3Mxv86yntTpdBlPuqSIE1IhWzYSFf67w7MQ+9EE XP3sb7a3eKKs3PSPKzwcQRs/7mVm5pQckm6BOSLOg71g9nFEHUHxpY3UA9WwcNNu oODJyWSnT/x1uwb2l8MdFA0TfLtFLfypQ2fYATEfFTVuLOaNlDTuzE1b0p+3E7+A 5HMKIC3pifJNQW6n+2S881eKMfK7uhOcjBpX32TVJF+CSDUgQRZPLcietJc5xjyY mTaobRdVFxNgVNRE47Ig8DQ67TmaHFKA5hCFkDvPLja5Ju0rgouu38/KkyMfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs97FoSCIDAPcBsr6nTCNSow/jE4wHwYDVR0j BBgwFoAULsch9vxhahvi2TjyHq8ugugFmB4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODg1M2FhYi04ZDZjLTQ1N2YtOWQ1Ny00ODRhY2FjZWE5ZDgvMC8yRUM3MjFGNkZD NjE2QTFCRTJEOTM4RjIxRUFGMkU4MkU4MDU5ODFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJFODJFODA1 OTgxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTg4NTNhYWItOGQ2Yy00NTdmLTlk NTctNDg0YWNhY2VhOWQ4LzAvMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJF ODJFODA1OTgxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAsbe5XkumLpchlASCew/l7hSDuS/1mFBXJn BI2dwLqBoVkagy2G7dxv5jbuV9vFI5/HhCy4+2ZxqRoUb2YkU8p0Z4Mgi2XKLC0t aUQZGdUbrKGW0R082HUtwJ2xydseGexAGFc/KsQncpMoP4TDiC71SAKcsg2+RieD j5xSuWRLJh48I+07ZtRktt02bljIMmLO/K1b16XCOWJ3QaOf2nZaNgvcBq2V9JLm 8kr60W4CxsUXG8i5oIgcSXAPIMowiSnrNgqm264r/ENaDRia2jwlcVSCEHoswYGM /lxv49mzNcXJbBZ7XfFla45pDCe7AMTpeoTbsY9MtEDHSXtvlo8= -----END CERTIFICATE-----Generated at Mon Jun 16 02:08:32 2025 by rpki-client