$ rpki-client -vvf repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft File: 2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft (raw, json) Hash identifier: azmPDApVOQhwW03euwsp9C/GSE1cqTkBH9KbwpHltC0= Subject key identifier: 65:E7:3B:6C:8A:9B:D1:5F:8D:2C:F0:C0:62:94:7E:AA:20:46:BD:BE Authority key identifier: 2E:C7:21:F6:FC:61:6A:1B:E2:D9:38:F2:1E:AF:2E:82:E8:05:98:1E Certificate issuer: /CN=2EC721F6FC616A1BE2D938F21EAF2E82E805981E Certificate serial: 0857EEE852F7849277D129209E44D7F8B41BFEA4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft Manifest number: 4E Signing time: Sun 27 Apr 2025 13:01:49 +0000 Manifest this update: Sun 27 Apr 2025 12:56:49 +0000 Manifest next update: Wed 30 Apr 2025 18:32:49 +0000 Files and hashes: 1: 3136302e3138372e3137342e302f32342d3234203d3e20313533313335.roa (hash: dQxSegWij3q6Phuhy7HWSdyNiX1g+CStiuMeHg3r0H4=) 2: 2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl (hash: XB6LRw0zaWJ6jWEqCup6sbi9qFCY4F/rCCF8NUOL7T4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 17:48:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:57:ee:e8:52:f7:84:92:77:d1:29:20:9e:44:d7:f8:b4:1b:fe:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EC721F6FC616A1BE2D938F21EAF2E82E805981E Validity Not Before: Apr 27 12:56:49 2025 GMT Not After : Apr 30 18:32:49 2025 GMT Subject: CN=65E73B6C8A9BD15F8D2CF0C062947EAA2046BDBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:be:50:19:8e:dd:12:cb:d2:79:0e:75:59:82: dd:a8:92:72:4c:14:92:a3:c9:f3:d7:b9:46:da:1c: 28:30:ed:bc:ce:6d:4e:db:44:c1:33:3c:b2:10:60: 26:af:82:4b:be:bd:6d:24:d4:e1:c7:aa:98:6d:ef: 80:2e:98:75:fa:a3:e7:15:8f:02:c3:b0:83:44:b7: 6a:4e:6a:1b:9f:05:d2:12:95:c9:fb:d2:6f:25:d0: 6f:55:c8:f8:39:df:ce:de:0d:cb:ec:f5:aa:eb:ac: 25:dd:10:c6:06:ca:2d:de:cf:49:17:24:7b:94:21: 2c:b8:a2:98:9f:48:8e:2a:84:45:7a:6a:e6:4a:9f: 7d:1e:27:02:6e:9d:8e:2a:99:0f:99:78:08:0a:77: 7a:2d:06:92:dc:96:3a:ef:de:62:40:01:60:00:33: c3:78:65:b2:36:42:11:cb:25:cc:77:14:11:4d:25: 63:d2:36:8a:0c:5c:67:7d:b4:e9:fc:f8:23:33:2b: 85:5e:9f:e5:19:87:5c:aa:3c:7b:16:05:5c:1e:8a: 5b:45:3e:ba:5f:31:d4:31:7e:9c:19:c1:85:28:4f: 85:16:ce:69:d7:ca:1a:68:40:42:79:10:2f:9a:9f: 5c:27:33:91:db:8d:f5:35:76:50:2b:ad:cd:8f:4d: f0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E7:3B:6C:8A:9B:D1:5F:8D:2C:F0:C0:62:94:7E:AA:20:46:BD:BE X509v3 Authority Key Identifier: keyid:2E:C7:21:F6:FC:61:6A:1B:E2:D9:38:F2:1E:AF:2E:82:E8:05:98:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:65:c7:11:ad:c3:a2:b4:68:82:39:ef:f7:b3:d6:61:a1:2d: e3:b5:7d:75:0c:e1:14:84:97:8b:a6:14:b7:e3:50:d9:30:f4: be:51:dd:03:75:5e:7d:e9:11:ef:9d:62:b9:4c:01:78:ce:0b: 8e:d8:63:eb:42:be:e5:64:cf:82:22:11:b4:18:54:9f:bd:0a: 54:f3:6e:40:bb:0f:00:61:74:b5:35:49:6c:d0:15:92:f8:d9: 93:dc:77:41:02:08:a0:2d:32:e1:79:00:44:d3:b6:e8:16:32: 6b:14:46:76:23:38:23:87:8f:ef:30:a7:76:97:b3:6d:e1:5e: ad:a1:e0:bf:2f:93:62:cc:aa:f8:fa:67:75:7e:a0:a1:2b:cc: 07:68:d9:e1:af:4c:23:ca:9a:1c:44:1b:98:14:af:73:a6:1c: 02:4a:5f:ba:5a:e6:48:c9:94:3c:54:7b:d9:3b:99:a0:7e:60: 3f:48:2a:30:45:96:fd:81:25:dd:92:97:0e:45:23:c1:45:d5: ff:9b:1b:ea:68:df:4f:72:c2:2a:71:fc:fb:3d:a0:2a:1c:d9: 9d:61:f9:20:cb:16:89:7e:4a:75:0f:d0:43:57:a1:71:a1:3b: c9:67:1e:2a:37:c1:77:ce:cc:ac:c0:82:65:8e:e4:14:6d:e2: 52:4d:79:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCFfu6FL3hJJ30SkgnkTX+LQb/qQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJFODJF ODA1OTgxRTAeFw0yNTA0MjcxMjU2NDlaFw0yNTA0MzAxODMyNDlaMDMxMTAvBgNV BAMTKDY1RTczQjZDOEE5QkQxNUY4RDJDRjBDMDYyOTQ3RUFBMjA0NkJEQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLvlAZjt0Sy9J5DnVZgt2oknJM FJKjyfPXuUbaHCgw7bzObU7bRMEzPLIQYCavgku+vW0k1OHHqpht74AumHX6o+cV jwLDsINEt2pOahufBdISlcn70m8l0G9VyPg5387eDcvs9arrrCXdEMYGyi3ez0kX JHuUISy4opifSI4qhEV6auZKn30eJwJunY4qmQ+ZeAgKd3otBpLcljrv3mJAAWAA M8N4ZbI2QhHLJcx3FBFNJWPSNooMXGd9tOn8+CMzK4Ven+UZh1yqPHsWBVweiltF PrpfMdQxfpwZwYUoT4UWzmnXyhpoQEJ5EC+an1wnM5HbjfU1dlArrc2PTfCjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZec7bIqb0V+NLPDAYpR+qiBGvb4wHwYDVR0j BBgwFoAULsch9vxhahvi2TjyHq8ugugFmB4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODg1M2FhYi04ZDZjLTQ1N2YtOWQ1Ny00ODRhY2FjZWE5ZDgvMC8yRUM3MjFGNkZD NjE2QTFCRTJEOTM4RjIxRUFGMkU4MkU4MDU5ODFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJFODJFODA1 OTgxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTg4NTNhYWItOGQ2Yy00NTdmLTlk NTctNDg0YWNhY2VhOWQ4LzAvMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJF ODJFODA1OTgxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH9lxxGtw6K0aII57/ez1mGhLeO1fXUM4RSE l4umFLfjUNkw9L5R3QN1Xn3pEe+dYrlMAXjOC47YY+tCvuVkz4IiEbQYVJ+9ClTz bkC7DwBhdLU1SWzQFZL42ZPcd0ECCKAtMuF5AETTtugWMmsURnYjOCOHj+8wp3aX s23hXq2h4L8vk2LMqvj6Z3V+oKErzAdo2eGvTCPKmhxEG5gUr3OmHAJKX7pa5kjJ lDxUe9k7maB+YD9IKjBFlv2BJd2Slw5FI8FF1f+bG+po309ywipx/Ps9oCoc2Z1h +SDLFol+SnUP0ENXoXGhO8lnHio3wXfOzKzAgmWO5BRt4lJNeXc= -----END CERTIFICATE-----Generated at Mon Apr 28 09:09:19 2025 by rpki-client