$ rpki-client -vvf repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft File: 2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft (raw, json) Hash identifier: TzW3nrEp7Pcr7BuMmR4DyI4F2zXqVD4Klvv9s6PWmmE= Subject key identifier: 72:1E:60:07:A5:3E:3B:F6:0B:9F:CB:6F:42:08:4A:0A:01:63:20:03 Authority key identifier: 2E:EF:78:44:53:62:AF:4F:7C:AE:B2:41:FA:E6:B9:74:7E:C2:D2:F9 Certificate issuer: /CN=2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9 Certificate serial: 3A16EFD901EFC33B02C74AE3B1D784EB3DA85ACF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft Manifest number: 0486 Signing time: Tue 05 Aug 2025 00:51:06 +0000 Manifest this update: Tue 05 Aug 2025 00:46:06 +0000 Manifest next update: Fri 08 Aug 2025 02:26:06 +0000 Files and hashes: 1: 3130332e3135382e3130322e302f32342d3234203d3e20313431313239.roa (hash: mevAhM5443uB5w78f++4hcwTY8vcOKFPl7i6kYttnO4=) 2: 2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.crl (hash: KIzVQSF9FcUotEFeg6g8vEEW1QNeJLQXIxouuetmSvs=) 3: 3130332e3135382e3130332e302f32342d3234203d3e203435333137.roa (hash: w2a2u6qdVWhlCkR970rhojHnih1HccbKX6TZhhdF+IA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.crl rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 02:26:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:16:ef:d9:01:ef:c3:3b:02:c7:4a:e3:b1:d7:84:eb:3d:a8:5a:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9 Validity Not Before: Aug 5 00:46:06 2025 GMT Not After : Aug 8 02:26:06 2025 GMT Subject: CN=721E6007A53E3BF60B9FCB6F42084A0A01632003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:74:ad:cf:4a:22:dc:a1:88:ef:c4:67:0f:9f: ea:62:03:71:ea:02:df:19:8f:96:f9:f6:04:3b:c9: 89:33:f5:15:ea:48:86:58:10:86:3a:03:1d:b6:d9: b5:97:a8:5e:ad:b8:44:95:69:d0:7f:ac:e2:04:82: 9f:e5:1a:c4:a3:1d:63:d1:70:62:b8:f5:39:42:43: 1b:e4:e7:9c:da:bb:f6:bd:22:95:e4:5b:7b:0d:00: 1f:d3:ab:0e:c2:61:a1:91:df:90:0a:61:d5:02:5e: ca:68:ac:5e:7f:53:13:94:60:45:cb:83:13:35:bc: 23:67:09:37:9c:6f:be:58:48:aa:76:0e:e0:ec:75: 74:93:32:d2:e4:43:b6:7f:59:b5:d7:61:eb:06:b2: f5:d5:44:00:51:a1:ce:7a:a1:f4:e7:83:cd:6b:21: 65:f6:60:2e:68:79:7b:39:c9:ad:88:6e:09:c6:a1: 12:bc:57:1f:4f:19:67:3d:4b:70:fe:d3:f6:d1:c2: 52:ca:a2:fa:74:24:0b:88:bf:c5:b3:04:7b:64:0a: f7:af:85:f5:62:46:4e:e4:6d:6e:21:f1:3a:7a:3e: b8:26:14:83:f9:0e:b0:fd:03:ec:dd:50:22:a3:bf: eb:86:8e:23:d0:e7:b7:5b:3e:2c:af:5a:0e:aa:11: be:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:1E:60:07:A5:3E:3B:F6:0B:9F:CB:6F:42:08:4A:0A:01:63:20:03 X509v3 Authority Key Identifier: keyid:2E:EF:78:44:53:62:AF:4F:7C:AE:B2:41:FA:E6:B9:74:7E:C2:D2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:df:1d:e3:76:97:f7:4a:02:96:96:e0:fb:21:ca:18:ed:43: 56:2a:6c:a1:54:77:bc:30:a0:c3:fb:b3:2f:a6:86:6a:93:e7: ca:dc:4c:33:9e:f4:fa:b7:63:b6:99:03:07:e4:85:c6:57:fa: 29:64:a1:37:9a:be:c4:17:a0:de:77:d4:05:dc:76:8b:4d:ee: f7:a0:f6:7c:c9:48:9f:a2:9e:a4:83:0e:11:2a:48:84:c0:5b: f2:03:6f:88:a9:0d:8a:1d:3e:b4:8d:9b:57:6f:3b:87:e5:cf: 47:5e:a5:a4:6d:be:f0:8a:e1:d4:0f:7f:5d:46:f1:99:52:03: 85:01:59:a5:5b:8f:ae:4a:7d:c9:44:27:b1:b8:83:6d:f2:78: 8c:db:2d:33:a9:45:98:4f:8c:82:78:97:be:dc:d3:b4:47:af: e5:86:51:1e:70:7c:86:e1:86:5e:f4:34:6b:e8:1f:8f:bd:96: 35:d4:a6:b9:0d:ce:e0:3b:f8:34:51:d8:2e:50:9b:cd:93:69: 88:75:ab:2e:e3:b0:2d:95:5e:51:87:bf:ae:41:09:66:68:b4: 3b:32:6c:cf:3a:bf:f2:ca:cb:25:f3:ef:83:09:05:93:e6:e7: 64:56:3a:a6:ff:7d:f2:85:bf:9d:c5:de:82:3c:eb:cc:43:ad: 76:b8:5d:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOhbv2QHvwzsCx0rjsdeE6z2oWs8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVFRjc4NDQ1MzYyQUY0RjdDQUVCMjQxRkFFNkI5NzQ3 RUMyRDJGOTAeFw0yNTA4MDUwMDQ2MDZaFw0yNTA4MDgwMjI2MDZaMDMxMTAvBgNV BAMTKDcyMUU2MDA3QTUzRTNCRjYwQjlGQ0I2RjQyMDg0QTBBMDE2MzIwMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEdK3PSiLcoYjvxGcPn+piA3Hq At8Zj5b59gQ7yYkz9RXqSIZYEIY6Ax222bWXqF6tuESVadB/rOIEgp/lGsSjHWPR cGK49TlCQxvk55zau/a9IpXkW3sNAB/Tqw7CYaGR35AKYdUCXsporF5/UxOUYEXL gxM1vCNnCTecb75YSKp2DuDsdXSTMtLkQ7Z/WbXXYesGsvXVRABRoc56ofTng81r IWX2YC5oeXs5ya2IbgnGoRK8Vx9PGWc9S3D+0/bRwlLKovp0JAuIv8WzBHtkCvev hfViRk7kbW4h8Tp6PrgmFIP5DrD9A+zdUCKjv+uGjiPQ57dbPiyvWg6qEb5VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUch5gB6U+O/YLn8tvQghKCgFjIAMwHwYDVR0j BBgwFoAULu94RFNir098rrJB+ua5dH7C0vkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NzI0ZTQ1Yi0yNTRiLTRmZWItYmY4ZS03YmYxMjA5MTJhZjcvMC8yRUVGNzg0NDUz NjJBRjRGN0NBRUIyNDFGQUU2Qjk3NDdFQzJEMkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkVFRjc4NDQ1MzYyQUY0RjdDQUVCMjQxRkFFNkI5NzQ3RUMy RDJGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjcyNGU0NWItMjU0Yi00ZmViLWJm OGUtN2JmMTIwOTEyYWY3LzAvMkVFRjc4NDQ1MzYyQUY0RjdDQUVCMjQxRkFFNkI5 NzQ3RUMyRDJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHDfHeN2l/dKApaW4PshyhjtQ1YqbKFUd7ww oMP7sy+mhmqT58rcTDOe9Pq3Y7aZAwfkhcZX+ilkoTeavsQXoN531AXcdotN7veg 9nzJSJ+inqSDDhEqSITAW/IDb4ipDYodPrSNm1dvO4flz0depaRtvvCK4dQPf11G 8ZlSA4UBWaVbj65KfclEJ7G4g23yeIzbLTOpRZhPjIJ4l77c07RHr+WGUR5wfIbh hl70NGvoH4+9ljXUprkNzuA7+DRR2C5Qm82TaYh1qy7jsC2VXlGHv65BCWZotDsy bM86v/LKyyXz74MJBZPm52RWOqb/ffKFv53F3oI868xDrXa4Xec= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:16 2025 by rpki-client