$ rpki-client -vvf repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.mft File: 2FEC60739EF087F0D4F947C7230A725109EC6178.mft (raw, json) Hash identifier: dTy49UHtJUpgskLtTW7BL+08OG6v6G/aWxQ2Jqluym8= Subject key identifier: 9E:97:67:05:8E:D7:DD:84:76:A3:08:D6:85:6B:4F:B4:11:69:23:49 Authority key identifier: 2F:EC:60:73:9E:F0:87:F0:D4:F9:47:C7:23:0A:72:51:09:EC:61:78 Certificate issuer: /CN=2FEC60739EF087F0D4F947C7230A725109EC6178 Certificate serial: 4953433235881E77B9A849A82BA72D7AC5CCF752 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FEC60739EF087F0D4F947C7230A725109EC6178.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.mft Manifest number: 01AE Signing time: Thu 21 Aug 2025 20:41:06 +0000 Manifest this update: Thu 21 Aug 2025 20:36:06 +0000 Manifest next update: Mon 25 Aug 2025 06:05:06 +0000 Files and hashes: 1: 3130332e38312e3231382e302f32342d3234203d3e20313336303731.roa (hash: zWeyoVA0qOIjaDafAvIQb12jZYR0oaDd22mIF8oHmpo=) 2: 323030313a6466303a323930303a3a2f34382d3438203d3e20313336303731.roa (hash: H/sQHGm23pHeiM29QxCCnpOLF9jsO1FQ1jBVySyo3Cs=) 3: 2FEC60739EF087F0D4F947C7230A725109EC6178.crl (hash: pjwYssmWdUHArmmgsroGcjXJAvduSpA5jkkp8JyLhRA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.crl rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FEC60739EF087F0D4F947C7230A725109EC6178.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 06:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:53:43:32:35:88:1e:77:b9:a8:49:a8:2b:a7:2d:7a:c5:cc:f7:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FEC60739EF087F0D4F947C7230A725109EC6178 Validity Not Before: Aug 21 20:36:06 2025 GMT Not After : Aug 25 06:05:06 2025 GMT Subject: CN=9E9767058ED7DD8476A308D6856B4FB411692349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:df:4c:d6:19:f5:d0:a8:4b:f5:c0:5e:8f:99: ed:d3:a3:83:6b:ec:a5:c0:83:a8:24:94:0e:99:c6: 8c:a9:8b:12:9f:58:48:6d:7b:f4:f1:37:f8:05:fb: f0:29:5a:93:3a:52:94:1b:6d:fd:b7:f0:5b:26:cc: 24:29:c1:63:3a:ce:62:85:6d:d5:3d:a6:e5:a0:96: ed:ea:64:3d:4f:c1:af:fe:eb:01:3f:4b:9e:15:b7: c0:08:44:84:72:a1:c0:ae:75:38:b7:f0:8e:2a:97: b6:da:d3:44:3f:3e:83:67:13:91:53:db:0f:c8:30: 24:fb:d9:d7:de:c3:f7:4c:a9:f4:03:f2:f5:79:1c: 23:ce:59:54:0d:9c:4d:53:e9:5b:65:ba:9f:e6:1b: be:87:06:1a:89:0e:3f:88:48:c7:0d:af:e9:67:a1: 0a:75:56:b8:04:2d:a3:f2:13:67:94:24:fa:26:cf: 0e:45:28:32:30:d9:cf:ce:3c:19:ae:93:64:98:5b: 09:84:31:6e:42:45:3a:c6:be:99:25:c9:e4:c6:a6: ca:b7:4a:90:1f:45:20:e4:37:29:ce:02:d3:c8:35: fc:34:a1:67:c6:d6:99:38:56:62:70:aa:a9:7e:d0: c4:1d:e1:47:33:18:db:4a:a8:02:05:44:26:9d:1c: 56:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:97:67:05:8E:D7:DD:84:76:A3:08:D6:85:6B:4F:B4:11:69:23:49 X509v3 Authority Key Identifier: keyid:2F:EC:60:73:9E:F0:87:F0:D4:F9:47:C7:23:0A:72:51:09:EC:61:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FEC60739EF087F0D4F947C7230A725109EC6178.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:60:1d:a8:8d:81:86:3b:bd:75:b7:8d:a0:e2:33:da:dd:a6: 74:31:bc:60:9a:ee:81:24:99:64:23:a4:5e:c7:0a:1a:0f:50: e4:39:18:e3:e2:05:ae:f2:76:8a:d3:8f:c4:48:94:83:43:d4: 81:ca:3d:e9:7b:98:85:63:30:e4:3e:74:0d:39:0f:e1:82:53: 01:b3:6c:e7:e7:bf:7f:35:aa:a7:3a:af:22:6f:e8:16:c9:fb: 25:2b:09:14:6c:86:f3:6a:94:ca:7a:65:76:40:c0:88:a1:9f: 36:ec:9a:b0:52:c7:04:c9:86:2d:90:ae:87:6a:25:ac:b4:fc: 52:9b:1c:23:26:dd:c2:bc:d6:17:8b:48:0b:30:e9:c5:0d:26: a4:7c:47:bc:d7:e8:83:d7:38:96:93:78:ba:63:cc:18:c5:15: bf:1d:9c:c3:5d:98:16:07:e9:58:a2:a3:01:4b:b3:fc:67:b6: 7d:7d:bc:c4:bf:63:d3:98:41:e2:f3:3f:22:69:c4:c3:cd:44: 26:a9:63:e7:dc:c6:09:ca:de:29:e3:23:15:b8:ba:bf:cc:05: d0:5f:8c:b2:3c:91:43:cf:95:d3:72:4c:51:07:51:7d:78:a7: 22:27:68:d3:d0:57:45:ee:de:f6:01:4f:1b:01:62:64:f8:14: 37:e6:77:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSVNDMjWIHne5qEmoK6ctesXM91IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZFQzYwNzM5RUYwODdGMEQ0Rjk0N0M3MjMwQTcyNTEw OUVDNjE3ODAeFw0yNTA4MjEyMDM2MDZaFw0yNTA4MjUwNjA1MDZaMDMxMTAvBgNV BAMTKDlFOTc2NzA1OEVEN0REODQ3NkEzMDhENjg1NkI0RkI0MTE2OTIzNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC30zWGfXQqEv1wF6Pme3To4Nr 7KXAg6gklA6ZxoypixKfWEhte/TxN/gF+/ApWpM6UpQbbf238FsmzCQpwWM6zmKF bdU9puWglu3qZD1Pwa/+6wE/S54Vt8AIRIRyocCudTi38I4ql7ba00Q/PoNnE5FT 2w/IMCT72dfew/dMqfQD8vV5HCPOWVQNnE1T6Vtlup/mG76HBhqJDj+ISMcNr+ln oQp1VrgELaPyE2eUJPomzw5FKDIw2c/OPBmuk2SYWwmEMW5CRTrGvpklyeTGpsq3 SpAfRSDkNynOAtPINfw0oWfG1pk4VmJwqql+0MQd4UczGNtKqAIFRCadHFbbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnpdnBY7X3YR2owjWhWtPtBFpI0kwHwYDVR0j BBgwFoAUL+xgc57wh/DU+UfHIwpyUQnsYXgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NTE3ZTJmYS0yZjY4LTQ1MmUtYTQwNC04ZTdjY2I2ODcyMTUvMC8yRkVDNjA3MzlF RjA4N0YwRDRGOTQ3QzcyMzBBNzI1MTA5RUM2MTc4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkZFQzYwNzM5RUYwODdGMEQ0Rjk0N0M3MjMwQTcyNTEwOUVD NjE3OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzUxN2UyZmEtMmY2OC00NTJlLWE0 MDQtOGU3Y2NiNjg3MjE1LzAvMkZFQzYwNzM5RUYwODdGMEQ0Rjk0N0M3MjMwQTcy NTEwOUVDNjE3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFhgHaiNgYY7vXW3jaDiM9rdpnQxvGCa7oEk mWQjpF7HChoPUOQ5GOPiBa7ydorTj8RIlIND1IHKPel7mIVjMOQ+dA05D+GCUwGz bOfnv381qqc6ryJv6BbJ+yUrCRRshvNqlMp6ZXZAwIihnzbsmrBSxwTJhi2Qrodq Jay0/FKbHCMm3cK81heLSAsw6cUNJqR8R7zX6IPXOJaTeLpjzBjFFb8dnMNdmBYH 6ViiowFLs/xntn19vMS/Y9OYQeLzPyJpxMPNRCapY+fcxgnK3injIxW4ur/MBdBf jLI8kUPPldNyTFEHUX14pyInaNPQV0Xu3vYBTxsBYmT4FDfmd8Q= -----END CERTIFICATE-----Generated at Sat Aug 23 12:05:44 2025 by rpki-client