$ rpki-client -vvf repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.mft File: 2FEC60739EF087F0D4F947C7230A725109EC6178.mft (raw, json) Hash identifier: EU/gYdqvULz+SprVVE2D7EqHhI7UWBjjD5WJmfsNtgI= Subject key identifier: BD:16:CF:9F:9A:77:56:35:AB:25:BC:57:81:30:03:33:59:38:6F:F0 Authority key identifier: 2F:EC:60:73:9E:F0:87:F0:D4:F9:47:C7:23:0A:72:51:09:EC:61:78 Certificate issuer: /CN=2FEC60739EF087F0D4F947C7230A725109EC6178 Certificate serial: 11633D9CE9B2CD04D2588BF8B5D880B41BF88A1B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FEC60739EF087F0D4F947C7230A725109EC6178.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.mft Manifest number: 01C8 Signing time: Sat 18 Oct 2025 10:31:02 +0000 Manifest this update: Sat 18 Oct 2025 10:26:02 +0000 Manifest next update: Tue 21 Oct 2025 19:52:02 +0000 Files and hashes: 1: 323030313a6466303a323930303a3a2f34382d3438203d3e20313336303731.roa (hash: UnWzJ48Nx645Ud0DTEThTJUyGBI60lPLzC3swH45IOM=) 2: 3130332e38312e3231382e302f32342d3234203d3e20313336303731.roa (hash: u24qYoTDSSf50eb2UAzUvgkQ1jglRQOcxfkd25DPbNc=) 3: 2FEC60739EF087F0D4F947C7230A725109EC6178.crl (hash: yWGFsBEwycslUyDHbl1T5gwIEppmOtGmDfjHk+5E0SY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.crl rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FEC60739EF087F0D4F947C7230A725109EC6178.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 19:52:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:63:3d:9c:e9:b2:cd:04:d2:58:8b:f8:b5:d8:80:b4:1b:f8:8a:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FEC60739EF087F0D4F947C7230A725109EC6178 Validity Not Before: Oct 18 10:26:02 2025 GMT Not After : Oct 21 19:52:02 2025 GMT Subject: CN=BD16CF9F9A775635AB25BC578130033359386FF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e0:fe:4b:c1:83:6f:02:4f:81:49:8f:0d:7a: 4a:41:92:3f:e9:40:4b:50:10:64:d8:40:5b:a2:ec: bc:ed:e0:2e:b2:16:93:4d:0f:c4:55:a2:a9:1a:51: 9e:68:16:21:9d:4d:1c:63:cf:d9:b4:ca:6d:f9:93: 51:1d:f0:b4:fb:c1:58:8d:42:c9:7e:e4:55:2f:d7: df:12:d5:41:6d:aa:ab:10:7b:dc:0d:31:57:a9:a9: 5e:21:43:a6:14:df:9f:62:92:89:98:e7:16:2c:8e: e8:4a:fa:84:d8:a9:1f:96:56:10:9d:f6:77:db:69: d8:7a:99:ad:10:d7:bf:f3:0e:ba:59:3b:d6:5e:16: 7b:26:7f:98:65:f7:2c:91:f9:6f:d7:8d:74:9b:b4: 5f:7b:37:99:df:b3:ff:99:5d:1a:d0:87:e4:d8:b9: 6f:4c:6e:19:e4:9c:2a:56:77:1d:09:84:88:08:10: 41:9b:cf:18:9c:c7:54:5a:af:a3:8c:97:95:b4:15: be:db:bb:0c:c4:5e:84:e4:c3:08:29:41:97:20:21: 78:2d:ed:ba:74:5a:9f:69:d8:ab:d5:0f:d7:d9:cd: 46:94:c9:fc:30:90:d2:0b:f0:70:78:98:6a:17:62: 88:24:30:59:9d:71:be:a3:2f:56:53:84:1f:66:fd: ec:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:16:CF:9F:9A:77:56:35:AB:25:BC:57:81:30:03:33:59:38:6F:F0 X509v3 Authority Key Identifier: keyid:2F:EC:60:73:9E:F0:87:F0:D4:F9:47:C7:23:0A:72:51:09:EC:61:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FEC60739EF087F0D4F947C7230A725109EC6178.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:c3:ba:31:54:76:9e:90:d1:c1:6e:b3:7d:d2:9f:b1:87:8e: 1d:9b:75:83:92:f6:02:e9:33:ec:af:34:fc:eb:f7:11:fd:3a: 9e:e4:3e:9d:43:53:1e:0a:a3:57:44:9d:62:e4:1d:b0:8f:14: fc:aa:ab:a8:53:a1:82:d2:8e:f7:14:fa:71:da:f1:60:07:84: c7:5a:20:5b:ee:64:9e:c9:5e:46:c5:72:fe:fb:94:d6:09:11: fa:85:3c:ec:78:ad:a5:7b:88:7e:f3:7b:f0:89:a8:7b:7d:66: 70:55:2c:74:ff:18:79:47:f3:95:f4:74:91:cd:32:e6:52:e6: 9c:9c:28:1b:8f:51:61:0e:d2:82:26:9f:fe:51:86:32:0b:65: c3:78:01:fa:34:98:4e:ea:d9:59:94:11:e4:20:bb:e0:22:a6: ad:32:13:60:31:84:e2:65:32:79:1e:c0:08:17:70:c5:76:ab: 72:3f:43:c8:e8:75:e7:ee:72:10:5c:fd:82:f2:f0:78:26:59: 03:8f:75:4e:74:8d:73:b1:ac:36:b2:66:72:b2:33:2e:05:6f: 0a:c0:c9:0e:e2:6b:e8:b9:f9:f4:68:49:e1:98:b7:c3:f8:72: ef:fc:50:95:55:ce:81:3e:7c:92:aa:6d:bc:15:d3:f8:19:8c: 97:2e:ee:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEWM9nOmyzQTSWIv4tdiAtBv4ihswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZFQzYwNzM5RUYwODdGMEQ0Rjk0N0M3MjMwQTcyNTEw OUVDNjE3ODAeFw0yNTEwMTgxMDI2MDJaFw0yNTEwMjExOTUyMDJaMDMxMTAvBgNV BAMTKEJEMTZDRjlGOUE3NzU2MzVBQjI1QkM1NzgxMzAwMzMzNTkzODZGRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq4P5LwYNvAk+BSY8NekpBkj/p QEtQEGTYQFui7Lzt4C6yFpNND8RVoqkaUZ5oFiGdTRxjz9m0ym35k1Ed8LT7wViN Qsl+5FUv198S1UFtqqsQe9wNMVepqV4hQ6YU359ikomY5xYsjuhK+oTYqR+WVhCd 9nfbadh6ma0Q17/zDrpZO9ZeFnsmf5hl9yyR+W/XjXSbtF97N5nfs/+ZXRrQh+TY uW9MbhnknCpWdx0JhIgIEEGbzxicx1Rar6OMl5W0Fb7buwzEXoTkwwgpQZcgIXgt 7bp0Wp9p2KvVD9fZzUaUyfwwkNIL8HB4mGoXYogkMFmdcb6jL1ZThB9m/ewzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvRbPn5p3VjWrJbxXgTADM1k4b/AwHwYDVR0j BBgwFoAUL+xgc57wh/DU+UfHIwpyUQnsYXgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NTE3ZTJmYS0yZjY4LTQ1MmUtYTQwNC04ZTdjY2I2ODcyMTUvMC8yRkVDNjA3MzlF RjA4N0YwRDRGOTQ3QzcyMzBBNzI1MTA5RUM2MTc4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkZFQzYwNzM5RUYwODdGMEQ0Rjk0N0M3MjMwQTcyNTEwOUVD NjE3OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzUxN2UyZmEtMmY2OC00NTJlLWE0 MDQtOGU3Y2NiNjg3MjE1LzAvMkZFQzYwNzM5RUYwODdGMEQ0Rjk0N0M3MjMwQTcy NTEwOUVDNjE3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI/DujFUdp6Q0cFus33Sn7GHjh2bdYOS9gLp M+yvNPzr9xH9Op7kPp1DUx4Ko1dEnWLkHbCPFPyqq6hToYLSjvcU+nHa8WAHhMda IFvuZJ7JXkbFcv77lNYJEfqFPOx4raV7iH7ze/CJqHt9ZnBVLHT/GHlH85X0dJHN MuZS5pycKBuPUWEO0oImn/5RhjILZcN4Afo0mE7q2VmUEeQgu+Aipq0yE2AxhOJl MnkewAgXcMV2q3I/Q8jodefuchBc/YLy8HgmWQOPdU50jXOxrDayZnKyMy4FbwrA yQ7ia+i5+fRoSeGYt8P4cu/8UJVVzoE+fJKqbbwV0/gZjJcu7qU= -----END CERTIFICATE-----Generated at Mon Oct 20 09:26:53 2025 by rpki-client