$ rpki-client -vvf repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft File: 2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft (raw, json) Hash identifier: a0Ln6ydtF0KPvzZn+FzB7j0a7bvbmT25vfBKz9P2+SQ= Subject key identifier: A0:A2:0D:A8:62:3A:CB:06:57:1D:24:89:70:AE:C4:40:DA:90:27:96 Authority key identifier: 2E:C7:21:F6:FC:61:6A:1B:E2:D9:38:F2:1E:AF:2E:82:E8:05:98:1E Certificate issuer: /CN=2EC721F6FC616A1BE2D938F21EAF2E82E805981E Certificate serial: 6CC6D937033A6C88F8A6161DBA2D73A3311A63D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft Manifest number: 82 Signing time: Sat 23 Aug 2025 02:11:56 +0000 Manifest this update: Sat 23 Aug 2025 02:06:56 +0000 Manifest next update: Tue 26 Aug 2025 07:39:56 +0000 Files and hashes: 1: 2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl (hash: KwjFjrW4MvPIUtLz0+eMrqyz5S2oBC59vp8aoVqO/IU=) 2: 3136302e3138372e3137342e302f32342d3234203d3e20313533313335.roa (hash: dQxSegWij3q6Phuhy7HWSdyNiX1g+CStiuMeHg3r0H4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 07:39:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:c6:d9:37:03:3a:6c:88:f8:a6:16:1d:ba:2d:73:a3:31:1a:63:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EC721F6FC616A1BE2D938F21EAF2E82E805981E Validity Not Before: Aug 23 02:06:56 2025 GMT Not After : Aug 26 07:39:56 2025 GMT Subject: CN=A0A20DA8623ACB06571D248970AEC440DA902796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:37:9e:b0:bb:19:ae:57:65:96:a8:2a:ec:f0: 78:f0:5a:7d:9a:00:c2:d0:50:76:af:f7:da:36:3e: cb:e6:28:98:be:5a:79:7b:7a:f2:1e:68:05:47:12: 0a:3d:3f:de:d1:d1:f1:2e:f6:6f:fe:f5:10:0a:1e: 52:08:96:c1:c3:ee:9f:5c:13:cc:2e:ce:f2:cc:cd: 58:cd:c4:b0:5d:d9:f5:3f:cc:89:1b:12:9d:29:21: 34:c2:d2:82:16:21:de:33:9d:04:a6:36:b2:d8:4d: 75:d6:bd:11:7c:98:97:05:ef:4e:18:93:b8:b8:81: ce:17:ff:d1:a3:5f:e0:8d:dd:25:fc:40:8b:3b:86: 62:26:23:31:be:cd:ff:a4:2e:a8:7f:34:ce:3c:73: 88:8e:79:68:a1:27:6f:37:79:32:70:ad:6f:61:a5: 76:cc:b8:98:c1:13:80:3f:d4:b4:a4:3f:a5:16:85: fd:26:ae:f1:88:b4:f3:b2:2e:f7:d0:40:de:37:5b: 4f:4a:49:fa:3e:77:96:b8:25:6d:6d:c2:fd:07:c8: f3:63:e9:03:52:72:71:22:7b:ac:bb:2e:2e:09:db: 93:c4:22:2d:aa:0d:da:3d:c3:8b:31:d7:84:e5:e6: 3a:91:21:6f:42:59:d3:e5:7e:92:18:b2:f9:5d:cc: e0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A2:0D:A8:62:3A:CB:06:57:1D:24:89:70:AE:C4:40:DA:90:27:96 X509v3 Authority Key Identifier: keyid:2E:C7:21:F6:FC:61:6A:1B:E2:D9:38:F2:1E:AF:2E:82:E8:05:98:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:8b:70:e2:d0:78:b4:73:de:0c:58:f1:c5:0c:f3:0a:12:c8: 6a:63:f5:57:93:33:93:98:b5:da:60:1d:b1:84:6a:a6:3f:ce: da:ee:32:49:a9:62:32:95:23:fb:d7:77:49:f9:d5:9f:5c:72: 56:df:6f:f5:30:e3:c0:b1:9d:88:3a:8a:45:f9:2a:66:04:27: be:2f:c6:57:e5:bb:b6:55:79:30:6e:5a:64:92:45:d3:28:8b: 10:71:dd:8d:65:1d:71:8e:2b:44:28:cb:68:75:2e:c4:ea:d1: a7:d4:4e:42:54:cd:76:fb:eb:e0:1c:3f:ef:6c:9c:3e:de:a2: da:8d:69:46:2c:e3:5e:b8:6b:6d:54:d9:50:a1:70:25:e1:cd: 23:fe:3c:7f:b5:cb:40:33:13:52:1c:35:ce:3a:f3:45:9d:70: 69:e1:72:f2:3b:66:8c:42:9b:0d:70:4e:1e:2a:c1:4e:8d:a8: 2f:a4:a5:36:33:b1:82:1b:f0:9f:d9:21:a5:9d:fb:98:6e:1b: e7:cf:00:b7:1c:a4:1b:b2:ac:71:b9:f0:6a:35:64:2d:1a:91: 60:ef:a9:17:8b:3d:0c:60:ae:dd:e6:18:7c:42:88:e8:53:18: 9b:de:b3:4a:ff:ad:f3:91:2e:15:46:e8:13:05:c7:73:18:4e: 08:99:9e:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbMbZNwM6bIj4phYdui1zozEaY9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJFODJF ODA1OTgxRTAeFw0yNTA4MjMwMjA2NTZaFw0yNTA4MjYwNzM5NTZaMDMxMTAvBgNV BAMTKEEwQTIwREE4NjIzQUNCMDY1NzFEMjQ4OTcwQUVDNDQwREE5MDI3OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDN56wuxmuV2WWqCrs8HjwWn2a AMLQUHav99o2PsvmKJi+Wnl7evIeaAVHEgo9P97R0fEu9m/+9RAKHlIIlsHD7p9c E8wuzvLMzVjNxLBd2fU/zIkbEp0pITTC0oIWId4znQSmNrLYTXXWvRF8mJcF704Y k7i4gc4X/9GjX+CN3SX8QIs7hmImIzG+zf+kLqh/NM48c4iOeWihJ283eTJwrW9h pXbMuJjBE4A/1LSkP6UWhf0mrvGItPOyLvfQQN43W09KSfo+d5a4JW1twv0HyPNj 6QNScnEie6y7Li4J25PEIi2qDdo9w4sx14Tl5jqRIW9CWdPlfpIYsvldzOCXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoKINqGI6ywZXHSSJcK7EQNqQJ5YwHwYDVR0j BBgwFoAULsch9vxhahvi2TjyHq8ugugFmB4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODg1M2FhYi04ZDZjLTQ1N2YtOWQ1Ny00ODRhY2FjZWE5ZDgvMC8yRUM3MjFGNkZD NjE2QTFCRTJEOTM4RjIxRUFGMkU4MkU4MDU5ODFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJFODJFODA1 OTgxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTg4NTNhYWItOGQ2Yy00NTdmLTlk NTctNDg0YWNhY2VhOWQ4LzAvMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJF ODJFODA1OTgxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKqLcOLQeLRz3gxY8cUM8woSyGpj9VeTM5OY tdpgHbGEaqY/ztruMkmpYjKVI/vXd0n51Z9cclbfb/Uw48CxnYg6ikX5KmYEJ74v xlflu7ZVeTBuWmSSRdMoixBx3Y1lHXGOK0Qoy2h1LsTq0afUTkJUzXb76+AcP+9s nD7eotqNaUYs4164a21U2VChcCXhzSP+PH+1y0AzE1IcNc4680WdcGnhcvI7ZoxC mw1wTh4qwU6NqC+kpTYzsYIb8J/ZIaWd+5huG+fPALccpBuyrHG58Go1ZC0akWDv qReLPQxgrt3mGHxCiOhTGJves0r/rfORLhVG6BMFx3MYTgiZnkI= -----END CERTIFICATE-----Generated at Sat Aug 23 22:08:51 2025 by rpki-client