$ rpki-client -vvf repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft File: 2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft (raw, json) Hash identifier: 4idsUZPx7MFkvaoM1QAFAukw/36cvuXg3N/UN1iMK90= Subject key identifier: BF:0B:AD:E3:5E:A0:73:51:D6:38:6F:D6:69:10:39:C8:8B:6C:2B:70 Authority key identifier: 2E:C7:21:F6:FC:61:6A:1B:E2:D9:38:F2:1E:AF:2E:82:E8:05:98:1E Certificate issuer: /CN=2EC721F6FC616A1BE2D938F21EAF2E82E805981E Certificate serial: 08A2A67DBE1FA5C2A8B02866495C581F38895430 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft Manifest number: 6A Signing time: Sun 29 Jun 2025 13:41:52 +0000 Manifest this update: Sun 29 Jun 2025 13:36:52 +0000 Manifest next update: Thu 03 Jul 2025 00:24:52 +0000 Files and hashes: 1: 2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl (hash: Lyl822Tk7vUgyL4LnRnquPGc3coM3M7Y+65w+9UhVcI=) 2: 3136302e3138372e3137342e302f32342d3234203d3e20313533313335.roa (hash: dQxSegWij3q6Phuhy7HWSdyNiX1g+CStiuMeHg3r0H4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 00:24:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:a2:a6:7d:be:1f:a5:c2:a8:b0:28:66:49:5c:58:1f:38:89:54:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EC721F6FC616A1BE2D938F21EAF2E82E805981E Validity Not Before: Jun 29 13:36:52 2025 GMT Not After : Jul 3 00:24:52 2025 GMT Subject: CN=BF0BADE35EA07351D6386FD6691039C88B6C2B70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b5:5e:20:eb:5d:84:c2:bb:c1:73:8d:99:80: aa:b2:4a:56:e6:73:90:31:b6:5d:71:63:2e:11:c6: d6:6a:7a:4c:db:89:b2:e0:d3:70:ad:be:ea:54:5c: 82:ef:b2:6a:95:d0:3e:c0:fe:3d:c8:d7:3b:c0:e3: 31:36:11:83:2a:53:91:93:e7:68:1b:37:be:8c:bd: f9:7a:2e:3e:0a:eb:ff:f0:58:e2:54:9d:14:b4:2a: cc:b7:51:03:cd:e4:ee:64:5a:87:96:58:3b:2f:f0: 92:b0:a7:d9:ed:29:bf:b1:49:e4:4b:24:30:bf:52: 1c:26:d7:b9:9f:60:f0:e9:07:56:b4:9e:ad:f6:c2: 3c:d8:e8:dd:99:db:92:87:45:95:d4:d1:22:9f:d0: ed:3e:48:c7:cd:8e:de:03:69:4b:0a:48:00:ff:db: 23:e3:09:ff:8e:da:96:1f:d1:a6:3a:03:a2:03:bb: 07:47:af:7d:5e:ec:fe:b4:5d:09:6c:1c:17:a1:8a: 43:8a:f1:27:51:a5:66:b8:03:89:52:61:93:23:eb: 04:f9:6e:c5:8f:d4:17:a3:0b:ac:f5:08:db:73:46: 69:9d:e8:72:6f:68:fb:e8:ad:46:89:cd:c9:24:ea: 70:21:ec:64:33:02:e9:6a:8d:33:ff:29:50:02:67: 60:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:0B:AD:E3:5E:A0:73:51:D6:38:6F:D6:69:10:39:C8:8B:6C:2B:70 X509v3 Authority Key Identifier: keyid:2E:C7:21:F6:FC:61:6A:1B:E2:D9:38:F2:1E:AF:2E:82:E8:05:98:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:20:18:86:c4:19:77:66:fb:ae:5b:f9:ac:30:3e:b9:30:83: b2:67:ea:7f:82:4b:35:d6:30:04:69:8b:b8:b5:12:95:c8:52: 11:30:d7:9c:8a:5d:72:8e:bd:b1:d9:7b:52:55:57:30:cb:a5: e3:81:fd:8e:b1:ed:7f:d8:c0:88:6e:6b:0a:6f:f9:e6:4b:e7: a1:31:ea:ac:d1:94:c9:93:ff:38:29:e0:43:33:22:7a:03:35: a2:43:6e:42:4e:59:0b:b9:e8:66:e5:24:b2:cf:60:fc:76:53: 56:f2:30:4a:b9:e7:ba:2e:ef:80:3b:1f:ab:fc:3a:bc:fe:6d: 4e:ce:e5:98:2a:43:6f:6d:51:a3:6d:c3:4f:f3:25:51:61:a0: e9:e7:a9:7a:e8:75:0d:a4:de:04:c3:cc:b4:be:6a:0b:14:74: e3:20:56:a2:38:ca:8d:3e:91:66:c5:27:c9:47:a5:50:55:a1: c8:a0:75:92:b1:4c:ae:74:99:c6:a7:7e:50:75:de:80:6c:41: cf:fa:5c:7a:9e:e9:99:58:df:b5:b1:f1:cb:ab:3a:c5:b4:b9: 76:d1:e7:11:c9:6f:05:e7:22:d7:77:89:89:29:ab:8f:26:7c: 9f:08:5d:6c:40:f0:2c:5e:f6:f1:0c:b2:b2:a2:2e:f2:37:68: 81:15:cc:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCKKmfb4fpcKosChmSVxYHziJVDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJFODJF ODA1OTgxRTAeFw0yNTA2MjkxMzM2NTJaFw0yNTA3MDMwMDI0NTJaMDMxMTAvBgNV BAMTKEJGMEJBREUzNUVBMDczNTFENjM4NkZENjY5MTAzOUM4OEI2QzJCNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1tV4g612EwrvBc42ZgKqySlbm c5Axtl1xYy4RxtZqekzbibLg03CtvupUXILvsmqV0D7A/j3I1zvA4zE2EYMqU5GT 52gbN76Mvfl6Lj4K6//wWOJUnRS0Ksy3UQPN5O5kWoeWWDsv8JKwp9ntKb+xSeRL JDC/Uhwm17mfYPDpB1a0nq32wjzY6N2Z25KHRZXU0SKf0O0+SMfNjt4DaUsKSAD/ 2yPjCf+O2pYf0aY6A6IDuwdHr31e7P60XQlsHBehikOK8SdRpWa4A4lSYZMj6wT5 bsWP1BejC6z1CNtzRmmd6HJvaPvorUaJzckk6nAh7GQzAulqjTP/KVACZ2DzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvwut416gc1HWOG/WaRA5yItsK3AwHwYDVR0j BBgwFoAULsch9vxhahvi2TjyHq8ugugFmB4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODg1M2FhYi04ZDZjLTQ1N2YtOWQ1Ny00ODRhY2FjZWE5ZDgvMC8yRUM3MjFGNkZD NjE2QTFCRTJEOTM4RjIxRUFGMkU4MkU4MDU5ODFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJFODJFODA1 OTgxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTg4NTNhYWItOGQ2Yy00NTdmLTlk NTctNDg0YWNhY2VhOWQ4LzAvMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJF ODJFODA1OTgxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHggGIbEGXdm+65b+awwPrkwg7Jn6n+CSzXW MARpi7i1EpXIUhEw15yKXXKOvbHZe1JVVzDLpeOB/Y6x7X/YwIhuawpv+eZL56Ex 6qzRlMmT/zgp4EMzInoDNaJDbkJOWQu56GblJLLPYPx2U1byMEq557ou74A7H6v8 Orz+bU7O5ZgqQ29tUaNtw0/zJVFhoOnnqXrodQ2k3gTDzLS+agsUdOMgVqI4yo0+ kWbFJ8lHpVBVocigdZKxTK50mcanflB13oBsQc/6XHqe6ZlY37Wx8curOsW0uXbR 5xHJbwXnItd3iYkpq48mfJ8IXWxA8Cxe9vEMsrKiLvI3aIEVzN0= -----END CERTIFICATE-----Generated at Mon Jun 30 10:38:38 2025 by rpki-client