$ rpki-client -vvf repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft File: 2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft (raw, json) Hash identifier: iVntuXE1SSnyHJD0VU1OxnIR3CnreeL/ZoH708QBC1E= Subject key identifier: 31:E7:27:FE:F0:D9:12:57:D0:A4:3F:94:14:44:B6:F0:38:7D:9F:D1 Authority key identifier: 2E:C7:21:F6:FC:61:6A:1B:E2:D9:38:F2:1E:AF:2E:82:E8:05:98:1E Certificate issuer: /CN=2EC721F6FC616A1BE2D938F21EAF2E82E805981E Certificate serial: 121E8B272BB0E2178404C3D784D3B8DE45F77587 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft Manifest number: 9D Signing time: Mon 20 Oct 2025 23:21:56 +0000 Manifest this update: Mon 20 Oct 2025 23:16:56 +0000 Manifest next update: Fri 24 Oct 2025 04:52:56 +0000 Files and hashes: 1: 2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl (hash: X+MMlmP4wHVnqayMObe5OYdqbVcnfEJUx/Py0xBXeWU=) 2: 3136302e3138372e3137342e302f32342d3234203d3e20313533313335.roa (hash: XfY4we6jzKf244te76Sh5o4SXguYwnH8MGIYft8mlas=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:1e:8b:27:2b:b0:e2:17:84:04:c3:d7:84:d3:b8:de:45:f7:75:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EC721F6FC616A1BE2D938F21EAF2E82E805981E Validity Not Before: Oct 20 23:16:56 2025 GMT Not After : Oct 24 04:52:56 2025 GMT Subject: CN=31E727FEF0D91257D0A43F941444B6F0387D9FD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3c:df:97:35:3b:67:5c:d8:3a:9f:87:65:b0: b3:bf:3d:2b:8f:6c:0a:73:f3:9d:5c:32:b1:65:46: 24:68:45:8c:89:fe:51:46:e4:59:15:f1:8f:1e:48: 9e:56:1b:fb:e5:22:c1:b4:4b:25:a2:60:10:33:da: 4f:f3:3c:89:b8:1b:05:db:d4:86:ec:62:58:be:6d: 5c:8e:10:cc:f7:08:55:bb:df:98:c2:f7:e6:b4:69: 3e:fb:bf:75:e0:64:9a:61:f0:d4:74:09:8b:95:dd: 16:29:7b:49:09:58:0e:b9:fb:fe:43:d3:db:e7:f6: 62:a2:c8:3f:99:15:89:84:8c:db:5c:c6:7b:89:f9: 44:03:89:bd:2f:49:56:5d:3d:c4:3a:7e:11:20:de: c8:be:da:e1:11:18:81:a4:a0:e6:86:82:46:4d:79: 93:21:94:4d:43:94:46:74:5a:3c:bc:aa:53:38:83: 49:f1:7e:26:2f:4e:b5:b2:4f:53:3e:a3:a1:ac:45: 81:04:d3:66:3b:f1:cc:b2:36:7f:63:e9:82:31:72: c9:5c:be:fe:c6:c2:18:53:a4:06:59:ea:31:47:53: 6e:ce:c7:63:39:bc:93:45:88:4d:1c:47:71:20:9b: d7:cd:a9:e9:1c:e3:d6:8d:2b:63:63:9c:5b:3d:11: 3d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:E7:27:FE:F0:D9:12:57:D0:A4:3F:94:14:44:B6:F0:38:7D:9F:D1 X509v3 Authority Key Identifier: keyid:2E:C7:21:F6:FC:61:6A:1B:E2:D9:38:F2:1E:AF:2E:82:E8:05:98:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:e2:05:6d:37:21:f6:65:21:05:81:aa:51:d6:56:fc:b7:1d: 7f:c8:26:de:cd:49:f3:c3:52:53:ab:09:00:4e:09:8d:0e:be: b8:3b:59:6a:3c:c3:60:e9:ac:26:88:75:39:6b:52:de:a6:05: 55:d6:f1:30:1c:78:a2:83:85:32:d5:5c:5f:25:85:2a:78:d1: 11:b2:8d:81:2c:67:98:eb:31:81:9b:0e:ad:40:aa:cb:88:d7: a9:92:88:2d:35:fe:c7:57:78:66:5c:f7:b1:8b:aa:27:7d:f6: df:f8:05:d1:b7:68:b5:3e:ab:42:21:b2:9c:01:1c:8d:84:9b: 74:c8:ff:d1:90:f0:ed:3e:f9:f8:cf:08:6b:ab:c5:14:97:fb: 88:47:7f:7a:de:76:9b:ea:a2:ae:eb:05:da:d6:51:fd:4d:8d: e8:46:42:9f:df:3a:5b:1e:f5:03:25:83:95:77:25:fb:fd:8d: ce:8d:d8:f2:a2:34:55:29:b1:81:59:2c:10:44:1d:67:aa:f2: 73:78:1f:2e:68:ff:ef:0b:75:bb:5e:7a:d8:87:96:4a:5f:d8: 96:07:dc:d6:9f:b1:16:72:9c:9f:ea:b6:e9:42:97:88:96:47: 07:8a:1f:d3:d5:86:9b:2e:cd:3f:7d:58:bf:ac:ac:67:65:37: eb:62:4c:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEh6LJyuw4heEBMPXhNO43kX3dYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJFODJF ODA1OTgxRTAeFw0yNTEwMjAyMzE2NTZaFw0yNTEwMjQwNDUyNTZaMDMxMTAvBgNV BAMTKDMxRTcyN0ZFRjBEOTEyNTdEMEE0M0Y5NDE0NDRCNkYwMzg3RDlGRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDePN+XNTtnXNg6n4dlsLO/PSuP bApz851cMrFlRiRoRYyJ/lFG5FkV8Y8eSJ5WG/vlIsG0SyWiYBAz2k/zPIm4GwXb 1IbsYli+bVyOEMz3CFW735jC9+a0aT77v3XgZJph8NR0CYuV3RYpe0kJWA65+/5D 09vn9mKiyD+ZFYmEjNtcxnuJ+UQDib0vSVZdPcQ6fhEg3si+2uERGIGkoOaGgkZN eZMhlE1DlEZ0Wjy8qlM4g0nxfiYvTrWyT1M+o6GsRYEE02Y78cyyNn9j6YIxcslc vv7GwhhTpAZZ6jFHU27Ox2M5vJNFiE0cR3Egm9fNqekc49aNK2NjnFs9ET0hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMecn/vDZElfQpD+UFES28Dh9n9EwHwYDVR0j BBgwFoAULsch9vxhahvi2TjyHq8ugugFmB4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODg1M2FhYi04ZDZjLTQ1N2YtOWQ1Ny00ODRhY2FjZWE5ZDgvMC8yRUM3MjFGNkZD NjE2QTFCRTJEOTM4RjIxRUFGMkU4MkU4MDU5ODFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJFODJFODA1 OTgxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTg4NTNhYWItOGQ2Yy00NTdmLTlk NTctNDg0YWNhY2VhOWQ4LzAvMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJF ODJFODA1OTgxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALTiBW03IfZlIQWBqlHWVvy3HX/IJt7NSfPD UlOrCQBOCY0Ovrg7WWo8w2DprCaIdTlrUt6mBVXW8TAceKKDhTLVXF8lhSp40RGy jYEsZ5jrMYGbDq1AqsuI16mSiC01/sdXeGZc97GLqid99t/4BdG3aLU+q0IhspwB HI2Em3TI/9GQ8O0++fjPCGurxRSX+4hHf3redpvqoq7rBdrWUf1NjehGQp/fOlse 9QMlg5V3Jfv9jc6N2PKiNFUpsYFZLBBEHWeq8nN4Hy5o/+8LdbteetiHlkpf2JYH 3NafsRZynJ/qtulCl4iWRweKH9PVhpsuzT99WL+srGdlN+tiTDg= -----END CERTIFICATE-----Generated at Tue Oct 21 11:02:57 2025 by rpki-client