$ rpki-client -vvf repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft File: 2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft (raw, json) Hash identifier: jb2fHTdeinmXpXHlwkYtSl1VcXvgYcAx7/MwqLM6560= Subject key identifier: EB:ED:C3:A3:34:1C:CD:E2:D5:F7:32:35:28:B3:E1:17:64:61:FD:74 Authority key identifier: 2E:C7:21:F6:FC:61:6A:1B:E2:D9:38:F2:1E:AF:2E:82:E8:05:98:1E Certificate issuer: /CN=2EC721F6FC616A1BE2D938F21EAF2E82E805981E Certificate serial: 672E5BCEA2EBD9D015B7B9F4C698DC095974A40D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft Manifest number: 51 Signing time: Sun 04 May 2025 10:01:50 +0000 Manifest this update: Sun 04 May 2025 09:56:50 +0000 Manifest next update: Wed 07 May 2025 17:42:50 +0000 Files and hashes: 1: 2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl (hash: c4fCIw5Jh8BUr5kJmtx+svh3urCCaldTAm9jBC89430=) 2: 3136302e3138372e3137342e302f32342d3234203d3e20313533313335.roa (hash: dQxSegWij3q6Phuhy7HWSdyNiX1g+CStiuMeHg3r0H4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 17:42:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:2e:5b:ce:a2:eb:d9:d0:15:b7:b9:f4:c6:98:dc:09:59:74:a4:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EC721F6FC616A1BE2D938F21EAF2E82E805981E Validity Not Before: May 4 09:56:50 2025 GMT Not After : May 7 17:42:50 2025 GMT Subject: CN=EBEDC3A3341CCDE2D5F7323528B3E1176461FD74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:00:f5:0e:96:f4:46:cd:ce:3c:a8:ca:e6:59: ac:cf:06:c4:22:35:b4:09:1c:93:6d:3a:91:fc:ce: 45:92:a0:42:17:bf:7e:c3:e3:8a:cc:5d:a9:39:f9: 89:1a:08:64:89:8e:25:50:37:21:5d:d8:2c:40:06: 25:59:42:a2:6d:43:ca:dd:fe:02:44:ba:96:4b:f3: aa:61:5e:c9:c7:6e:b8:18:f3:3e:14:5f:a8:5c:10: 5d:42:e2:d8:75:4e:40:49:9c:05:2a:9f:23:19:f3: 37:0f:e6:db:68:c8:21:73:22:9b:fe:50:48:e0:02: 60:e2:ab:05:24:22:21:85:4a:ce:0f:a1:d5:00:4f: 3d:ca:5d:51:92:59:10:8d:91:5d:b2:42:e7:ac:01: 42:cf:87:af:b0:57:d8:e4:af:f2:4e:f1:01:94:cb: 2c:9c:95:ca:05:b3:90:e8:e2:f4:bf:63:b7:97:98: fc:67:ca:d3:ce:46:7e:1e:32:6b:54:86:b5:46:cb: 0c:a2:a9:01:41:9c:90:18:e6:ed:82:a1:39:00:e4: 05:52:f4:9c:03:73:e7:f4:c9:c0:f6:c4:da:46:a7: 8a:6c:db:dd:1f:3f:50:ad:20:71:fb:bf:0d:55:af: 00:a4:c2:d3:e4:07:7f:b8:63:8e:10:ee:18:2e:75: d8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:ED:C3:A3:34:1C:CD:E2:D5:F7:32:35:28:B3:E1:17:64:61:FD:74 X509v3 Authority Key Identifier: keyid:2E:C7:21:F6:FC:61:6A:1B:E2:D9:38:F2:1E:AF:2E:82:E8:05:98:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:c5:8e:a4:bd:d2:db:74:cc:d9:02:ef:42:09:12:b7:b0:08: 66:98:b8:da:88:84:2a:43:e4:f6:49:bf:d7:ee:bc:ce:a9:9e: a0:20:30:ac:32:26:d3:8b:b3:be:a8:7b:1b:a5:09:cf:79:bf: 6d:62:b4:c9:ac:c5:07:10:0b:a7:d1:79:5c:c4:d4:17:d4:f0: 46:f6:91:4f:a6:15:15:92:f1:73:24:6d:46:e4:15:ee:28:2a: b5:af:f2:85:d2:b9:aa:ec:fb:02:ce:f4:fa:e6:65:d4:8c:54: a2:cf:68:94:3e:57:d4:cc:47:36:e1:2e:6f:73:1f:22:c2:b4: 9f:29:4c:2d:5c:09:4e:d0:39:04:43:3f:48:18:88:f5:2a:66: 42:47:e4:bb:41:4f:0f:66:6c:40:2c:82:89:43:5a:42:b0:c3: c1:9e:30:99:61:18:3c:c0:e6:3e:69:9c:09:ab:cd:31:0c:13: bd:e7:f9:b5:67:e6:ed:83:d1:a4:eb:f5:c6:7f:34:62:65:09: 24:0c:bd:d5:a6:e2:48:bc:2c:88:d3:75:84:b0:a3:e1:0e:8f: 2d:89:cf:7f:ca:63:23:44:b4:f2:ac:0a:f1:8a:8b:fb:01:c0: 80:f7:6f:33:a8:f1:2b:62:9c:00:0f:58:66:d5:55:ff:52:7f: 1c:f9:10:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZy5bzqLr2dAVt7n0xpjcCVl0pA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJFODJF ODA1OTgxRTAeFw0yNTA1MDQwOTU2NTBaFw0yNTA1MDcxNzQyNTBaMDMxMTAvBgNV BAMTKEVCRURDM0EzMzQxQ0NERTJENUY3MzIzNTI4QjNFMTE3NjQ2MUZENzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoAPUOlvRGzc48qMrmWazPBsQi NbQJHJNtOpH8zkWSoEIXv37D44rMXak5+YkaCGSJjiVQNyFd2CxABiVZQqJtQ8rd /gJEupZL86phXsnHbrgY8z4UX6hcEF1C4th1TkBJnAUqnyMZ8zcP5ttoyCFzIpv+ UEjgAmDiqwUkIiGFSs4PodUATz3KXVGSWRCNkV2yQuesAULPh6+wV9jkr/JO8QGU yyyclcoFs5Do4vS/Y7eXmPxnytPORn4eMmtUhrVGywyiqQFBnJAY5u2CoTkA5AVS 9JwDc+f0ycD2xNpGp4ps290fP1CtIHH7vw1VrwCkwtPkB3+4Y44Q7hguddiBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6+3DozQczeLV9zI1KLPhF2Rh/XQwHwYDVR0j BBgwFoAULsch9vxhahvi2TjyHq8ugugFmB4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODg1M2FhYi04ZDZjLTQ1N2YtOWQ1Ny00ODRhY2FjZWE5ZDgvMC8yRUM3MjFGNkZD NjE2QTFCRTJEOTM4RjIxRUFGMkU4MkU4MDU5ODFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJFODJFODA1 OTgxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTg4NTNhYWItOGQ2Yy00NTdmLTlk NTctNDg0YWNhY2VhOWQ4LzAvMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJF ODJFODA1OTgxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGXFjqS90tt0zNkC70IJErewCGaYuNqIhCpD 5PZJv9fuvM6pnqAgMKwyJtOLs76oexulCc95v21itMmsxQcQC6fReVzE1BfU8Eb2 kU+mFRWS8XMkbUbkFe4oKrWv8oXSuars+wLO9PrmZdSMVKLPaJQ+V9TMRzbhLm9z HyLCtJ8pTC1cCU7QOQRDP0gYiPUqZkJH5LtBTw9mbEAsgolDWkKww8GeMJlhGDzA 5j5pnAmrzTEME73n+bVn5u2D0aTr9cZ/NGJlCSQMvdWm4ki8LIjTdYSwo+EOjy2J z3/KYyNEtPKsCvGKi/sBwID3bzOo8StinAAPWGbVVf9Sfxz5EKs= -----END CERTIFICATE-----Generated at Wed May 7 13:45:30 2025 by rpki-client