$ rpki-client -vvf repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft File: 2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft (raw, json) Hash identifier: JT2t9r4biavVgXSEPxLwzCBGHgzTXDUOamBD/g8LTFo= Subject key identifier: DF:B8:B5:97:55:A8:9D:E8:39:03:A1:4A:5A:EE:B8:27:1F:6F:64:8B Authority key identifier: 2E:EF:78:44:53:62:AF:4F:7C:AE:B2:41:FA:E6:B9:74:7E:C2:D2:F9 Certificate issuer: /CN=2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9 Certificate serial: 61FE98E6DCD70D29C5927680D7332C716F00C7D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft Manifest number: 048E Signing time: Fri 22 Aug 2025 18:31:06 +0000 Manifest this update: Fri 22 Aug 2025 18:26:06 +0000 Manifest next update: Tue 26 Aug 2025 05:07:06 +0000 Files and hashes: 1: 2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.crl (hash: WyYpneVzQVYk88kCMCJczlqF5kfj3MmNMlKiMbOOQyE=) 2: 3130332e3135382e3130322e302f32342d3234203d3e20313431313239.roa (hash: mevAhM5443uB5w78f++4hcwTY8vcOKFPl7i6kYttnO4=) 3: 3130332e3135382e3130332e302f32342d3234203d3e203435333137.roa (hash: w2a2u6qdVWhlCkR970rhojHnih1HccbKX6TZhhdF+IA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.crl rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 05:07:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:fe:98:e6:dc:d7:0d:29:c5:92:76:80:d7:33:2c:71:6f:00:c7:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9 Validity Not Before: Aug 22 18:26:06 2025 GMT Not After : Aug 26 05:07:06 2025 GMT Subject: CN=DFB8B59755A89DE83903A14A5AEEB8271F6F648B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c7:37:a6:f3:bb:c9:53:05:99:48:fd:92:86: fb:ba:07:7f:4d:2f:b5:ed:68:9c:9a:d7:06:28:8f: 4a:94:3b:3f:82:17:c2:97:a5:85:3f:dc:f5:ee:e9: 62:4c:f4:9d:00:99:54:1a:b7:ee:1b:5e:40:6b:40: 77:ac:d5:e3:da:ba:36:e8:74:fa:ea:d1:f7:db:42: 47:6f:0a:de:45:8d:05:9b:4a:52:ac:83:4f:ca:81: f5:0d:c7:49:93:00:ec:66:66:80:71:99:ce:1d:b3: 54:6e:08:57:c1:55:bb:96:bc:12:e2:96:1a:29:19: f7:98:8a:f5:d8:0e:c1:c6:9b:3c:1a:8e:6a:bf:7c: 6c:9d:60:92:e1:6f:91:cf:dd:38:55:96:d8:25:56: 43:b7:62:12:49:b4:4b:75:df:e8:4d:2f:04:57:8b: 2e:9d:28:cb:28:bb:a8:1d:07:84:82:00:e1:5d:17: fd:08:5e:a5:ca:b7:1b:45:dc:58:44:31:b7:be:52: 9d:b0:a2:19:f2:8a:d9:9b:10:f2:48:84:15:4c:c6: 4d:ab:c4:ca:fd:c1:51:50:aa:38:a2:ac:1f:25:d8: 7f:97:8a:8e:8d:12:29:78:1b:79:16:4c:8c:7c:36: a1:32:75:7a:c8:04:cf:aa:3a:5b:64:ce:0d:83:d6: fa:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B8:B5:97:55:A8:9D:E8:39:03:A1:4A:5A:EE:B8:27:1F:6F:64:8B X509v3 Authority Key Identifier: keyid:2E:EF:78:44:53:62:AF:4F:7C:AE:B2:41:FA:E6:B9:74:7E:C2:D2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:2f:66:1e:bf:67:53:13:38:ec:32:59:e7:81:5c:4d:44:78: fb:cc:de:db:e2:25:fb:c2:86:36:f9:4a:c9:39:ca:cd:ee:cd: de:c1:bd:47:d9:10:34:ed:52:f5:44:79:d5:9e:c2:b0:64:0f: 34:6f:41:36:0b:e0:e0:c8:e9:41:86:c6:f5:68:2a:5d:a0:b5: c5:c8:96:94:1f:93:53:a0:94:38:6b:43:a4:d9:50:38:52:fb: ec:fa:37:a7:e9:ba:98:eb:21:53:eb:8a:97:ee:2c:c8:2a:15: fb:be:ec:24:9e:17:ca:73:03:2d:81:8b:16:37:a9:57:ce:66: b4:2f:ba:81:fd:02:42:0a:f6:da:0d:d3:3c:85:ad:6f:97:7f: 8f:14:6e:9b:15:03:be:9d:61:08:bd:f2:61:63:d2:b2:ca:82: bf:1e:8c:fb:50:dc:24:d5:bc:e5:d7:4d:ec:ab:e4:f1:6b:ec: eb:c2:0c:5f:8a:36:bc:29:f9:17:e7:38:5f:ff:76:43:cf:8e: 06:2d:a7:6c:33:82:3b:96:aa:df:08:18:3e:24:b7:66:81:42: 7b:b5:0d:59:e9:94:47:f6:9f:ca:f8:03:d1:83:5a:f2:c1:88: c3:fd:9b:3d:37:67:ab:17:9b:87:34:5e:b3:29:03:b5:92:cc: 5c:72:3c:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYf6Y5tzXDSnFknaA1zMscW8Ax9AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVFRjc4NDQ1MzYyQUY0RjdDQUVCMjQxRkFFNkI5NzQ3 RUMyRDJGOTAeFw0yNTA4MjIxODI2MDZaFw0yNTA4MjYwNTA3MDZaMDMxMTAvBgNV BAMTKERGQjhCNTk3NTVBODlERTgzOTAzQTE0QTVBRUVCODI3MUY2RjY0OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9xzem87vJUwWZSP2Shvu6B39N L7XtaJya1wYoj0qUOz+CF8KXpYU/3PXu6WJM9J0AmVQat+4bXkBrQHes1ePaujbo dPrq0ffbQkdvCt5FjQWbSlKsg0/KgfUNx0mTAOxmZoBxmc4ds1RuCFfBVbuWvBLi lhopGfeYivXYDsHGmzwajmq/fGydYJLhb5HP3ThVltglVkO3YhJJtEt13+hNLwRX iy6dKMsou6gdB4SCAOFdF/0IXqXKtxtF3FhEMbe+Up2wohnyitmbEPJIhBVMxk2r xMr9wVFQqjiirB8l2H+Xio6NEil4G3kWTIx8NqEydXrIBM+qOltkzg2D1vqDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU37i1l1Woneg5A6FKWu64Jx9vZIswHwYDVR0j BBgwFoAULu94RFNir098rrJB+ua5dH7C0vkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NzI0ZTQ1Yi0yNTRiLTRmZWItYmY4ZS03YmYxMjA5MTJhZjcvMC8yRUVGNzg0NDUz NjJBRjRGN0NBRUIyNDFGQUU2Qjk3NDdFQzJEMkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkVFRjc4NDQ1MzYyQUY0RjdDQUVCMjQxRkFFNkI5NzQ3RUMy RDJGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjcyNGU0NWItMjU0Yi00ZmViLWJm OGUtN2JmMTIwOTEyYWY3LzAvMkVFRjc4NDQ1MzYyQUY0RjdDQUVCMjQxRkFFNkI5 NzQ3RUMyRDJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG0vZh6/Z1MTOOwyWeeBXE1EePvM3tviJfvC hjb5Ssk5ys3uzd7BvUfZEDTtUvVEedWewrBkDzRvQTYL4ODI6UGGxvVoKl2gtcXI lpQfk1OglDhrQ6TZUDhS++z6N6fpupjrIVPripfuLMgqFfu+7CSeF8pzAy2BixY3 qVfOZrQvuoH9AkIK9toN0zyFrW+Xf48UbpsVA76dYQi98mFj0rLKgr8ejPtQ3CTV vOXXTeyr5PFr7OvCDF+KNrwp+RfnOF//dkPPjgYtp2wzgjuWqt8IGD4kt2aBQnu1 DVnplEf2n8r4A9GDWvLBiMP9mz03Z6sXm4c0XrMpA7WSzFxyPN4= -----END CERTIFICATE-----Generated at Sat Aug 23 11:57:20 2025 by rpki-client