$ rpki-client -vvf repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft File: 2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft (raw, json) Hash identifier: eD2E90xgD7nmDLNYkaBYQzH9SuIkhsMDHuRlO8+596o= Subject key identifier: 68:79:78:19:83:4D:8D:0D:74:E1:9C:8D:2C:9A:E9:53:7A:41:46:09 Authority key identifier: 2E:EF:78:44:53:62:AF:4F:7C:AE:B2:41:FA:E6:B9:74:7E:C2:D2:F9 Certificate issuer: /CN=2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9 Certificate serial: 04733BEEC8C4AD1A55C756BA7806F4B9647EACCB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft Manifest number: 047F Signing time: Sun 20 Jul 2025 14:51:05 +0000 Manifest this update: Sun 20 Jul 2025 14:46:04 +0000 Manifest next update: Wed 23 Jul 2025 15:55:04 +0000 Files and hashes: 1: 2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.crl (hash: PTG0XU1tnOF/Bl7G4ElAJR6I3JUKOjj+QF8K22knnpw=) 2: 3130332e3135382e3130332e302f32342d3234203d3e203435333137.roa (hash: w2a2u6qdVWhlCkR970rhojHnih1HccbKX6TZhhdF+IA=) 3: 3130332e3135382e3130322e302f32342d3234203d3e20313431313239.roa (hash: mevAhM5443uB5w78f++4hcwTY8vcOKFPl7i6kYttnO4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.crl rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 15:55:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:73:3b:ee:c8:c4:ad:1a:55:c7:56:ba:78:06:f4:b9:64:7e:ac:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9 Validity Not Before: Jul 20 14:46:04 2025 GMT Not After : Jul 23 15:55:04 2025 GMT Subject: CN=68797819834D8D0D74E19C8D2C9AE9537A414609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f3:b6:5f:3d:92:32:a8:81:da:96:e7:0d:6c: 5b:a9:f9:56:32:3a:86:51:c2:8e:c4:fe:5f:b4:fd: 75:19:77:b3:cb:78:01:c2:9b:e8:48:1b:8f:e5:4a: 6a:e0:4a:3a:25:0f:cd:58:53:58:51:c6:e5:cc:b8: 9d:ac:da:f9:7b:01:f2:56:14:5e:1d:96:cc:c3:6f: b9:eb:77:be:51:33:12:c2:f5:11:4e:ae:19:1f:16: 88:c2:68:7b:9c:43:6e:28:11:9e:d6:9b:7d:84:23: 86:a3:05:29:12:51:f7:5b:36:a2:c9:46:c0:20:e2: 80:ee:dc:d6:0e:a8:6b:93:99:9d:30:53:5c:4d:02: 59:81:67:83:f1:00:8d:ce:11:f4:fa:3f:d4:d3:e7: c0:f2:6f:af:66:bf:1d:44:62:ec:d1:3f:a9:82:39: c8:73:70:1e:cf:1c:a2:2f:a5:2d:71:22:cc:d3:1e: db:d7:a0:3d:42:10:96:d6:5e:2b:67:62:68:f9:87: 15:4e:80:7c:f5:83:3d:ca:40:b1:e5:6c:1b:63:c2: a3:87:18:d8:d4:99:4f:f6:e7:a9:55:74:2e:06:f4: db:58:e9:06:90:88:b2:4a:14:20:8d:97:b1:6a:99: 67:de:e6:fb:96:01:80:4f:c2:8d:d1:b9:8c:66:bb: bd:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:79:78:19:83:4D:8D:0D:74:E1:9C:8D:2C:9A:E9:53:7A:41:46:09 X509v3 Authority Key Identifier: keyid:2E:EF:78:44:53:62:AF:4F:7C:AE:B2:41:FA:E6:B9:74:7E:C2:D2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:7c:d1:26:76:d0:dc:a9:9d:1c:c5:c9:ab:51:05:fd:05:51: ae:7f:49:32:a3:07:36:e2:36:b7:1e:63:8e:ff:31:82:8b:5f: c7:11:6b:12:b4:1d:8b:20:d3:62:6b:18:81:60:82:03:08:2a: 21:eb:0b:3f:e0:82:92:4a:66:64:f9:2a:48:85:91:19:a0:82: 7f:fb:c5:73:c7:f7:01:cd:3b:19:82:5a:61:0b:67:17:1c:92: 53:f7:fb:5a:d0:4d:f2:2c:4b:1b:7f:a9:47:d6:ee:af:1c:c4: a4:9c:64:57:99:3a:b0:e9:34:f5:31:9e:ab:dc:27:a5:9f:00: ac:f8:41:0d:9c:1e:29:8c:ad:de:be:4e:48:14:5a:1e:cf:d4: ad:98:60:bf:14:53:ee:df:13:12:46:d8:ae:21:93:8d:53:4c: e3:97:ef:0d:13:9f:84:e6:6b:b8:3e:62:0e:5f:48:e9:e1:79: 2e:93:47:cb:cd:e0:16:66:5d:02:90:ce:81:23:d9:1a:ed:88: 37:11:04:db:ce:68:63:d2:59:a1:31:bc:8b:57:87:a7:5a:24: 14:3b:02:41:7a:47:07:fa:5a:e8:fb:91:4b:77:9d:d3:3f:b7: 6b:ad:cd:cd:c4:0e:c1:5a:05:b6:cd:5c:fe:45:69:a7:7c:e2: a9:08:73:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBHM77sjErRpVx1a6eAb0uWR+rMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVFRjc4NDQ1MzYyQUY0RjdDQUVCMjQxRkFFNkI5NzQ3 RUMyRDJGOTAeFw0yNTA3MjAxNDQ2MDRaFw0yNTA3MjMxNTU1MDRaMDMxMTAvBgNV BAMTKDY4Nzk3ODE5ODM0RDhEMEQ3NEUxOUM4RDJDOUFFOTUzN0E0MTQ2MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx87ZfPZIyqIHalucNbFup+VYy OoZRwo7E/l+0/XUZd7PLeAHCm+hIG4/lSmrgSjolD81YU1hRxuXMuJ2s2vl7AfJW FF4dlszDb7nrd75RMxLC9RFOrhkfFojCaHucQ24oEZ7Wm32EI4ajBSkSUfdbNqLJ RsAg4oDu3NYOqGuTmZ0wU1xNAlmBZ4PxAI3OEfT6P9TT58Dyb69mvx1EYuzRP6mC OchzcB7PHKIvpS1xIszTHtvXoD1CEJbWXitnYmj5hxVOgHz1gz3KQLHlbBtjwqOH GNjUmU/256lVdC4G9NtY6QaQiLJKFCCNl7FqmWfe5vuWAYBPwo3RuYxmu721AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaHl4GYNNjQ104ZyNLJrpU3pBRgkwHwYDVR0j BBgwFoAULu94RFNir098rrJB+ua5dH7C0vkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NzI0ZTQ1Yi0yNTRiLTRmZWItYmY4ZS03YmYxMjA5MTJhZjcvMC8yRUVGNzg0NDUz NjJBRjRGN0NBRUIyNDFGQUU2Qjk3NDdFQzJEMkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkVFRjc4NDQ1MzYyQUY0RjdDQUVCMjQxRkFFNkI5NzQ3RUMy RDJGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjcyNGU0NWItMjU0Yi00ZmViLWJm OGUtN2JmMTIwOTEyYWY3LzAvMkVFRjc4NDQ1MzYyQUY0RjdDQUVCMjQxRkFFNkI5 NzQ3RUMyRDJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKV80SZ20NypnRzFyatRBf0FUa5/STKjBzbi NrceY47/MYKLX8cRaxK0HYsg02JrGIFgggMIKiHrCz/ggpJKZmT5KkiFkRmggn/7 xXPH9wHNOxmCWmELZxccklP3+1rQTfIsSxt/qUfW7q8cxKScZFeZOrDpNPUxnqvc J6WfAKz4QQ2cHimMrd6+TkgUWh7P1K2YYL8UU+7fExJG2K4hk41TTOOX7w0Tn4Tm a7g+Yg5fSOnheS6TR8vN4BZmXQKQzoEj2RrtiDcRBNvOaGPSWaExvItXh6daJBQ7 AkF6Rwf6Wuj7kUt3ndM/t2utzc3EDsFaBbbNXP5Faad84qkIcxI= -----END CERTIFICATE-----Generated at Mon Jul 21 08:59:32 2025 by rpki-client