$ rpki-client -vvf repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft File: 2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft (raw, json) Hash identifier: FQrSvgPowBtudoJKmHi1UMJw78/UjumQ1TrUlp5+QcI= Subject key identifier: 65:F7:7E:88:EF:0B:A0:E7:1A:6B:76:BF:2F:92:BD:C5:E1:F8:2E:EB Authority key identifier: 2E:C7:21:F6:FC:61:6A:1B:E2:D9:38:F2:1E:AF:2E:82:E8:05:98:1E Certificate issuer: /CN=2EC721F6FC616A1BE2D938F21EAF2E82E805981E Certificate serial: 0BCBCA251F0F21888C1A0C3DA1B5E958F2733E81 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft Manifest number: 89 Signing time: Mon 08 Sep 2025 06:01:53 +0000 Manifest this update: Mon 08 Sep 2025 05:56:53 +0000 Manifest next update: Thu 11 Sep 2025 08:43:53 +0000 Files and hashes: 1: 3136302e3138372e3137342e302f32342d3234203d3e20313533313335.roa (hash: dQxSegWij3q6Phuhy7HWSdyNiX1g+CStiuMeHg3r0H4=) 2: 2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl (hash: FYU0M7rSQ4OmTfCQ4oKwlMW7zJFNxOFKVOTn5ILP0RQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 07:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:cb:ca:25:1f:0f:21:88:8c:1a:0c:3d:a1:b5:e9:58:f2:73:3e:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EC721F6FC616A1BE2D938F21EAF2E82E805981E Validity Not Before: Sep 8 05:56:53 2025 GMT Not After : Sep 11 08:43:53 2025 GMT Subject: CN=65F77E88EF0BA0E71A6B76BF2F92BDC5E1F82EEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:33:aa:30:5d:3c:2e:ea:b5:bb:69:f4:a1:cf: 73:cb:26:8d:94:47:97:1d:2a:62:1a:7d:ea:f1:6f: b8:3c:72:22:79:cd:3b:a9:b9:a1:d1:30:9d:a7:a3: 8e:c5:4a:27:97:b0:0f:39:28:49:1d:c8:ad:30:cc: c7:fe:7a:1b:f7:ed:95:ba:45:7d:0a:d3:27:b4:29: 8c:f5:5c:bc:d0:2b:3a:b5:db:77:ca:41:57:4a:9a: 71:9a:e5:ba:e6:d2:ee:9e:d4:49:77:89:8d:8f:bf: 3c:50:31:6c:21:4c:18:2f:4f:00:3d:64:c7:d5:07: a7:f5:5d:b6:c8:d8:d3:bd:7b:8c:b1:9d:f5:e6:dd: 66:59:f5:95:1b:d3:ea:dd:d9:af:f5:a8:6b:b0:f2: b9:ce:dc:30:79:f8:19:ea:15:f6:9f:d2:7d:6e:65: 26:1b:cf:18:f2:8f:c1:72:38:1f:85:ad:53:2e:45: cc:74:a7:81:10:c6:fc:15:92:ce:60:34:0d:00:4c: f9:82:ae:08:f1:87:c2:4c:51:6c:f4:13:6c:6d:6f: ca:2d:00:ed:c6:f8:4d:60:9b:1c:b1:d3:cc:39:ce: 6b:dc:41:8d:16:4a:e5:c5:4d:c8:15:14:c8:69:79: 52:6b:74:45:75:a0:d5:12:65:bd:a7:ea:92:3f:ec: 3e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F7:7E:88:EF:0B:A0:E7:1A:6B:76:BF:2F:92:BD:C5:E1:F8:2E:EB X509v3 Authority Key Identifier: keyid:2E:C7:21:F6:FC:61:6A:1B:E2:D9:38:F2:1E:AF:2E:82:E8:05:98:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:e0:d3:30:92:f6:92:0f:0f:5a:5d:94:b5:88:a6:2a:a7:57: 8c:73:6e:a9:9b:9f:27:c4:7e:45:02:6b:61:7f:07:a4:c0:df: 75:b7:b1:94:83:dd:91:64:8d:90:ef:7c:fd:19:12:05:e2:c3: b0:7e:90:e0:d8:dc:6c:40:52:43:cb:2a:d1:50:fa:7d:61:1a: c5:47:28:67:6b:ae:9c:a3:4d:76:e9:6f:22:2b:98:b1:1d:6e: 05:c9:2d:d6:21:4b:64:3d:fc:d4:dd:b7:fc:e0:5b:eb:a7:10: 23:ed:7a:07:7c:8f:04:f4:52:79:d1:0c:5e:6b:d4:fc:a5:4c: 4d:26:c9:00:fc:02:d4:41:50:c9:49:a9:26:ea:49:cf:bc:2d: 0e:fa:1f:37:6c:35:c8:38:e9:34:6a:cd:09:28:88:c7:9e:7a: b2:77:7b:20:ce:60:b5:01:3a:54:29:4d:8f:a8:38:98:b3:f7: 72:18:3a:d2:e6:b9:a4:a2:82:6a:2f:c2:f5:fb:b0:25:af:2a: 73:8b:0a:10:c2:df:00:d4:7f:78:7f:49:dc:f7:d8:86:30:39: fb:7c:a0:02:a9:63:c1:97:23:d8:61:5b:46:ed:0b:43:e5:9d: a4:ce:cd:7d:74:24:2e:ff:66:40:9f:b6:f2:46:ac:75:7c:0d: bf:77:cd:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC8vKJR8PIYiMGgw9obXpWPJzPoEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJFODJF ODA1OTgxRTAeFw0yNTA5MDgwNTU2NTNaFw0yNTA5MTEwODQzNTNaMDMxMTAvBgNV BAMTKDY1Rjc3RTg4RUYwQkEwRTcxQTZCNzZCRjJGOTJCREM1RTFGODJFRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFM6owXTwu6rW7afShz3PLJo2U R5cdKmIaferxb7g8ciJ5zTupuaHRMJ2no47FSieXsA85KEkdyK0wzMf+ehv37ZW6 RX0K0ye0KYz1XLzQKzq123fKQVdKmnGa5brm0u6e1El3iY2PvzxQMWwhTBgvTwA9 ZMfVB6f1XbbI2NO9e4yxnfXm3WZZ9ZUb0+rd2a/1qGuw8rnO3DB5+BnqFfaf0n1u ZSYbzxjyj8FyOB+FrVMuRcx0p4EQxvwVks5gNA0ATPmCrgjxh8JMUWz0E2xtb8ot AO3G+E1gmxyx08w5zmvcQY0WSuXFTcgVFMhpeVJrdEV1oNUSZb2n6pI/7D6zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZfd+iO8LoOcaa3a/L5K9xeH4LuswHwYDVR0j BBgwFoAULsch9vxhahvi2TjyHq8ugugFmB4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODg1M2FhYi04ZDZjLTQ1N2YtOWQ1Ny00ODRhY2FjZWE5ZDgvMC8yRUM3MjFGNkZD NjE2QTFCRTJEOTM4RjIxRUFGMkU4MkU4MDU5ODFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJFODJFODA1 OTgxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTg4NTNhYWItOGQ2Yy00NTdmLTlk NTctNDg0YWNhY2VhOWQ4LzAvMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJF ODJFODA1OTgxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAELg0zCS9pIPD1pdlLWIpiqnV4xzbqmbnyfE fkUCa2F/B6TA33W3sZSD3ZFkjZDvfP0ZEgXiw7B+kODY3GxAUkPLKtFQ+n1hGsVH KGdrrpyjTXbpbyIrmLEdbgXJLdYhS2Q9/NTdt/zgW+unECPtegd8jwT0UnnRDF5r 1PylTE0myQD8AtRBUMlJqSbqSc+8LQ76HzdsNcg46TRqzQkoiMeeerJ3eyDOYLUB OlQpTY+oOJiz93IYOtLmuaSigmovwvX7sCWvKnOLChDC3wDUf3h/Sdz32IYwOft8 oAKpY8GXI9hhW0btC0PlnaTOzX10JC7/ZkCftvJGrHV8Db93ze0= -----END CERTIFICATE-----Generated at Mon Sep 8 10:12:17 2025 by rpki-client