$ rpki-client -vvf repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft File: 2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft (raw, json) Hash identifier: xDgMWr/RPPCwpnlSenAwk10cXDfRb382ycdiiMs6GGw= Subject key identifier: 2C:D6:5F:92:41:A5:F1:6C:AE:0A:C1:2D:7A:42:47:BD:A7:36:19:1E Authority key identifier: 2E:C7:21:F6:FC:61:6A:1B:E2:D9:38:F2:1E:AF:2E:82:E8:05:98:1E Certificate issuer: /CN=2EC721F6FC616A1BE2D938F21EAF2E82E805981E Certificate serial: 4BB60C4A11526DFD7F68BFDB7BB2D5214933D86C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft Manifest number: 2F Signing time: Sat 15 Feb 2025 15:41:50 +0000 Manifest this update: Sat 15 Feb 2025 15:36:50 +0000 Manifest next update: Tue 18 Feb 2025 15:43:50 +0000 Files and hashes: 1: 2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl (hash: qKF5AdEt7bIHYxB5liuYYTsubeu+UDxkjhoTY11Y0Gw=) 2: 3136302e3138372e3137342e302f32342d3234203d3e20313533313335.roa (hash: dQxSegWij3q6Phuhy7HWSdyNiX1g+CStiuMeHg3r0H4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 18 Feb 2025 15:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:b6:0c:4a:11:52:6d:fd:7f:68:bf:db:7b:b2:d5:21:49:33:d8:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EC721F6FC616A1BE2D938F21EAF2E82E805981E Validity Not Before: Feb 15 15:36:50 2025 GMT Not After : Feb 18 15:43:50 2025 GMT Subject: CN=2CD65F9241A5F16CAE0AC12D7A4247BDA736191E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3b:5a:3f:ec:6c:96:6a:8c:2c:f4:3f:29:9c: 06:15:d8:a1:19:62:3f:aa:e1:5b:77:58:ab:1a:6f: 9b:1c:cd:06:62:72:66:6f:58:85:2b:c4:da:e5:a3: c6:16:82:39:d1:41:a2:74:d5:01:ee:dd:61:d6:66: c2:2b:59:c4:9c:bb:79:23:44:8d:58:40:7e:48:82: d6:38:1c:ca:71:9b:7c:05:53:7d:3c:34:74:75:99: 42:5d:7f:1f:4c:4f:8f:88:27:5c:a5:a5:e8:9f:9b: 8f:22:77:ad:dc:24:2e:e0:54:89:94:dc:50:2e:5d: d6:89:61:ad:66:04:54:01:de:fd:8d:49:9c:74:e7: 05:08:de:66:51:53:7a:09:47:35:61:c8:c7:a4:89: a2:d4:a4:34:bc:24:83:78:88:41:87:c1:44:43:c2: e1:5c:11:b1:d6:b3:3e:14:7e:8e:ef:cc:3a:0a:3c: 59:0e:55:14:00:9c:e0:3b:99:88:11:20:8b:3b:03: 30:c7:0f:1e:d1:b6:67:de:bc:d3:f3:2a:6c:27:63: 8c:42:c7:7f:b9:ba:e1:9a:5d:cb:eb:23:12:bb:aa: 41:3d:f0:d5:a3:3c:1e:3d:d3:cc:26:95:70:30:75: 26:8c:c2:b6:4f:06:07:ad:d4:16:a0:81:38:07:f4: 15:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D6:5F:92:41:A5:F1:6C:AE:0A:C1:2D:7A:42:47:BD:A7:36:19:1E X509v3 Authority Key Identifier: keyid:2E:C7:21:F6:FC:61:6A:1B:E2:D9:38:F2:1E:AF:2E:82:E8:05:98:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:2a:44:3d:f6:2e:c2:d5:7f:d8:d4:d5:b4:f0:88:64:b3:bf: 6f:11:23:28:b8:24:98:72:6b:18:8b:82:48:c4:63:e8:7d:fa: 94:36:5b:dd:19:31:e5:78:d1:46:bd:f5:76:90:39:1f:7e:6d: f6:1f:cb:e2:0d:54:23:03:fb:b2:bd:69:66:78:f7:15:52:56: e4:aa:e0:d8:04:23:ba:03:a6:86:99:1e:c4:8e:ca:d2:a8:ae: ea:88:ee:45:f9:7f:3c:53:b4:4d:87:a6:cc:07:0b:a2:bd:64: 35:8a:e8:64:61:1e:98:ff:fc:a7:81:79:5f:45:10:6e:d9:c9: c1:d2:f0:cc:81:d6:20:01:b5:93:e1:46:57:10:12:c7:dc:71: 26:20:ea:cd:e4:c9:6a:85:a4:7d:01:a9:bb:f0:27:24:c3:d5: 85:6e:52:94:de:8a:51:0c:f3:36:8c:78:57:48:c1:c7:3c:b0: 34:d7:d2:55:ee:d4:8c:9d:72:a1:ae:ca:40:0a:d3:07:42:65: 3c:6b:67:2e:f9:d0:aa:8c:00:7a:6a:2d:1c:bb:ae:78:c3:7d: 12:37:74:87:06:f9:b9:f5:f6:47:6d:59:21:84:86:b0:c3:84: 8b:8a:42:fa:c5:d5:25:91:12:d2:c2:c6:a2:ee:9b:32:52:83: 9c:ab:42:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS7YMShFSbf1/aL/be7LVIUkz2GwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJFODJF ODA1OTgxRTAeFw0yNTAyMTUxNTM2NTBaFw0yNTAyMTgxNTQzNTBaMDMxMTAvBgNV BAMTKDJDRDY1RjkyNDFBNUYxNkNBRTBBQzEyRDdBNDI0N0JEQTczNjE5MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvO1o/7GyWaows9D8pnAYV2KEZ Yj+q4Vt3WKsab5sczQZicmZvWIUrxNrlo8YWgjnRQaJ01QHu3WHWZsIrWcScu3kj RI1YQH5IgtY4HMpxm3wFU308NHR1mUJdfx9MT4+IJ1ylpeifm48id63cJC7gVImU 3FAuXdaJYa1mBFQB3v2NSZx05wUI3mZRU3oJRzVhyMekiaLUpDS8JIN4iEGHwURD wuFcEbHWsz4Ufo7vzDoKPFkOVRQAnOA7mYgRIIs7AzDHDx7RtmfevNPzKmwnY4xC x3+5uuGaXcvrIxK7qkE98NWjPB4908wmlXAwdSaMwrZPBget1BaggTgH9BXrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULNZfkkGl8WyuCsEtekJHvac2GR4wHwYDVR0j BBgwFoAULsch9vxhahvi2TjyHq8ugugFmB4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODg1M2FhYi04ZDZjLTQ1N2YtOWQ1Ny00ODRhY2FjZWE5ZDgvMC8yRUM3MjFGNkZD NjE2QTFCRTJEOTM4RjIxRUFGMkU4MkU4MDU5ODFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJFODJFODA1 OTgxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTg4NTNhYWItOGQ2Yy00NTdmLTlk NTctNDg0YWNhY2VhOWQ4LzAvMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJF ODJFODA1OTgxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALMqRD32LsLVf9jU1bTwiGSzv28RIyi4JJhy axiLgkjEY+h9+pQ2W90ZMeV40Ua99XaQOR9+bfYfy+INVCMD+7K9aWZ49xVSVuSq 4NgEI7oDpoaZHsSOytKoruqI7kX5fzxTtE2HpswHC6K9ZDWK6GRhHpj//KeBeV9F EG7ZycHS8MyB1iABtZPhRlcQEsfccSYg6s3kyWqFpH0BqbvwJyTD1YVuUpTeilEM 8zaMeFdIwcc8sDTX0lXu1IydcqGuykAK0wdCZTxrZy750KqMAHpqLRy7rnjDfRI3 dIcG+bn19kdtWSGEhrDDhIuKQvrF1SWREtLCxqLumzJSg5yrQpU= -----END CERTIFICATE-----Generated at Sun Feb 16 20:51:44 2025 by rpki-client