$ rpki-client -vvf repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft File: 2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft (raw, json) Hash identifier: CGGkMqauS8LMtHmf7fZYdPku4daTc5YQBSxBLDMHtHQ= Subject key identifier: F6:2C:FA:79:A8:D2:19:7C:82:62:F8:63:FF:9D:20:6F:87:63:F7:DA Authority key identifier: 2E:C7:21:F6:FC:61:6A:1B:E2:D9:38:F2:1E:AF:2E:82:E8:05:98:1E Certificate issuer: /CN=2EC721F6FC616A1BE2D938F21EAF2E82E805981E Certificate serial: 5619AC0AACA0A9880F3E983A02EB55AE0CF121DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft Manifest number: 3A Signing time: Wed 12 Mar 2025 09:21:51 +0000 Manifest this update: Wed 12 Mar 2025 09:16:51 +0000 Manifest next update: Sat 15 Mar 2025 13:43:51 +0000 Files and hashes: 1: 3136302e3138372e3137342e302f32342d3234203d3e20313533313335.roa (hash: dQxSegWij3q6Phuhy7HWSdyNiX1g+CStiuMeHg3r0H4=) 2: 2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl (hash: iRwPt2MNC9F2C9qnqG5BmaNasDpFzynXIRLvOjHlvv0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Mar 2025 11:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:19:ac:0a:ac:a0:a9:88:0f:3e:98:3a:02:eb:55:ae:0c:f1:21:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EC721F6FC616A1BE2D938F21EAF2E82E805981E Validity Not Before: Mar 12 09:16:51 2025 GMT Not After : Mar 15 13:43:51 2025 GMT Subject: CN=F62CFA79A8D2197C8262F863FF9D206F8763F7DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2b:c6:e7:1c:f7:0c:95:0d:37:f1:05:f2:54: 88:b7:fe:34:2c:9e:89:91:d2:14:a8:a1:d9:cc:15: b9:34:74:d0:a3:57:45:8a:b3:c9:28:15:14:01:aa: 66:03:d1:b1:48:38:ff:bb:0e:52:a1:ec:96:35:0c: 2c:28:ce:69:78:bf:0e:59:40:0e:d7:ff:d0:a6:76: 98:a2:81:6d:21:3c:c2:79:31:c9:6e:34:73:ee:8b: a4:9c:c4:d3:22:fe:95:17:bf:78:0c:cc:5c:88:80: 96:7d:ba:3e:30:0b:ee:30:48:9c:47:ba:27:61:0d: 0a:b2:6b:4c:1a:42:7e:f7:f8:3f:79:d6:2d:54:89: f6:eb:f6:17:f0:04:24:c8:9e:5c:e5:be:36:61:b6: ff:a4:23:c9:a3:63:57:48:ed:52:2e:f6:b6:ac:59: 4c:37:00:1f:30:3d:03:87:1f:91:66:b5:fd:ce:b6: 54:50:a5:22:6a:b1:53:ad:8e:01:eb:a2:7b:69:f8: a4:06:59:74:29:d3:d0:e6:71:bb:9b:f0:46:7d:dd: 99:74:a5:ef:59:0e:71:a2:00:99:23:25:51:3e:c0: a5:27:31:6a:6a:f9:e0:a7:8b:55:84:1c:ec:12:16: 68:4f:ef:c2:21:5b:2d:65:b2:95:ce:f5:0e:73:e2: a0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:2C:FA:79:A8:D2:19:7C:82:62:F8:63:FF:9D:20:6F:87:63:F7:DA X509v3 Authority Key Identifier: keyid:2E:C7:21:F6:FC:61:6A:1B:E2:D9:38:F2:1E:AF:2E:82:E8:05:98:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:61:28:c7:03:88:ec:32:7a:7d:11:6e:81:66:45:09:d9:db: 71:8a:0b:c1:06:e4:16:2e:83:9d:ad:bc:e9:04:b6:16:a6:dd: b8:fc:0d:79:77:3c:93:7b:87:6f:25:5b:ac:10:fb:9c:55:42: 32:f5:a4:4c:b2:7e:c7:a9:63:73:60:ad:df:e6:fb:a7:83:7c: bc:cf:bf:00:05:0d:2f:8d:44:2b:ff:c7:8d:f8:e3:ec:8a:8e: e2:b5:72:a8:1f:2d:aa:41:a8:01:fb:fe:59:ca:1e:d6:ab:53: 79:81:d2:31:15:4e:49:03:f0:1f:47:01:41:42:02:11:7b:ea: e7:62:e4:0c:72:57:f5:5d:a9:47:55:a7:6e:9a:51:0c:68:db: 92:be:05:2a:bf:5b:60:03:61:5e:fd:32:28:7b:32:b0:e9:d4: 29:07:73:25:c3:09:de:6b:75:e8:cc:82:b2:91:cb:bd:c9:c4: 68:18:47:74:c5:9e:2f:73:86:d6:c8:31:78:d4:dc:97:a1:a5: 08:39:4d:50:72:f0:01:f3:ac:54:04:e7:5f:1c:b8:7a:9e:72: 20:6e:15:24:6a:57:a0:dc:6b:ec:d9:0b:42:92:d1:95:0c:18: 12:e5:4d:09:53:8c:0f:92:e0:07:db:14:30:30:ba:c4:a3:38: 7d:c5:60:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVhmsCqygqYgPPpg6AutVrgzxIdswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJFODJF ODA1OTgxRTAeFw0yNTAzMTIwOTE2NTFaFw0yNTAzMTUxMzQzNTFaMDMxMTAvBgNV BAMTKEY2MkNGQTc5QThEMjE5N0M4MjYyRjg2M0ZGOUQyMDZGODc2M0Y3REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDK8bnHPcMlQ038QXyVIi3/jQs nomR0hSoodnMFbk0dNCjV0WKs8koFRQBqmYD0bFIOP+7DlKh7JY1DCwozml4vw5Z QA7X/9CmdpiigW0hPMJ5McluNHPui6ScxNMi/pUXv3gMzFyIgJZ9uj4wC+4wSJxH uidhDQqya0waQn73+D951i1Uifbr9hfwBCTInlzlvjZhtv+kI8mjY1dI7VIu9ras WUw3AB8wPQOHH5Fmtf3OtlRQpSJqsVOtjgHrontp+KQGWXQp09Dmcbub8EZ93Zl0 pe9ZDnGiAJkjJVE+wKUnMWpq+eCni1WEHOwSFmhP78IhWy1lspXO9Q5z4qAzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9iz6eajSGXyCYvhj/50gb4dj99owHwYDVR0j BBgwFoAULsch9vxhahvi2TjyHq8ugugFmB4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODg1M2FhYi04ZDZjLTQ1N2YtOWQ1Ny00ODRhY2FjZWE5ZDgvMC8yRUM3MjFGNkZD NjE2QTFCRTJEOTM4RjIxRUFGMkU4MkU4MDU5ODFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJFODJFODA1 OTgxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTg4NTNhYWItOGQ2Yy00NTdmLTlk NTctNDg0YWNhY2VhOWQ4LzAvMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJF ODJFODA1OTgxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFthKMcDiOwyen0RboFmRQnZ23GKC8EG5BYu g52tvOkEtham3bj8DXl3PJN7h28lW6wQ+5xVQjL1pEyyfsepY3Ngrd/m+6eDfLzP vwAFDS+NRCv/x4344+yKjuK1cqgfLapBqAH7/lnKHtarU3mB0jEVTkkD8B9HAUFC AhF76udi5AxyV/VdqUdVp26aUQxo25K+BSq/W2ADYV79Mih7MrDp1CkHcyXDCd5r dejMgrKRy73JxGgYR3TFni9zhtbIMXjU3JehpQg5TVBy8AHzrFQE518cuHqeciBu FSRqV6Dca+zZC0KS0ZUMGBLlTQlTjA+S4AfbFDAwusSjOH3FYIw= -----END CERTIFICATE-----Generated at Thu Mar 13 21:32:55 2025 by rpki-client