$ rpki-client -vvf repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft File: 2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft (raw, json) Hash identifier: 7ukbyL59D+ZCe2EOljNAN/VYCQrtxVSYdmS6awItPc8= Subject key identifier: 65:61:E9:F6:C3:80:07:E2:1E:4C:67:CE:59:B3:1E:0F:C1:D2:8E:D3 Authority key identifier: 2E:EF:78:44:53:62:AF:4F:7C:AE:B2:41:FA:E6:B9:74:7E:C2:D2:F9 Certificate issuer: /CN=2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9 Certificate serial: 3B3B75921EDBEC7AFECE86A00185131D3FEA0708 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft Manifest number: 0495 Signing time: Sun 07 Sep 2025 04:51:07 +0000 Manifest this update: Sun 07 Sep 2025 04:46:07 +0000 Manifest next update: Wed 10 Sep 2025 12:00:07 +0000 Files and hashes: 1: 2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.crl (hash: ziRSTL3y7dK4YU5quV6IkhXB3SoP2RagRXejpzpBu1Y=) 2: 3130332e3135382e3130332e302f32342d3234203d3e203435333137.roa (hash: w2a2u6qdVWhlCkR970rhojHnih1HccbKX6TZhhdF+IA=) 3: 3130332e3135382e3130322e302f32342d3234203d3e20313431313239.roa (hash: mevAhM5443uB5w78f++4hcwTY8vcOKFPl7i6kYttnO4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.crl rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:3b:75:92:1e:db:ec:7a:fe:ce:86:a0:01:85:13:1d:3f:ea:07:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9 Validity Not Before: Sep 7 04:46:07 2025 GMT Not After : Sep 10 12:00:07 2025 GMT Subject: CN=6561E9F6C38007E21E4C67CE59B31E0FC1D28ED3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2c:45:22:04:87:30:27:b7:75:e9:c2:71:ac: 1f:d2:cc:af:7d:aa:4f:39:e6:bb:e0:e3:eb:95:bf: 67:91:25:62:b2:47:42:fb:c2:e7:73:a7:06:35:b4: 21:b1:f5:14:84:f5:e5:a5:5c:a4:7b:25:c9:f8:67: 1a:61:0d:06:5b:87:5c:60:f1:41:a7:ff:ca:22:2c: 37:d0:6f:49:82:0b:7e:2f:06:2a:49:a8:93:da:82: 9a:bb:64:ff:18:44:34:e9:4e:cb:15:e5:ee:5c:d4: 63:d4:6b:7c:c8:aa:71:30:60:27:26:08:dd:2d:07: a0:ec:e4:3a:b5:fb:d9:7d:e0:5d:cb:40:46:dd:4b: 81:6e:c0:7d:30:e9:40:08:86:f3:1a:ab:d0:f4:1b: ad:0f:79:b5:c0:92:b2:b3:92:4b:2a:81:1a:81:ab: 78:4a:03:79:9d:db:3e:10:18:af:0e:3c:da:dc:04: 74:9c:5d:5f:64:38:27:fa:d2:c1:c0:15:12:af:0b: ae:f4:f0:b3:19:fc:24:fb:4b:eb:b1:2e:1c:ba:cc: 9e:b5:85:4d:d0:f6:06:b9:54:2a:45:b1:04:41:7a: 30:eb:ba:9c:df:df:db:cd:d4:19:c2:26:14:4b:79: 87:a0:ce:ca:bf:7f:c7:6b:f4:54:ed:a9:c0:de:19: 20:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:61:E9:F6:C3:80:07:E2:1E:4C:67:CE:59:B3:1E:0F:C1:D2:8E:D3 X509v3 Authority Key Identifier: keyid:2E:EF:78:44:53:62:AF:4F:7C:AE:B2:41:FA:E6:B9:74:7E:C2:D2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:57:22:26:19:b4:d5:66:08:cc:73:ee:1a:b7:ef:5a:4a:4d: 37:4e:58:87:ca:32:7b:7d:27:f6:8f:4e:97:ee:7b:7b:20:9e: fb:91:36:a0:69:13:72:6d:5c:fb:00:b1:36:78:d7:26:a9:1e: 2f:7a:34:6b:58:d8:6e:bc:6f:3e:7c:93:f6:6c:1e:ac:29:32: 4f:61:09:79:bd:c9:e8:cd:13:f4:35:a9:c0:29:d7:66:6c:a1: a6:aa:72:cb:ce:9d:ca:24:be:07:dd:4b:0a:fb:12:e9:20:93: 60:11:53:15:ae:6f:92:b7:73:bf:d0:4e:d9:50:7b:e5:95:0c: 24:42:f2:14:a5:d3:b3:bc:b4:ce:b1:4a:5a:b2:cd:f0:7c:b1: 60:54:6f:2c:d5:c2:8a:9c:85:80:42:6f:9c:cb:af:85:a2:f1: 8f:a6:83:fe:31:6b:54:c1:99:65:11:91:15:63:87:6b:31:e5: 14:50:e2:75:ce:a0:d8:93:1d:a0:e3:35:9b:c8:e8:86:14:58: 6b:58:6a:52:0c:3b:75:78:d0:b1:91:da:60:1b:8a:2b:10:5c: 9c:7d:2b:95:4f:16:c3:81:38:4c:86:3e:18:f2:79:58:0a:95: 16:13:36:4b:83:8a:84:6c:1e:b2:e7:33:79:85:00:b1:aa:1b: aa:ea:8c:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOzt1kh7b7Hr+zoagAYUTHT/qBwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVFRjc4NDQ1MzYyQUY0RjdDQUVCMjQxRkFFNkI5NzQ3 RUMyRDJGOTAeFw0yNTA5MDcwNDQ2MDdaFw0yNTA5MTAxMjAwMDdaMDMxMTAvBgNV BAMTKDY1NjFFOUY2QzM4MDA3RTIxRTRDNjdDRTU5QjMxRTBGQzFEMjhFRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4LEUiBIcwJ7d16cJxrB/SzK99 qk855rvg4+uVv2eRJWKyR0L7wudzpwY1tCGx9RSE9eWlXKR7Jcn4ZxphDQZbh1xg 8UGn/8oiLDfQb0mCC34vBipJqJPagpq7ZP8YRDTpTssV5e5c1GPUa3zIqnEwYCcm CN0tB6Ds5Dq1+9l94F3LQEbdS4FuwH0w6UAIhvMaq9D0G60PebXAkrKzkksqgRqB q3hKA3md2z4QGK8OPNrcBHScXV9kOCf60sHAFRKvC6708LMZ/CT7S+uxLhy6zJ61 hU3Q9ga5VCpFsQRBejDrupzf39vN1BnCJhRLeYegzsq/f8dr9FTtqcDeGSABAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZWHp9sOAB+IeTGfOWbMeD8HSjtMwHwYDVR0j BBgwFoAULu94RFNir098rrJB+ua5dH7C0vkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NzI0ZTQ1Yi0yNTRiLTRmZWItYmY4ZS03YmYxMjA5MTJhZjcvMC8yRUVGNzg0NDUz NjJBRjRGN0NBRUIyNDFGQUU2Qjk3NDdFQzJEMkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkVFRjc4NDQ1MzYyQUY0RjdDQUVCMjQxRkFFNkI5NzQ3RUMy RDJGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjcyNGU0NWItMjU0Yi00ZmViLWJm OGUtN2JmMTIwOTEyYWY3LzAvMkVFRjc4NDQ1MzYyQUY0RjdDQUVCMjQxRkFFNkI5 NzQ3RUMyRDJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIBXIiYZtNVmCMxz7hq371pKTTdOWIfKMnt9 J/aPTpfue3sgnvuRNqBpE3JtXPsAsTZ41yapHi96NGtY2G68bz58k/ZsHqwpMk9h CXm9yejNE/Q1qcAp12ZsoaaqcsvOncokvgfdSwr7Eukgk2ARUxWub5K3c7/QTtlQ e+WVDCRC8hSl07O8tM6xSlqyzfB8sWBUbyzVwoqchYBCb5zLr4Wi8Y+mg/4xa1TB mWURkRVjh2sx5RRQ4nXOoNiTHaDjNZvI6IYUWGtYalIMO3V40LGR2mAbiisQXJx9 K5VPFsOBOEyGPhjyeVgKlRYTNkuDioRsHrLnM3mFALGqG6rqjCs= -----END CERTIFICATE-----Generated at Sun Sep 7 13:55:48 2025 by rpki-client