$ rpki-client -vvf repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft File: 2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft (raw, json) Hash identifier: UhSblEYmBsd5b//gG/fhuum8Zosmi5xEL+jBAglE4Pk= Subject key identifier: 28:C0:6A:B0:AF:E8:F1:BF:D2:42:08:79:B5:4E:16:A3:2A:B3:6D:0A Authority key identifier: 2E:A5:E6:62:51:DD:59:1E:7F:1F:48:55:AF:4B:AF:BB:64:4B:08:A9 Certificate issuer: /CN=2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9 Certificate serial: 12D2F250C2D56D962B0E57FAFC8B662E8850429A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft Manifest number: 0213 Signing time: Fri 18 Jul 2025 22:32:00 +0000 Manifest this update: Fri 18 Jul 2025 22:27:00 +0000 Manifest next update: Mon 21 Jul 2025 23:31:00 +0000 Files and hashes: 1: 2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl (hash: HLkN7U0xg0Hx9KPKItz8fW7UULLZN58NV+8U1e6q9K0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Jul 2025 23:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:d2:f2:50:c2:d5:6d:96:2b:0e:57:fa:fc:8b:66:2e:88:50:42:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9 Validity Not Before: Jul 18 22:27:00 2025 GMT Not After : Jul 21 23:31:00 2025 GMT Subject: CN=28C06AB0AFE8F1BFD2420879B54E16A32AB36D0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d8:ea:24:c8:8a:a5:cb:1e:68:28:d7:0c:58: be:fa:d1:be:ce:47:6d:af:76:8c:20:ba:ef:27:2f: 40:bc:8f:d5:dc:83:0a:d4:8f:9c:88:30:43:8f:35: 0a:04:12:22:df:ed:94:3b:0b:c4:9d:01:be:96:77: b9:0d:e5:db:27:cb:11:0b:7f:47:4a:22:1d:54:56: e8:80:db:75:4d:15:34:ed:61:54:01:c7:54:c4:79: 00:7e:85:01:51:f4:08:66:a8:05:8c:ff:a3:5a:f5: 99:68:03:29:52:d9:15:33:7d:40:5a:7e:75:cf:fb: b9:b8:d2:c1:50:7c:ac:4a:15:41:4e:c8:7c:37:f9: dd:d3:df:b0:29:2d:fc:85:aa:79:7a:d4:b2:e3:fa: fc:f7:bc:56:31:78:8f:de:a9:73:c1:43:0e:a0:3c: b0:d3:7c:e9:15:61:c9:fc:fe:78:77:ab:4f:56:85: fa:b5:45:75:5a:10:ee:bf:ff:75:5d:73:ee:7f:32: 84:91:07:4d:9b:0a:07:9c:ce:6d:80:d9:c0:18:0c: d1:18:34:87:8b:3f:b4:35:11:7d:0d:6d:c3:cf:66: 6c:68:a2:35:85:2c:4a:4f:61:a8:41:0b:44:e5:04: 34:fc:a4:89:dc:4b:d5:58:4b:37:90:9f:5d:39:c3: c8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C0:6A:B0:AF:E8:F1:BF:D2:42:08:79:B5:4E:16:A3:2A:B3:6D:0A X509v3 Authority Key Identifier: keyid:2E:A5:E6:62:51:DD:59:1E:7F:1F:48:55:AF:4B:AF:BB:64:4B:08:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:d1:4b:61:0e:68:e4:94:10:c1:26:c7:09:d7:e4:52:2c:1a: e2:16:07:20:81:c4:8b:d3:10:9f:65:0c:2c:c6:ba:1f:09:3b: c6:86:ee:21:93:26:54:4b:cd:14:b6:8e:3a:7a:d7:f6:c3:68: d5:99:dd:39:f2:9f:30:d2:fd:14:1d:7c:04:da:f9:e1:13:02: 2e:9c:21:59:1c:6f:8f:f8:c7:55:29:35:19:9e:13:2b:08:d6: 41:cf:a2:52:a0:bb:b0:9f:e5:5b:1c:d4:ae:8f:7f:5e:b5:5a: 5b:28:56:99:24:23:c5:3b:64:11:ed:12:f8:c3:84:d9:81:dc: a9:68:ff:09:45:47:14:b2:98:0c:a0:94:11:fc:9d:19:b4:c0: c8:d0:9a:d0:99:11:1f:b5:70:6a:d4:3b:85:58:20:e9:5c:fe: f0:6c:f2:eb:fb:0a:11:e4:c5:be:84:7b:24:a5:32:1c:a0:32: 4c:47:ef:ea:f4:4e:ab:45:e0:0e:a1:e3:64:99:72:e4:47:8f: 80:5c:0b:9e:02:df:1c:38:12:70:4a:15:62:b4:77:4c:af:c2: d4:26:58:5d:09:a6:d8:85:b5:95:1c:0f:fe:6f:ef:07:d1:8e: 53:89:bc:41:3c:83:01:44:13:fb:d0:9d:c6:2c:3b:63:60:c1: df:e2:9f:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEtLyUMLVbZYrDlf6/ItmLohQQpowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFGQkI2 NDRCMDhBOTAeFw0yNTA3MTgyMjI3MDBaFw0yNTA3MjEyMzMxMDBaMDMxMTAvBgNV BAMTKDI4QzA2QUIwQUZFOEYxQkZEMjQyMDg3OUI1NEUxNkEzMkFCMzZEMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO2OokyIqlyx5oKNcMWL760b7O R22vdowguu8nL0C8j9XcgwrUj5yIMEOPNQoEEiLf7ZQ7C8SdAb6Wd7kN5dsnyxEL f0dKIh1UVuiA23VNFTTtYVQBx1TEeQB+hQFR9AhmqAWM/6Na9ZloAylS2RUzfUBa fnXP+7m40sFQfKxKFUFOyHw3+d3T37ApLfyFqnl61LLj+vz3vFYxeI/eqXPBQw6g PLDTfOkVYcn8/nh3q09Whfq1RXVaEO6//3Vdc+5/MoSRB02bCgeczm2A2cAYDNEY NIeLP7Q1EX0NbcPPZmxoojWFLEpPYahBC0TlBDT8pIncS9VYSzeQn105w8hnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKMBqsK/o8b/SQgh5tU4WoyqzbQowHwYDVR0j BBgwFoAULqXmYlHdWR5/H0hVr0uvu2RLCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 Y2IyOTI4ZS05YjM5LTRhOTAtOTdkMi0wNGNmNjVmZTk1NzgvMC8yRUE1RTY2MjUx REQ1OTFFN0YxRjQ4NTVBRjRCQUZCQjY0NEIwOEE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFGQkI2NDRC MDhBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmNiMjkyOGUtOWIzOS00YTkwLTk3 ZDItMDRjZjY1ZmU5NTc4LzAvMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFG QkI2NDRCMDhBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACDRS2EOaOSUEMEmxwnX5FIsGuIWByCBxIvT EJ9lDCzGuh8JO8aG7iGTJlRLzRS2jjp61/bDaNWZ3TnynzDS/RQdfATa+eETAi6c IVkcb4/4x1UpNRmeEysI1kHPolKgu7Cf5Vsc1K6Pf161WlsoVpkkI8U7ZBHtEvjD hNmB3Klo/wlFRxSymAyglBH8nRm0wMjQmtCZER+1cGrUO4VYIOlc/vBs8uv7ChHk xb6EeySlMhygMkxH7+r0TqtF4A6h42SZcuRHj4BcC54C3xw4EnBKFWK0d0yvwtQm WF0JptiFtZUcD/5v7wfRjlOJvEE8gwFEE/vQncYsO2Ngwd/in0I= -----END CERTIFICATE-----Generated at Sun Jul 20 21:27:26 2025 by rpki-client