$ rpki-client -vvf repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft File: 2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft (raw, json) Hash identifier: 14VbolCQoTFQRhGRvgVrV8r3zkdtu1dPYsIZjR1WSY0= Subject key identifier: D7:54:01:88:6A:00:6F:24:7B:08:59:7F:D9:A9:A4:8D:BB:13:58:FF Authority key identifier: 2A:86:5C:A2:F4:F7:0C:CC:B0:3F:98:C2:B6:E1:7E:89:3A:B8:7D:0C Certificate issuer: /CN=2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C Certificate serial: 3037F9ACC8A81F47E6E1282ED512B6D9A4D0C13C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft Manifest number: 01EE Signing time: Sun 20 Jul 2025 00:11:49 +0000 Manifest this update: Sun 20 Jul 2025 00:06:49 +0000 Manifest next update: Wed 23 Jul 2025 01:31:49 +0000 Files and hashes: 1: 2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl (hash: luvfXiMJltRKV8VHRp13/u2FTsPff0wnEAFoOqQlLQw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 01:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:37:f9:ac:c8:a8:1f:47:e6:e1:28:2e:d5:12:b6:d9:a4:d0:c1:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C Validity Not Before: Jul 20 00:06:49 2025 GMT Not After : Jul 23 01:31:49 2025 GMT Subject: CN=D75401886A006F247B08597FD9A9A48DBB1358FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:21:d5:26:63:34:2e:2b:ea:6a:4e:1d:c2:b5: 32:08:4f:cb:01:d7:af:0a:24:3e:55:83:91:d0:69: fc:1e:24:7e:f7:58:44:d7:08:1c:1c:d3:d2:81:cb: 28:ce:69:09:55:86:0f:de:a8:cf:0e:70:36:da:cc: 16:07:1b:2a:8d:8c:34:d8:70:50:e6:5d:59:a2:69: 02:35:f9:2a:c6:a6:59:7a:c6:73:60:ca:62:69:fd: bd:e8:8a:6d:d6:61:3e:c1:4d:f1:f4:9e:40:1a:39: dd:db:f8:f7:b1:91:55:49:af:80:02:67:1a:1f:d1: 1c:ad:ba:f1:34:7f:44:43:a6:df:ca:a2:bf:38:fd: 2a:fc:fd:af:e3:42:ea:06:24:f8:78:10:65:85:97: d8:91:7b:74:8f:84:cd:0e:2f:db:33:32:53:30:2c: 04:6f:a8:ac:84:b7:b6:96:b1:0f:e4:f6:97:fb:b1: 45:f9:2e:37:53:9e:63:f1:5b:7a:24:63:a9:89:de: a1:28:af:a1:6b:4b:7e:ad:03:48:6a:cb:2e:f3:61: 5b:ff:31:29:33:ca:04:c6:99:1d:16:05:24:06:83: 69:21:27:f6:16:1a:d2:62:c1:77:28:2a:98:c9:de: f1:98:74:24:e4:54:58:ad:48:84:32:73:08:35:a2: eb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:54:01:88:6A:00:6F:24:7B:08:59:7F:D9:A9:A4:8D:BB:13:58:FF X509v3 Authority Key Identifier: keyid:2A:86:5C:A2:F4:F7:0C:CC:B0:3F:98:C2:B6:E1:7E:89:3A:B8:7D:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:32:cf:91:1c:1f:ce:b2:55:3b:39:6f:ab:13:6e:83:83:60: a8:83:3e:dd:21:37:4f:94:d7:6c:08:de:80:f3:a0:a0:64:a1: 5a:f9:bb:6a:b4:3f:f3:a5:42:df:29:a9:1c:c7:7b:72:9f:08: 65:4c:a0:83:cb:17:ea:f1:0e:32:6d:ed:4e:0a:f5:50:8c:4b: b3:0d:c8:59:15:3f:8e:37:96:bc:50:42:48:f2:14:50:25:3f: d3:7a:1d:dc:c0:6f:0b:af:37:68:af:9a:e8:23:cc:a7:c3:62: 94:43:4c:e1:a6:d6:38:aa:da:41:0c:c5:3c:9e:83:bb:13:89: d4:56:7f:85:ee:ad:b3:b0:8a:6b:89:c7:88:29:36:68:fd:e0: f7:db:29:c7:1f:1e:dc:2c:99:81:28:41:fb:2b:39:91:a0:13: c7:07:8d:9c:f0:6e:a6:e9:72:85:18:c6:c0:c0:61:69:6e:27: b7:90:07:b0:90:aa:2f:f9:34:a0:02:3e:eb:49:36:d2:1c:bc: 54:5f:af:27:37:7f:6e:8b:be:72:bd:90:da:c2:bc:ca:10:cb: 8c:94:12:08:02:88:05:dd:0f:1e:0a:04:94:07:f1:d0:cf:03: 3f:13:92:6d:d8:59:ab:9c:3d:43:1b:91:21:c6:4c:74:01:40: c3:88:e2:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMDf5rMioH0fm4Sgu1RK22aTQwTwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdFODkz QUI4N0QwQzAeFw0yNTA3MjAwMDA2NDlaFw0yNTA3MjMwMTMxNDlaMDMxMTAvBgNV BAMTKEQ3NTQwMTg4NkEwMDZGMjQ3QjA4NTk3RkQ5QTlBNDhEQkIxMzU4RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqIdUmYzQuK+pqTh3CtTIIT8sB 168KJD5Vg5HQafweJH73WETXCBwc09KByyjOaQlVhg/eqM8OcDbazBYHGyqNjDTY cFDmXVmiaQI1+SrGpll6xnNgymJp/b3oim3WYT7BTfH0nkAaOd3b+PexkVVJr4AC Zxof0RytuvE0f0RDpt/Kor84/Sr8/a/jQuoGJPh4EGWFl9iRe3SPhM0OL9szMlMw LARvqKyEt7aWsQ/k9pf7sUX5LjdTnmPxW3okY6mJ3qEor6FrS36tA0hqyy7zYVv/ MSkzygTGmR0WBSQGg2khJ/YWGtJiwXcoKpjJ3vGYdCTkVFitSIQycwg1ouuPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU11QBiGoAbyR7CFl/2amkjbsTWP8wHwYDVR0j BBgwFoAUKoZcovT3DMywP5jCtuF+iTq4fQwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDJiNzhhZC1kZjIzLTQzZTItYTk0ZC0zYjQ1NGNiYzdmYzUvMC8yQTg2NUNBMkY0 RjcwQ0NDQjAzRjk4QzJCNkUxN0U4OTNBQjg3RDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdFODkzQUI4 N0QwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAyYjc4YWQtZGYyMy00M2UyLWE5 NGQtM2I0NTRjYmM3ZmM1LzAvMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdF ODkzQUI4N0QwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADoyz5EcH86yVTs5b6sTboODYKiDPt0hN0+U 12wI3oDzoKBkoVr5u2q0P/OlQt8pqRzHe3KfCGVMoIPLF+rxDjJt7U4K9VCMS7MN yFkVP443lrxQQkjyFFAlP9N6HdzAbwuvN2ivmugjzKfDYpRDTOGm1jiq2kEMxTye g7sTidRWf4XurbOwimuJx4gpNmj94PfbKccfHtwsmYEoQfsrOZGgE8cHjZzwbqbp coUYxsDAYWluJ7eQB7CQqi/5NKACPutJNtIcvFRfryc3f26LvnK9kNrCvMoQy4yU EggCiAXdDx4KBJQH8dDPAz8Tkm3YWaucPUMbkSHGTHQBQMOI4lE= -----END CERTIFICATE-----Generated at Mon Jul 21 07:25:10 2025 by rpki-client