$ rpki-client -vvf repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft File: 2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft (raw, json) Hash identifier: e1jygulOO2P473jwaaUvIC/JruhgNce/NgOvi7HN5ss= Subject key identifier: DF:92:80:79:4C:B9:61:CE:98:F4:23:4B:31:08:32:FE:75:6A:4A:77 Authority key identifier: 2E:A5:E6:62:51:DD:59:1E:7F:1F:48:55:AF:4B:AF:BB:64:4B:08:A9 Certificate issuer: /CN=2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9 Certificate serial: 77B605AF7CB02CC7CD0B611146B547D7886FEB8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft Manifest number: 01FF Signing time: Wed 04 Jun 2025 15:32:05 +0000 Manifest this update: Wed 04 Jun 2025 15:27:05 +0000 Manifest next update: Sat 07 Jun 2025 19:19:05 +0000 Files and hashes: 1: 2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl (hash: PsjNWL29EUaJK6rwuppgW4bssrUKuE4gQwCKN88lyrU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 19:19:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:b6:05:af:7c:b0:2c:c7:cd:0b:61:11:46:b5:47:d7:88:6f:eb:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9 Validity Not Before: Jun 4 15:27:05 2025 GMT Not After : Jun 7 19:19:05 2025 GMT Subject: CN=DF9280794CB961CE98F4234B310832FE756A4A77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bf:0a:2c:ac:f9:75:52:85:05:13:d8:bd:06: 2b:9b:e2:fc:0d:f3:f0:02:5a:99:ee:4d:ca:59:68: 8f:9e:f8:e1:98:e4:05:de:7c:fc:81:49:39:a2:c0: db:b6:9e:83:19:9c:a4:cc:ba:f4:a2:c8:d3:33:fe: 07:ad:24:2d:d4:8c:24:50:d7:08:e3:cd:3c:c0:6d: 99:16:90:7c:de:4d:2d:38:48:3c:0c:b1:7c:d6:e6: a0:04:8e:9a:2d:bb:19:42:05:fc:d3:28:ec:c1:57: bb:ac:47:6e:58:10:66:91:0b:fd:e7:da:f1:4e:35: 99:88:d4:80:dd:16:25:89:18:68:2b:74:50:8d:57: a4:f3:9e:26:38:a6:03:0e:22:25:f4:a1:4e:ec:50: 32:0a:ec:fc:06:8b:b5:ee:45:66:81:04:a2:9b:bb: 7a:7c:ee:99:f6:2e:a1:a2:cb:73:fc:ef:3c:1b:14: 05:99:c3:0a:f4:c9:6a:fa:4c:6b:40:84:0d:4b:97: bb:d8:f0:78:7e:1e:4b:05:5d:4c:ef:16:0c:ae:72: 70:cf:05:d7:9c:51:62:8c:32:0f:7a:a0:81:4e:f5: 7f:94:f4:9e:3f:50:71:5a:7f:72:a2:3b:2c:02:b1: 03:f1:11:72:fa:21:23:94:12:17:16:59:64:c1:aa: 9f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:92:80:79:4C:B9:61:CE:98:F4:23:4B:31:08:32:FE:75:6A:4A:77 X509v3 Authority Key Identifier: keyid:2E:A5:E6:62:51:DD:59:1E:7F:1F:48:55:AF:4B:AF:BB:64:4B:08:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:71:0e:39:0e:c5:5c:9f:5d:41:88:06:a6:c2:47:f2:0d:a7: 11:45:0a:d2:ee:b5:8f:b2:fe:f3:dd:83:85:5d:20:c3:fa:5e: fb:48:85:fb:cb:4c:27:42:64:01:c1:96:87:4c:85:d6:62:d5: 7e:3e:8c:ec:de:4a:08:61:ad:66:08:0e:a2:fa:35:c3:3b:16: f0:47:33:f5:4b:c2:da:41:f1:b7:95:53:4b:fe:20:29:36:7f: 72:8f:4a:a8:7e:a9:b5:44:65:63:de:41:40:63:57:aa:68:44: 80:10:88:22:8e:9e:cd:f9:17:18:a4:26:7c:8c:98:a3:85:d8: c8:65:d9:7d:91:36:13:eb:b7:9a:5e:62:b1:5a:54:d0:da:2b: e6:e5:f3:45:13:d6:30:69:22:73:68:6b:74:59:cc:cc:19:e3: cb:e6:f1:ad:21:e3:bf:00:01:bc:18:23:88:e8:f7:5d:bd:26: cf:40:8c:09:fe:4a:a8:9d:d3:6b:1f:24:b2:41:4e:44:c6:16: 47:39:53:7a:ae:7a:f6:ad:13:ec:63:e8:2c:6d:23:f1:30:8a: 77:38:a0:5b:e5:22:36:d1:8c:e4:4e:cb:e3:90:6f:52:87:9a: b9:ed:e9:cf:7e:b9:66:20:87:1c:26:99:e6:59:c1:8f:84:12: f4:ed:ce:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd7YFr3ywLMfNC2ERRrVH14hv644wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFGQkI2 NDRCMDhBOTAeFw0yNTA2MDQxNTI3MDVaFw0yNTA2MDcxOTE5MDVaMDMxMTAvBgNV BAMTKERGOTI4MDc5NENCOTYxQ0U5OEY0MjM0QjMxMDgzMkZFNzU2QTRBNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0vwosrPl1UoUFE9i9Biub4vwN 8/ACWpnuTcpZaI+e+OGY5AXefPyBSTmiwNu2noMZnKTMuvSiyNMz/getJC3UjCRQ 1wjjzTzAbZkWkHzeTS04SDwMsXzW5qAEjpotuxlCBfzTKOzBV7usR25YEGaRC/3n 2vFONZmI1IDdFiWJGGgrdFCNV6TzniY4pgMOIiX0oU7sUDIK7PwGi7XuRWaBBKKb u3p87pn2LqGiy3P87zwbFAWZwwr0yWr6TGtAhA1Ll7vY8Hh+HksFXUzvFgyucnDP BdecUWKMMg96oIFO9X+U9J4/UHFaf3KiOywCsQPxEXL6ISOUEhcWWWTBqp+rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU35KAeUy5Yc6Y9CNLMQgy/nVqSncwHwYDVR0j BBgwFoAULqXmYlHdWR5/H0hVr0uvu2RLCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 Y2IyOTI4ZS05YjM5LTRhOTAtOTdkMi0wNGNmNjVmZTk1NzgvMC8yRUE1RTY2MjUx REQ1OTFFN0YxRjQ4NTVBRjRCQUZCQjY0NEIwOEE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFGQkI2NDRC MDhBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmNiMjkyOGUtOWIzOS00YTkwLTk3 ZDItMDRjZjY1ZmU5NTc4LzAvMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFG QkI2NDRCMDhBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZxDjkOxVyfXUGIBqbCR/INpxFFCtLutY+y /vPdg4VdIMP6XvtIhfvLTCdCZAHBlodMhdZi1X4+jOzeSghhrWYIDqL6NcM7FvBH M/VLwtpB8beVU0v+ICk2f3KPSqh+qbVEZWPeQUBjV6poRIAQiCKOns35FxikJnyM mKOF2Mhl2X2RNhPrt5peYrFaVNDaK+bl80UT1jBpInNoa3RZzMwZ48vm8a0h478A AbwYI4jo9129Js9AjAn+Sqid02sfJLJBTkTGFkc5U3quevatE+xj6CxtI/Ewinc4 oFvlIjbRjOROy+OQb1KHmrnt6c9+uWYghxwmmeZZwY+EEvTtzhA= -----END CERTIFICATE-----Generated at Thu Jun 5 18:23:36 2025 by rpki-client