$ rpki-client -vvf repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft File: 2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft (raw, json) Hash identifier: xFJuisysYg7tJ+04STKvZluWUO6oTa2v9vixcQUe8Fo= Subject key identifier: 30:64:09:E7:89:CA:87:93:41:F6:F6:A2:38:A1:3D:8A:1E:00:5D:7E Authority key identifier: 2E:A5:E6:62:51:DD:59:1E:7F:1F:48:55:AF:4B:AF:BB:64:4B:08:A9 Certificate issuer: /CN=2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9 Certificate serial: 32A837199D4F2AEBD65BD9D1D8A922D3CDE64961 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft Manifest number: 0229 Signing time: Sun 07 Sep 2025 08:11:59 +0000 Manifest this update: Sun 07 Sep 2025 08:06:59 +0000 Manifest next update: Wed 10 Sep 2025 18:23:59 +0000 Files and hashes: 1: 2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl (hash: jFlx6a7iYgpZ7S0PbgOiLMfa3rReJbj27WKegYAtzYE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:a8:37:19:9d:4f:2a:eb:d6:5b:d9:d1:d8:a9:22:d3:cd:e6:49:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9 Validity Not Before: Sep 7 08:06:59 2025 GMT Not After : Sep 10 18:23:59 2025 GMT Subject: CN=306409E789CA879341F6F6A238A13D8A1E005D7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:08:3d:3c:22:eb:0b:f5:44:38:cd:99:4b:7f: e6:df:81:b4:87:2b:da:f2:a0:9b:b6:60:16:ae:9d: 2c:6e:69:33:51:05:b3:26:6b:17:47:0b:63:46:40: ea:7d:7e:e5:f8:90:5a:8d:a0:0d:d2:a7:3f:9c:b7: 18:87:89:ea:14:de:a1:8f:ac:dc:f2:7a:35:39:98: 25:70:34:c3:0a:6b:bd:2a:78:72:da:a4:62:d8:5c: c0:d1:63:ed:c5:5d:bb:9d:fb:eb:b8:76:e2:8d:3d: 07:30:ff:a7:5c:a3:66:c7:ca:36:2d:4b:8f:ae:36: 83:5d:61:66:9e:e3:20:1e:a9:4b:e5:9d:fc:a4:1c: d6:84:6f:08:85:51:87:a0:fa:d2:fe:68:a6:bd:bf: 76:34:d1:d3:32:f1:9e:3b:f8:7a:4d:50:13:9f:d5: ea:70:66:ae:c2:6f:3f:75:76:25:0b:e2:66:09:95: ea:3d:fe:9d:67:c1:55:33:6d:da:13:81:21:49:1c: 6b:4f:e8:bb:c0:2d:f3:5b:e0:bc:ba:6b:6c:75:be: ba:ef:51:7f:dd:d4:fa:23:11:5d:b8:67:b2:ce:40: 0e:4b:70:df:be:26:f8:40:02:84:73:7e:f5:1c:96: 52:2a:66:cb:72:23:b9:77:a2:69:42:d6:08:1a:8e: 8b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:64:09:E7:89:CA:87:93:41:F6:F6:A2:38:A1:3D:8A:1E:00:5D:7E X509v3 Authority Key Identifier: keyid:2E:A5:E6:62:51:DD:59:1E:7F:1F:48:55:AF:4B:AF:BB:64:4B:08:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:82:bc:ef:a9:78:94:54:14:72:76:05:2c:c1:82:01:93:00: 71:ea:ec:52:f0:c5:e7:b4:5c:7f:02:ca:91:75:33:7e:11:b6: 4c:83:39:3f:ab:24:93:53:41:b8:30:ab:98:24:4f:04:eb:cb: 15:a8:eb:41:96:93:7e:b6:ab:0a:92:c5:5b:b8:45:f0:e6:a4: e4:b2:75:3a:9b:c3:24:4f:85:10:8d:73:5c:26:b2:0c:e5:76: 13:2e:5a:02:31:26:61:d4:6e:45:12:4a:d3:1c:e9:8c:fd:2c: 85:60:13:60:0b:6a:6f:2d:e8:96:42:9d:76:23:e0:d5:0a:cc: 25:aa:ff:66:13:2a:2a:f2:f6:55:62:d1:ef:ff:ea:32:92:f5: 4e:8a:be:ae:d2:03:1d:29:66:97:17:82:9e:e1:31:81:6d:ee: b9:d2:88:ea:58:83:04:bc:f3:b7:de:be:af:03:24:fc:fa:8d: 8e:72:21:c5:f0:6c:1b:59:e7:bf:ed:cd:01:f1:e6:b2:b7:1a: 54:6d:79:f9:99:2a:87:2d:e2:a4:8a:e0:85:75:f7:8e:02:9d: 58:19:32:57:ad:34:51:fc:e7:1a:b4:e6:71:4a:9c:c8:68:14: 70:4e:15:53:79:36:39:7d:48:a2:97:16:05:56:af:51:b8:0e: 4a:a4:ca:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMqg3GZ1PKuvWW9nR2Kki083mSWEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFGQkI2 NDRCMDhBOTAeFw0yNTA5MDcwODA2NTlaFw0yNTA5MTAxODIzNTlaMDMxMTAvBgNV BAMTKDMwNjQwOUU3ODlDQTg3OTM0MUY2RjZBMjM4QTEzRDhBMUUwMDVEN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4CD08IusL9UQ4zZlLf+bfgbSH K9ryoJu2YBaunSxuaTNRBbMmaxdHC2NGQOp9fuX4kFqNoA3Spz+ctxiHieoU3qGP rNzyejU5mCVwNMMKa70qeHLapGLYXMDRY+3FXbud++u4duKNPQcw/6dco2bHyjYt S4+uNoNdYWae4yAeqUvlnfykHNaEbwiFUYeg+tL+aKa9v3Y00dMy8Z47+HpNUBOf 1epwZq7Cbz91diUL4mYJleo9/p1nwVUzbdoTgSFJHGtP6LvALfNb4Ly6a2x1vrrv UX/d1PojEV24Z7LOQA5LcN++JvhAAoRzfvUcllIqZstyI7l3omlC1ggajosDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMGQJ54nKh5NB9vaiOKE9ih4AXX4wHwYDVR0j BBgwFoAULqXmYlHdWR5/H0hVr0uvu2RLCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 Y2IyOTI4ZS05YjM5LTRhOTAtOTdkMi0wNGNmNjVmZTk1NzgvMC8yRUE1RTY2MjUx REQ1OTFFN0YxRjQ4NTVBRjRCQUZCQjY0NEIwOEE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFGQkI2NDRC MDhBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmNiMjkyOGUtOWIzOS00YTkwLTk3 ZDItMDRjZjY1ZmU5NTc4LzAvMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFG QkI2NDRCMDhBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFOCvO+peJRUFHJ2BSzBggGTAHHq7FLwxee0 XH8CypF1M34RtkyDOT+rJJNTQbgwq5gkTwTryxWo60GWk362qwqSxVu4RfDmpOSy dTqbwyRPhRCNc1wmsgzldhMuWgIxJmHUbkUSStMc6Yz9LIVgE2ALam8t6JZCnXYj 4NUKzCWq/2YTKiry9lVi0e//6jKS9U6Kvq7SAx0pZpcXgp7hMYFt7rnSiOpYgwS8 87fevq8DJPz6jY5yIcXwbBtZ57/tzQHx5rK3GlRtefmZKoct4qSK4IV1944CnVgZ MletNFH85xq05nFKnMhoFHBOFVN5Njl9SKKXFgVWr1G4DkqkykQ= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:52 2025 by rpki-client