$ rpki-client -vvf repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft File: 2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft (raw, json) Hash identifier: vPIb4xLIZAVgHqIV2YQa6ulSd9PJ0j6HXFtH3EL/1+I= Subject key identifier: C9:BC:BE:E0:05:ED:99:3E:81:B1:1B:9A:CB:66:CB:F2:C1:70:08:57 Authority key identifier: 2A:86:5C:A2:F4:F7:0C:CC:B0:3F:98:C2:B6:E1:7E:89:3A:B8:7D:0C Certificate issuer: /CN=2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C Certificate serial: 4A44CE0EFDE7620BEAADC4FC53C4AB2A1B299C70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft Manifest number: 0204 Signing time: Sun 07 Sep 2025 12:21:51 +0000 Manifest this update: Sun 07 Sep 2025 12:16:51 +0000 Manifest next update: Wed 10 Sep 2025 14:40:51 +0000 Files and hashes: 1: 2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl (hash: 5EBLIi2dR8pU8rli7mLQwikPGESQ5YehvSe1o0DP+YA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:44:ce:0e:fd:e7:62:0b:ea:ad:c4:fc:53:c4:ab:2a:1b:29:9c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C Validity Not Before: Sep 7 12:16:51 2025 GMT Not After : Sep 10 14:40:51 2025 GMT Subject: CN=C9BCBEE005ED993E81B11B9ACB66CBF2C1700857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a4:ef:75:2b:22:1b:e7:41:e9:1f:8c:57:d1: 0c:bd:0a:c7:1b:2b:34:d0:02:09:ae:8b:38:aa:5a: 7b:18:97:49:50:a1:97:e5:0e:03:c1:2e:1e:7d:8e: 53:a8:c2:5e:0e:e4:50:a8:94:40:b7:d1:d1:28:eb: 61:46:6d:4f:29:0d:fd:e8:fe:02:7c:8f:b6:a4:00: e1:43:5f:76:be:20:24:88:60:1f:8e:09:0e:cb:f5: 0d:d5:11:2e:56:d8:4c:db:8c:a1:ee:20:48:82:62: 86:a7:22:ec:1e:76:5e:2b:29:7c:41:d2:0f:07:11: db:3d:07:74:37:4c:de:14:6b:92:ac:6d:ff:d0:ca: ff:8c:12:76:89:42:50:cd:cb:fc:93:e3:00:aa:8a: f9:34:b5:f6:4b:7c:86:a0:39:88:9a:30:1d:a0:aa: 49:6f:c8:12:54:d8:65:3e:66:4c:1d:ff:6e:7f:55: d4:c6:29:78:d6:8e:48:9e:2d:fe:ec:63:20:e4:57: 7c:d1:c5:f8:2d:77:63:13:0a:db:96:5b:75:fb:cd: 66:83:af:46:a8:48:90:ca:98:03:15:ba:3d:54:63: 64:3e:ee:ae:e7:bf:71:43:75:72:e2:1f:37:2e:18: 50:8b:f6:86:ef:13:9e:71:3f:28:15:c9:1a:f4:52: 88:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:BC:BE:E0:05:ED:99:3E:81:B1:1B:9A:CB:66:CB:F2:C1:70:08:57 X509v3 Authority Key Identifier: keyid:2A:86:5C:A2:F4:F7:0C:CC:B0:3F:98:C2:B6:E1:7E:89:3A:B8:7D:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:29:9c:6b:6c:6b:b9:72:fa:0e:83:29:52:cc:dc:31:b8:23: 85:81:4e:f8:59:62:69:60:a6:7f:7c:69:87:06:bc:87:c3:da: 3c:21:d1:41:cf:80:e2:52:f8:b7:a2:00:fa:b9:78:03:f5:79: 1f:21:5b:37:6c:a9:d3:1d:cc:3e:c3:9b:bd:d6:5e:a9:f4:7b: 8d:78:4a:a6:57:8f:74:f4:01:84:7c:83:f6:c8:21:c6:67:b1: 8f:f8:10:39:50:b1:9d:23:11:26:6b:5a:32:fc:4b:6f:10:d8: e3:ba:e6:13:79:24:42:99:42:38:d4:36:03:c3:6d:d0:31:78: 09:d0:14:f6:96:e8:40:7f:17:28:5a:13:d8:cf:80:b2:44:26: f3:57:9a:64:ac:ad:e9:d6:de:13:d9:25:22:ee:df:76:02:41: 1e:d5:4c:5c:2f:ea:c7:0b:21:11:c8:3f:6d:f6:4a:ee:5f:c5: c5:ec:84:d8:ff:b1:f5:17:cf:2e:7e:90:a4:a4:c8:55:b5:e9: 99:94:ed:4f:9b:ac:8c:43:21:8d:8b:6f:75:e6:28:62:9c:1e: fb:de:7e:1c:01:14:7e:5f:25:fa:66:bf:31:12:01:0b:33:4a: b5:f3:15:44:81:68:ed:a9:1e:6a:26:f3:af:a4:27:38:a4:ec: ce:f8:11:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSkTODv3nYgvqrcT8U8SrKhspnHAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdFODkz QUI4N0QwQzAeFw0yNTA5MDcxMjE2NTFaFw0yNTA5MTAxNDQwNTFaMDMxMTAvBgNV BAMTKEM5QkNCRUUwMDVFRDk5M0U4MUIxMUI5QUNCNjZDQkYyQzE3MDA4NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDipO91KyIb50HpH4xX0Qy9Cscb KzTQAgmuiziqWnsYl0lQoZflDgPBLh59jlOowl4O5FColEC30dEo62FGbU8pDf3o /gJ8j7akAOFDX3a+ICSIYB+OCQ7L9Q3VES5W2EzbjKHuIEiCYoanIuwedl4rKXxB 0g8HEds9B3Q3TN4Ua5Ksbf/Qyv+MEnaJQlDNy/yT4wCqivk0tfZLfIagOYiaMB2g qklvyBJU2GU+Zkwd/25/VdTGKXjWjkieLf7sYyDkV3zRxfgtd2MTCtuWW3X7zWaD r0aoSJDKmAMVuj1UY2Q+7q7nv3FDdXLiHzcuGFCL9obvE55xPygVyRr0UoiBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyby+4AXtmT6BsRuay2bL8sFwCFcwHwYDVR0j BBgwFoAUKoZcovT3DMywP5jCtuF+iTq4fQwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDJiNzhhZC1kZjIzLTQzZTItYTk0ZC0zYjQ1NGNiYzdmYzUvMC8yQTg2NUNBMkY0 RjcwQ0NDQjAzRjk4QzJCNkUxN0U4OTNBQjg3RDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdFODkzQUI4 N0QwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAyYjc4YWQtZGYyMy00M2UyLWE5 NGQtM2I0NTRjYmM3ZmM1LzAvMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdF ODkzQUI4N0QwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACcpnGtsa7ly+g6DKVLM3DG4I4WBTvhZYmlg pn98aYcGvIfD2jwh0UHPgOJS+LeiAPq5eAP1eR8hWzdsqdMdzD7Dm73WXqn0e414 SqZXj3T0AYR8g/bIIcZnsY/4EDlQsZ0jESZrWjL8S28Q2OO65hN5JEKZQjjUNgPD bdAxeAnQFPaW6EB/FyhaE9jPgLJEJvNXmmSsrenW3hPZJSLu33YCQR7VTFwv6scL IRHIP232Su5fxcXshNj/sfUXzy5+kKSkyFW16ZmU7U+brIxDIY2Lb3XmKGKcHvve fhwBFH5fJfpmvzESAQszSrXzFUSBaO2pHmom86+kJzik7M74ESQ= -----END CERTIFICATE-----Generated at Sun Sep 7 15:35:07 2025 by rpki-client