$ rpki-client -vvf repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft File: 2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft (raw, json) Hash identifier: kxCyvsytlCXRsprEfYfx+S5ePDOT13W6HRGiVlqyb1Q= Subject key identifier: 0D:22:41:9A:AB:4F:3D:12:5D:DF:32:B7:4E:3F:28:2E:32:6C:96:22 Authority key identifier: 2A:86:5C:A2:F4:F7:0C:CC:B0:3F:98:C2:B6:E1:7E:89:3A:B8:7D:0C Certificate issuer: /CN=2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C Certificate serial: 4AF144465A95F3B27EC1EC747E25285F12E565D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft Manifest number: 01D9 Signing time: Tue 03 Jun 2025 23:31:54 +0000 Manifest this update: Tue 03 Jun 2025 23:26:54 +0000 Manifest next update: Sat 07 Jun 2025 07:36:54 +0000 Files and hashes: 1: 2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl (hash: ero548BlVQ3L/qOAjg6Do2oPAFCkqaNWgIh88qJ3+Z4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:f1:44:46:5a:95:f3:b2:7e:c1:ec:74:7e:25:28:5f:12:e5:65:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C Validity Not Before: Jun 3 23:26:54 2025 GMT Not After : Jun 7 07:36:54 2025 GMT Subject: CN=0D22419AAB4F3D125DDF32B74E3F282E326C9622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:20:ed:46:47:8e:ab:c8:e9:64:b7:9a:42:8b: 33:45:1c:25:43:97:6f:c7:6b:e2:01:4d:0d:1a:bd: e8:75:5f:58:c4:d7:50:1e:39:4e:09:4d:cf:6e:3e: 3c:1c:15:45:e9:fe:09:d4:3f:a7:4c:b3:25:02:04: 82:ec:c6:49:f4:92:68:82:37:3b:0b:c6:0a:49:2e: b8:5d:a0:26:5b:03:9e:b2:84:7e:8c:cf:3f:c2:3d: f5:b0:3c:d8:6c:d8:a2:49:86:bc:2c:0a:ff:45:ba: 2f:8b:e4:d3:ea:f5:5e:e1:c8:1f:db:8a:10:fa:f6: 58:bf:3a:ee:89:dd:d1:c8:db:b3:3d:4d:d5:58:4b: da:45:cd:46:0e:2f:bc:ba:9f:9e:41:b1:e0:7b:a7: d7:8d:47:05:80:81:be:5f:6d:fe:1d:32:84:24:29: 5c:44:29:88:12:ce:7e:2e:7e:b1:45:e5:10:c3:af: 46:ce:d8:85:98:85:dc:4d:bf:fc:6b:79:c9:7a:2a: 39:97:7c:be:ea:39:2f:7d:5b:a2:db:0a:41:33:ec: 52:d6:0a:c9:d4:a0:c9:04:a4:6d:50:a6:5e:10:56: 52:b1:d7:81:43:c3:27:20:51:97:b0:04:8d:78:9b: 96:b9:ef:bb:14:11:ab:a7:18:88:19:bf:b2:1d:5f: 74:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:22:41:9A:AB:4F:3D:12:5D:DF:32:B7:4E:3F:28:2E:32:6C:96:22 X509v3 Authority Key Identifier: keyid:2A:86:5C:A2:F4:F7:0C:CC:B0:3F:98:C2:B6:E1:7E:89:3A:B8:7D:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:66:d6:36:73:72:34:8c:eb:b0:8c:0b:c9:97:6a:60:f5:09: c0:aa:56:06:56:bc:9a:49:5e:b8:59:45:56:9b:b6:68:29:60: 31:7f:f7:ec:ba:b1:d8:0d:cb:4a:57:d0:2e:cb:c8:1d:75:5a: 95:18:b3:16:42:2d:6a:f9:0b:2f:3e:d3:48:cf:17:7a:bb:f6: 88:72:28:a1:42:bf:f6:8b:b1:ec:7b:5f:02:6f:3f:7e:f3:e8: 3c:bc:c5:d2:4d:d2:7e:7f:29:6a:7b:e3:8f:4a:9c:b8:d8:2d: bf:ca:49:45:89:02:bd:dc:b1:49:cc:f1:bf:ed:8d:3e:75:e9: 34:89:94:78:d4:8e:3f:34:dc:03:13:e7:d1:06:1a:a5:b8:e6: 5a:9f:a0:b2:f7:dd:22:2f:ea:35:64:2f:f8:89:2f:4d:17:d7: eb:64:75:ab:2a:24:8a:75:f9:ab:4f:50:63:2b:99:4d:63:14: 4a:7a:0f:3f:7b:47:e5:b3:9b:14:e7:c6:4e:60:1b:e8:0b:40: 8c:e4:a2:7f:df:ed:49:01:cf:d3:3e:2d:4d:a2:b3:48:b8:dd: 85:40:40:d3:b2:f3:00:99:23:2c:b9:8d:61:bc:49:91:ba:fc: 0a:a4:fc:74:77:56:59:c7:1e:82:8e:ce:d8:10:46:c0:50:5d: b4:85:3c:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSvFERlqV87J+wex0fiUoXxLlZdcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdFODkz QUI4N0QwQzAeFw0yNTA2MDMyMzI2NTRaFw0yNTA2MDcwNzM2NTRaMDMxMTAvBgNV BAMTKDBEMjI0MTlBQUI0RjNEMTI1RERGMzJCNzRFM0YyODJFMzI2Qzk2MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmIO1GR46ryOlkt5pCizNFHCVD l2/Ha+IBTQ0aveh1X1jE11AeOU4JTc9uPjwcFUXp/gnUP6dMsyUCBILsxkn0kmiC NzsLxgpJLrhdoCZbA56yhH6Mzz/CPfWwPNhs2KJJhrwsCv9Fui+L5NPq9V7hyB/b ihD69li/Ou6J3dHI27M9TdVYS9pFzUYOL7y6n55BseB7p9eNRwWAgb5fbf4dMoQk KVxEKYgSzn4ufrFF5RDDr0bO2IWYhdxNv/xrecl6KjmXfL7qOS99W6LbCkEz7FLW CsnUoMkEpG1Qpl4QVlKx14FDwycgUZewBI14m5a577sUEaunGIgZv7IdX3TRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDSJBmqtPPRJd3zK3Tj8oLjJsliIwHwYDVR0j BBgwFoAUKoZcovT3DMywP5jCtuF+iTq4fQwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDJiNzhhZC1kZjIzLTQzZTItYTk0ZC0zYjQ1NGNiYzdmYzUvMC8yQTg2NUNBMkY0 RjcwQ0NDQjAzRjk4QzJCNkUxN0U4OTNBQjg3RDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdFODkzQUI4 N0QwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAyYjc4YWQtZGYyMy00M2UyLWE5 NGQtM2I0NTRjYmM3ZmM1LzAvMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdF ODkzQUI4N0QwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJtm1jZzcjSM67CMC8mXamD1CcCqVgZWvJpJ XrhZRVabtmgpYDF/9+y6sdgNy0pX0C7LyB11WpUYsxZCLWr5Cy8+00jPF3q79ohy KKFCv/aLsex7XwJvP37z6Dy8xdJN0n5/KWp7449KnLjYLb/KSUWJAr3csUnM8b/t jT516TSJlHjUjj803AMT59EGGqW45lqfoLL33SIv6jVkL/iJL00X1+tkdasqJIp1 +atPUGMrmU1jFEp6Dz97R+WzmxTnxk5gG+gLQIzkon/f7UkBz9M+LU2is0i43YVA QNOy8wCZIyy5jWG8SZG6/Aqk/HR3VlnHHoKOztgQRsBQXbSFPAY= -----END CERTIFICATE-----Generated at Thu Jun 5 18:10:58 2025 by rpki-client