$ rpki-client -vvf repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft File: 2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft (raw, json) Hash identifier: FhTxKy+DqmJAlq/V1RwpXVTpgyHlbGJoinhoRevJRhQ= Subject key identifier: B6:7D:E4:24:84:08:60:6A:AB:5A:2C:7A:4A:B9:D9:2A:2B:7A:32:9A Authority key identifier: 2E:8B:AC:7E:81:91:1F:08:A1:89:CA:9F:DD:32:A6:43:C8:8E:05:B7 Certificate issuer: /CN=2E8BAC7E81911F08A189CA9FDD32A643C88E05B7 Certificate serial: 36E110A3968C668E2AEED1ECAD01207CF0ACD9AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft Manifest number: 012A Signing time: Sat 06 Sep 2025 07:50:48 +0000 Manifest this update: Sat 06 Sep 2025 07:45:48 +0000 Manifest next update: Tue 09 Sep 2025 16:32:48 +0000 Files and hashes: 1: 2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl (hash: n652lK8mUnmyTp8JZXr5Tz2t4Fhi82i/sRdWpzNkJgY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 16:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:e1:10:a3:96:8c:66:8e:2a:ee:d1:ec:ad:01:20:7c:f0:ac:d9:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E8BAC7E81911F08A189CA9FDD32A643C88E05B7 Validity Not Before: Sep 6 07:45:48 2025 GMT Not After : Sep 9 16:32:48 2025 GMT Subject: CN=B67DE4248408606AAB5A2C7A4AB9D92A2B7A329A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:06:95:7d:fc:ae:d5:ae:5c:ac:27:01:16:d3: 8e:0b:52:36:92:ff:00:c6:b5:49:78:40:08:99:e7: 0f:7a:31:58:0d:ff:8a:3a:c8:03:c6:61:db:07:51: 4b:42:78:8e:e1:f3:ec:1d:84:69:4f:e8:97:db:60: 90:0c:5b:ad:a4:a1:4f:60:55:e5:52:41:d9:66:c0: a4:25:83:8f:d4:de:ca:b5:7a:c6:8c:57:15:e4:49: 3f:23:c8:1b:27:79:04:df:6f:93:f7:98:e7:9d:60: 83:0c:e5:29:49:db:0b:a3:8d:9e:87:89:f4:c1:29: a1:8d:a7:a0:ba:79:22:1a:79:13:ae:02:59:e4:96: 8d:97:49:6d:99:5d:f7:01:20:87:77:bd:3b:e3:dc: 18:90:78:10:76:c7:73:4c:f8:3a:1a:fc:ff:6b:64: 64:ee:2c:26:46:cb:88:a8:cb:93:23:2c:4f:1e:70: 82:06:b1:ae:31:93:7d:c5:e9:83:f8:6b:b2:3a:8d: 6f:5b:3f:d3:55:06:c0:c7:56:23:0f:58:f6:49:b6: a1:3c:0a:64:c5:80:20:7f:7b:9c:11:2b:4f:4c:9e: 47:6b:9d:09:00:eb:90:7f:18:47:4c:af:f7:21:ef: e7:8d:86:34:27:76:51:28:c6:69:07:94:a9:59:87: 6d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:7D:E4:24:84:08:60:6A:AB:5A:2C:7A:4A:B9:D9:2A:2B:7A:32:9A X509v3 Authority Key Identifier: keyid:2E:8B:AC:7E:81:91:1F:08:A1:89:CA:9F:DD:32:A6:43:C8:8E:05:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:50:cb:02:d4:18:b8:f3:53:30:68:bc:03:98:ce:02:bd:aa: 3f:a9:96:f8:c1:28:91:7d:39:9e:e5:b6:11:53:b1:3a:2d:39: c3:9b:1a:39:1c:a3:b0:77:aa:b5:ed:60:f2:4a:f5:d5:ac:99: 14:49:c0:e0:74:ec:b5:cc:3e:3b:21:b4:6a:d3:e7:83:d9:9e: b1:e0:20:4d:34:b5:f7:d7:05:d9:d7:e7:16:82:5f:1d:e7:12: e8:ed:c4:ce:f6:01:b0:58:37:34:42:43:25:70:28:44:be:b5: 7f:da:a8:c1:fe:9a:56:90:37:59:14:c6:91:65:bc:35:af:64: 40:30:fa:04:a4:ab:c2:d3:66:9a:52:d5:9e:a0:f2:57:e4:27: 71:0f:11:ce:0a:df:2e:e9:55:c0:0f:55:c1:20:c2:ab:6f:2e: 8a:99:01:18:0a:f6:b0:91:a4:e3:8d:09:4a:3e:67:62:37:9c: 8c:04:ea:01:77:d0:67:1b:9b:ab:fd:b1:26:9c:ea:f6:09:12: ba:2e:c0:d3:03:00:ec:d1:fa:fc:20:ab:31:9b:ce:67:da:09: a8:03:be:21:ff:24:ee:a3:8f:05:f3:93:4b:47:04:33:1b:e1: 0f:b7:c7:ae:33:76:30:35:a5:80:a0:71:30:82:ea:62:81:6f: 0d:87:e5:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNuEQo5aMZo4q7tHsrQEgfPCs2aowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2NDND ODhFMDVCNzAeFw0yNTA5MDYwNzQ1NDhaFw0yNTA5MDkxNjMyNDhaMDMxMTAvBgNV BAMTKEI2N0RFNDI0ODQwODYwNkFBQjVBMkM3QTRBQjlEOTJBMkI3QTMyOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtBpV9/K7VrlysJwEW044LUjaS /wDGtUl4QAiZ5w96MVgN/4o6yAPGYdsHUUtCeI7h8+wdhGlP6JfbYJAMW62koU9g VeVSQdlmwKQlg4/U3sq1esaMVxXkST8jyBsneQTfb5P3mOedYIMM5SlJ2wujjZ6H ifTBKaGNp6C6eSIaeROuAlnklo2XSW2ZXfcBIId3vTvj3BiQeBB2x3NM+Doa/P9r ZGTuLCZGy4ioy5MjLE8ecIIGsa4xk33F6YP4a7I6jW9bP9NVBsDHViMPWPZJtqE8 CmTFgCB/e5wRK09MnkdrnQkA65B/GEdMr/ch7+eNhjQndlEoxmkHlKlZh20pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtn3kJIQIYGqrWix6SrnZKit6MpowHwYDVR0j BBgwFoAULousfoGRHwihicqf3TKmQ8iOBbcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mjg2MjZlMC0yOWZlLTRlODYtODRkNi02ODQ3OGM1Y2Q5ZWQvMC8yRThCQUM3RTgx OTExRjA4QTE4OUNBOUZERDMyQTY0M0M4OEUwNUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2NDNDODhF MDVCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI4NjI2ZTAtMjlmZS00ZTg2LTg0 ZDYtNjg0NzhjNWNkOWVkLzAvMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2 NDNDODhFMDVCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFQywLUGLjzUzBovAOYzgK9qj+plvjBKJF9 OZ7lthFTsTotOcObGjkco7B3qrXtYPJK9dWsmRRJwOB07LXMPjshtGrT54PZnrHg IE00tffXBdnX5xaCXx3nEujtxM72AbBYNzRCQyVwKES+tX/aqMH+mlaQN1kUxpFl vDWvZEAw+gSkq8LTZppS1Z6g8lfkJ3EPEc4K3y7pVcAPVcEgwqtvLoqZARgK9rCR pOONCUo+Z2I3nIwE6gF30Gcbm6v9sSac6vYJErouwNMDAOzR+vwgqzGbzmfaCagD viH/JO6jjwXzk0tHBDMb4Q+3x64zdjA1pYCgcTCC6mKBbw2H5YA= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:42 2025 by rpki-client