$ rpki-client -vvf repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft File: 2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft (raw, json) Hash identifier: VomnCbJLcDJVgSSuwP0Gnk3fc4YWiuHT33QVthxH210= Subject key identifier: 0D:34:B0:42:71:3A:B0:11:2B:CB:31:47:A0:D5:14:69:5C:61:37:49 Authority key identifier: 2E:8B:AC:7E:81:91:1F:08:A1:89:CA:9F:DD:32:A6:43:C8:8E:05:B7 Certificate issuer: /CN=2E8BAC7E81911F08A189CA9FDD32A643C88E05B7 Certificate serial: 5F8D0D009BC7BD097CD5C1ECA2D154C8C1ED2B3F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft Manifest number: 0101 Signing time: Thu 05 Jun 2025 05:20:49 +0000 Manifest this update: Thu 05 Jun 2025 05:15:49 +0000 Manifest next update: Sun 08 Jun 2025 11:00:49 +0000 Files and hashes: 1: 2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl (hash: xAN0NJ0qr1XXfnjAhJgHEdOu/ZsKQkFr/rM3GFbUtEQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 11:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:8d:0d:00:9b:c7:bd:09:7c:d5:c1:ec:a2:d1:54:c8:c1:ed:2b:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E8BAC7E81911F08A189CA9FDD32A643C88E05B7 Validity Not Before: Jun 5 05:15:49 2025 GMT Not After : Jun 8 11:00:49 2025 GMT Subject: CN=0D34B042713AB0112BCB3147A0D514695C613749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c5:24:5a:ca:d3:44:d7:c7:08:7f:d7:eb:19: a4:fa:42:2f:00:cd:7c:c9:d3:79:44:db:59:a7:45: 4c:d0:65:53:6a:c2:5c:6d:f8:93:ef:8e:a3:77:39: 21:2f:80:10:b4:44:fa:a0:60:f2:e0:0e:3e:d3:39: ca:9c:fe:c3:c5:68:40:64:7b:91:ee:32:30:b9:06: 3a:ef:1f:fa:45:42:e0:d3:d0:ac:cb:c3:20:a6:c1: d4:ab:49:18:a8:0f:73:34:e6:5f:5c:a5:ff:14:6f: c4:74:f2:8a:64:59:3e:16:52:34:d1:2e:01:e2:cb: 4d:1b:51:af:27:47:02:ce:52:95:4e:05:21:a5:12: 3d:bd:c1:44:3a:c7:07:57:05:c3:60:05:e4:dd:13: e0:75:c9:a1:02:50:4e:f7:b1:4c:46:db:99:b4:c5: 80:3e:fb:0a:4f:8f:08:e5:07:2e:5a:ac:05:d8:76: da:0f:19:12:3c:63:6f:28:07:43:29:bb:e2:98:4d: 2e:58:bd:c8:91:2a:a1:ea:6b:45:90:76:b1:66:59: cf:af:21:ee:30:85:f1:19:51:17:91:d1:17:c3:9a: ac:2e:47:38:e9:64:fb:fa:26:17:a1:26:f7:86:71: 91:93:db:af:77:c2:92:20:55:88:a3:d7:cf:a1:9f: 81:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:34:B0:42:71:3A:B0:11:2B:CB:31:47:A0:D5:14:69:5C:61:37:49 X509v3 Authority Key Identifier: keyid:2E:8B:AC:7E:81:91:1F:08:A1:89:CA:9F:DD:32:A6:43:C8:8E:05:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:68:8b:80:cc:7a:15:f3:e6:f5:ee:70:4a:ba:84:ac:f9:c1: c6:a2:ba:6b:f2:34:6d:0f:b6:17:85:b5:d9:3f:79:af:80:ef: 31:4c:d2:72:ae:35:03:18:7c:68:6a:9e:56:fe:2a:45:66:f4: 82:a9:8a:6f:51:cd:b6:94:54:15:71:fe:24:cb:b9:66:55:e9: d1:6b:14:d0:93:30:4b:04:3e:5b:b7:bc:27:59:d3:50:15:d9: 99:fb:11:43:e9:39:8d:52:01:fe:b5:5d:c7:34:44:06:10:e8: f8:5b:47:e8:0f:9d:8c:87:e6:ac:3c:6c:eb:2e:c6:a7:6b:0a: 68:de:18:f1:7a:b4:9e:db:8a:29:96:8a:aa:54:85:bf:c9:31: 24:d5:f3:f7:06:21:0b:d3:39:fc:d3:1e:83:d6:ec:2d:27:3c: 60:26:ce:5f:91:81:0e:87:f6:af:09:b7:22:ac:d2:21:bb:8d: 29:a8:1a:b5:c6:5f:04:e5:c6:5f:64:77:ae:29:f0:90:04:28: 8f:a8:49:05:58:ba:4b:00:e6:0b:37:d0:e7:95:8e:33:c7:e4: 51:8f:f1:f3:34:8f:72:03:1b:d0:da:a5:e0:bc:57:99:f0:d9: fc:15:41:aa:ce:85:23:fb:3b:ea:f6:d3:ce:26:a5:da:17:6f: 6b:91:8d:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX40NAJvHvQl81cHsotFUyMHtKz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2NDND ODhFMDVCNzAeFw0yNTA2MDUwNTE1NDlaFw0yNTA2MDgxMTAwNDlaMDMxMTAvBgNV BAMTKDBEMzRCMDQyNzEzQUIwMTEyQkNCMzE0N0EwRDUxNDY5NUM2MTM3NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWxSRaytNE18cIf9frGaT6Qi8A zXzJ03lE21mnRUzQZVNqwlxt+JPvjqN3OSEvgBC0RPqgYPLgDj7TOcqc/sPFaEBk e5HuMjC5BjrvH/pFQuDT0KzLwyCmwdSrSRioD3M05l9cpf8Ub8R08opkWT4WUjTR LgHiy00bUa8nRwLOUpVOBSGlEj29wUQ6xwdXBcNgBeTdE+B1yaECUE73sUxG25m0 xYA++wpPjwjlBy5arAXYdtoPGRI8Y28oB0Mpu+KYTS5YvciRKqHqa0WQdrFmWc+v Ie4whfEZUReR0RfDmqwuRzjpZPv6JhehJveGcZGT2693wpIgVYij18+hn4H/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDTSwQnE6sBEryzFHoNUUaVxhN0kwHwYDVR0j BBgwFoAULousfoGRHwihicqf3TKmQ8iOBbcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mjg2MjZlMC0yOWZlLTRlODYtODRkNi02ODQ3OGM1Y2Q5ZWQvMC8yRThCQUM3RTgx OTExRjA4QTE4OUNBOUZERDMyQTY0M0M4OEUwNUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2NDNDODhF MDVCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI4NjI2ZTAtMjlmZS00ZTg2LTg0 ZDYtNjg0NzhjNWNkOWVkLzAvMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2 NDNDODhFMDVCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEFoi4DMehXz5vXucEq6hKz5wcaiumvyNG0P theFtdk/ea+A7zFM0nKuNQMYfGhqnlb+KkVm9IKpim9RzbaUVBVx/iTLuWZV6dFr FNCTMEsEPlu3vCdZ01AV2Zn7EUPpOY1SAf61Xcc0RAYQ6PhbR+gPnYyH5qw8bOsu xqdrCmjeGPF6tJ7biimWiqpUhb/JMSTV8/cGIQvTOfzTHoPW7C0nPGAmzl+RgQ6H 9q8JtyKs0iG7jSmoGrXGXwTlxl9kd64p8JAEKI+oSQVYuksA5gs30OeVjjPH5FGP 8fM0j3IDG9DapeC8V5nw2fwVQarOhSP7O+r2084mpdoXb2uRje4= -----END CERTIFICATE-----Generated at Sat Jun 7 04:26:07 2025 by rpki-client