$ rpki-client -vvf repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft File: 2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft (raw, json) Hash identifier: vtfCjh9xq1xKkJDdbF/LAJZafB2butWYyDi6UvyNFmE= Subject key identifier: 0A:05:2D:26:AE:4B:3C:A5:83:6F:21:09:26:71:E1:BB:6B:E5:8B:E0 Authority key identifier: 2E:8B:AC:7E:81:91:1F:08:A1:89:CA:9F:DD:32:A6:43:C8:8E:05:B7 Certificate issuer: /CN=2E8BAC7E81911F08A189CA9FDD32A643C88E05B7 Certificate serial: 33F48B1F3E0D20F93286C1AB656AA644ADD2FCB1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft Manifest number: EC Signing time: Sat 19 Apr 2025 01:40:48 +0000 Manifest this update: Sat 19 Apr 2025 01:35:48 +0000 Manifest next update: Tue 22 Apr 2025 01:46:48 +0000 Files and hashes: 1: 2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl (hash: Crw+TVqDw51TgXE4edd7szrzYpq8t53Lwx57De4eIAs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 01:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:f4:8b:1f:3e:0d:20:f9:32:86:c1:ab:65:6a:a6:44:ad:d2:fc:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E8BAC7E81911F08A189CA9FDD32A643C88E05B7 Validity Not Before: Apr 19 01:35:48 2025 GMT Not After : Apr 22 01:46:48 2025 GMT Subject: CN=0A052D26AE4B3CA5836F21092671E1BB6BE58BE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:df:1d:32:ad:2b:2e:f0:76:5c:80:0d:b4:06: c2:5d:a5:17:54:36:80:61:70:85:47:f6:e0:21:21: 37:d7:bd:d4:fc:b1:b4:d8:e5:e6:4a:2b:ce:7c:57: 53:92:be:ed:58:d6:cb:bc:e1:2c:f2:62:8a:a6:8b: 2a:8e:c1:8b:05:1a:42:cd:47:9c:7d:d3:e7:57:8c: cd:81:5a:53:ca:f1:03:f5:3d:7c:46:4b:36:ab:b8: f7:b5:fd:e7:5e:80:69:fa:20:55:5f:e6:3d:af:68: dd:0a:91:9e:24:3f:44:aa:04:47:d8:9c:40:e7:4a: a7:6e:1e:22:0a:67:6c:22:7a:6d:d8:1b:59:2b:e2: ac:46:12:ef:81:a5:93:50:68:ae:18:02:1e:c6:fd: af:af:5d:ab:03:c4:ba:5e:80:8a:24:e4:85:13:e9: 22:77:27:2e:f8:de:8a:7c:3b:64:61:92:df:a5:0e: 1e:19:f6:3d:e2:37:5a:d5:44:19:8c:d1:5e:80:61: e5:9b:83:f8:6d:77:cb:01:19:76:3b:d7:2c:10:59: 70:63:93:39:ce:36:94:db:fb:94:82:aa:41:3c:4c: ef:5b:4f:11:1c:d9:a8:dd:1a:e2:14:64:43:8d:29: b1:85:8c:6f:72:d0:52:3c:99:4a:04:4c:69:72:13: 12:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:05:2D:26:AE:4B:3C:A5:83:6F:21:09:26:71:E1:BB:6B:E5:8B:E0 X509v3 Authority Key Identifier: keyid:2E:8B:AC:7E:81:91:1F:08:A1:89:CA:9F:DD:32:A6:43:C8:8E:05:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:2f:30:b4:25:a7:c2:61:c3:3f:3e:48:26:45:93:08:40:15: 89:67:db:c5:cd:83:4a:f4:a6:c6:66:e4:17:66:9d:df:aa:46: 7a:0c:15:5f:ff:f5:b3:2c:55:35:a3:84:7c:30:b0:8c:a6:fb: 62:f4:ff:4e:99:f5:4e:bd:83:dd:03:28:96:f9:d0:11:17:9c: e8:6b:66:1e:05:1d:b7:ae:2f:95:a5:e3:ca:11:c9:04:2e:9d: cf:ba:53:c5:a5:f3:d5:b1:38:4b:4a:c7:ef:6c:da:3b:c8:1c: 48:72:d8:0e:92:e6:23:f6:da:e1:a8:fe:41:5e:26:f4:9d:5a: 73:79:e9:85:04:51:89:3e:a4:55:68:aa:de:10:01:34:31:9c: 32:9e:88:36:3d:39:c2:ca:a1:a3:8c:f1:54:90:9d:d0:36:d0: c3:f3:1a:4b:82:9a:50:b1:4c:84:47:5b:09:2a:de:07:22:a1: e9:70:26:9d:36:0c:6c:23:b2:68:5d:93:9c:6d:6c:77:b1:ec: b5:01:e6:13:40:4d:e9:3d:1d:ce:2b:10:5c:d0:62:9a:ea:3d: 7e:2f:0c:6d:d1:91:de:5a:e7:ec:7c:bf:41:99:fe:a2:6f:77: d9:41:b0:20:a1:82:4e:2f:af:59:fb:07:07:86:c3:49:98:69: 63:f5:45:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM/SLHz4NIPkyhsGrZWqmRK3S/LEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2NDND ODhFMDVCNzAeFw0yNTA0MTkwMTM1NDhaFw0yNTA0MjIwMTQ2NDhaMDMxMTAvBgNV BAMTKDBBMDUyRDI2QUU0QjNDQTU4MzZGMjEwOTI2NzFFMUJCNkJFNThCRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD+3x0yrSsu8HZcgA20BsJdpRdU NoBhcIVH9uAhITfXvdT8sbTY5eZKK858V1OSvu1Y1su84SzyYoqmiyqOwYsFGkLN R5x90+dXjM2BWlPK8QP1PXxGSzaruPe1/edegGn6IFVf5j2vaN0KkZ4kP0SqBEfY nEDnSqduHiIKZ2wiem3YG1kr4qxGEu+BpZNQaK4YAh7G/a+vXasDxLpegIok5IUT 6SJ3Jy743op8O2Rhkt+lDh4Z9j3iN1rVRBmM0V6AYeWbg/htd8sBGXY71ywQWXBj kznONpTb+5SCqkE8TO9bTxEc2ajdGuIUZEONKbGFjG9y0FI8mUoETGlyExLDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCgUtJq5LPKWDbyEJJnHhu2vli+AwHwYDVR0j BBgwFoAULousfoGRHwihicqf3TKmQ8iOBbcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mjg2MjZlMC0yOWZlLTRlODYtODRkNi02ODQ3OGM1Y2Q5ZWQvMC8yRThCQUM3RTgx OTExRjA4QTE4OUNBOUZERDMyQTY0M0M4OEUwNUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2NDNDODhF MDVCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI4NjI2ZTAtMjlmZS00ZTg2LTg0 ZDYtNjg0NzhjNWNkOWVkLzAvMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2 NDNDODhFMDVCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE8vMLQlp8Jhwz8+SCZFkwhAFYln28XNg0r0 psZm5Bdmnd+qRnoMFV//9bMsVTWjhHwwsIym+2L0/06Z9U69g90DKJb50BEXnOhr Zh4FHbeuL5Wl48oRyQQunc+6U8Wl89WxOEtKx+9s2jvIHEhy2A6S5iP22uGo/kFe JvSdWnN56YUEUYk+pFVoqt4QATQxnDKeiDY9OcLKoaOM8VSQndA20MPzGkuCmlCx TIRHWwkq3gcioelwJp02DGwjsmhdk5xtbHex7LUB5hNATek9Hc4rEFzQYprqPX4v DG3Rkd5a5+x8v0GZ/qJvd9lBsCChgk4vr1n7BweGw0mYaWP1RZw= -----END CERTIFICATE-----Generated at Sun Apr 20 18:55:02 2025 by rpki-client