$ rpki-client -vvf repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft File: 2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft (raw, json) Hash identifier: keyZN+uRUqKRWft7OLW7zTYrxnmoSsepzriPcyuAXyk= Subject key identifier: D3:CD:A5:B7:12:B2:0F:FC:BB:79:D3:08:01:F0:EE:A3:5A:9A:7D:CB Authority key identifier: 2E:A5:E6:62:51:DD:59:1E:7F:1F:48:55:AF:4B:AF:BB:64:4B:08:A9 Certificate issuer: /CN=2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9 Certificate serial: 2D750A57440EC9E08D2A9DCA8C6E0A23E8AB8B1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft Manifest number: 0222 Signing time: Fri 22 Aug 2025 08:42:01 +0000 Manifest this update: Fri 22 Aug 2025 08:37:01 +0000 Manifest next update: Mon 25 Aug 2025 10:38:01 +0000 Files and hashes: 1: 2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl (hash: Ia4p4PezBpYJN3iJTpiG5w1RuKaLBVSw/OsTYmZxrOg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 10:38:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:75:0a:57:44:0e:c9:e0:8d:2a:9d:ca:8c:6e:0a:23:e8:ab:8b:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9 Validity Not Before: Aug 22 08:37:01 2025 GMT Not After : Aug 25 10:38:01 2025 GMT Subject: CN=D3CDA5B712B20FFCBB79D30801F0EEA35A9A7DCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b5:79:04:25:2d:97:08:40:76:82:7e:cd:6a: ed:66:cd:05:72:73:d6:21:7c:28:4c:16:f9:19:0c: 7b:74:15:87:71:9a:9c:51:c2:c7:f1:e8:bf:36:5e: 56:ae:23:51:ee:86:d8:66:f8:90:7b:66:63:46:01: 6f:8c:d3:cb:30:8d:69:95:78:ee:5a:52:3d:5d:85: 6b:46:7d:3e:12:3a:88:c5:f3:a2:79:b9:2b:0f:4c: 2e:a1:d9:4b:54:31:dc:a7:e4:18:72:ce:28:4f:79: 55:ff:39:bc:ed:a0:70:af:bc:b9:49:b8:23:c7:d8: ae:05:42:11:46:f7:af:d7:9e:54:43:09:68:ed:36: 9a:55:13:dc:87:0c:96:2a:7a:47:45:7e:b8:7d:42: 9f:7f:77:f5:a2:b7:c8:f2:ee:e2:a0:13:80:0d:4c: 0f:48:c9:36:af:f6:9b:2f:bd:ac:5b:c8:b5:61:12: bd:59:7c:6a:f7:4f:eb:81:de:05:0f:e0:72:b9:7b: 46:08:9d:a0:c0:2c:24:07:13:97:76:cc:76:68:78: 60:df:40:08:06:b9:5f:1a:da:6b:8f:1a:bc:f2:42: 0c:ae:47:16:86:7f:b1:7c:9a:a9:db:5a:43:30:50: 1f:5d:f8:7b:98:91:88:ec:79:99:91:13:ea:e8:5f: 91:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:CD:A5:B7:12:B2:0F:FC:BB:79:D3:08:01:F0:EE:A3:5A:9A:7D:CB X509v3 Authority Key Identifier: keyid:2E:A5:E6:62:51:DD:59:1E:7F:1F:48:55:AF:4B:AF:BB:64:4B:08:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ff:1f:32:ab:d0:e8:91:91:ad:8a:68:a0:9b:c6:7c:3e:fc: d4:34:59:e6:2e:68:fd:52:56:73:f3:cb:10:95:b2:b8:ea:15: 60:a2:81:80:e3:12:29:7c:65:bd:80:4d:33:c5:ef:42:7d:7d: 05:0a:ae:62:f0:d6:88:ca:24:8e:01:ea:3d:df:ac:1b:61:83: fb:ce:a8:08:cf:20:5c:9a:e8:5d:83:ef:b2:12:97:00:da:40: c1:a6:e5:37:2e:91:40:eb:b5:2c:34:c3:dd:8c:55:fe:4a:d1: f6:13:ba:38:d8:25:6d:cf:c3:a0:e2:76:59:c7:22:1b:40:ba: 63:6d:78:96:9b:75:0c:ab:ec:69:6d:f0:b8:a1:d4:89:5c:46: 87:b7:ed:f0:65:d3:a5:73:f0:52:95:42:ae:51:41:98:f6:c6: 4b:65:a0:e8:09:fe:49:43:c9:ea:08:f7:47:5d:bd:50:c6:f2: c7:1e:aa:81:79:ae:8d:7b:ed:05:9c:63:d7:3d:bb:ed:b3:7f: b6:60:e7:06:6a:85:f9:16:cf:fa:2c:f1:d0:3e:39:3a:1a:1b: f7:cc:e7:f1:d0:50:67:b3:87:9d:aa:53:75:45:72:0a:39:a3: d0:2f:55:87:df:ad:b2:f0:e1:cf:11:ad:27:e4:fe:4d:a4:c2: 86:05:74:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULXUKV0QOyeCNKp3KjG4KI+irixowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFGQkI2 NDRCMDhBOTAeFw0yNTA4MjIwODM3MDFaFw0yNTA4MjUxMDM4MDFaMDMxMTAvBgNV BAMTKEQzQ0RBNUI3MTJCMjBGRkNCQjc5RDMwODAxRjBFRUEzNUE5QTdEQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdtXkEJS2XCEB2gn7Nau1mzQVy c9YhfChMFvkZDHt0FYdxmpxRwsfx6L82XlauI1Huhthm+JB7ZmNGAW+M08swjWmV eO5aUj1dhWtGfT4SOojF86J5uSsPTC6h2UtUMdyn5BhyzihPeVX/ObztoHCvvLlJ uCPH2K4FQhFG96/XnlRDCWjtNppVE9yHDJYqekdFfrh9Qp9/d/Wit8jy7uKgE4AN TA9IyTav9psvvaxbyLVhEr1ZfGr3T+uB3gUP4HK5e0YInaDALCQHE5d2zHZoeGDf QAgGuV8a2muPGrzyQgyuRxaGf7F8mqnbWkMwUB9d+HuYkYjseZmRE+roX5F1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU082ltxKyD/y7edMIAfDuo1qafcswHwYDVR0j BBgwFoAULqXmYlHdWR5/H0hVr0uvu2RLCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 Y2IyOTI4ZS05YjM5LTRhOTAtOTdkMi0wNGNmNjVmZTk1NzgvMC8yRUE1RTY2MjUx REQ1OTFFN0YxRjQ4NTVBRjRCQUZCQjY0NEIwOEE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFGQkI2NDRC MDhBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmNiMjkyOGUtOWIzOS00YTkwLTk3 ZDItMDRjZjY1ZmU5NTc4LzAvMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFG QkI2NDRCMDhBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF7/HzKr0OiRka2KaKCbxnw+/NQ0WeYuaP1S VnPzyxCVsrjqFWCigYDjEil8Zb2ATTPF70J9fQUKrmLw1ojKJI4B6j3frBthg/vO qAjPIFya6F2D77ISlwDaQMGm5TcukUDrtSw0w92MVf5K0fYTujjYJW3Pw6DidlnH IhtAumNteJabdQyr7Glt8Lih1IlcRoe37fBl06Vz8FKVQq5RQZj2xktloOgJ/klD yeoI90ddvVDG8sceqoF5ro177QWcY9c9u+2zf7Zg5wZqhfkWz/os8dA+OToaG/fM 5/HQUGezh52qU3VFcgo5o9AvVYffrbLw4c8RrSfk/k2kwoYFdPg= -----END CERTIFICATE-----Generated at Sat Aug 23 12:13:06 2025 by rpki-client