$ rpki-client -vvf repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft File: 2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft (raw, json) Hash identifier: a6Ds1m05ZGXOADsc9QYwI4KAyapkc0z9R9dujRpL4xs= Subject key identifier: DA:91:AC:4F:C8:63:C5:34:BB:7F:1E:2F:98:3A:87:05:10:78:42:4D Authority key identifier: 2E:A5:E6:62:51:DD:59:1E:7F:1F:48:55:AF:4B:AF:BB:64:4B:08:A9 Certificate issuer: /CN=2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9 Certificate serial: 7424959EC6F3938D5D73E3AFC613B30598F388DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft Manifest number: 020A Signing time: Sun 29 Jun 2025 06:21:57 +0000 Manifest this update: Sun 29 Jun 2025 06:16:57 +0000 Manifest next update: Wed 02 Jul 2025 09:18:57 +0000 Files and hashes: 1: 2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl (hash: ygbENueBVYXTXnjB0pJgu05ATzG25LPKgV/4aSMWikk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:24:95:9e:c6:f3:93:8d:5d:73:e3:af:c6:13:b3:05:98:f3:88:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9 Validity Not Before: Jun 29 06:16:57 2025 GMT Not After : Jul 2 09:18:57 2025 GMT Subject: CN=DA91AC4FC863C534BB7F1E2F983A87051078424D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4a:a4:22:7e:6e:10:86:65:90:54:ff:09:94: d9:e9:46:4e:19:42:36:12:51:97:dd:b3:0d:17:97: 3f:16:c0:6d:88:70:67:a6:6c:79:fa:87:f0:5f:9c: 70:66:1e:99:1d:63:1c:59:49:0c:07:79:32:8d:bd: 42:7e:61:e2:69:30:43:3e:9d:b9:e8:1e:00:f0:86: e8:19:16:f6:a5:17:3a:66:3e:de:cf:fc:9d:2d:bb: 09:f7:fc:5f:c3:6a:0f:e4:81:73:72:f2:fb:0d:f7: 4b:5f:9f:6f:f7:d2:84:75:32:ca:63:d0:7b:84:d7: ee:e4:64:c8:4d:54:db:2c:d5:ad:6e:b0:18:c3:2e: 1c:4b:79:d1:44:25:d8:84:4c:c0:ed:df:46:6b:01: 50:0d:ab:01:13:c9:ef:aa:da:34:bd:9f:9c:2c:92: 8c:12:9e:51:67:b2:59:99:a9:78:5c:a5:e3:49:35: 4c:46:60:79:d9:20:e9:ef:5a:b2:d8:e9:32:1e:8a: 84:81:6a:14:73:bb:ee:fa:50:83:09:f7:f2:6e:b4: e1:7a:3d:7c:56:91:03:4e:0d:58:ff:1a:57:19:c7: 28:79:b5:d3:32:a0:d1:92:b1:d2:fb:e8:54:1b:76: 4c:53:4a:9a:48:cd:07:25:d3:09:2e:3e:a8:d0:d3: 52:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:91:AC:4F:C8:63:C5:34:BB:7F:1E:2F:98:3A:87:05:10:78:42:4D X509v3 Authority Key Identifier: keyid:2E:A5:E6:62:51:DD:59:1E:7F:1F:48:55:AF:4B:AF:BB:64:4B:08:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:a8:f8:ca:c4:ab:17:55:56:e2:10:41:6c:5b:e4:9b:85:fd: 9c:e2:dd:85:5d:61:f5:c3:b9:a3:45:83:13:d2:2d:3b:75:62: f6:bb:dd:4a:17:c6:e0:30:96:c0:80:a5:8b:64:fc:f3:20:f1: 29:75:bb:98:ce:a3:ce:73:73:fe:e4:7c:07:ba:20:c6:02:eb: f5:55:a9:cc:8e:00:5d:fd:86:f9:46:b4:35:11:e3:74:61:e7: 0c:06:ee:e3:fe:d3:48:af:d2:1f:3e:db:90:22:0f:4a:7a:a4: 66:11:38:64:93:64:89:ed:ef:74:00:05:1b:6d:9e:a0:6f:5d: cf:b3:fa:0a:4e:21:8e:f4:8f:7f:63:61:b2:80:82:d2:ee:6d: e4:5a:e0:14:39:6d:8d:20:36:87:a2:5a:fd:8c:23:c6:fe:f9: 99:98:0a:a7:40:d6:6e:67:fa:b3:1f:a9:7f:94:66:ad:50:97: 12:00:5f:c3:0f:d1:9e:ba:5a:59:17:e1:24:4a:a5:fa:7b:fa: 5b:65:e0:51:0a:92:7b:bb:e0:2b:9c:d9:b0:7d:71:e1:b8:ff: 88:5e:28:97:68:52:cb:3e:29:26:2e:c4:d5:2a:d3:c4:56:22: ed:d2:b3:eb:49:84:ac:44:0c:fe:d1:de:4b:84:95:b7:56:d3: 62:60:1d:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdCSVnsbzk41dc+OvxhOzBZjziNowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFGQkI2 NDRCMDhBOTAeFw0yNTA2MjkwNjE2NTdaFw0yNTA3MDIwOTE4NTdaMDMxMTAvBgNV BAMTKERBOTFBQzRGQzg2M0M1MzRCQjdGMUUyRjk4M0E4NzA1MTA3ODQyNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOSqQifm4QhmWQVP8JlNnpRk4Z QjYSUZfdsw0Xlz8WwG2IcGembHn6h/BfnHBmHpkdYxxZSQwHeTKNvUJ+YeJpMEM+ nbnoHgDwhugZFvalFzpmPt7P/J0tuwn3/F/Dag/kgXNy8vsN90tfn2/30oR1Mspj 0HuE1+7kZMhNVNss1a1usBjDLhxLedFEJdiETMDt30ZrAVANqwETye+q2jS9n5ws kowSnlFnslmZqXhcpeNJNUxGYHnZIOnvWrLY6TIeioSBahRzu+76UIMJ9/JutOF6 PXxWkQNODVj/GlcZxyh5tdMyoNGSsdL76FQbdkxTSppIzQcl0wkuPqjQ01J7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2pGsT8hjxTS7fx4vmDqHBRB4Qk0wHwYDVR0j BBgwFoAULqXmYlHdWR5/H0hVr0uvu2RLCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 Y2IyOTI4ZS05YjM5LTRhOTAtOTdkMi0wNGNmNjVmZTk1NzgvMC8yRUE1RTY2MjUx REQ1OTFFN0YxRjQ4NTVBRjRCQUZCQjY0NEIwOEE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFGQkI2NDRC MDhBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmNiMjkyOGUtOWIzOS00YTkwLTk3 ZDItMDRjZjY1ZmU5NTc4LzAvMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFG QkI2NDRCMDhBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAACo+MrEqxdVVuIQQWxb5JuF/Zzi3YVdYfXD uaNFgxPSLTt1Yva73UoXxuAwlsCApYtk/PMg8Sl1u5jOo85zc/7kfAe6IMYC6/VV qcyOAF39hvlGtDUR43Rh5wwG7uP+00iv0h8+25AiD0p6pGYROGSTZInt73QABRtt nqBvXc+z+gpOIY70j39jYbKAgtLubeRa4BQ5bY0gNoeiWv2MI8b++ZmYCqdA1m5n +rMfqX+UZq1QlxIAX8MP0Z66WlkX4SRKpfp7+ltl4FEKknu74Cuc2bB9ceG4/4he KJdoUss+KSYuxNUq08RWIu3Ss+tJhKxEDP7R3kuElbdW02JgHZ4= -----END CERTIFICATE-----Generated at Sun Jun 29 19:22:25 2025 by rpki-client