$ rpki-client -vvf repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft File: 2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft (raw, json) Hash identifier: pR0FoHu/Sk+9GtKBV9bern0WGQiyiBLrbPyQmRlOzx8= Subject key identifier: 77:79:49:32:93:FD:8A:96:09:7D:0C:A4:C7:DF:23:77:44:63:1B:39 Authority key identifier: 2E:A5:E6:62:51:DD:59:1E:7F:1F:48:55:AF:4B:AF:BB:64:4B:08:A9 Certificate issuer: /CN=2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9 Certificate serial: 57ACD7DF5B72BB8B5954F5B89368E6FFEFBD2F2E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft Manifest number: 023C Signing time: Sun 19 Oct 2025 07:52:00 +0000 Manifest this update: Sun 19 Oct 2025 07:47:00 +0000 Manifest next update: Wed 22 Oct 2025 19:17:00 +0000 Files and hashes: 1: 2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl (hash: K0OKnfNF3IuCiVwgDzcrUuTrjcLcoeEmhq3zjBLCc1A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 19:17:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:ac:d7:df:5b:72:bb:8b:59:54:f5:b8:93:68:e6:ff:ef:bd:2f:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9 Validity Not Before: Oct 19 07:47:00 2025 GMT Not After : Oct 22 19:17:00 2025 GMT Subject: CN=7779493293FD8A96097D0CA4C7DF237744631B39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c8:85:8b:43:af:73:7d:af:9d:ea:10:dd:7a: e9:10:62:05:1c:41:85:4b:7a:b2:b8:33:4c:a9:d0: 79:a6:14:ac:e2:7a:82:7f:77:20:91:e9:f5:cc:35: dc:19:78:12:51:58:c7:ad:81:ad:8d:12:65:00:5c: bc:c3:79:d6:3f:15:8c:63:58:08:0a:15:2f:71:99: c4:f8:5e:83:03:a9:32:8e:c8:cb:ef:4a:4d:cd:04: 6b:af:d9:6e:6e:42:14:ee:d7:f0:fa:8c:44:8f:9d: 57:10:47:c4:6b:0e:4d:ab:8a:6f:98:5e:29:37:60: 5e:7f:f3:e3:4b:2b:42:43:11:0a:5d:6e:0c:62:d7: d8:7f:5f:89:68:2a:58:a9:ff:b7:7f:27:5d:54:6f: 09:69:91:5a:31:a1:96:76:3b:75:e5:59:68:75:99: 40:82:59:3a:70:51:eb:0e:2f:63:52:87:49:36:6b: ca:39:fe:3d:e4:8c:58:76:16:ac:c1:90:2d:53:b6: 41:4d:c4:85:1b:a3:df:63:e8:a8:45:e4:cc:75:e1: 36:b4:71:08:fb:4f:e5:9a:c9:66:f6:fe:f8:7d:c3: 1d:a0:06:d5:89:52:29:2c:28:00:c3:44:76:67:e1: 8b:68:45:59:ac:73:ec:77:ff:4f:d0:f1:a2:93:f8: a8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:79:49:32:93:FD:8A:96:09:7D:0C:A4:C7:DF:23:77:44:63:1B:39 X509v3 Authority Key Identifier: keyid:2E:A5:E6:62:51:DD:59:1E:7F:1F:48:55:AF:4B:AF:BB:64:4B:08:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:39:4f:80:c8:df:3d:b8:c8:1b:9e:6a:8f:a0:b0:f5:8a:7a: 3a:85:92:2b:0c:5e:bf:7f:05:77:66:8a:b6:41:e5:d8:c2:45: 5a:c9:1e:5d:f5:07:c1:4a:37:c0:09:ff:47:70:4b:28:9e:87: 4d:cb:53:9a:0e:cd:cc:00:93:51:25:72:01:8d:8f:59:d8:c9: 7b:a8:14:09:03:52:e9:0a:9a:a5:03:92:10:29:1e:b1:d5:46: 35:92:74:98:6f:6e:8a:10:6e:8c:9a:15:7d:83:5c:ca:ec:bb: ed:c1:a3:7e:a6:b7:8a:b2:b1:c1:95:a1:9e:43:bd:67:9f:58: c3:f8:49:3d:c3:d0:ac:3e:0a:35:f2:a7:fa:57:d8:1a:4b:5f: a3:d0:a1:5b:05:c9:fb:0f:ac:6a:df:35:5d:73:ee:fa:13:70: 2f:38:e5:60:f1:43:7c:10:22:20:85:fd:64:23:4c:11:78:b0: 59:74:cf:f7:d8:4d:18:db:a7:0a:e3:5b:54:1c:4e:2b:5d:fa: 8a:6b:80:36:bc:f0:20:5b:f9:bb:7e:b9:0a:53:bf:5a:7c:80: 4c:5f:c8:3f:0b:6f:1d:eb:70:09:a2:a3:84:8c:ae:c6:aa:7f: 8a:84:2e:41:51:f7:c5:2a:fb:5e:2e:07:f6:26:87:f5:4b:c0: 87:46:bc:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV6zX31tyu4tZVPW4k2jm/++9Ly4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFGQkI2 NDRCMDhBOTAeFw0yNTEwMTkwNzQ3MDBaFw0yNTEwMjIxOTE3MDBaMDMxMTAvBgNV BAMTKDc3Nzk0OTMyOTNGRDhBOTYwOTdEMENBNEM3REYyMzc3NDQ2MzFCMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChyIWLQ69zfa+d6hDdeukQYgUc QYVLerK4M0yp0HmmFKzieoJ/dyCR6fXMNdwZeBJRWMetga2NEmUAXLzDedY/FYxj WAgKFS9xmcT4XoMDqTKOyMvvSk3NBGuv2W5uQhTu1/D6jESPnVcQR8RrDk2rim+Y Xik3YF5/8+NLK0JDEQpdbgxi19h/X4loKlip/7d/J11UbwlpkVoxoZZ2O3XlWWh1 mUCCWTpwUesOL2NSh0k2a8o5/j3kjFh2FqzBkC1TtkFNxIUbo99j6KhF5Mx14Ta0 cQj7T+WayWb2/vh9wx2gBtWJUiksKADDRHZn4YtoRVmsc+x3/0/Q8aKT+KipAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd3lJMpP9ipYJfQykx98jd0RjGzkwHwYDVR0j BBgwFoAULqXmYlHdWR5/H0hVr0uvu2RLCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 Y2IyOTI4ZS05YjM5LTRhOTAtOTdkMi0wNGNmNjVmZTk1NzgvMC8yRUE1RTY2MjUx REQ1OTFFN0YxRjQ4NTVBRjRCQUZCQjY0NEIwOEE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFGQkI2NDRC MDhBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmNiMjkyOGUtOWIzOS00YTkwLTk3 ZDItMDRjZjY1ZmU5NTc4LzAvMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFG QkI2NDRCMDhBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANk5T4DI3z24yBueao+gsPWKejqFkisMXr9/ BXdmirZB5djCRVrJHl31B8FKN8AJ/0dwSyieh03LU5oOzcwAk1ElcgGNj1nYyXuo FAkDUukKmqUDkhApHrHVRjWSdJhvbooQboyaFX2DXMrsu+3Bo36mt4qyscGVoZ5D vWefWMP4ST3D0Kw+CjXyp/pX2BpLX6PQoVsFyfsPrGrfNV1z7voTcC845WDxQ3wQ IiCF/WQjTBF4sFl0z/fYTRjbpwrjW1QcTitd+oprgDa88CBb+bt+uQpTv1p8gExf yD8Lbx3rcAmio4SMrsaqf4qELkFR98Uq+14uB/Ymh/VLwIdGvBI= -----END CERTIFICATE-----Generated at Mon Oct 20 12:02:19 2025 by rpki-client