$ rpki-client -vvf repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft File: 2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft (raw, json) Hash identifier: MnEIY1PFZuAT0yZ60DVGV5+FWdfK54mDKpek7+EvutM= Subject key identifier: 7A:35:94:95:AB:DF:9B:83:98:80:2B:B8:5D:46:5D:7F:0C:38:22:9D Authority key identifier: 2A:86:5C:A2:F4:F7:0C:CC:B0:3F:98:C2:B6:E1:7E:89:3A:B8:7D:0C Certificate issuer: /CN=2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C Certificate serial: 669BA43F65389646FABDB9813688DA0671D270A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft Manifest number: 01CD Signing time: Thu 08 May 2025 03:51:49 +0000 Manifest this update: Thu 08 May 2025 03:46:49 +0000 Manifest next update: Sun 11 May 2025 09:49:49 +0000 Files and hashes: 1: 2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl (hash: Ydum/Qy0XFItf4NWSxz54YkqAZM3hH4s7nXvlNG5V1k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 09:49:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:9b:a4:3f:65:38:96:46:fa:bd:b9:81:36:88:da:06:71:d2:70:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C Validity Not Before: May 8 03:46:49 2025 GMT Not After : May 11 09:49:49 2025 GMT Subject: CN=7A359495ABDF9B8398802BB85D465D7F0C38229D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a8:50:eb:29:8e:4e:88:f7:32:fc:21:65:62: df:0a:70:1d:32:dd:d9:32:35:e8:6e:52:74:2a:2a: fc:15:6f:7b:c5:fd:e0:0c:db:9e:64:f0:12:14:51: c6:bf:75:ee:46:da:77:bf:19:e7:f5:51:68:bf:11: 67:51:63:06:26:cf:9d:60:cc:cd:b6:1e:e4:8a:4b: 86:e9:8b:41:98:11:76:90:6c:76:a7:82:9c:c7:7c: af:6d:24:ca:15:00:4f:23:68:42:af:60:73:6f:d9: 39:6d:f4:e6:a9:c3:d7:a8:6e:39:94:2f:50:ce:2d: 68:35:84:51:ee:dc:7e:24:ab:a6:f1:18:bb:f1:f4: 18:a0:2c:4c:62:0c:df:d7:9e:70:30:a9:3f:96:bb: 53:c3:ea:f5:87:a8:eb:ee:a2:55:bf:70:3b:7f:0b: e0:f3:7c:66:5e:eb:86:9a:ba:77:88:ca:40:d5:da: 62:b3:2d:63:2d:86:47:19:5a:c4:0b:bb:0d:39:11: 01:71:c2:eb:4f:04:00:04:8f:0f:10:33:8f:da:77: 6d:fb:2c:b2:1f:ed:d4:2e:2b:27:19:49:0e:86:68: b6:4b:24:ab:3e:b0:61:13:6d:6a:85:f8:de:69:15: be:7e:b0:5b:fc:0d:3c:86:51:94:bc:78:a0:e7:c6: 8c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:35:94:95:AB:DF:9B:83:98:80:2B:B8:5D:46:5D:7F:0C:38:22:9D X509v3 Authority Key Identifier: keyid:2A:86:5C:A2:F4:F7:0C:CC:B0:3F:98:C2:B6:E1:7E:89:3A:B8:7D:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:2e:34:1f:cb:9c:18:d9:1c:7f:90:77:c4:5e:07:9b:0e:37: 19:41:4c:f9:18:78:9e:9e:ff:27:78:07:1a:7b:4b:8f:6d:1e: 97:4f:cc:5a:5e:b1:4b:7a:cc:59:4b:92:0b:ee:f9:5f:45:e0: 6e:31:12:fc:c7:bc:fb:b7:ff:9b:eb:dd:b8:a7:1f:c2:40:2e: 75:f9:f7:bf:28:3e:1f:10:40:ce:1a:90:ba:12:c3:4b:08:93: 31:df:ef:32:76:35:fd:9b:0a:00:b5:12:66:5b:8c:55:05:b6: 60:2d:d9:3a:59:63:ce:28:ec:fa:92:f1:e3:fe:db:29:67:60: 50:02:37:79:c9:c7:6f:07:4b:1c:38:4c:e0:4a:de:0b:70:92: fe:07:70:25:45:6b:1a:e1:13:70:12:54:4c:4e:48:50:58:9c: c1:36:f3:0c:ab:80:3c:63:51:2e:74:54:23:18:f3:41:54:fe: 03:00:5f:65:21:2e:12:40:5b:83:0d:87:e4:78:7a:12:17:af: 5a:47:9c:57:78:f7:e4:a2:10:d0:30:6a:b2:a8:60:21:04:de: 53:87:f7:ba:49:51:cf:8a:84:bf:a4:2d:27:a0:d2:65:c1:9d: e9:1f:6c:3a:90:ab:cd:59:be:41:da:45:95:0a:21:6c:98:78: 2d:53:a0:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZpukP2U4lkb6vbmBNojaBnHScKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdFODkz QUI4N0QwQzAeFw0yNTA1MDgwMzQ2NDlaFw0yNTA1MTEwOTQ5NDlaMDMxMTAvBgNV BAMTKDdBMzU5NDk1QUJERjlCODM5ODgwMkJCODVENDY1RDdGMEMzODIyOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQqFDrKY5OiPcy/CFlYt8KcB0y 3dkyNehuUnQqKvwVb3vF/eAM255k8BIUUca/de5G2ne/Gef1UWi/EWdRYwYmz51g zM22HuSKS4bpi0GYEXaQbHangpzHfK9tJMoVAE8jaEKvYHNv2Tlt9Oapw9eobjmU L1DOLWg1hFHu3H4kq6bxGLvx9BigLExiDN/XnnAwqT+Wu1PD6vWHqOvuolW/cDt/ C+DzfGZe64aauneIykDV2mKzLWMthkcZWsQLuw05EQFxwutPBAAEjw8QM4/ad237 LLIf7dQuKycZSQ6GaLZLJKs+sGETbWqF+N5pFb5+sFv8DTyGUZS8eKDnxoyNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUejWUlavfm4OYgCu4XUZdfww4Ip0wHwYDVR0j BBgwFoAUKoZcovT3DMywP5jCtuF+iTq4fQwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDJiNzhhZC1kZjIzLTQzZTItYTk0ZC0zYjQ1NGNiYzdmYzUvMC8yQTg2NUNBMkY0 RjcwQ0NDQjAzRjk4QzJCNkUxN0U4OTNBQjg3RDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdFODkzQUI4 N0QwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAyYjc4YWQtZGYyMy00M2UyLWE5 NGQtM2I0NTRjYmM3ZmM1LzAvMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdF ODkzQUI4N0QwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMYuNB/LnBjZHH+Qd8ReB5sONxlBTPkYeJ6e /yd4Bxp7S49tHpdPzFpesUt6zFlLkgvu+V9F4G4xEvzHvPu3/5vr3binH8JALnX5 978oPh8QQM4akLoSw0sIkzHf7zJ2Nf2bCgC1EmZbjFUFtmAt2TpZY84o7PqS8eP+ 2ylnYFACN3nJx28HSxw4TOBK3gtwkv4HcCVFaxrhE3ASVExOSFBYnME28wyrgDxj US50VCMY80FU/gMAX2UhLhJAW4MNh+R4ehIXr1pHnFd49+SiENAwarKoYCEE3lOH 97pJUc+KhL+kLSeg0mXBnekfbDqQq81ZvkHaRZUKIWyYeC1ToK4= -----END CERTIFICATE-----Generated at Thu May 8 15:02:49 2025 by rpki-client