$ rpki-client -vvf repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft File: 2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft (raw, json) Hash identifier: YfDf7Y1vrctUcZCKTtHgTP+3uAPbu/mZWo777VM5VHY= Subject key identifier: 22:2B:54:F1:97:C2:E5:56:5D:81:9C:4A:86:C3:37:95:03:D9:5F:EB Authority key identifier: 2A:86:5C:A2:F4:F7:0C:CC:B0:3F:98:C2:B6:E1:7E:89:3A:B8:7D:0C Certificate issuer: /CN=2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C Certificate serial: 684FDEC11B5749C7B682EE5978333B3C63328DD0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft Manifest number: 01FD Signing time: Fri 22 Aug 2025 15:01:50 +0000 Manifest this update: Fri 22 Aug 2025 14:56:50 +0000 Manifest next update: Mon 25 Aug 2025 15:52:50 +0000 Files and hashes: 1: 2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl (hash: kKqQtJlFdWBrs7A9r0/V/waMo+Ed05H4S7qs6ULUjJs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 15:52:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:4f:de:c1:1b:57:49:c7:b6:82:ee:59:78:33:3b:3c:63:32:8d:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C Validity Not Before: Aug 22 14:56:50 2025 GMT Not After : Aug 25 15:52:50 2025 GMT Subject: CN=222B54F197C2E5565D819C4A86C3379503D95FEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9a:b2:81:15:9f:a0:88:a7:83:06:d0:ce:e0: c3:b1:97:0d:cd:98:4c:84:b8:6d:22:03:33:13:aa: 6b:23:c1:88:d8:d7:ba:ac:7e:c1:63:7a:53:8b:1e: e3:ff:62:07:e5:f9:e8:7c:97:cc:d9:48:07:39:d2: 17:84:90:e8:19:4d:8f:9a:84:55:f3:44:08:2b:8b: 62:00:cd:22:8d:a3:c0:05:c5:b8:79:3c:1e:4f:be: 8f:57:88:6b:c6:dd:be:68:15:e0:23:6c:7e:9c:5f: 95:26:97:16:d6:36:8f:45:aa:d7:de:79:6b:f6:d2: 07:33:d8:19:03:5f:21:ab:d7:ba:cf:70:b1:26:80: a8:71:fb:11:c5:6b:ec:33:5d:7d:d3:1c:6c:61:db: fc:11:d1:e8:c4:01:63:4a:95:ff:b8:10:2b:11:f8: 65:95:17:d0:0a:8d:1c:43:2c:cb:bb:d2:a0:e5:e9: b4:f0:a2:15:c3:7b:01:be:4e:66:fe:5f:d4:c3:75: 3e:b6:0b:9f:e1:c7:d4:e2:2b:cb:da:a8:c2:75:09: 27:71:29:45:2a:3b:d2:20:18:7f:11:94:f0:87:6a: df:b1:63:ea:be:81:26:f4:41:4e:ce:80:a5:90:90: 0f:8e:b3:e5:42:6f:30:f3:8f:18:b1:ed:e6:79:3f: 68:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:2B:54:F1:97:C2:E5:56:5D:81:9C:4A:86:C3:37:95:03:D9:5F:EB X509v3 Authority Key Identifier: keyid:2A:86:5C:A2:F4:F7:0C:CC:B0:3F:98:C2:B6:E1:7E:89:3A:B8:7D:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:5b:00:76:f9:8d:7b:a3:ec:ea:cc:32:9b:a3:7b:bc:52:2f: 79:c7:6f:0c:a6:63:ce:bb:8c:77:57:d3:c3:c9:89:9f:47:76: 0d:00:d4:98:73:75:e7:45:ec:cc:98:8a:f6:a3:b2:bc:a8:db: 74:54:51:40:88:62:bf:bd:49:db:66:0e:72:4f:b9:e4:4a:b5: a9:7a:2c:de:c4:fa:e5:94:ca:87:c6:8e:1c:90:06:7d:02:0b: ed:92:1a:43:db:2f:3d:ca:b2:94:5a:26:40:8f:06:64:23:2c: c3:28:1a:d1:d8:c8:13:34:94:f1:93:91:9d:4a:95:42:6a:06: 89:39:04:62:2d:ed:c1:2c:f1:a1:58:cf:d1:64:2b:69:23:6d: 6c:60:48:fd:10:89:b0:42:ae:17:91:60:c2:cf:f9:7b:cc:fb: 6f:5a:9d:3b:62:72:c8:b8:79:f9:c0:a4:97:2c:38:f1:71:43: 0a:9c:26:c3:d1:3b:56:ce:a8:ff:dc:a0:76:a3:88:09:34:72: cf:9d:6e:ae:bc:2b:04:89:7f:f7:d0:0b:6d:00:4f:0f:6a:ef: d4:ce:6e:5d:c7:7c:96:a8:34:00:8a:86:d4:6a:60:84:cd:4c: a9:87:e0:17:88:52:1e:0b:fe:63:84:e8:cc:3f:9a:3b:e0:0e: 4c:f5:1a:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaE/ewRtXSce2gu5ZeDM7PGMyjdAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdFODkz QUI4N0QwQzAeFw0yNTA4MjIxNDU2NTBaFw0yNTA4MjUxNTUyNTBaMDMxMTAvBgNV BAMTKDIyMkI1NEYxOTdDMkU1NTY1RDgxOUM0QTg2QzMzNzk1MDNEOTVGRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLmrKBFZ+giKeDBtDO4MOxlw3N mEyEuG0iAzMTqmsjwYjY17qsfsFjelOLHuP/Ygfl+eh8l8zZSAc50heEkOgZTY+a hFXzRAgri2IAzSKNo8AFxbh5PB5Pvo9XiGvG3b5oFeAjbH6cX5UmlxbWNo9Fqtfe eWv20gcz2BkDXyGr17rPcLEmgKhx+xHFa+wzXX3THGxh2/wR0ejEAWNKlf+4ECsR +GWVF9AKjRxDLMu70qDl6bTwohXDewG+Tmb+X9TDdT62C5/hx9TiK8vaqMJ1CSdx KUUqO9IgGH8RlPCHat+xY+q+gSb0QU7OgKWQkA+Os+VCbzDzjxix7eZ5P2hfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIitU8ZfC5VZdgZxKhsM3lQPZX+swHwYDVR0j BBgwFoAUKoZcovT3DMywP5jCtuF+iTq4fQwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDJiNzhhZC1kZjIzLTQzZTItYTk0ZC0zYjQ1NGNiYzdmYzUvMC8yQTg2NUNBMkY0 RjcwQ0NDQjAzRjk4QzJCNkUxN0U4OTNBQjg3RDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdFODkzQUI4 N0QwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAyYjc4YWQtZGYyMy00M2UyLWE5 NGQtM2I0NTRjYmM3ZmM1LzAvMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdF ODkzQUI4N0QwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD1bAHb5jXuj7OrMMpuje7xSL3nHbwymY867 jHdX08PJiZ9Hdg0A1JhzdedF7MyYivajsryo23RUUUCIYr+9SdtmDnJPueRKtal6 LN7E+uWUyofGjhyQBn0CC+2SGkPbLz3KspRaJkCPBmQjLMMoGtHYyBM0lPGTkZ1K lUJqBok5BGIt7cEs8aFYz9FkK2kjbWxgSP0QibBCrheRYMLP+XvM+29anTticsi4 efnApJcsOPFxQwqcJsPRO1bOqP/coHajiAk0cs+dbq68KwSJf/fQC20ATw9q79TO bl3HfJaoNACKhtRqYITNTKmH4BeIUh4L/mOE6Mw/mjvgDkz1GsM= -----END CERTIFICATE-----Generated at Sat Aug 23 21:41:56 2025 by rpki-client