$ rpki-client -vvf repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft File: 2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft (raw, json) Hash identifier: A/qOGdiXjBX6J1zfsZ8M4eXv4swxyYWB5cJ8GGW292w= Subject key identifier: 96:9D:AD:8D:10:0E:40:91:84:16:43:33:33:26:C6:27:32:B5:BA:04 Authority key identifier: 2E:8B:AC:7E:81:91:1F:08:A1:89:CA:9F:DD:32:A6:43:C8:8E:05:B7 Certificate issuer: /CN=2E8BAC7E81911F08A189CA9FDD32A643C88E05B7 Certificate serial: 58633ECC60293983A2EE3BADF7AF165D86844CFA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft Manifest number: 0124 Signing time: Sat 23 Aug 2025 09:50:50 +0000 Manifest this update: Sat 23 Aug 2025 09:45:50 +0000 Manifest next update: Tue 26 Aug 2025 15:59:50 +0000 Files and hashes: 1: 2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl (hash: kgWKSYrKPe8rQ9CfDjUkWlbGBdv9vKLxyJF5eNfw2As=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 15:59:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:63:3e:cc:60:29:39:83:a2:ee:3b:ad:f7:af:16:5d:86:84:4c:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E8BAC7E81911F08A189CA9FDD32A643C88E05B7 Validity Not Before: Aug 23 09:45:50 2025 GMT Not After : Aug 26 15:59:50 2025 GMT Subject: CN=969DAD8D100E4091841643333326C62732B5BA04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d2:93:91:10:c1:62:10:b8:7c:24:ae:2b:1b: 76:f8:90:fa:45:9a:c9:0d:2e:99:ec:91:f5:72:bb: 1d:36:61:95:77:48:27:0e:23:f6:11:ef:ef:15:55: ad:db:66:54:d6:6a:dc:b8:a6:f9:45:e8:c0:d7:73: 60:d1:55:59:e8:26:d8:f1:11:e4:9f:52:c8:e6:fb: f8:09:d4:90:c7:f1:97:2b:62:fb:5f:3c:53:93:21: 64:cf:81:08:f1:be:20:28:aa:3b:a5:15:67:28:2f: 92:56:14:b7:65:45:00:d0:2d:a6:0d:40:d9:ab:32: 13:a5:78:d3:e9:83:da:e2:73:e0:77:17:7a:d7:c8: 56:4d:38:86:e1:4b:75:d9:cc:72:5d:2c:88:7a:37: a4:91:0c:27:c7:d2:5e:ba:49:59:0a:60:66:2e:66: df:ed:ec:dc:88:f0:ea:76:e9:67:c3:73:03:f9:a1: c2:03:e9:d3:52:15:45:8f:eb:63:09:81:de:07:e0: b0:28:83:e3:1b:d2:0d:9f:ab:03:d7:c1:36:65:db: 35:b9:ef:63:52:ca:bf:f1:6d:e9:a5:0f:c9:4b:74: 83:4f:27:1c:76:aa:dc:02:cf:16:95:c6:ec:5f:3a: e9:b9:bf:a3:6c:f4:d5:55:13:92:af:37:17:51:c7: 93:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:9D:AD:8D:10:0E:40:91:84:16:43:33:33:26:C6:27:32:B5:BA:04 X509v3 Authority Key Identifier: keyid:2E:8B:AC:7E:81:91:1F:08:A1:89:CA:9F:DD:32:A6:43:C8:8E:05:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:b6:e8:3a:40:4c:92:02:9b:48:cd:21:a3:1e:33:cf:48:94: 0e:f8:06:cc:5d:09:d5:80:f3:32:20:63:b8:07:a9:f5:c2:4a: 4c:c3:a0:c5:34:2e:03:86:41:27:e3:4d:49:97:be:47:47:4e: e2:47:5d:9e:ae:4f:a8:e2:60:56:7b:f9:d0:22:b4:38:b1:af: f4:e2:37:3d:8c:6c:ed:66:90:ac:6a:26:70:a8:fb:52:67:cc: 8a:b5:c6:e9:c4:8c:95:be:e6:37:7f:e7:58:0e:f7:55:a1:d0: b0:36:3d:41:f1:92:4d:3b:c8:f9:e1:c7:06:2b:37:ad:b9:54: 95:95:66:18:18:dd:92:d9:6a:ec:7b:16:5b:83:34:eb:9e:1b: b2:ce:24:6a:bf:b9:cd:f4:90:f7:11:b7:5a:01:3c:bf:f6:2e: a0:1a:58:ab:b5:31:11:af:e4:36:16:82:bf:a3:56:bd:f9:57: 66:c9:06:01:99:c2:45:dd:63:39:f0:f9:02:2c:3f:0f:0c:43: d3:cf:c6:6a:e9:39:7e:de:7a:9d:18:a5:d2:61:fb:0e:60:43: e7:d5:4c:e3:e3:ce:30:7e:71:20:03:36:78:ae:c6:c7:02:47: 7f:cc:c2:85:02:b2:76:47:54:04:9e:94:e0:b1:7e:b9:f1:38: c1:44:a2:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWGM+zGApOYOi7jut968WXYaETPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2NDND ODhFMDVCNzAeFw0yNTA4MjMwOTQ1NTBaFw0yNTA4MjYxNTU5NTBaMDMxMTAvBgNV BAMTKDk2OURBRDhEMTAwRTQwOTE4NDE2NDMzMzMzMjZDNjI3MzJCNUJBMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB0pOREMFiELh8JK4rG3b4kPpF mskNLpnskfVyux02YZV3SCcOI/YR7+8VVa3bZlTWaty4pvlF6MDXc2DRVVnoJtjx EeSfUsjm+/gJ1JDH8ZcrYvtfPFOTIWTPgQjxviAoqjulFWcoL5JWFLdlRQDQLaYN QNmrMhOleNPpg9ric+B3F3rXyFZNOIbhS3XZzHJdLIh6N6SRDCfH0l66SVkKYGYu Zt/t7NyI8Op26WfDcwP5ocID6dNSFUWP62MJgd4H4LAog+Mb0g2fqwPXwTZl2zW5 72NSyr/xbemlD8lLdINPJxx2qtwCzxaVxuxfOum5v6Ns9NVVE5KvNxdRx5NnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlp2tjRAOQJGEFkMzMybGJzK1ugQwHwYDVR0j BBgwFoAULousfoGRHwihicqf3TKmQ8iOBbcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mjg2MjZlMC0yOWZlLTRlODYtODRkNi02ODQ3OGM1Y2Q5ZWQvMC8yRThCQUM3RTgx OTExRjA4QTE4OUNBOUZERDMyQTY0M0M4OEUwNUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2NDNDODhF MDVCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI4NjI2ZTAtMjlmZS00ZTg2LTg0 ZDYtNjg0NzhjNWNkOWVkLzAvMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2 NDNDODhFMDVCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIG26DpATJICm0jNIaMeM89IlA74BsxdCdWA 8zIgY7gHqfXCSkzDoMU0LgOGQSfjTUmXvkdHTuJHXZ6uT6jiYFZ7+dAitDixr/Ti Nz2MbO1mkKxqJnCo+1JnzIq1xunEjJW+5jd/51gO91Wh0LA2PUHxkk07yPnhxwYr N625VJWVZhgY3ZLZaux7FluDNOueG7LOJGq/uc30kPcRt1oBPL/2LqAaWKu1MRGv 5DYWgr+jVr35V2bJBgGZwkXdYznw+QIsPw8MQ9PPxmrpOX7eep0YpdJh+w5gQ+fV TOPjzjB+cSADNniuxscCR3/MwoUCsnZHVASelOCxfrnxOMFEol8= -----END CERTIFICATE-----Generated at Sat Aug 23 16:55:30 2025 by rpki-client