$ rpki-client -vvf repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft File: 2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft (raw, json) Hash identifier: ZfEpYFvCNrndziCxEqK6cYIcYOENK6sE3j3ZAELIYZk= Subject key identifier: A4:7C:26:A0:A4:96:01:FC:4D:A3:59:E2:5C:2E:9D:C1:8B:E6:5A:6B Authority key identifier: 2E:8B:AC:7E:81:91:1F:08:A1:89:CA:9F:DD:32:A6:43:C8:8E:05:B7 Certificate issuer: /CN=2E8BAC7E81911F08A189CA9FDD32A643C88E05B7 Certificate serial: 69CB41CCF01A0A0F0CD3F7DBE57324B044744EEC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft Manifest number: F5 Signing time: Fri 09 May 2025 03:00:49 +0000 Manifest this update: Fri 09 May 2025 02:55:49 +0000 Manifest next update: Mon 12 May 2025 05:06:49 +0000 Files and hashes: 1: 2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl (hash: vrValUb4l+muzqefTJfJv+nB3+JxMw/HjLlglR3h8YA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 05:06:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:cb:41:cc:f0:1a:0a:0f:0c:d3:f7:db:e5:73:24:b0:44:74:4e:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E8BAC7E81911F08A189CA9FDD32A643C88E05B7 Validity Not Before: May 9 02:55:49 2025 GMT Not After : May 12 05:06:49 2025 GMT Subject: CN=A47C26A0A49601FC4DA359E25C2E9DC18BE65A6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:30:52:72:34:0e:14:19:98:d9:b3:1d:de:ad: e3:bd:ac:62:64:57:47:f2:ca:84:3b:1a:65:b7:44: cf:11:b3:4d:d0:e5:02:5f:a9:e4:5a:e4:54:8f:45: 08:dc:bd:5d:2a:8d:b6:1f:3f:24:3b:7e:1a:28:29: 7f:88:1a:4e:61:89:c3:6d:49:c8:e3:38:3e:16:f9: 15:18:9a:a4:5e:f6:7a:62:e7:2f:91:df:6b:c6:10: 2c:f1:9a:e9:78:51:d3:14:7b:81:d2:78:9b:cb:31: 3a:fb:78:c3:c0:c2:5a:d2:35:63:f1:7c:2d:8f:81: 86:3f:1c:d3:3f:6c:bc:4d:db:1c:ab:00:84:df:ff: 65:35:ad:49:e0:2b:78:33:5b:e8:11:0b:0f:80:4e: 12:d6:9d:58:5e:04:24:2d:1b:c9:95:d1:9d:7e:12: 4a:1c:1e:df:34:89:cf:ef:60:02:cb:ac:34:d9:ba: ad:26:56:3d:a1:61:64:42:19:48:b3:16:12:84:7f: e5:d9:c8:77:4c:43:2a:0c:81:df:63:73:09:b2:97: 8e:6f:42:2f:69:2d:01:3c:fb:52:91:30:b9:ef:42: 11:54:6c:3c:0e:0c:b7:89:e5:11:10:72:8c:d6:25: e8:7a:f6:83:64:02:d4:64:6c:6a:52:5e:8c:6d:04: b2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:7C:26:A0:A4:96:01:FC:4D:A3:59:E2:5C:2E:9D:C1:8B:E6:5A:6B X509v3 Authority Key Identifier: keyid:2E:8B:AC:7E:81:91:1F:08:A1:89:CA:9F:DD:32:A6:43:C8:8E:05:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:15:24:ca:14:7d:1b:0d:89:62:b6:91:b4:57:8d:56:95:6f: 9c:a8:21:84:61:30:9e:2a:fc:5e:10:00:87:ca:9f:ba:19:ee: 4a:26:2d:af:4c:aa:07:19:22:12:ec:aa:75:8a:6e:df:00:d9: eb:b8:4f:26:cd:52:19:65:13:e9:aa:f9:99:bc:85:6f:a0:5d: 5b:0d:66:0e:39:b3:22:df:3e:ec:cc:a2:cc:fc:b5:d7:fc:de: d5:25:c2:5c:32:24:16:34:e9:5a:c9:30:52:d3:1b:8f:d9:5e: 63:8f:03:4c:42:9f:04:57:7d:55:44:f8:77:63:93:a0:4e:88: e7:0e:12:44:75:6d:68:85:07:a1:ba:29:84:fe:29:cd:02:f3: 85:7d:16:55:9d:cd:ef:eb:1a:f7:e9:6e:d8:f6:68:bb:0f:f4: 9f:75:2e:b1:40:2f:7c:64:4b:92:da:f3:83:57:6c:40:2b:45: 38:f8:ff:3e:33:ad:2e:d5:db:d0:68:99:23:f8:db:68:7b:33: 26:48:75:89:49:d8:9f:a5:0b:9f:11:0b:b6:9d:d1:7a:2f:c7: 4a:bc:17:a0:fa:79:f7:a6:36:91:f2:97:59:f3:2d:cc:27:ab: e0:a0:e7:e3:da:25:5f:fc:9a:78:29:25:c7:f9:ff:64:f2:4b: 3e:e5:53:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUactBzPAaCg8M0/fb5XMksER0TuwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2NDND ODhFMDVCNzAeFw0yNTA1MDkwMjU1NDlaFw0yNTA1MTIwNTA2NDlaMDMxMTAvBgNV BAMTKEE0N0MyNkEwQTQ5NjAxRkM0REEzNTlFMjVDMkU5REMxOEJFNjVBNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiMFJyNA4UGZjZsx3ereO9rGJk V0fyyoQ7GmW3RM8Rs03Q5QJfqeRa5FSPRQjcvV0qjbYfPyQ7fhooKX+IGk5hicNt ScjjOD4W+RUYmqRe9npi5y+R32vGECzxmul4UdMUe4HSeJvLMTr7eMPAwlrSNWPx fC2PgYY/HNM/bLxN2xyrAITf/2U1rUngK3gzW+gRCw+AThLWnVheBCQtG8mV0Z1+ EkocHt80ic/vYALLrDTZuq0mVj2hYWRCGUizFhKEf+XZyHdMQyoMgd9jcwmyl45v Qi9pLQE8+1KRMLnvQhFUbDwODLeJ5REQcozWJeh69oNkAtRkbGpSXoxtBLJrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpHwmoKSWAfxNo1niXC6dwYvmWmswHwYDVR0j BBgwFoAULousfoGRHwihicqf3TKmQ8iOBbcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mjg2MjZlMC0yOWZlLTRlODYtODRkNi02ODQ3OGM1Y2Q5ZWQvMC8yRThCQUM3RTgx OTExRjA4QTE4OUNBOUZERDMyQTY0M0M4OEUwNUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2NDNDODhF MDVCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI4NjI2ZTAtMjlmZS00ZTg2LTg0 ZDYtNjg0NzhjNWNkOWVkLzAvMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2 NDNDODhFMDVCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD8VJMoUfRsNiWK2kbRXjVaVb5yoIYRhMJ4q /F4QAIfKn7oZ7komLa9MqgcZIhLsqnWKbt8A2eu4TybNUhllE+mq+Zm8hW+gXVsN Zg45syLfPuzMosz8tdf83tUlwlwyJBY06VrJMFLTG4/ZXmOPA0xCnwRXfVVE+Hdj k6BOiOcOEkR1bWiFB6G6KYT+Kc0C84V9FlWdze/rGvfpbtj2aLsP9J91LrFAL3xk S5La84NXbEArRTj4/z4zrS7V29BomSP422h7MyZIdYlJ2J+lC58RC7ad0Xovx0q8 F6D6efemNpHyl1nzLcwnq+Cg5+PaJV/8mngpJcf5/2TySz7lUyg= -----END CERTIFICATE-----Generated at Sat May 10 23:10:44 2025 by rpki-client