$ rpki-client -vvf repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft File: 2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft (raw, json) Hash identifier: TPzfBBlyXPGT4AQCItao+xW/9GI9WGkVrNbYm8EOLto= Subject key identifier: E4:6B:27:8E:D5:60:AA:2A:44:2C:8B:4D:B6:4F:C1:89:C8:EF:C8:45 Authority key identifier: 2E:8B:AC:7E:81:91:1F:08:A1:89:CA:9F:DD:32:A6:43:C8:8E:05:B7 Certificate issuer: /CN=2E8BAC7E81911F08A189CA9FDD32A643C88E05B7 Certificate serial: 59477F9196E9672D4024001F6B0C5BDF81EEC17D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft Manifest number: 010B Signing time: Sat 28 Jun 2025 01:20:50 +0000 Manifest this update: Sat 28 Jun 2025 01:15:50 +0000 Manifest next update: Tue 01 Jul 2025 06:39:50 +0000 Files and hashes: 1: 2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl (hash: zMjhGozHIyJkJbLofKl96xZupe2fPpkiacw3amUTqsM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 06:39:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:47:7f:91:96:e9:67:2d:40:24:00:1f:6b:0c:5b:df:81:ee:c1:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E8BAC7E81911F08A189CA9FDD32A643C88E05B7 Validity Not Before: Jun 28 01:15:50 2025 GMT Not After : Jul 1 06:39:50 2025 GMT Subject: CN=E46B278ED560AA2A442C8B4DB64FC189C8EFC845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:36:6e:a9:ba:d8:f3:c1:cc:89:8d:07:72:ff: ee:83:de:ba:b6:eb:8a:de:6a:35:dc:47:28:33:c4: 20:c8:30:3b:a7:81:2b:bd:be:d3:7c:e2:e6:8c:89: 3c:f5:2f:7b:63:cf:64:90:bf:02:b7:84:3b:56:8a: f6:5f:20:12:8d:3f:f5:84:e8:10:c4:60:38:0d:92: e2:66:2f:75:9d:c6:1c:92:b4:ab:36:12:36:9c:9b: 76:75:0c:e4:dd:0d:11:55:1b:09:bb:86:b2:d9:dd: 50:fe:e0:e5:d2:39:9a:77:4f:24:6d:40:84:f1:0e: 59:bd:29:31:d2:72:7b:49:89:f4:aa:99:c3:02:c3: ec:f4:9c:6b:3b:f8:9c:4f:71:4b:57:05:5b:e3:2a: 28:1f:3d:b5:7b:a2:2d:af:fe:30:c7:12:97:8f:54: d7:0f:81:75:48:0a:84:37:42:0b:a3:04:9b:9e:5a: e3:75:22:db:4e:49:f0:e7:41:0f:eb:1d:42:82:fc: 2e:91:61:34:62:46:2f:1e:5e:3c:79:97:92:6f:69: 8e:0a:07:eb:b9:33:65:48:e2:00:17:16:55:ea:ed: 41:f8:74:75:a5:75:fb:26:8b:73:98:fa:d7:94:80: fb:cb:8b:68:f4:38:32:23:d9:86:99:1a:fc:1e:93: 46:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:6B:27:8E:D5:60:AA:2A:44:2C:8B:4D:B6:4F:C1:89:C8:EF:C8:45 X509v3 Authority Key Identifier: keyid:2E:8B:AC:7E:81:91:1F:08:A1:89:CA:9F:DD:32:A6:43:C8:8E:05:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:3e:ec:61:74:c3:97:ca:83:59:66:e9:ca:13:cc:d9:27:91: b3:8f:dc:91:a5:17:ad:b6:4e:4a:37:e5:02:0c:a4:b1:41:21: 6e:fb:a7:f4:f1:7a:1e:e0:8d:b9:ae:cf:2c:bf:2e:12:45:fb: bc:51:59:3c:3d:34:7e:d0:3d:53:16:23:9a:fc:5c:e3:08:fc: 2b:af:43:57:ba:5c:61:10:22:6b:43:5a:9f:71:73:cc:d4:e3: 35:14:9e:92:1f:04:f4:60:9c:d1:8a:fa:46:70:a0:fd:ce:88: cb:18:87:54:f9:21:31:71:01:3c:15:5e:6c:98:d5:3d:c0:84: 3c:c5:db:be:5d:43:8a:17:9c:c3:ac:2d:e3:c0:9e:f1:45:d3: a8:42:4a:6a:21:df:de:ca:62:23:63:05:dc:c5:aa:e4:5d:90: af:51:c8:23:ac:24:0d:c4:4e:0d:1a:90:7e:4a:cd:4a:8b:ff: 32:58:95:c5:52:e3:ad:7e:18:17:31:29:d7:66:cd:f9:b1:6e: b4:61:58:41:0a:43:97:61:16:e3:47:0a:95:6a:db:f1:bb:63: d6:53:e0:74:32:14:73:5c:1d:d7:94:09:51:7b:54:e5:6f:05: 82:96:8b:8a:ed:4b:90:66:3f:d4:51:0f:c4:a5:ea:ff:cc:21: 75:ed:55:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWUd/kZbpZy1AJAAfawxb34HuwX0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2NDND ODhFMDVCNzAeFw0yNTA2MjgwMTE1NTBaFw0yNTA3MDEwNjM5NTBaMDMxMTAvBgNV BAMTKEU0NkIyNzhFRDU2MEFBMkE0NDJDOEI0REI2NEZDMTg5QzhFRkM4NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJNm6putjzwcyJjQdy/+6D3rq2 64reajXcRygzxCDIMDungSu9vtN84uaMiTz1L3tjz2SQvwK3hDtWivZfIBKNP/WE 6BDEYDgNkuJmL3WdxhyStKs2Ejacm3Z1DOTdDRFVGwm7hrLZ3VD+4OXSOZp3TyRt QITxDlm9KTHScntJifSqmcMCw+z0nGs7+JxPcUtXBVvjKigfPbV7oi2v/jDHEpeP VNcPgXVICoQ3QgujBJueWuN1IttOSfDnQQ/rHUKC/C6RYTRiRi8eXjx5l5JvaY4K B+u5M2VI4gAXFlXq7UH4dHWldfsmi3OY+teUgPvLi2j0ODIj2YaZGvwek0Z3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5GsnjtVgqipELItNtk/BicjvyEUwHwYDVR0j BBgwFoAULousfoGRHwihicqf3TKmQ8iOBbcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mjg2MjZlMC0yOWZlLTRlODYtODRkNi02ODQ3OGM1Y2Q5ZWQvMC8yRThCQUM3RTgx OTExRjA4QTE4OUNBOUZERDMyQTY0M0M4OEUwNUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2NDNDODhF MDVCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI4NjI2ZTAtMjlmZS00ZTg2LTg0 ZDYtNjg0NzhjNWNkOWVkLzAvMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2 NDNDODhFMDVCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAw+7GF0w5fKg1lm6coTzNknkbOP3JGlF622 Tko35QIMpLFBIW77p/Txeh7gjbmuzyy/LhJF+7xRWTw9NH7QPVMWI5r8XOMI/Cuv Q1e6XGEQImtDWp9xc8zU4zUUnpIfBPRgnNGK+kZwoP3OiMsYh1T5ITFxATwVXmyY 1T3AhDzF275dQ4oXnMOsLePAnvFF06hCSmoh397KYiNjBdzFquRdkK9RyCOsJA3E Tg0akH5KzUqL/zJYlcVS461+GBcxKddmzfmxbrRhWEEKQ5dhFuNHCpVq2/G7Y9ZT 4HQyFHNcHdeUCVF7VOVvBYKWi4rtS5BmP9RRD8Sl6v/MIXXtVaY= -----END CERTIFICATE-----Generated at Sun Jun 29 23:34:45 2025 by rpki-client