$ rpki-client -vvf repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft File: 2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft (raw, json) Hash identifier: PEBLF7aisVgxcpWWWR106tgUibI8m1a8gzqe3k8D+Qw= Subject key identifier: 2E:88:5E:2A:2B:AB:7B:4A:AF:8B:D2:42:E2:7C:F6:AE:D5:C6:2D:25 Authority key identifier: 25:66:F4:DF:5C:09:FF:A8:E4:F4:D6:99:99:41:B9:AB:A2:B7:22:8B Certificate issuer: /CN=2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B Certificate serial: 3B8B85648520EF4954B760F842F6621988683410 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft Manifest number: EB Signing time: Sun 29 Jun 2025 12:02:01 +0000 Manifest this update: Sun 29 Jun 2025 11:57:01 +0000 Manifest next update: Wed 02 Jul 2025 21:55:01 +0000 Files and hashes: 1: 2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.crl (hash: KXQbfjZJEHLBzkLznTIEeey5MeZmUxtP+1Brc+ZsOxI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.crl rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 21:55:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:8b:85:64:85:20:ef:49:54:b7:60:f8:42:f6:62:19:88:68:34:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B Validity Not Before: Jun 29 11:57:01 2025 GMT Not After : Jul 2 21:55:01 2025 GMT Subject: CN=2E885E2A2BAB7B4AAF8BD242E27CF6AED5C62D25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:09:13:04:b6:a1:ae:f2:96:9b:06:32:02:1d: 4f:4d:52:dd:04:07:4d:ae:eb:b5:e1:85:f1:1c:93: c9:87:f0:f2:87:9e:c6:f0:24:f6:60:91:76:90:2c: 58:f7:28:a4:47:b3:0a:2a:4e:e9:37:86:8f:b3:76: 7d:5a:24:b3:66:ce:5e:dc:5e:4a:3a:a7:70:60:d0: 82:35:c6:5a:43:6b:75:2b:5b:5b:81:60:4e:78:1d: 5f:ce:cf:98:53:8d:cb:7c:f7:24:74:53:dd:a9:62: 20:dc:f9:81:fd:b9:92:1c:36:7b:17:a5:48:99:37: 9c:8d:72:13:b7:ef:b5:11:a4:8d:c1:fe:99:29:e0: dc:1f:e6:93:28:f8:b5:f5:dc:cb:81:a3:3a:ac:ef: 34:35:79:c0:1b:46:60:d5:ce:e6:43:b3:95:48:12: b3:36:f7:ae:50:0c:6e:b8:46:e0:c6:ed:b7:36:9f: 03:c6:57:62:1f:0a:28:ad:80:8a:0d:46:48:be:22: 59:f3:04:c6:f9:56:9d:c9:d2:f6:66:ac:3b:09:9c: 9a:43:a9:cf:1b:69:f3:19:d6:6e:38:e3:62:0b:32: 70:6a:9c:9c:d1:36:75:b6:74:ba:66:55:78:cc:4d: b2:df:49:bf:be:e2:44:e2:fc:0a:9c:14:77:5c:d8: 41:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:88:5E:2A:2B:AB:7B:4A:AF:8B:D2:42:E2:7C:F6:AE:D5:C6:2D:25 X509v3 Authority Key Identifier: keyid:25:66:F4:DF:5C:09:FF:A8:E4:F4:D6:99:99:41:B9:AB:A2:B7:22:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:2a:0c:ed:43:73:3c:e5:76:5c:05:48:56:35:28:3e:28:0a: a9:07:c5:93:52:a1:2c:24:dc:fc:08:7b:c2:05:f9:49:26:68: ca:9a:ce:b1:86:d9:15:43:94:02:60:c2:48:b3:70:9f:a3:cf: 38:10:e7:bc:d9:16:d2:49:1d:2e:df:43:77:f7:2a:1c:6a:af: 45:cd:56:a7:5e:31:a5:b3:18:91:2e:e9:51:09:27:dc:ab:23: a8:48:af:3e:b2:cb:ca:d8:2e:bd:a6:90:b6:4e:fa:f2:9b:eb: 40:62:55:65:99:e2:4c:f5:ad:58:3f:ae:65:1e:35:a7:ad:d2: d4:ac:c7:05:0f:54:2f:33:51:fb:0d:39:e2:af:28:6b:ae:e8: f1:0f:ad:cf:bb:a0:34:8a:f0:8b:00:35:09:16:e9:2e:77:74: 9e:4d:fd:37:2c:05:64:6f:f8:0c:f6:d9:f1:76:d1:a6:79:ac: 6b:69:1e:f5:de:ee:cb:2a:29:11:66:da:10:5e:1b:16:79:96: 29:ae:2d:be:94:8b:95:c8:ba:c2:c0:67:5a:74:93:b2:5d:4b: ad:d6:ae:38:12:2e:b6:e0:e4:8e:0a:65:84:d2:a0:e2:2e:7f: 06:b0:33:94:42:b3:2f:34:b5:2f:da:9f:ad:40:a2:d7:6b:03: 01:8a:1e:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO4uFZIUg70lUt2D4QvZiGYhoNBAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU2NkY0REY1QzA5RkZBOEU0RjRENjk5OTk0MUI5QUJB MkI3MjI4QjAeFw0yNTA2MjkxMTU3MDFaFw0yNTA3MDIyMTU1MDFaMDMxMTAvBgNV BAMTKDJFODg1RTJBMkJBQjdCNEFBRjhCRDI0MkUyN0NGNkFFRDVDNjJEMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaCRMEtqGu8pabBjICHU9NUt0E B02u67XhhfEck8mH8PKHnsbwJPZgkXaQLFj3KKRHswoqTuk3ho+zdn1aJLNmzl7c Xko6p3Bg0II1xlpDa3UrW1uBYE54HV/Oz5hTjct89yR0U92pYiDc+YH9uZIcNnsX pUiZN5yNchO377URpI3B/pkp4Nwf5pMo+LX13MuBozqs7zQ1ecAbRmDVzuZDs5VI ErM2965QDG64RuDG7bc2nwPGV2IfCiitgIoNRki+IlnzBMb5Vp3J0vZmrDsJnJpD qc8bafMZ1m4442ILMnBqnJzRNnW2dLpmVXjMTbLfSb++4kTi/AqcFHdc2EH5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULoheKiure0qvi9JC4nz2rtXGLSUwHwYDVR0j BBgwFoAUJWb031wJ/6jk9NaZmUG5q6K3IoswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTE2NDExZi03OGNhLTQ5MTYtODkxOS0zN2MxZDk5ZWZiZDgvMC8yNTY2RjRERjVD MDlGRkE4RTRGNEQ2OTk5OTQxQjlBQkEyQjcyMjhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU2NkY0REY1QzA5RkZBOEU0RjRENjk5OTk0MUI5QUJBMkI3 MjI4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkxNjQxMWYtNzhjYS00OTE2LTg5 MTktMzdjMWQ5OWVmYmQ4LzAvMjU2NkY0REY1QzA5RkZBOEU0RjRENjk5OTk0MUI5 QUJBMkI3MjI4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM0qDO1DczzldlwFSFY1KD4oCqkHxZNSoSwk 3PwIe8IF+UkmaMqazrGG2RVDlAJgwkizcJ+jzzgQ57zZFtJJHS7fQ3f3Khxqr0XN VqdeMaWzGJEu6VEJJ9yrI6hIrz6yy8rYLr2mkLZO+vKb60BiVWWZ4kz1rVg/rmUe Naet0tSsxwUPVC8zUfsNOeKvKGuu6PEPrc+7oDSK8IsANQkW6S53dJ5N/TcsBWRv +Az22fF20aZ5rGtpHvXe7ssqKRFm2hBeGxZ5limuLb6Ui5XIusLAZ1p0k7JdS63W rjgSLrbg5I4KZYTSoOIufwawM5RCsy80tS/an61AotdrAwGKHrQ= -----END CERTIFICATE-----Generated at Mon Jun 30 11:48:16 2025 by rpki-client