$ rpki-client -vvf repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft File: 2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft (raw, json) Hash identifier: ZUWIfBpwtCypUHmt7nWbjHIybjpgIkY6eGmRbgOSZ1I= Subject key identifier: 8E:27:2C:80:72:B3:9A:BF:63:FE:4E:D0:CB:A3:B2:09:51:1A:E7:C6 Authority key identifier: 2E:A5:E6:62:51:DD:59:1E:7F:1F:48:55:AF:4B:AF:BB:64:4B:08:A9 Certificate issuer: /CN=2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9 Certificate serial: 6605E1DC91BEA4ABC1F22D84B742E2384BB0903D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft Manifest number: 021B Signing time: Tue 05 Aug 2025 22:22:03 +0000 Manifest this update: Tue 05 Aug 2025 22:17:03 +0000 Manifest next update: Sat 09 Aug 2025 07:26:03 +0000 Files and hashes: 1: 2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl (hash: x9ytVCPIk02BiRltnnv5IcrpYEDVWC1YGgAd/JzEpf8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 07:26:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:05:e1:dc:91:be:a4:ab:c1:f2:2d:84:b7:42:e2:38:4b:b0:90:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9 Validity Not Before: Aug 5 22:17:03 2025 GMT Not After : Aug 9 07:26:03 2025 GMT Subject: CN=8E272C8072B39ABF63FE4ED0CBA3B209511AE7C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4a:88:fb:b7:9c:f7:30:19:cd:ac:5e:d8:19: ef:53:fc:6e:53:86:ad:d3:99:d3:36:fc:29:5a:38: 01:6d:64:28:ae:e0:cf:ac:38:72:55:43:55:20:80: cd:d0:ee:ea:15:0b:1a:90:63:08:4e:e4:4c:1d:ac: 15:2f:81:c0:76:c9:24:6c:08:fb:bd:94:80:bc:4e: 60:2a:02:65:80:eb:4f:eb:b2:29:2f:32:30:b5:3a: a4:31:ef:3f:e9:d9:b9:c2:a7:1a:42:02:85:d1:90: 27:ae:b8:c5:db:18:04:e6:4e:9e:43:37:b8:d9:e1: 0a:06:a1:d4:60:95:7f:00:6d:6f:d6:94:54:e4:27: 3b:96:ce:68:59:f0:b4:4c:1e:e4:af:5d:71:89:cf: 68:55:95:97:da:97:9b:fa:76:b2:e1:46:e8:a1:3c: 07:22:30:30:d1:ea:34:63:1f:99:44:ee:14:83:35: 10:dd:ef:76:98:fe:a7:83:8d:79:6f:89:40:34:66: fb:d8:f0:90:fb:49:38:8a:34:2f:e1:86:57:1f:ae: c9:a4:b6:16:49:9b:8a:f3:ae:c3:ff:3a:f0:14:e8: af:43:ae:27:47:2c:8d:e3:99:dc:24:ed:20:4d:d7: ed:cc:a0:50:a5:56:8a:c8:43:dd:97:03:d4:19:67: 9b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:27:2C:80:72:B3:9A:BF:63:FE:4E:D0:CB:A3:B2:09:51:1A:E7:C6 X509v3 Authority Key Identifier: keyid:2E:A5:E6:62:51:DD:59:1E:7F:1F:48:55:AF:4B:AF:BB:64:4B:08:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:03:63:15:61:81:61:79:b2:b0:fd:5a:08:e9:30:06:31:9c: 4d:63:21:80:e0:b0:99:45:af:c5:14:65:a0:4b:2d:7e:3c:ab: d3:29:ee:48:d8:1a:cc:37:d4:f8:ca:82:fa:c0:8f:8e:fa:88: f2:df:4b:c6:90:b2:0f:93:7d:59:47:53:d8:03:1f:f1:84:59: ca:b9:64:fd:d3:36:9f:4d:88:36:63:bd:b1:b0:96:28:58:7f: 1e:be:52:68:d1:a0:d4:5b:3c:11:16:64:b1:7b:0d:56:2f:9e: 47:ab:46:b3:61:c5:92:9b:e9:5e:21:53:8b:38:46:24:d2:6f: e3:08:b6:07:3f:4b:2a:59:1b:fa:6a:81:04:ae:bc:78:f9:66: 0c:da:cd:17:6e:17:16:86:1d:53:a4:62:a4:d0:17:1e:bb:6c: 31:6d:aa:60:8e:59:92:49:8e:0a:af:d9:07:73:41:6e:43:e7: 55:e5:89:e1:c2:49:0b:dc:3d:b8:c4:79:9e:32:77:2e:76:cf: 2f:31:24:6b:31:4c:42:85:54:ce:e6:4b:25:d5:c9:00:a3:8a: 68:49:c8:ea:35:6f:68:bc:03:5e:06:4e:d3:c9:e2:4c:06:79: 9f:fd:09:c9:0e:2d:f8:c9:45:22:39:62:f3:4a:29:e7:ae:7b: 42:1a:d2:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZgXh3JG+pKvB8i2Et0LiOEuwkD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFGQkI2 NDRCMDhBOTAeFw0yNTA4MDUyMjE3MDNaFw0yNTA4MDkwNzI2MDNaMDMxMTAvBgNV BAMTKDhFMjcyQzgwNzJCMzlBQkY2M0ZFNEVEMENCQTNCMjA5NTExQUU3QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaSoj7t5z3MBnNrF7YGe9T/G5T hq3TmdM2/ClaOAFtZCiu4M+sOHJVQ1UggM3Q7uoVCxqQYwhO5EwdrBUvgcB2ySRs CPu9lIC8TmAqAmWA60/rsikvMjC1OqQx7z/p2bnCpxpCAoXRkCeuuMXbGATmTp5D N7jZ4QoGodRglX8AbW/WlFTkJzuWzmhZ8LRMHuSvXXGJz2hVlZfal5v6drLhRuih PAciMDDR6jRjH5lE7hSDNRDd73aY/qeDjXlviUA0ZvvY8JD7STiKNC/hhlcfrsmk thZJm4rzrsP/OvAU6K9DridHLI3jmdwk7SBN1+3MoFClVorIQ92XA9QZZ5trAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjicsgHKzmr9j/k7Qy6OyCVEa58YwHwYDVR0j BBgwFoAULqXmYlHdWR5/H0hVr0uvu2RLCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 Y2IyOTI4ZS05YjM5LTRhOTAtOTdkMi0wNGNmNjVmZTk1NzgvMC8yRUE1RTY2MjUx REQ1OTFFN0YxRjQ4NTVBRjRCQUZCQjY0NEIwOEE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFGQkI2NDRC MDhBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmNiMjkyOGUtOWIzOS00YTkwLTk3 ZDItMDRjZjY1ZmU5NTc4LzAvMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFG QkI2NDRCMDhBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHEDYxVhgWF5srD9WgjpMAYxnE1jIYDgsJlF r8UUZaBLLX48q9Mp7kjYGsw31PjKgvrAj476iPLfS8aQsg+TfVlHU9gDH/GEWcq5 ZP3TNp9NiDZjvbGwlihYfx6+UmjRoNRbPBEWZLF7DVYvnkerRrNhxZKb6V4hU4s4 RiTSb+MItgc/SypZG/pqgQSuvHj5ZgzazRduFxaGHVOkYqTQFx67bDFtqmCOWZJJ jgqv2QdzQW5D51XlieHCSQvcPbjEeZ4ydy52zy8xJGsxTEKFVM7mSyXVyQCjimhJ yOo1b2i8A14GTtPJ4kwGeZ/9CckOLfjJRSI5YvNKKeeue0Ia0uM= -----END CERTIFICATE-----Generated at Thu Aug 7 05:01:17 2025 by rpki-client