$ rpki-client -vvf repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft File: 2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft (raw, json) Hash identifier: zzfRvHMOC79PVARLBUmsqzK/yIyAc8+FMoQT1Cfe908= Subject key identifier: 68:56:EF:91:BF:DA:7C:30:C3:CA:C5:E2:D5:CA:BF:EC:BE:18:EB:86 Authority key identifier: 2E:A5:E6:62:51:DD:59:1E:7F:1F:48:55:AF:4B:AF:BB:64:4B:08:A9 Certificate issuer: /CN=2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9 Certificate serial: 69C8CF462C46474FE9C1B688EFEF96A32261FC2E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft Manifest number: 0243 Signing time: Tue 04 Nov 2025 19:32:02 +0000 Manifest this update: Tue 04 Nov 2025 19:27:02 +0000 Manifest next update: Fri 07 Nov 2025 23:18:02 +0000 Files and hashes: 1: 2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl (hash: 68YZlUinKWQkRP81yWvXCjLQJNKF5nNY5maP3Co+BMo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 23:18:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:c8:cf:46:2c:46:47:4f:e9:c1:b6:88:ef:ef:96:a3:22:61:fc:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9 Validity Not Before: Nov 4 19:27:02 2025 GMT Not After : Nov 7 23:18:02 2025 GMT Subject: CN=6856EF91BFDA7C30C3CAC5E2D5CABFECBE18EB86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:32:f0:7d:70:9a:a4:41:b8:c9:df:37:fb:18: 54:94:23:4d:e1:79:ad:a4:19:b1:b6:f3:47:f3:1d: 99:84:2a:f2:0e:39:5f:cd:83:39:5d:3f:b4:f0:90: ca:33:91:5d:a0:99:ee:1d:54:d5:37:1c:c8:95:04: 6f:c5:2e:f1:40:8f:4b:57:b5:15:73:b3:0d:06:cc: 2a:31:92:5f:13:53:48:21:9b:78:11:dc:9f:82:f2: 16:22:80:00:ee:68:75:ca:5c:79:9b:37:26:12:ed: f2:52:e0:89:df:ba:a7:2a:1e:8e:c0:28:5e:ed:d6: 89:b0:79:73:df:38:75:96:95:fa:93:d0:35:ea:35: 33:07:df:d1:4c:58:63:62:da:2c:94:5c:49:39:fc: c6:c3:c1:03:7c:70:f5:8e:14:3a:db:46:ab:e0:d8: 00:47:f4:d0:67:a0:23:69:a3:10:46:74:9a:c9:6b: cc:4d:d7:92:23:34:04:ec:57:8f:4a:13:9e:09:bb: 86:c7:9f:88:04:02:b6:f1:57:df:00:3d:5d:d5:c4: 47:06:96:40:5b:dd:70:6b:53:e0:68:d7:6b:83:ee: d6:fc:cb:7b:5d:a2:8a:bb:20:ed:f5:d9:e1:a9:8a: 18:44:a5:c0:87:f8:12:93:fa:a8:3e:aa:ed:bf:3f: 78:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:56:EF:91:BF:DA:7C:30:C3:CA:C5:E2:D5:CA:BF:EC:BE:18:EB:86 X509v3 Authority Key Identifier: keyid:2E:A5:E6:62:51:DD:59:1E:7F:1F:48:55:AF:4B:AF:BB:64:4B:08:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:4f:49:9c:60:7c:d8:34:53:0e:83:f4:d7:e7:98:4f:d0:29: d2:de:29:19:3e:19:6c:54:9a:44:6c:ea:32:b1:4d:89:69:e9: 6e:6a:d7:ff:2c:90:28:94:cc:3c:9f:cb:d3:8b:c3:04:87:55: 73:7f:48:36:f1:c8:f1:bc:59:48:12:aa:73:8f:c0:21:5f:0a: ad:23:5d:3a:af:85:8c:de:72:e7:96:cb:7f:64:97:48:c7:16: 94:ee:ea:06:d6:a6:34:1d:72:b7:ab:8b:a9:d1:4b:f3:1b:23: 74:65:c4:d9:48:71:0c:5c:4d:bb:00:3a:e2:db:b0:bc:4f:60: fb:03:d3:ec:16:3a:f0:1b:c6:34:1e:8b:e7:89:ba:8f:79:26: b8:ff:7a:64:07:ab:94:46:5c:4d:47:b1:7e:7a:1d:e1:08:81: 7b:63:c7:5d:90:b4:63:81:c9:bf:dd:b5:a7:13:c6:ba:9e:b1: d4:15:dc:f2:02:51:da:ba:b5:44:9a:c0:f1:4c:97:87:57:bd: 83:99:02:aa:66:aa:80:1a:1d:ec:c5:fd:cf:fc:5d:36:b5:f5: 19:d8:c0:e8:28:30:09:12:64:a1:7d:92:7c:0b:cf:a6:53:e4: 29:c1:e2:3e:57:33:be:fa:9e:c6:a6:c5:bb:b1:27:9d:dc:17: dd:03:dc:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUacjPRixGR0/pwbaI7++WoyJh/C4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFGQkI2 NDRCMDhBOTAeFw0yNTExMDQxOTI3MDJaFw0yNTExMDcyMzE4MDJaMDMxMTAvBgNV BAMTKDY4NTZFRjkxQkZEQTdDMzBDM0NBQzVFMkQ1Q0FCRkVDQkUxOEVCODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfMvB9cJqkQbjJ3zf7GFSUI03h ea2kGbG280fzHZmEKvIOOV/NgzldP7TwkMozkV2gme4dVNU3HMiVBG/FLvFAj0tX tRVzsw0GzCoxkl8TU0ghm3gR3J+C8hYigADuaHXKXHmbNyYS7fJS4InfuqcqHo7A KF7t1omweXPfOHWWlfqT0DXqNTMH39FMWGNi2iyUXEk5/MbDwQN8cPWOFDrbRqvg 2ABH9NBnoCNpoxBGdJrJa8xN15IjNATsV49KE54Ju4bHn4gEArbxV98APV3VxEcG lkBb3XBrU+Bo12uD7tb8y3tdooq7IO312eGpihhEpcCH+BKT+qg+qu2/P3gNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaFbvkb/afDDDysXi1cq/7L4Y64YwHwYDVR0j BBgwFoAULqXmYlHdWR5/H0hVr0uvu2RLCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 Y2IyOTI4ZS05YjM5LTRhOTAtOTdkMi0wNGNmNjVmZTk1NzgvMC8yRUE1RTY2MjUx REQ1OTFFN0YxRjQ4NTVBRjRCQUZCQjY0NEIwOEE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFGQkI2NDRC MDhBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmNiMjkyOGUtOWIzOS00YTkwLTk3 ZDItMDRjZjY1ZmU5NTc4LzAvMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFG QkI2NDRCMDhBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA5PSZxgfNg0Uw6D9NfnmE/QKdLeKRk+GWxU mkRs6jKxTYlp6W5q1/8skCiUzDyfy9OLwwSHVXN/SDbxyPG8WUgSqnOPwCFfCq0j XTqvhYzecueWy39kl0jHFpTu6gbWpjQdcreri6nRS/MbI3RlxNlIcQxcTbsAOuLb sLxPYPsD0+wWOvAbxjQei+eJuo95Jrj/emQHq5RGXE1HsX56HeEIgXtjx12QtGOB yb/dtacTxrqesdQV3PICUdq6tUSawPFMl4dXvYOZAqpmqoAaHezF/c/8XTa19RnY wOgoMAkSZKF9knwLz6ZT5CnB4j5XM776nsamxbuxJ53cF90D3D4= -----END CERTIFICATE-----Generated at Wed Nov 5 09:33:52 2025 by rpki-client