$ rpki-client -vvf repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft File: 2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft (raw, json) Hash identifier: N1238Ul9Pa4IB6onX4GTLYf79WJwqUj4zrlZZj1BRHo= Subject key identifier: D8:99:94:59:A1:70:51:A3:0E:EF:43:4E:81:CB:92:D3:24:C5:9F:13 Authority key identifier: 2A:86:5C:A2:F4:F7:0C:CC:B0:3F:98:C2:B6:E1:7E:89:3A:B8:7D:0C Certificate issuer: /CN=2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C Certificate serial: 1CB620FB75DFCE46D264D39DD3A8BB19B6FDC2E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft Manifest number: 01F6 Signing time: Wed 06 Aug 2025 18:01:52 +0000 Manifest this update: Wed 06 Aug 2025 17:56:52 +0000 Manifest next update: Sun 10 Aug 2025 03:05:52 +0000 Files and hashes: 1: 2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl (hash: lh2NjN/6xhrFnmlH2B0gDv2D+umEMi7nn+WuLiZcaFc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 03:05:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:b6:20:fb:75:df:ce:46:d2:64:d3:9d:d3:a8:bb:19:b6:fd:c2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C Validity Not Before: Aug 6 17:56:52 2025 GMT Not After : Aug 10 03:05:52 2025 GMT Subject: CN=D8999459A17051A30EEF434E81CB92D324C59F13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8c:71:3b:c1:ae:f4:af:2b:de:4d:3a:71:07: 5e:79:00:2d:b8:5d:a1:ff:d6:a3:b2:d7:05:6d:83: 07:72:97:b5:7d:fe:95:3a:9e:04:c8:0d:44:3c:71: 14:68:61:79:c0:b5:17:98:f0:0a:19:f6:12:22:b6: bb:08:f6:7e:7c:2a:a2:2c:dd:72:3d:e9:78:c2:43: e8:0f:d4:9a:fe:51:99:38:32:05:eb:01:cd:06:5c: f8:45:60:b2:45:a7:eb:ab:a8:a5:69:b4:50:8e:c0: 09:b9:77:bd:07:6c:03:cd:df:55:c0:f5:b1:e7:55: 19:28:47:10:76:92:0b:1c:21:4a:83:7e:7b:9e:a2: d6:0c:f6:20:d6:57:cb:b6:7b:2f:f2:d7:f4:4e:62: b7:91:72:13:f3:60:15:88:5f:63:39:bb:41:2c:45: 61:87:bc:2c:42:86:80:54:6f:17:74:d2:c9:e8:ad: 88:35:35:aa:99:0c:69:37:ff:60:0e:cb:65:2e:6d: 3b:ce:c0:d5:ee:71:1b:9d:e8:e8:fb:e8:b5:47:95: 21:e7:fa:ff:3c:89:17:b6:25:9f:0e:0d:5c:24:60: 5e:94:eb:24:c8:3a:59:0c:86:c9:20:94:7b:27:ee: 89:dd:1e:04:58:98:71:c7:53:d6:58:04:a6:23:1c: b1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:99:94:59:A1:70:51:A3:0E:EF:43:4E:81:CB:92:D3:24:C5:9F:13 X509v3 Authority Key Identifier: keyid:2A:86:5C:A2:F4:F7:0C:CC:B0:3F:98:C2:B6:E1:7E:89:3A:B8:7D:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:9d:11:92:dc:b0:f5:e3:fe:cb:3f:5a:03:44:b2:fb:fe:e8: 23:c4:6b:56:db:a7:5a:73:e3:03:f2:60:92:bf:ab:ea:3a:27: 6d:ac:07:28:30:34:4c:66:4d:88:3e:b9:53:ac:f0:74:8f:da: ea:f0:93:4b:dd:d8:a7:f4:f3:22:39:7b:e7:b3:0e:0b:ef:62: 3e:a6:29:6d:16:13:20:49:e9:10:ed:31:f0:03:77:ec:bd:cd: 55:88:a0:b6:75:ee:4e:0f:16:43:a2:dd:09:5e:70:5c:82:eb: 6f:c7:4b:49:b1:b6:67:60:79:cc:3e:1e:f0:5d:d0:f7:c1:d7: 25:24:de:50:8d:d4:d1:74:dd:83:31:44:42:f3:77:b1:6f:f0: 53:3f:d7:d9:f8:1a:1f:b6:18:19:7f:c8:05:1c:16:f5:0a:7f: cb:b6:1d:d1:eb:b0:62:4b:da:c2:77:cb:34:3e:fe:92:71:11: 18:62:12:2a:9e:03:64:64:41:67:d8:43:da:28:e1:46:5e:4d: dc:2e:2b:7f:6c:56:79:98:67:61:23:ad:43:98:80:3e:2d:b1: 7f:93:32:8a:25:47:32:d9:5f:7b:e5:1f:91:fe:94:eb:79:3c: a4:ee:f0:de:17:65:25:13:91:b7:c4:86:86:d1:7e:74:0b:47: 49:8c:61:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHLYg+3XfzkbSZNOd06i7Gbb9wuAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdFODkz QUI4N0QwQzAeFw0yNTA4MDYxNzU2NTJaFw0yNTA4MTAwMzA1NTJaMDMxMTAvBgNV BAMTKEQ4OTk5NDU5QTE3MDUxQTMwRUVGNDM0RTgxQ0I5MkQzMjRDNTlGMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCijHE7wa70ryveTTpxB155AC24 XaH/1qOy1wVtgwdyl7V9/pU6ngTIDUQ8cRRoYXnAtReY8AoZ9hIitrsI9n58KqIs 3XI96XjCQ+gP1Jr+UZk4MgXrAc0GXPhFYLJFp+urqKVptFCOwAm5d70HbAPN31XA 9bHnVRkoRxB2kgscIUqDfnueotYM9iDWV8u2ey/y1/ROYreRchPzYBWIX2M5u0Es RWGHvCxChoBUbxd00snorYg1NaqZDGk3/2AOy2UubTvOwNXucRud6Oj76LVHlSHn +v88iRe2JZ8ODVwkYF6U6yTIOlkMhskglHsn7ondHgRYmHHHU9ZYBKYjHLE/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2JmUWaFwUaMO70NOgcuS0yTFnxMwHwYDVR0j BBgwFoAUKoZcovT3DMywP5jCtuF+iTq4fQwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDJiNzhhZC1kZjIzLTQzZTItYTk0ZC0zYjQ1NGNiYzdmYzUvMC8yQTg2NUNBMkY0 RjcwQ0NDQjAzRjk4QzJCNkUxN0U4OTNBQjg3RDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdFODkzQUI4 N0QwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAyYjc4YWQtZGYyMy00M2UyLWE5 NGQtM2I0NTRjYmM3ZmM1LzAvMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdF ODkzQUI4N0QwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADadEZLcsPXj/ss/WgNEsvv+6CPEa1bbp1pz 4wPyYJK/q+o6J22sBygwNExmTYg+uVOs8HSP2urwk0vd2Kf08yI5e+ezDgvvYj6m KW0WEyBJ6RDtMfADd+y9zVWIoLZ17k4PFkOi3QlecFyC62/HS0mxtmdgecw+HvBd 0PfB1yUk3lCN1NF03YMxRELzd7Fv8FM/19n4Gh+2GBl/yAUcFvUKf8u2HdHrsGJL 2sJ3yzQ+/pJxERhiEiqeA2RkQWfYQ9oo4UZeTdwuK39sVnmYZ2EjrUOYgD4tsX+T MoolRzLZX3vlH5H+lOt5PKTu8N4XZSUTkbfEhobRfnQLR0mMYWc= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:15 2025 by rpki-client