$ rpki-client -vvf repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft File: 2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft (raw, json) Hash identifier: uPuYNeZ8tRE61SFvV8P8ATDm4Ca7NHF/bhkP8rbvOc0= Subject key identifier: 8D:81:82:89:2B:13:0F:F3:40:68:A0:F6:A9:C3:00:35:57:2E:03:8E Authority key identifier: 2E:8B:AC:7E:81:91:1F:08:A1:89:CA:9F:DD:32:A6:43:C8:8E:05:B7 Certificate issuer: /CN=2E8BAC7E81911F08A189CA9FDD32A643C88E05B7 Certificate serial: 46F4D47E580213F6852242E62E6058D05FD48947 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft Manifest number: 0105 Signing time: Sat 14 Jun 2025 08:21:49 +0000 Manifest this update: Sat 14 Jun 2025 08:16:49 +0000 Manifest next update: Tue 17 Jun 2025 17:34:49 +0000 Files and hashes: 1: 2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl (hash: lE2rjX3A+JWrHpdo647fh3rifZ0tqu9cavBAZ9AVJPs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 17:34:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:f4:d4:7e:58:02:13:f6:85:22:42:e6:2e:60:58:d0:5f:d4:89:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E8BAC7E81911F08A189CA9FDD32A643C88E05B7 Validity Not Before: Jun 14 08:16:49 2025 GMT Not After : Jun 17 17:34:49 2025 GMT Subject: CN=8D8182892B130FF34068A0F6A9C30035572E038E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:84:55:0c:ee:94:54:85:f5:9e:86:41:fd:05: b7:f1:d7:27:2c:e8:63:84:3d:aa:2a:d3:b3:15:74: 34:55:47:1e:eb:6b:89:85:9a:5a:3d:f8:d1:64:ff: 51:95:73:20:5e:63:23:e3:26:e0:d8:b1:f0:23:c2: 20:50:af:3f:27:f5:10:3f:85:de:ca:44:e4:2b:65: b5:4b:16:65:4d:2d:28:55:4a:42:e1:7d:3c:7c:5a: 20:8e:3e:71:9f:bc:97:3c:11:c9:96:01:b1:a0:31: af:73:66:ed:13:10:e8:ed:74:0e:a0:c6:dc:75:d2: 42:03:dc:62:88:de:5d:ff:43:98:b4:bb:6c:af:55: 47:1d:fd:b6:79:69:21:a1:f6:10:cc:41:7e:54:8b: a4:7d:cb:01:8f:68:70:20:e9:e3:a8:11:90:7b:8b: d8:a6:ba:68:e4:00:ac:f0:31:7c:c7:cc:f9:f4:ed: 17:a3:cc:f0:e7:d6:40:e8:50:81:4a:df:ea:e7:fc: 70:e0:33:1e:af:51:2b:2a:5e:b5:df:c1:04:49:74: 8c:95:98:f3:76:f7:cb:1a:28:50:81:5e:e9:e5:e2: 81:7f:2c:82:2d:ff:04:d0:5e:f3:5f:0c:68:74:77: 36:10:de:7c:41:15:ec:48:00:76:99:c0:b2:f8:58: b7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:81:82:89:2B:13:0F:F3:40:68:A0:F6:A9:C3:00:35:57:2E:03:8E X509v3 Authority Key Identifier: keyid:2E:8B:AC:7E:81:91:1F:08:A1:89:CA:9F:DD:32:A6:43:C8:8E:05:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:ea:db:9d:e7:3a:39:36:d9:8e:b8:97:02:c9:af:da:d6:52: 9f:fb:d8:81:ca:1e:67:18:b2:71:56:ce:c4:f4:42:d0:f9:16: bb:19:a1:9a:ec:9a:c6:ad:a4:68:5d:9c:e2:8d:87:2a:5d:c2: bc:da:23:ca:8f:d9:1c:34:81:f2:4b:d3:2e:19:a5:07:12:d3: 96:e9:91:ea:7e:92:81:ea:58:fb:58:07:9d:54:58:e7:59:ec: ca:0f:b5:c7:84:f7:19:55:28:f9:2e:b2:d2:c0:d0:8d:74:13: ed:c3:49:6e:52:1a:e7:68:cb:33:a8:77:46:d5:89:8c:63:05: d6:3a:7b:e1:a2:1d:f8:da:79:00:4b:d0:a0:4c:35:27:f0:42: f7:aa:86:d3:b7:2e:0a:d5:45:19:85:e5:4f:8d:0a:8d:83:62: b2:dc:3e:3b:b3:59:22:6e:df:18:8a:c6:b6:49:23:a8:86:93: fc:7a:71:f1:1a:d7:fe:a0:19:5a:03:e6:84:f1:01:d3:14:98: 54:78:05:7c:1d:96:fe:c9:ef:30:4f:cb:7b:83:a9:3a:e5:6b: e9:bf:a4:66:7f:60:00:3e:4c:1e:6a:77:72:3c:8c:24:b6:17: 0f:7a:f3:c2:28:9c:e5:2e:98:81:b5:a1:25:7e:73:f2:83:40: ab:c8:fd:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURvTUflgCE/aFIkLmLmBY0F/UiUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2NDND ODhFMDVCNzAeFw0yNTA2MTQwODE2NDlaFw0yNTA2MTcxNzM0NDlaMDMxMTAvBgNV BAMTKDhEODE4Mjg5MkIxMzBGRjM0MDY4QTBGNkE5QzMwMDM1NTcyRTAzOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkhFUM7pRUhfWehkH9Bbfx1ycs 6GOEPaoq07MVdDRVRx7ra4mFmlo9+NFk/1GVcyBeYyPjJuDYsfAjwiBQrz8n9RA/ hd7KROQrZbVLFmVNLShVSkLhfTx8WiCOPnGfvJc8EcmWAbGgMa9zZu0TEOjtdA6g xtx10kID3GKI3l3/Q5i0u2yvVUcd/bZ5aSGh9hDMQX5Ui6R9ywGPaHAg6eOoEZB7 i9imumjkAKzwMXzHzPn07RejzPDn1kDoUIFK3+rn/HDgMx6vUSsqXrXfwQRJdIyV mPN298saKFCBXunl4oF/LIIt/wTQXvNfDGh0dzYQ3nxBFexIAHaZwLL4WLepAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjYGCiSsTD/NAaKD2qcMANVcuA44wHwYDVR0j BBgwFoAULousfoGRHwihicqf3TKmQ8iOBbcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mjg2MjZlMC0yOWZlLTRlODYtODRkNi02ODQ3OGM1Y2Q5ZWQvMC8yRThCQUM3RTgx OTExRjA4QTE4OUNBOUZERDMyQTY0M0M4OEUwNUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2NDNDODhF MDVCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI4NjI2ZTAtMjlmZS00ZTg2LTg0 ZDYtNjg0NzhjNWNkOWVkLzAvMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2 NDNDODhFMDVCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFbq253nOjk22Y64lwLJr9rWUp/72IHKHmcY snFWzsT0QtD5FrsZoZrsmsatpGhdnOKNhypdwrzaI8qP2Rw0gfJL0y4ZpQcS05bp kep+koHqWPtYB51UWOdZ7MoPtceE9xlVKPkustLA0I10E+3DSW5SGudoyzOod0bV iYxjBdY6e+GiHfjaeQBL0KBMNSfwQveqhtO3LgrVRRmF5U+NCo2DYrLcPjuzWSJu 3xiKxrZJI6iGk/x6cfEa1/6gGVoD5oTxAdMUmFR4BXwdlv7J7zBPy3uDqTrla+m/ pGZ/YAA+TB5qd3I8jCS2Fw9688IonOUumIG1oSV+c/KDQKvI/bA= -----END CERTIFICATE-----Generated at Mon Jun 16 12:42:27 2025 by rpki-client