$ rpki-client -vvf repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft File: 2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft (raw, json) Hash identifier: CD71j+wiN078wex/9MtSwvv5ZbeOOnh/isYP+DMTvbo= Subject key identifier: ED:11:2C:0F:88:90:1F:69:BC:1A:62:5C:E7:00:72:0F:8B:48:E0:BB Authority key identifier: 2E:8B:AC:7E:81:91:1F:08:A1:89:CA:9F:DD:32:A6:43:C8:8E:05:B7 Certificate issuer: /CN=2E8BAC7E81911F08A189CA9FDD32A643C88E05B7 Certificate serial: 68BDFF9111F4C3F02B12EF66A7998F56765FA506 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft Manifest number: 011C Signing time: Mon 04 Aug 2025 15:10:51 +0000 Manifest this update: Mon 04 Aug 2025 15:05:50 +0000 Manifest next update: Thu 07 Aug 2025 23:28:50 +0000 Files and hashes: 1: 2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl (hash: l4DhjWId7Gt+oCO9QiOb0yeZF79Bz1Fu3/LcNZ4kMrE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 23:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:bd:ff:91:11:f4:c3:f0:2b:12:ef:66:a7:99:8f:56:76:5f:a5:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E8BAC7E81911F08A189CA9FDD32A643C88E05B7 Validity Not Before: Aug 4 15:05:50 2025 GMT Not After : Aug 7 23:28:50 2025 GMT Subject: CN=ED112C0F88901F69BC1A625CE700720F8B48E0BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:75:5c:91:d6:72:91:c2:51:d6:d5:71:50:63: ba:af:34:e5:5e:8b:be:74:00:40:7b:a4:55:d6:96: 9f:44:1b:93:bc:3a:c1:55:2d:d5:62:43:41:14:7b: 39:1b:f6:b9:23:36:3c:cb:6c:8a:34:a0:50:85:ab: 19:f0:20:5e:e3:0b:58:a2:f4:0c:44:8c:87:35:f3: d2:33:40:d2:7b:67:57:bd:24:0c:48:d6:37:ec:f0: 23:0f:8d:21:8b:6c:f7:53:f6:02:5f:b2:74:09:0a: e6:c5:ad:e4:8a:d1:7a:fe:5b:16:cb:29:bd:eb:6a: 77:8b:50:cc:f6:5a:77:b5:20:56:a7:49:3f:b9:86: ba:ee:1c:30:15:55:f5:a7:89:08:a7:5f:37:a5:d1: 76:af:54:54:09:bb:49:b1:a9:cc:2e:01:f7:50:ca: e3:63:fc:30:b6:71:3d:bd:81:8a:86:7e:0d:b7:53: ab:66:de:68:17:c7:04:e8:3b:4f:df:7d:d3:1c:ea: 88:01:d9:20:ed:82:01:c4:cf:74:ec:37:cd:89:ea: ed:e1:87:f7:1f:6e:38:a3:63:3a:13:2c:29:61:cc: f5:61:e9:a9:c3:cd:d1:22:f0:c8:cd:df:0d:22:f4: 46:07:b7:30:7e:8f:bc:2b:ca:06:e1:53:02:c6:91: d4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:11:2C:0F:88:90:1F:69:BC:1A:62:5C:E7:00:72:0F:8B:48:E0:BB X509v3 Authority Key Identifier: keyid:2E:8B:AC:7E:81:91:1F:08:A1:89:CA:9F:DD:32:A6:43:C8:8E:05:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:67:21:c1:84:f9:aa:9f:b6:13:c3:b2:84:69:09:25:f4:3b: ea:eb:94:69:57:95:f1:9c:a0:36:20:1b:7b:40:16:68:d6:6b: 64:aa:75:8c:dd:67:7b:b4:82:62:19:8c:7c:f5:e8:80:be:79: e3:3b:97:b3:84:c6:1f:7e:dd:34:03:e5:63:f3:a7:8b:25:fa: cc:93:c1:7c:ab:86:14:c4:85:16:6c:b8:b7:a6:81:2e:12:6e: b3:05:38:31:d2:25:45:43:14:da:76:96:cb:6f:a5:e2:db:00: 37:00:09:b5:38:ad:dd:ff:c2:94:aa:50:b4:00:b8:18:1e:68: ad:d4:76:94:7e:f9:7d:65:00:c9:99:ee:7f:65:f1:82:00:5e: 21:af:de:fb:64:31:12:1f:c3:72:79:96:f8:62:fc:c9:5b:2a: 95:fb:01:c0:37:5c:52:e7:5c:61:16:6e:48:07:ad:07:16:5a: ba:74:26:04:d2:7d:3b:12:05:c2:5f:18:20:5a:d0:dd:c6:6e: ac:e5:9e:d6:54:d7:ce:5e:63:96:43:75:2c:eb:56:87:65:ea: f9:dd:67:6d:21:4c:e5:ff:82:00:a1:44:17:24:2a:b0:fc:81: f1:34:ec:09:78:a6:90:30:13:30:5a:27:07:48:2e:4d:c7:d9: f5:e1:81:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaL3/kRH0w/ArEu9mp5mPVnZfpQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2NDND ODhFMDVCNzAeFw0yNTA4MDQxNTA1NTBaFw0yNTA4MDcyMzI4NTBaMDMxMTAvBgNV BAMTKEVEMTEyQzBGODg5MDFGNjlCQzFBNjI1Q0U3MDA3MjBGOEI0OEUwQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9dVyR1nKRwlHW1XFQY7qvNOVe i750AEB7pFXWlp9EG5O8OsFVLdViQ0EUezkb9rkjNjzLbIo0oFCFqxnwIF7jC1ii 9AxEjIc189IzQNJ7Z1e9JAxI1jfs8CMPjSGLbPdT9gJfsnQJCubFreSK0Xr+WxbL Kb3raneLUMz2Wne1IFanST+5hrruHDAVVfWniQinXzel0XavVFQJu0mxqcwuAfdQ yuNj/DC2cT29gYqGfg23U6tm3mgXxwToO0/ffdMc6ogB2SDtggHEz3TsN82J6u3h h/cfbjijYzoTLClhzPVh6anDzdEi8MjN3w0i9EYHtzB+j7wrygbhUwLGkdR/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7REsD4iQH2m8GmJc5wByD4tI4LswHwYDVR0j BBgwFoAULousfoGRHwihicqf3TKmQ8iOBbcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mjg2MjZlMC0yOWZlLTRlODYtODRkNi02ODQ3OGM1Y2Q5ZWQvMC8yRThCQUM3RTgx OTExRjA4QTE4OUNBOUZERDMyQTY0M0M4OEUwNUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2NDNDODhF MDVCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI4NjI2ZTAtMjlmZS00ZTg2LTg0 ZDYtNjg0NzhjNWNkOWVkLzAvMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2 NDNDODhFMDVCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABBnIcGE+aqfthPDsoRpCSX0O+rrlGlXlfGc oDYgG3tAFmjWa2SqdYzdZ3u0gmIZjHz16IC+eeM7l7OExh9+3TQD5WPzp4sl+syT wXyrhhTEhRZsuLemgS4SbrMFODHSJUVDFNp2lstvpeLbADcACbU4rd3/wpSqULQA uBgeaK3UdpR++X1lAMmZ7n9l8YIAXiGv3vtkMRIfw3J5lvhi/MlbKpX7AcA3XFLn XGEWbkgHrQcWWrp0JgTSfTsSBcJfGCBa0N3GbqzlntZU185eY5ZDdSzrVodl6vnd Z20hTOX/ggChRBckKrD8gfE07Al4ppAwEzBaJwdILk3H2fXhgUM= -----END CERTIFICATE-----Generated at Thu Aug 7 00:32:18 2025 by rpki-client