$ rpki-client -vvf repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft File: 2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft (raw, json) Hash identifier: +Gydhx8OUQZyb+5r9z1YtzYWysjCvl44mtaRZHz+uW0= Subject key identifier: 4E:F0:2C:A1:59:C9:FF:F0:6C:85:C2:93:82:42:AF:4E:F6:29:15:09 Authority key identifier: 2E:8B:AC:7E:81:91:1F:08:A1:89:CA:9F:DD:32:A6:43:C8:8E:05:B7 Certificate issuer: /CN=2E8BAC7E81911F08A189CA9FDD32A643C88E05B7 Certificate serial: 72B3349C32AC5FCCBD68B21DCDD29B2410FAECA4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft Manifest number: EE Signing time: Wed 23 Apr 2025 07:30:47 +0000 Manifest this update: Wed 23 Apr 2025 07:25:47 +0000 Manifest next update: Sat 26 Apr 2025 16:21:47 +0000 Files and hashes: 1: 2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl (hash: SHVqvcSFH8Bc5BazqDS0SjKuC3QeNAP2w4xQUZBx4yM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:50:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:b3:34:9c:32:ac:5f:cc:bd:68:b2:1d:cd:d2:9b:24:10:fa:ec:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E8BAC7E81911F08A189CA9FDD32A643C88E05B7 Validity Not Before: Apr 23 07:25:47 2025 GMT Not After : Apr 26 16:21:47 2025 GMT Subject: CN=4EF02CA159C9FFF06C85C2938242AF4EF6291509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:36:a4:f0:9f:5a:e9:e5:cf:6a:c2:c9:6e:a4: aa:2f:b0:e0:b7:5d:46:cc:98:7b:5f:1b:0a:5e:37: c1:66:b6:34:90:bc:8c:90:56:f4:b4:2e:73:89:69: f7:92:36:3e:8c:85:bb:f0:ef:f7:21:40:c5:62:de: 23:d2:79:7e:42:a8:80:6a:65:c0:6a:12:34:86:c8: cc:ac:ce:81:47:5a:ec:e2:2b:6b:91:70:5e:d4:b5: 89:8f:7d:a3:58:b9:b6:50:c0:fc:1a:d9:10:36:75: 39:56:d6:57:b9:7f:9a:0e:b4:79:fd:80:12:c2:2a: 40:c2:21:a3:6f:ad:d4:71:1d:fb:03:8e:c6:3d:67: 61:15:9d:79:f4:4f:74:76:97:23:09:84:da:2b:c8: 50:f0:d4:9c:9c:14:e5:68:57:04:f3:a3:ad:d2:bc: d0:13:b5:47:d9:0f:c7:02:ef:b7:37:4e:d0:58:1c: 3f:87:a4:28:cb:63:c9:9d:ef:98:49:fd:2e:e0:b4: c2:7f:aa:eb:27:06:b6:98:85:e8:53:de:26:22:d3: 6c:e2:65:93:98:26:8c:4f:8e:f5:df:89:48:73:92: a1:ba:a6:d0:a3:31:43:df:3e:b3:2d:a5:93:e8:36: fe:c2:64:98:e0:b9:13:58:a8:23:0e:c8:df:a3:86: 2c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:F0:2C:A1:59:C9:FF:F0:6C:85:C2:93:82:42:AF:4E:F6:29:15:09 X509v3 Authority Key Identifier: keyid:2E:8B:AC:7E:81:91:1F:08:A1:89:CA:9F:DD:32:A6:43:C8:8E:05:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:06:3e:df:68:bb:49:4d:1b:34:75:25:38:d5:67:d0:5a:17: 1c:2c:be:62:6f:f3:23:43:d0:33:24:09:cb:e3:07:f9:a1:1a: f2:e6:a1:7c:33:3e:cc:a7:e3:99:60:01:bc:21:84:8a:c1:a3: f2:a3:92:59:b2:69:57:c3:c9:21:43:41:75:24:71:8c:f5:06: bf:ae:cf:ba:89:7f:bb:65:71:b2:c4:4d:48:bf:c6:48:3f:5a: 50:a7:d6:c9:e9:28:56:28:88:ba:51:61:e6:12:a2:48:d6:cf: c1:c7:dc:25:58:82:1c:35:79:0a:73:12:03:df:60:1d:56:25: 87:ff:18:c8:e2:d3:40:9d:51:74:fc:1d:2b:a7:17:5f:9a:0b: f9:22:9f:34:9b:16:53:49:13:69:17:7a:de:f9:f7:80:e9:41: 6e:ff:d6:2c:60:9a:81:93:7c:e5:a3:48:3f:82:f5:9a:72:cb: d8:fe:7d:78:54:25:d5:17:85:43:06:e6:39:27:00:45:92:44: ab:5d:f8:bb:35:55:3a:75:af:f3:06:ab:7e:74:96:1b:c0:69: b8:bb:7b:a4:86:44:8e:71:73:5a:e9:a3:b3:8a:84:ee:66:94: 05:c5:39:75:fd:0d:57:bf:9f:2e:dc:d1:34:c1:08:a7:87:e6: 88:1d:cc:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcrM0nDKsX8y9aLIdzdKbJBD67KQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2NDND ODhFMDVCNzAeFw0yNTA0MjMwNzI1NDdaFw0yNTA0MjYxNjIxNDdaMDMxMTAvBgNV BAMTKDRFRjAyQ0ExNTlDOUZGRjA2Qzg1QzI5MzgyNDJBRjRFRjYyOTE1MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbNqTwn1rp5c9qwslupKovsOC3 XUbMmHtfGwpeN8FmtjSQvIyQVvS0LnOJafeSNj6Mhbvw7/chQMVi3iPSeX5CqIBq ZcBqEjSGyMyszoFHWuziK2uRcF7UtYmPfaNYubZQwPwa2RA2dTlW1le5f5oOtHn9 gBLCKkDCIaNvrdRxHfsDjsY9Z2EVnXn0T3R2lyMJhNoryFDw1JycFOVoVwTzo63S vNATtUfZD8cC77c3TtBYHD+HpCjLY8md75hJ/S7gtMJ/qusnBraYhehT3iYi02zi ZZOYJoxPjvXfiUhzkqG6ptCjMUPfPrMtpZPoNv7CZJjguRNYqCMOyN+jhixjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTvAsoVnJ//BshcKTgkKvTvYpFQkwHwYDVR0j BBgwFoAULousfoGRHwihicqf3TKmQ8iOBbcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mjg2MjZlMC0yOWZlLTRlODYtODRkNi02ODQ3OGM1Y2Q5ZWQvMC8yRThCQUM3RTgx OTExRjA4QTE4OUNBOUZERDMyQTY0M0M4OEUwNUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2NDNDODhF MDVCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI4NjI2ZTAtMjlmZS00ZTg2LTg0 ZDYtNjg0NzhjNWNkOWVkLzAvMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2 NDNDODhFMDVCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJYGPt9ou0lNGzR1JTjVZ9BaFxwsvmJv8yND 0DMkCcvjB/mhGvLmoXwzPsyn45lgAbwhhIrBo/KjklmyaVfDySFDQXUkcYz1Br+u z7qJf7tlcbLETUi/xkg/WlCn1snpKFYoiLpRYeYSokjWz8HH3CVYghw1eQpzEgPf YB1WJYf/GMji00CdUXT8HSunF1+aC/kinzSbFlNJE2kXet7594DpQW7/1ixgmoGT fOWjSD+C9Zpyy9j+fXhUJdUXhUMG5jknAEWSRKtd+Ls1VTp1r/MGq350lhvAabi7 e6SGRI5xc1rpo7OKhO5mlAXFOXX9DVe/ny7c0TTBCKeH5ogdzHY= -----END CERTIFICATE-----Generated at Wed Apr 23 08:55:51 2025 by rpki-client on console.sobornost.net