$ rpki-client -vvf repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft File: E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft (raw, json) Hash identifier: Zx1k+Kz1/iwoc2vYPLxNevuE6tpgI3lsyxRhQJK/unU= Subject key identifier: EA:31:5B:DA:2F:63:82:81:B9:BB:18:95:3D:96:99:17:EF:B0:F4:01 Authority key identifier: E6:FE:A7:CE:7F:6F:A5:EA:E0:5E:BB:DF:D8:6F:D5:3E:84:FA:75:A8 Certificate issuer: /CN=E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8 Certificate serial: 3655EC0E8503DEBD8B9F2001CF5A7DAD734699CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft Manifest number: 7D Signing time: Wed 07 May 2025 21:00:42 +0000 Manifest this update: Wed 07 May 2025 20:55:42 +0000 Manifest next update: Sat 10 May 2025 21:15:42 +0000 Files and hashes: 1: E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl (hash: ld/WYpdO/2Jipd3xkpO6XyFeH/kHzMyrsEdWW50z7iQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 21:15:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:55:ec:0e:85:03:de:bd:8b:9f:20:01:cf:5a:7d:ad:73:46:99:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8 Validity Not Before: May 7 20:55:42 2025 GMT Not After : May 10 21:15:42 2025 GMT Subject: CN=EA315BDA2F638281B9BB18953D969917EFB0F401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:38:32:36:3a:e7:0c:dc:95:08:f6:04:8f:7d: b7:48:22:03:0a:ff:6f:e9:18:37:18:cc:d4:9d:83: 2f:f0:5a:90:c8:64:0d:a7:b1:76:85:71:5e:b6:29: df:89:fc:0b:92:20:50:04:cb:d9:45:3f:2a:02:6a: 4b:43:c0:1b:34:0f:ac:b5:49:e7:da:c6:89:8c:cb: b3:e3:33:2f:9d:ac:fd:a9:1f:8b:96:c6:0d:81:a4: 28:6e:2f:7b:ce:5a:e2:b4:bf:9d:dd:aa:b9:08:cf: 0f:7e:cb:4c:f9:2a:ef:c8:37:dc:c6:6b:02:8d:22: e0:50:e9:e1:73:54:f9:a0:5b:15:b7:14:08:12:43: 0e:b1:44:d2:91:de:bc:12:36:96:60:57:fe:cb:21: fc:9a:93:0b:55:80:5b:a0:7e:4b:c2:53:83:25:72: e9:00:0d:2c:49:b5:de:26:4d:1a:c2:f8:e8:f2:f9: c8:ac:1b:00:70:96:24:5a:54:78:df:37:63:db:95: 54:3f:52:7f:b4:f0:63:8f:e8:51:e0:4d:1f:b2:de: 7b:b4:52:51:9d:f6:af:21:e0:7b:87:4f:89:94:1e: 1f:ec:d9:37:5c:6d:df:0b:7f:6c:9a:85:55:2e:28: cd:75:56:bd:f5:48:12:95:cd:7e:4c:9d:12:55:0e: 62:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:31:5B:DA:2F:63:82:81:B9:BB:18:95:3D:96:99:17:EF:B0:F4:01 X509v3 Authority Key Identifier: keyid:E6:FE:A7:CE:7F:6F:A5:EA:E0:5E:BB:DF:D8:6F:D5:3E:84:FA:75:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:b8:6f:16:68:2c:9b:eb:8a:9a:6e:c6:9d:18:ef:1d:24:14: 3b:26:bb:7b:57:ff:61:4a:05:dc:d2:dc:41:96:47:75:c9:47: e4:1e:45:dc:2c:ac:2e:af:0e:a9:e2:97:bd:02:ce:3f:4b:37: 3a:fe:0c:54:c2:5a:af:24:8d:b8:05:68:be:eb:53:6d:63:35: 0c:89:75:a1:f7:b6:7f:fa:3d:47:de:3d:7c:aa:e3:e3:13:4c: 9e:41:ba:6d:68:cf:2a:1b:1a:38:47:73:27:24:8e:bf:b0:8d: 86:cb:32:4b:f5:5d:f7:71:e5:0d:c1:74:37:a8:b9:c1:1e:d8: 4a:71:a7:d3:20:da:80:c8:94:5a:23:a3:7b:b5:98:ab:36:65: ab:23:fa:77:ce:d4:67:55:a8:5f:36:06:cd:1f:e9:2c:fe:26: 1b:f4:45:88:b0:6a:7f:a0:99:fa:dd:f5:c5:58:96:3d:02:e1: 8e:c5:ed:89:ad:1f:e5:47:d0:db:e1:e7:7d:dd:69:30:71:8f: 3c:42:0e:2d:35:6b:54:d4:bf:9c:02:67:59:28:4d:c0:df:bd: 2d:90:4e:b1:9e:90:71:96:35:62:3c:e2:54:66:13:d4:4e:91: 9f:94:fb:80:9b:74:42:15:db:65:78:c9:df:60:c4:f6:b8:bd: 53:dd:91:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNlXsDoUD3r2LnyABz1p9rXNGmc8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTZGRUE3Q0U3RjZGQTVFQUUwNUVCQkRGRDg2RkQ1M0U4 NEZBNzVBODAeFw0yNTA1MDcyMDU1NDJaFw0yNTA1MTAyMTE1NDJaMDMxMTAvBgNV BAMTKEVBMzE1QkRBMkY2MzgyODFCOUJCMTg5NTNEOTY5OTE3RUZCMEY0MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMODI2OucM3JUI9gSPfbdIIgMK /2/pGDcYzNSdgy/wWpDIZA2nsXaFcV62Kd+J/AuSIFAEy9lFPyoCaktDwBs0D6y1 SefaxomMy7PjMy+drP2pH4uWxg2BpChuL3vOWuK0v53dqrkIzw9+y0z5Ku/IN9zG awKNIuBQ6eFzVPmgWxW3FAgSQw6xRNKR3rwSNpZgV/7LIfyakwtVgFugfkvCU4Ml cukADSxJtd4mTRrC+Ojy+cisGwBwliRaVHjfN2PblVQ/Un+08GOP6FHgTR+y3nu0 UlGd9q8h4HuHT4mUHh/s2Tdcbd8Lf2yahVUuKM11Vr31SBKVzX5MnRJVDmIPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6jFb2i9jgoG5uxiVPZaZF++w9AEwHwYDVR0j BBgwFoAU5v6nzn9vpergXrvf2G/VPoT6dagwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTMxNTlmMi0wY2YwLTQzYzYtYjI4Mi1jNjlmYmExM2ExNGEvMC9FNkZFQTdDRTdG NkZBNUVBRTA1RUJCREZEODZGRDUzRTg0RkE3NUE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTZGRUE3Q0U3RjZGQTVFQUUwNUVCQkRGRDg2RkQ1M0U4NEZB NzVBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWUzMTU5ZjItMGNmMC00M2M2LWIy ODItYzY5ZmJhMTNhMTRhLzAvRTZGRUE3Q0U3RjZGQTVFQUUwNUVCQkRGRDg2RkQ1 M0U4NEZBNzVBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKe4bxZoLJvrippuxp0Y7x0kFDsmu3tX/2FK BdzS3EGWR3XJR+QeRdwsrC6vDqnil70Czj9LNzr+DFTCWq8kjbgFaL7rU21jNQyJ daH3tn/6PUfePXyq4+MTTJ5Bum1ozyobGjhHcyckjr+wjYbLMkv1Xfdx5Q3BdDeo ucEe2Epxp9Mg2oDIlFojo3u1mKs2Zasj+nfO1GdVqF82Bs0f6Sz+Jhv0RYiwan+g mfrd9cVYlj0C4Y7F7YmtH+VH0Nvh533daTBxjzxCDi01a1TUv5wCZ1koTcDfvS2Q TrGekHGWNWI84lRmE9ROkZ+U+4CbdEIV22V4yd9gxPa4vVPdkVM= -----END CERTIFICATE-----Generated at Thu May 8 08:04:36 2025 by rpki-client