$ rpki-client -vvf repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft File: E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft (raw, json) Hash identifier: 96H0b8Q+O2T9ZSWgU8zY9ixc6aXyivHtC0ackj4laWU= Subject key identifier: BE:41:8A:88:34:BF:83:A7:AD:4A:F1:B4:88:B2:C7:36:49:C0:E9:35 Authority key identifier: E3:36:CD:49:5C:4F:48:0E:C4:FA:92:EB:0B:59:42:D9:8D:E4:B8:8C Certificate issuer: /CN=E336CD495C4F480EC4FA92EB0B5942D98DE4B88C Certificate serial: 3A471901BBE544A02F7456CE23BB6A6B556B93AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft Manifest number: E9 Signing time: Tue 01 Jul 2025 01:21:59 +0000 Manifest this update: Tue 01 Jul 2025 01:16:59 +0000 Manifest next update: Fri 04 Jul 2025 10:51:59 +0000 Files and hashes: 1: E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl (hash: HzlsNnbZJ2MEGzfIg/mJqnIrwje7HLCr4LOnX55Q9gU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 10:51:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:47:19:01:bb:e5:44:a0:2f:74:56:ce:23:bb:6a:6b:55:6b:93:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E336CD495C4F480EC4FA92EB0B5942D98DE4B88C Validity Not Before: Jul 1 01:16:59 2025 GMT Not After : Jul 4 10:51:59 2025 GMT Subject: CN=BE418A8834BF83A7AD4AF1B488B2C73649C0E935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:6e:9f:b0:e4:08:a8:d5:10:82:3c:70:ba:6c: 71:bd:ec:6c:39:3e:48:a7:2a:1f:53:b5:91:30:c4: 2b:d2:b8:fd:53:4e:f3:3e:9d:36:c7:73:54:1d:c2: bd:74:9c:a3:49:d4:91:36:f7:2d:13:ee:79:31:46: b6:1c:e9:99:84:89:eb:af:4f:56:a6:04:fe:43:9d: 41:a2:10:9f:4b:aa:ce:9b:1b:00:2e:4a:db:a5:61: 0a:64:be:25:b3:2c:f7:2b:ac:23:11:9f:b7:df:1a: 0f:92:a2:16:f2:70:90:f1:de:3c:86:12:59:4c:cf: 6b:3b:c0:51:4f:af:60:cd:22:a8:dc:48:de:23:e0: c7:05:41:d6:39:ec:96:5d:28:fb:0f:c5:c6:c3:12: 2f:ff:06:9e:11:06:7b:23:35:91:be:38:22:fd:6d: 6a:bd:de:8a:c3:6c:b1:e7:1a:6a:23:5c:70:7d:74: cc:81:7d:40:65:1e:a3:33:07:c5:64:35:f4:53:b9: 11:0d:4b:e3:46:43:5b:9e:52:ac:e5:ca:2b:07:5b: 21:28:cf:12:ed:43:87:7f:ca:2f:4b:04:54:05:90: ce:26:fe:1e:57:1d:fe:ce:da:e4:5f:a6:a1:73:d8: 35:b8:db:8f:83:05:e3:8d:dd:61:db:a5:38:c9:51: 34:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:41:8A:88:34:BF:83:A7:AD:4A:F1:B4:88:B2:C7:36:49:C0:E9:35 X509v3 Authority Key Identifier: keyid:E3:36:CD:49:5C:4F:48:0E:C4:FA:92:EB:0B:59:42:D9:8D:E4:B8:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:e8:2e:eb:17:08:ab:09:3d:4d:75:a7:93:ce:bb:0f:14:76: f3:8e:07:1c:93:46:a9:75:93:0a:99:0c:91:d2:0e:eb:5d:f3: be:73:2b:13:3a:ce:ae:61:0c:5e:ed:b4:05:5d:6d:39:f4:c9: a9:3a:c3:f4:37:6f:b0:00:dd:19:ac:28:0d:b2:46:3a:f4:b2: 8e:15:a6:72:d4:13:95:36:35:93:06:51:f0:4d:e7:43:ae:80: 56:5a:e4:92:b4:a2:25:53:5e:6c:26:fe:77:11:21:2d:39:29: ef:27:6d:17:71:c8:39:d8:55:68:d6:ce:4f:0d:d9:c4:08:ce: 4f:7f:6b:15:91:a4:51:b8:1f:54:62:6d:36:02:a6:8c:56:ee: 35:08:d5:15:88:c6:24:72:47:68:80:36:da:26:f1:10:9a:a2: 6b:c9:62:63:61:79:13:33:29:09:cd:c8:0d:e1:3b:90:31:6b: e0:b5:3a:eb:94:3d:f5:a6:34:17:3c:5e:f4:d2:92:3b:d6:64: e3:b5:6e:fc:c9:94:14:ee:97:1c:e9:b8:e4:3e:af:a9:8b:d0: d7:cc:ed:36:d0:48:df:ac:c7:ac:a6:94:eb:52:db:05:5b:8c: 60:1d:e8:71:89:57:77:7f:62:8f:4c:0f:d0:c0:15:f0:c4:cb: bc:76:7b:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOkcZAbvlRKAvdFbOI7tqa1Vrk64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTMzNkNENDk1QzRGNDgwRUM0RkE5MkVCMEI1OTQyRDk4 REU0Qjg4QzAeFw0yNTA3MDEwMTE2NTlaFw0yNTA3MDQxMDUxNTlaMDMxMTAvBgNV BAMTKEJFNDE4QTg4MzRCRjgzQTdBRDRBRjFCNDg4QjJDNzM2NDlDMEU5MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlbp+w5Aio1RCCPHC6bHG97Gw5 PkinKh9TtZEwxCvSuP1TTvM+nTbHc1Qdwr10nKNJ1JE29y0T7nkxRrYc6ZmEieuv T1amBP5DnUGiEJ9Lqs6bGwAuStulYQpkviWzLPcrrCMRn7ffGg+SohbycJDx3jyG EllMz2s7wFFPr2DNIqjcSN4j4McFQdY57JZdKPsPxcbDEi//Bp4RBnsjNZG+OCL9 bWq93orDbLHnGmojXHB9dMyBfUBlHqMzB8VkNfRTuRENS+NGQ1ueUqzlyisHWyEo zxLtQ4d/yi9LBFQFkM4m/h5XHf7O2uRfpqFz2DW424+DBeON3WHbpTjJUTSbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvkGKiDS/g6etSvG0iLLHNknA6TUwHwYDVR0j BBgwFoAU4zbNSVxPSA7E+pLrC1lC2Y3kuIwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZjdiZDk0NC0wMTdhLTQzYTMtOTRmMy1mZjQ3YWYwMzg5ODAvMC9FMzM2Q0Q0OTVD NEY0ODBFQzRGQTkyRUIwQjU5NDJEOThERTRCODhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTMzNkNENDk1QzRGNDgwRUM0RkE5MkVCMEI1OTQyRDk4REU0 Qjg4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Y3YmQ5NDQtMDE3YS00M2EzLTk0 ZjMtZmY0N2FmMDM4OTgwLzAvRTMzNkNENDk1QzRGNDgwRUM0RkE5MkVCMEI1OTQy RDk4REU0Qjg4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALoLusXCKsJPU11p5POuw8UdvOOBxyTRql1 kwqZDJHSDutd875zKxM6zq5hDF7ttAVdbTn0yak6w/Q3b7AA3RmsKA2yRjr0so4V pnLUE5U2NZMGUfBN50OugFZa5JK0oiVTXmwm/ncRIS05Ke8nbRdxyDnYVWjWzk8N 2cQIzk9/axWRpFG4H1RibTYCpoxW7jUI1RWIxiRyR2iANtom8RCaomvJYmNheRMz KQnNyA3hO5Axa+C1OuuUPfWmNBc8XvTSkjvWZOO1bvzJlBTulxzpuOQ+r6mL0NfM 7TbQSN+sx6ymlOtS2wVbjGAd6HGJV3d/Yo9MD9DAFfDEy7x2e0k= -----END CERTIFICATE-----Generated at Wed Jul 2 04:17:35 2025 by rpki-client