$ rpki-client -vvf repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft File: E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft (raw, json) Hash identifier: STED/5UxsoOoWPcpTCIuymjyZl1yX5cda/tlShTbFME= Subject key identifier: B5:05:6D:D9:DB:1C:7B:29:2A:51:1D:13:A3:F4:2F:0E:32:95:4A:11 Authority key identifier: E3:36:CD:49:5C:4F:48:0E:C4:FA:92:EB:0B:59:42:D9:8D:E4:B8:8C Certificate issuer: /CN=E336CD495C4F480EC4FA92EB0B5942D98DE4B88C Certificate serial: 7BCEB73D83D545DD04376135669EA529D8CD686E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft Manifest number: D2 Signing time: Sat 10 May 2025 13:32:01 +0000 Manifest this update: Sat 10 May 2025 13:27:01 +0000 Manifest next update: Wed 14 May 2025 01:26:01 +0000 Files and hashes: 1: E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl (hash: IhptaKLCpcaUTldKM1SEO3xHt9HjFT+T6XcxadOB8S0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 01:26:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:ce:b7:3d:83:d5:45:dd:04:37:61:35:66:9e:a5:29:d8:cd:68:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E336CD495C4F480EC4FA92EB0B5942D98DE4B88C Validity Not Before: May 10 13:27:01 2025 GMT Not After : May 14 01:26:01 2025 GMT Subject: CN=B5056DD9DB1C7B292A511D13A3F42F0E32954A11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4a:bc:53:f4:2c:bf:5e:a6:c8:36:6a:0f:9d: 2f:53:cf:cf:29:11:73:ca:b0:6c:b7:48:e3:0b:6f: 2d:e4:37:ca:92:70:2c:ea:73:bd:f6:d9:72:5a:14: 32:85:28:29:0c:19:19:26:42:e9:00:8d:1c:b7:53: b4:3b:01:43:83:37:a9:d0:b6:54:70:14:fa:23:33: 25:9c:44:63:f4:4c:bf:d7:9e:dd:97:5e:e6:2d:c1: 89:7e:70:0f:38:c2:d0:0b:19:fa:c1:e2:54:2d:4f: 87:31:7c:21:46:4f:5b:18:3e:0c:4b:09:6d:2d:1e: 27:e1:3a:4f:93:6c:2a:3b:c5:c9:9c:2a:eb:e3:9a: 9c:66:7e:01:a9:f3:25:97:bf:58:6a:ab:20:5e:20: 42:c4:8d:ea:84:c5:6d:3c:c6:e4:9e:00:a8:34:ad: 98:fc:ce:86:64:fe:94:7d:e7:f9:e3:20:87:66:3c: 28:f3:98:6a:ee:4b:a5:01:ef:b5:aa:01:b6:6a:36: fe:29:e4:90:8f:a5:ae:b7:de:5a:86:d2:2b:0d:79: 39:14:70:5e:c6:fb:4c:07:80:84:30:7c:5a:43:63: cd:18:d4:e2:68:ae:7d:cf:36:be:0a:d2:b9:49:ca: 1a:ce:f5:f8:3e:bf:83:2e:4b:ee:00:01:19:51:71: e8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:05:6D:D9:DB:1C:7B:29:2A:51:1D:13:A3:F4:2F:0E:32:95:4A:11 X509v3 Authority Key Identifier: keyid:E3:36:CD:49:5C:4F:48:0E:C4:FA:92:EB:0B:59:42:D9:8D:E4:B8:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:1e:d7:2f:72:db:ae:ac:db:d7:1d:b2:5b:3d:3a:de:13:29: 35:bd:8a:92:cc:42:7d:08:35:62:75:09:7e:d6:4e:72:e1:33: 6c:fc:de:98:c1:1e:0f:c3:b2:3b:2e:9b:a8:cf:bd:0b:e9:b7: 7b:d2:6f:b4:d8:0b:83:30:82:38:82:12:7a:32:26:6e:7f:48: 57:45:2f:1a:12:f6:3b:a0:80:4a:3b:00:78:9a:48:e6:87:f8: cd:92:47:63:b4:34:66:47:23:f9:9f:f5:e0:ab:02:72:b8:4a: 4a:b9:e9:06:33:3d:cb:73:dd:1c:fd:5d:8b:af:4a:43:f7:97: 8c:99:a4:65:c5:4d:24:e4:f1:47:4d:6a:45:5e:f3:79:ad:7d: b4:47:79:4a:36:d7:3d:77:ff:be:c8:ad:17:ec:77:ad:00:e7: 8f:5a:af:2d:ba:aa:2a:0b:6f:bb:6a:17:bf:56:75:3b:d6:09: bf:5c:0a:dd:9d:3d:fd:ab:5e:e3:4a:5e:f4:28:92:16:61:f1: e2:16:db:24:f6:e2:74:46:ee:ac:e3:47:2c:63:8c:79:2b:7f: ae:01:2e:e7:0d:19:c0:81:31:7e:65:58:71:fa:25:ab:07:53: 38:36:f2:01:e8:8c:e8:db:b6:7e:40:b7:c0:32:76:44:d2:29: 05:f4:5a:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe863PYPVRd0EN2E1Zp6lKdjNaG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTMzNkNENDk1QzRGNDgwRUM0RkE5MkVCMEI1OTQyRDk4 REU0Qjg4QzAeFw0yNTA1MTAxMzI3MDFaFw0yNTA1MTQwMTI2MDFaMDMxMTAvBgNV BAMTKEI1MDU2REQ5REIxQzdCMjkyQTUxMUQxM0EzRjQyRjBFMzI5NTRBMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCySrxT9Cy/XqbINmoPnS9Tz88p EXPKsGy3SOMLby3kN8qScCzqc7322XJaFDKFKCkMGRkmQukAjRy3U7Q7AUODN6nQ tlRwFPojMyWcRGP0TL/Xnt2XXuYtwYl+cA84wtALGfrB4lQtT4cxfCFGT1sYPgxL CW0tHifhOk+TbCo7xcmcKuvjmpxmfgGp8yWXv1hqqyBeIELEjeqExW08xuSeAKg0 rZj8zoZk/pR95/njIIdmPCjzmGruS6UB77WqAbZqNv4p5JCPpa633lqG0isNeTkU cF7G+0wHgIQwfFpDY80Y1OJorn3PNr4K0rlJyhrO9fg+v4MuS+4AARlRceg1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtQVt2dsceykqUR0To/QvDjKVShEwHwYDVR0j BBgwFoAU4zbNSVxPSA7E+pLrC1lC2Y3kuIwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZjdiZDk0NC0wMTdhLTQzYTMtOTRmMy1mZjQ3YWYwMzg5ODAvMC9FMzM2Q0Q0OTVD NEY0ODBFQzRGQTkyRUIwQjU5NDJEOThERTRCODhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTMzNkNENDk1QzRGNDgwRUM0RkE5MkVCMEI1OTQyRDk4REU0 Qjg4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Y3YmQ5NDQtMDE3YS00M2EzLTk0 ZjMtZmY0N2FmMDM4OTgwLzAvRTMzNkNENDk1QzRGNDgwRUM0RkE5MkVCMEI1OTQy RDk4REU0Qjg4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHMe1y9y266s29cdsls9Ot4TKTW9ipLMQn0I NWJ1CX7WTnLhM2z83pjBHg/Dsjsum6jPvQvpt3vSb7TYC4MwgjiCEnoyJm5/SFdF LxoS9juggEo7AHiaSOaH+M2SR2O0NGZHI/mf9eCrAnK4Skq56QYzPctz3Rz9XYuv SkP3l4yZpGXFTSTk8UdNakVe83mtfbRHeUo21z13/77IrRfsd60A549ary26qioL b7tqF79WdTvWCb9cCt2dPf2rXuNKXvQokhZh8eIW2yT24nRG7qzjRyxjjHkrf64B LucNGcCBMX5lWHH6JasHUzg28gHojOjbtn5At8AydkTSKQX0Wns= -----END CERTIFICATE-----Generated at Sun May 11 18:08:45 2025 by rpki-client