$ rpki-client -vvf repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft File: E74A2346929DE84143E5DF0DD921764C285B01A2.mft (raw, json) Hash identifier: xGSescHFpBJ/zZo/FdzxiwV/txV3HsKeFDSiaNOokWQ= Subject key identifier: 2E:76:8C:AA:45:6B:B3:53:69:3D:2B:01:77:71:C2:8A:B0:1E:A0:C6 Authority key identifier: E7:4A:23:46:92:9D:E8:41:43:E5:DF:0D:D9:21:76:4C:28:5B:01:A2 Certificate issuer: /CN=E74A2346929DE84143E5DF0DD921764C285B01A2 Certificate serial: 059C23F8ABF1E6FC19BB2B835BA98DFF204558EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft Manifest number: 7C Signing time: Sat 10 May 2025 14:01:16 +0000 Manifest this update: Sat 10 May 2025 13:56:16 +0000 Manifest next update: Wed 14 May 2025 02:00:16 +0000 Files and hashes: 1: E74A2346929DE84143E5DF0DD921764C285B01A2.crl (hash: WJd+S4Xk2KkXMYkx2IYjybyOW5j8j6g6LB0rIQbpzRU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.crl rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 08:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:9c:23:f8:ab:f1:e6:fc:19:bb:2b:83:5b:a9:8d:ff:20:45:58:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E74A2346929DE84143E5DF0DD921764C285B01A2 Validity Not Before: May 10 13:56:16 2025 GMT Not After : May 14 02:00:16 2025 GMT Subject: CN=2E768CAA456BB353693D2B017771C28AB01EA0C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b2:b6:f8:88:93:c6:35:c2:af:35:23:87:1d: d3:06:84:a6:37:be:01:84:85:35:ce:c1:c7:bd:39: da:c8:44:b1:c2:3f:df:c0:0e:fb:b9:20:02:82:02: f6:46:fb:87:8b:14:83:f1:2e:f2:bf:5c:59:5f:82: f3:06:fe:4d:13:57:05:91:33:94:60:04:34:29:83: 04:b9:ae:27:bb:77:10:87:fe:a2:23:64:d0:2c:a5: 17:be:1d:de:3d:d7:c1:d5:c8:bb:e2:f0:94:4b:16: 01:87:30:81:d3:04:44:2a:dc:a1:e8:72:00:45:53: af:89:69:c3:ea:39:88:87:a3:be:fd:59:63:c3:90: 15:59:63:ac:79:b8:e5:20:01:a8:94:1b:f3:00:37: 56:be:88:4d:3a:ac:0c:ab:53:95:2f:e1:8a:19:69: 79:24:37:5c:07:a3:33:05:49:03:55:0b:0e:92:7d: 35:d4:10:b2:73:e6:8b:e1:76:58:72:c7:38:c2:02: 39:24:1d:bc:57:38:f3:54:eb:90:81:b1:f1:f5:2d: 96:29:a6:66:15:c7:29:a5:76:90:03:32:84:9d:02: 4c:a6:ad:2f:5b:fa:de:49:db:74:07:17:57:7e:ec: 90:89:3f:2a:69:ce:b5:19:21:0d:62:90:a5:63:77: 16:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:76:8C:AA:45:6B:B3:53:69:3D:2B:01:77:71:C2:8A:B0:1E:A0:C6 X509v3 Authority Key Identifier: keyid:E7:4A:23:46:92:9D:E8:41:43:E5:DF:0D:D9:21:76:4C:28:5B:01:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:3f:e4:cf:0d:fc:43:2b:ee:c1:3e:46:f5:85:1c:92:bb:90: 57:89:ab:6d:b3:4a:81:36:92:43:ad:54:e8:76:29:8f:c3:29: 8e:41:a1:2e:13:4e:50:6b:9d:26:33:17:06:7c:7a:55:b7:14: cd:96:a6:d2:d0:e3:6e:d6:49:99:3f:93:e2:fb:e6:b4:ae:70: ef:bd:f7:a0:d2:cd:95:d3:8d:6a:98:9e:32:4a:ff:4f:81:19: 43:3c:ce:74:5a:d7:95:07:8c:33:c0:be:c1:ee:05:8a:7a:31: f5:bf:43:b1:65:d5:3c:28:98:81:ea:ae:8b:e0:da:1a:04:ff: 4c:40:46:19:bc:82:d5:c1:ac:97:1d:34:64:be:fe:ee:8c:3c: 39:d6:fa:75:74:36:65:d7:e4:c2:a2:9c:b2:64:9a:36:5e:2d: c0:30:be:30:4a:22:53:40:ab:a6:5d:2f:b1:5a:f9:cc:73:0e: 10:a7:a6:54:c2:39:b9:7d:65:11:41:08:a3:56:f1:ba:8a:9b: 7b:c5:90:9d:fe:c1:fe:5f:38:bc:ab:11:5b:81:82:17:1c:fa: a3:ad:1b:ed:5a:b3:c2:b6:4a:11:b0:5d:4c:16:bf:3b:0e:57: 43:9b:ab:39:b0:cb:f9:1b:4f:57:00:97:02:d9:82:d6:d0:53: 33:35:74:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBZwj+Kvx5vwZuyuDW6mN/yBFWOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTc0QTIzNDY5MjlERTg0MTQzRTVERjBERDkyMTc2NEMy ODVCMDFBMjAeFw0yNTA1MTAxMzU2MTZaFw0yNTA1MTQwMjAwMTZaMDMxMTAvBgNV BAMTKDJFNzY4Q0FBNDU2QkIzNTM2OTNEMkIwMTc3NzFDMjhBQjAxRUEwQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnsrb4iJPGNcKvNSOHHdMGhKY3 vgGEhTXOwce9OdrIRLHCP9/ADvu5IAKCAvZG+4eLFIPxLvK/XFlfgvMG/k0TVwWR M5RgBDQpgwS5rie7dxCH/qIjZNAspRe+Hd4918HVyLvi8JRLFgGHMIHTBEQq3KHo cgBFU6+JacPqOYiHo779WWPDkBVZY6x5uOUgAaiUG/MAN1a+iE06rAyrU5Uv4YoZ aXkkN1wHozMFSQNVCw6SfTXUELJz5ovhdlhyxzjCAjkkHbxXOPNU65CBsfH1LZYp pmYVxymldpADMoSdAkymrS9b+t5J23QHF1d+7JCJPyppzrUZIQ1ikKVjdxaXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULnaMqkVrs1NpPSsBd3HCirAeoMYwHwYDVR0j BBgwFoAU50ojRpKd6EFD5d8N2SF2TChbAaIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2RlNTAzNS04NGUxLTQ0YzYtOWNmOS00ZWEwYmJhYTA5M2YvMC9FNzRBMjM0Njky OURFODQxNDNFNURGMEREOTIxNzY0QzI4NUIwMUEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTc0QTIzNDY5MjlERTg0MTQzRTVERjBERDkyMTc2NEMyODVC MDFBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNkZTUwMzUtODRlMS00NGM2LTlj ZjktNGVhMGJiYWEwOTNmLzAvRTc0QTIzNDY5MjlERTg0MTQzRTVERjBERDkyMTc2 NEMyODVCMDFBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI0/5M8N/EMr7sE+RvWFHJK7kFeJq22zSoE2 kkOtVOh2KY/DKY5BoS4TTlBrnSYzFwZ8elW3FM2WptLQ427WSZk/k+L75rSucO+9 96DSzZXTjWqYnjJK/0+BGUM8znRa15UHjDPAvsHuBYp6MfW/Q7Fl1TwomIHqrovg 2hoE/0xARhm8gtXBrJcdNGS+/u6MPDnW+nV0NmXX5MKinLJkmjZeLcAwvjBKIlNA q6ZdL7Fa+cxzDhCnplTCObl9ZRFBCKNW8bqKm3vFkJ3+wf5fOLyrEVuBghcc+qOt G+1as8K2ShGwXUwWvzsOV0Obqzmwy/kbT1cAlwLZgtbQUzM1dJY= -----END CERTIFICATE-----Generated at Sat May 10 19:00:35 2025 by rpki-client