$ rpki-client -vvf repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft File: E74A2346929DE84143E5DF0DD921764C285B01A2.mft (raw, json) Hash identifier: pUdVLTydwUuLGYiKWIL7AQwzadvFxHW0meKGg+Y4dOs= Subject key identifier: BA:1E:40:B4:86:99:AB:52:6D:61:4C:8A:A3:0E:BC:C1:DF:99:14:A5 Authority key identifier: E7:4A:23:46:92:9D:E8:41:43:E5:DF:0D:D9:21:76:4C:28:5B:01:A2 Certificate issuer: /CN=E74A2346929DE84143E5DF0DD921764C285B01A2 Certificate serial: 64FF04A915C3196AB705D7A11F41EA3FD366E938 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft Manifest number: 92 Signing time: Sun 29 Jun 2025 14:41:15 +0000 Manifest this update: Sun 29 Jun 2025 14:36:15 +0000 Manifest next update: Wed 02 Jul 2025 18:54:15 +0000 Files and hashes: 1: E74A2346929DE84143E5DF0DD921764C285B01A2.crl (hash: IWrtauISithkMHxNxQLvos/Q//ogT08i1kbZe+QuDg4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.crl rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 18:54:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:ff:04:a9:15:c3:19:6a:b7:05:d7:a1:1f:41:ea:3f:d3:66:e9:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E74A2346929DE84143E5DF0DD921764C285B01A2 Validity Not Before: Jun 29 14:36:15 2025 GMT Not After : Jul 2 18:54:15 2025 GMT Subject: CN=BA1E40B48699AB526D614C8AA30EBCC1DF9914A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:20:89:41:58:74:3a:af:b7:80:85:48:75:bb: d9:18:98:b8:06:6f:82:b2:e1:72:ad:ec:20:9e:1c: c2:0e:4e:0d:83:aa:b5:4b:1b:8f:db:42:7f:2d:cc: 42:70:15:81:f1:d3:d6:23:0f:e2:94:a2:a1:df:6e: 86:22:62:a6:6f:59:af:37:16:d4:ce:13:2d:09:ad: af:52:b1:c8:98:6e:0b:4c:b4:7d:ec:e5:58:a9:d7: ec:7a:31:f2:7b:57:6f:df:3d:20:93:e2:38:5c:97: 36:6f:95:0e:b4:eb:0d:de:e2:a9:6d:53:0f:91:c1: 9e:17:e6:43:3e:1f:8c:85:43:d2:c9:ac:ef:1c:b5: d2:99:68:0e:6b:1f:2c:b8:b0:d8:16:1f:d3:38:f3: 2b:30:3f:74:68:54:68:65:c1:43:e3:7b:43:7e:08: bf:1f:4c:00:cb:51:52:2f:c2:56:ab:8b:cd:50:a8: 03:0d:44:42:a9:fa:a1:25:e6:cc:22:80:0e:10:f7: 10:65:7b:57:97:c8:c4:4c:27:17:f5:20:1a:97:e6: a1:16:58:14:50:2c:d3:a2:dc:47:6b:c9:bb:69:07: 2e:86:26:8f:5c:b3:08:94:d3:e8:55:9a:8e:98:0a: 3c:0f:88:c0:11:30:da:d4:af:e3:47:0c:76:1f:ae: 3b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:1E:40:B4:86:99:AB:52:6D:61:4C:8A:A3:0E:BC:C1:DF:99:14:A5 X509v3 Authority Key Identifier: keyid:E7:4A:23:46:92:9D:E8:41:43:E5:DF:0D:D9:21:76:4C:28:5B:01:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:98:00:39:79:20:81:9b:bd:7f:0e:7a:a0:bc:8b:e2:12:1f: 83:10:37:77:33:27:3b:70:3e:46:3e:66:b7:38:62:0f:e5:38: 7b:a1:87:8f:2d:8f:bb:92:e2:6b:c2:ba:da:4c:54:2d:bf:8d: 58:57:72:b9:a0:ea:60:05:2d:ac:80:a6:10:cb:96:44:ea:a8: 3c:dd:77:db:ad:75:67:b4:1a:26:e1:1d:0e:99:d8:a1:a9:1e: d7:e8:7c:71:ce:92:58:c6:d5:38:2e:65:6a:4d:e4:83:fc:d7: cb:2d:23:1c:ec:e1:3b:d3:0b:b4:ba:55:6e:25:d1:c0:b4:5a: 24:60:9c:9a:9c:bb:9e:27:42:6e:ff:3c:5f:c0:86:14:ec:76: 9a:c2:46:7d:8a:35:17:38:77:b2:c3:ef:1c:12:25:6d:3a:62: 27:b2:9f:29:f9:d3:dc:c3:18:ee:c9:7d:2b:0b:b3:a8:d2:91: 20:78:ad:36:a9:7a:68:af:c3:55:0a:a1:bc:7d:39:c9:25:70: 7b:11:3d:bc:fa:0e:bc:6e:d0:57:74:87:8c:87:64:c3:53:ed: b2:e1:35:9f:dc:a4:85:ba:b4:a3:30:b8:b3:cc:a2:a4:08:d9: 74:79:a9:fa:1b:68:24:dd:f2:7c:c5:bc:0b:cd:f2:13:55:83: 0a:b6:40:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZP8EqRXDGWq3BdehH0HqP9Nm6TgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTc0QTIzNDY5MjlERTg0MTQzRTVERjBERDkyMTc2NEMy ODVCMDFBMjAeFw0yNTA2MjkxNDM2MTVaFw0yNTA3MDIxODU0MTVaMDMxMTAvBgNV BAMTKEJBMUU0MEI0ODY5OUFCNTI2RDYxNEM4QUEzMEVCQ0MxREY5OTE0QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7IIlBWHQ6r7eAhUh1u9kYmLgG b4Ky4XKt7CCeHMIOTg2DqrVLG4/bQn8tzEJwFYHx09YjD+KUoqHfboYiYqZvWa83 FtTOEy0Jra9SsciYbgtMtH3s5Vip1+x6MfJ7V2/fPSCT4jhclzZvlQ606w3e4qlt Uw+RwZ4X5kM+H4yFQ9LJrO8ctdKZaA5rHyy4sNgWH9M48yswP3RoVGhlwUPje0N+ CL8fTADLUVIvwlari81QqAMNREKp+qEl5swigA4Q9xBle1eXyMRMJxf1IBqX5qEW WBRQLNOi3EdrybtpBy6GJo9cswiU0+hVmo6YCjwPiMARMNrUr+NHDHYfrjuxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuh5AtIaZq1JtYUyKow68wd+ZFKUwHwYDVR0j BBgwFoAU50ojRpKd6EFD5d8N2SF2TChbAaIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2RlNTAzNS04NGUxLTQ0YzYtOWNmOS00ZWEwYmJhYTA5M2YvMC9FNzRBMjM0Njky OURFODQxNDNFNURGMEREOTIxNzY0QzI4NUIwMUEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTc0QTIzNDY5MjlERTg0MTQzRTVERjBERDkyMTc2NEMyODVC MDFBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNkZTUwMzUtODRlMS00NGM2LTlj ZjktNGVhMGJiYWEwOTNmLzAvRTc0QTIzNDY5MjlERTg0MTQzRTVERjBERDkyMTc2 NEMyODVCMDFBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALCYADl5IIGbvX8OeqC8i+ISH4MQN3czJztw PkY+Zrc4Yg/lOHuhh48tj7uS4mvCutpMVC2/jVhXcrmg6mAFLayAphDLlkTqqDzd d9utdWe0GibhHQ6Z2KGpHtfofHHOkljG1TguZWpN5IP818stIxzs4TvTC7S6VW4l 0cC0WiRgnJqcu54nQm7/PF/AhhTsdprCRn2KNRc4d7LD7xwSJW06Yieynyn509zD GO7JfSsLs6jSkSB4rTapemivw1UKobx9OcklcHsRPbz6Drxu0Fd0h4yHZMNT7bLh NZ/cpIW6tKMwuLPMoqQI2XR5qfobaCTd8nzFvAvN8hNVgwq2QGE= -----END CERTIFICATE-----Generated at Tue Jul 1 16:04:14 2025 by rpki-client