$ rpki-client -vvf repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft File: E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft (raw, json) Hash identifier: PN61/Qhqb5m5LA2wbd3OgtHc0/HPt4k7alCGFlrrc90= Subject key identifier: 79:0F:25:E4:7E:B0:88:8C:21:49:83:5C:D6:BB:74:59:8F:EA:CE:26 Authority key identifier: E1:B7:08:FE:CC:3E:90:64:3F:33:B8:31:1E:29:F1:B4:6F:E9:2B:7F Certificate issuer: /CN=E1B708FECC3E90643F33B8311E29F1B46FE92B7F Certificate serial: 6E76A06B62D3FA11F7E2795892C8DEA97C172282 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft Manifest number: 015B Signing time: Wed 07 May 2025 18:42:37 +0000 Manifest this update: Wed 07 May 2025 18:37:37 +0000 Manifest next update: Sun 11 May 2025 05:22:37 +0000 Files and hashes: 1: E1B708FECC3E90643F33B8311E29F1B46FE92B7F.crl (hash: 3DzIdAgx3cXpAxxAahgZfVtBFxS1sepw1/CvELG8vVo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.crl rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 05:22:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:76:a0:6b:62:d3:fa:11:f7:e2:79:58:92:c8:de:a9:7c:17:22:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1B708FECC3E90643F33B8311E29F1B46FE92B7F Validity Not Before: May 7 18:37:37 2025 GMT Not After : May 11 05:22:37 2025 GMT Subject: CN=790F25E47EB0888C2149835CD6BB74598FEACE26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:06:39:c0:b0:6d:42:fb:3d:bb:b5:a4:6e:b5: 31:13:00:c4:d6:3f:78:cc:74:b4:76:08:dd:24:68: de:d6:f7:89:1e:37:21:e4:29:7b:ca:6d:30:78:d2: f3:0b:67:e9:fe:c5:a2:9e:cd:4d:4f:fd:41:13:a6: 85:3d:09:bb:9e:ce:a5:df:aa:ab:ea:51:7f:bd:4b: 29:d8:46:d1:b5:44:ab:3e:66:21:58:25:e4:84:56: 8e:b1:8d:e0:a9:62:0a:36:60:95:71:c4:d8:fe:68: 5d:bb:75:4d:0a:0b:4c:91:c6:d8:98:23:06:b0:c9: 87:34:7c:b1:73:7b:96:37:32:f0:34:b3:50:cd:ef: 63:cd:98:92:44:b0:0c:4f:5d:f8:9e:66:db:3a:d6: d9:32:ba:f5:89:b5:33:5d:f0:fb:9e:06:5d:9b:dc: 2e:73:10:80:d0:cc:af:9d:84:79:ce:27:87:20:1e: 0b:9f:3a:8f:62:58:27:98:5a:1f:ba:4e:c0:b0:29: 53:91:12:c8:f7:74:72:42:60:1a:e7:0e:84:4c:bc: 08:71:84:a6:af:17:8a:9d:90:15:d3:5d:46:be:40: b4:7d:0c:4f:97:d2:06:da:d2:a9:00:67:3f:e7:f2: e0:56:bb:39:1c:7c:d7:b6:e3:63:ef:fb:6f:d4:a7: 18:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:0F:25:E4:7E:B0:88:8C:21:49:83:5C:D6:BB:74:59:8F:EA:CE:26 X509v3 Authority Key Identifier: keyid:E1:B7:08:FE:CC:3E:90:64:3F:33:B8:31:1E:29:F1:B4:6F:E9:2B:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:5e:d9:e9:2f:8c:89:eb:4e:0e:da:d9:81:b6:48:75:74:87: 9c:1c:7b:80:38:f1:b0:1b:b9:c3:34:83:b6:a8:34:5b:fe:20: d3:82:7e:23:ec:5e:29:11:a1:81:89:75:06:5e:e3:f4:ea:74: 8c:41:62:07:cd:31:b5:f5:2a:f5:b5:0a:ae:46:ea:54:9d:f7: bd:2d:74:d3:97:54:ac:00:56:86:bc:cd:a0:8d:d6:00:17:ee: 29:cc:47:b1:7f:a7:e5:e8:f5:4f:1d:66:9c:f4:dd:14:e1:c2: 16:ac:af:f5:c0:0c:80:17:15:47:f1:35:45:00:0c:6c:d1:ba: 33:ce:5d:08:33:20:0b:8b:9f:e6:9a:7a:a2:8c:a6:f9:2d:13: 50:19:ed:a2:a0:14:5e:94:7a:c5:3a:74:f5:2c:d9:f4:e5:9b: ab:ed:26:5a:52:c1:c6:4b:ef:7e:3a:04:33:4d:d3:fe:37:0e: 8e:9f:21:fb:ae:b4:92:30:e6:72:e2:cf:a5:82:fb:2a:92:c9: d8:cf:3a:18:bd:21:c1:79:99:8d:dc:55:07:fd:1f:0c:6c:a8: 27:28:be:90:a4:74:32:97:80:6c:7e:18:7e:e3:42:1e:b6:c2: 37:a9:1b:dd:3e:a3:a4:7c:32:a3:8a:9d:f3:f8:95:c8:42:d1: c7:ba:fb:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbnaga2LT+hH34nlYksjeqXwXIoIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFCNzA4RkVDQzNFOTA2NDNGMzNCODMxMUUyOUYxQjQ2 RkU5MkI3RjAeFw0yNTA1MDcxODM3MzdaFw0yNTA1MTEwNTIyMzdaMDMxMTAvBgNV BAMTKDc5MEYyNUU0N0VCMDg4OEMyMTQ5ODM1Q0Q2QkI3NDU5OEZFQUNFMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPBjnAsG1C+z27taRutTETAMTW P3jMdLR2CN0kaN7W94keNyHkKXvKbTB40vMLZ+n+xaKezU1P/UETpoU9CbuezqXf qqvqUX+9SynYRtG1RKs+ZiFYJeSEVo6xjeCpYgo2YJVxxNj+aF27dU0KC0yRxtiY IwawyYc0fLFze5Y3MvA0s1DN72PNmJJEsAxPXfieZts61tkyuvWJtTNd8PueBl2b 3C5zEIDQzK+dhHnOJ4cgHgufOo9iWCeYWh+6TsCwKVOREsj3dHJCYBrnDoRMvAhx hKavF4qdkBXTXUa+QLR9DE+X0gba0qkAZz/n8uBWuzkcfNe242Pv+2/UpxiPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeQ8l5H6wiIwhSYNc1rt0WY/qziYwHwYDVR0j BBgwFoAU4bcI/sw+kGQ/M7gxHinxtG/pK38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZjRkMWMzNi00YTMxLTQ4NTctOWUzNi0wZGRmM2Q2OTFlYjUvMC9FMUI3MDhGRUND M0U5MDY0M0YzM0I4MzExRTI5RjFCNDZGRTkyQjdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTFCNzA4RkVDQzNFOTA2NDNGMzNCODMxMUUyOUYxQjQ2RkU5 MkI3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmY0ZDFjMzYtNGEzMS00ODU3LTll MzYtMGRkZjNkNjkxZWI1LzAvRTFCNzA4RkVDQzNFOTA2NDNGMzNCODMxMUUyOUYx QjQ2RkU5MkI3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFpe2ekvjInrTg7a2YG2SHV0h5wce4A48bAb ucM0g7aoNFv+INOCfiPsXikRoYGJdQZe4/TqdIxBYgfNMbX1KvW1Cq5G6lSd970t dNOXVKwAVoa8zaCN1gAX7inMR7F/p+Xo9U8dZpz03RThwhasr/XADIAXFUfxNUUA DGzRujPOXQgzIAuLn+aaeqKMpvktE1AZ7aKgFF6UesU6dPUs2fTlm6vtJlpSwcZL 7346BDNN0/43Do6fIfuutJIw5nLiz6WC+yqSydjPOhi9IcF5mY3cVQf9HwxsqCco vpCkdDKXgGx+GH7jQh62wjepG90+o6R8MqOKnfP4lchC0ce6+8w= -----END CERTIFICATE-----Generated at Thu May 8 21:05:57 2025 by rpki-client