$ rpki-client -vvf repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft File: EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft (raw, json) Hash identifier: tUGiphqGFsmaIdr0AWSY3ne49vUq6BCHah2D1p+Ak2w= Subject key identifier: DC:ED:40:05:33:24:94:49:CE:B7:8D:C8:37:E9:D2:CC:86:DA:46:63 Authority key identifier: EE:72:DE:38:4F:9A:B7:FA:D6:C3:B2:86:3A:5D:B1:28:1E:5E:DC:A1 Certificate issuer: /CN=EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1 Certificate serial: 1C7B913DA7B8A4F751AD46DCC8F47DE3AB1589AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft Manifest number: F2 Signing time: Mon 12 May 2025 03:30:38 +0000 Manifest this update: Mon 12 May 2025 03:25:38 +0000 Manifest next update: Thu 15 May 2025 15:25:38 +0000 Files and hashes: 1: EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl (hash: u0yEoNZQlaeSik7+a1ujxkTcZBEOIlmSMtcZYKn97/Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 15:25:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:7b:91:3d:a7:b8:a4:f7:51:ad:46:dc:c8:f4:7d:e3:ab:15:89:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1 Validity Not Before: May 12 03:25:38 2025 GMT Not After : May 15 15:25:38 2025 GMT Subject: CN=DCED400533249449CEB78DC837E9D2CC86DA4663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c0:6c:b1:03:dc:cd:3d:08:e6:d7:8f:0d:ee: 91:4a:43:d6:43:6b:67:a4:72:88:ae:69:0f:0f:7b: d5:68:8e:32:0a:3d:9d:76:4d:d3:5b:dc:8b:7a:c6: 41:f8:7f:37:36:26:1d:03:7d:bf:00:57:a7:45:82: 23:e7:42:a5:bd:e9:90:1f:1b:01:3c:e8:de:77:9b: 21:69:1e:0b:25:8a:fa:38:23:df:de:4f:32:dd:97: 99:d3:56:6e:e9:f1:24:1f:73:a9:f2:a4:ba:81:94: a1:71:87:75:1b:46:a4:37:f5:3c:ce:b4:67:0f:57: eb:0a:40:3b:24:f7:7f:c1:37:53:15:1b:44:d8:ac: 6c:af:43:d8:c8:44:96:20:74:b7:85:a1:80:0d:a6: 78:68:52:ad:92:0c:23:89:24:4d:b9:61:3d:9e:24: f6:d1:f4:75:e8:74:b8:97:99:86:17:b5:d6:a3:96: 9f:1f:38:9d:26:9e:6d:1c:28:36:5b:67:8e:15:c9: e4:58:6c:cb:c3:ab:d8:90:d0:eb:93:75:93:ca:1c: 90:a6:c9:1d:c5:7f:ab:32:97:57:e6:6e:e3:53:e4: 00:5e:e7:c8:96:a9:4b:fc:c6:04:87:a1:ed:59:62: 68:5b:71:46:0f:e9:c0:c0:f3:7a:0d:fe:8d:66:d3: ba:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:ED:40:05:33:24:94:49:CE:B7:8D:C8:37:E9:D2:CC:86:DA:46:63 X509v3 Authority Key Identifier: keyid:EE:72:DE:38:4F:9A:B7:FA:D6:C3:B2:86:3A:5D:B1:28:1E:5E:DC:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:cc:d2:6b:2a:08:58:30:1e:71:6f:91:30:99:0c:c9:14:9f: b7:35:b3:df:5e:53:df:32:2f:44:e3:0d:ee:3c:9b:48:47:5b: ea:b8:a5:0b:3a:81:42:ba:b7:30:4a:ce:47:82:8b:f4:4a:f4: ba:c0:81:59:69:17:53:3a:b0:fe:b3:cf:a8:c6:ea:fd:df:9f: c8:ff:be:c4:69:da:3c:f5:5c:3e:e6:46:92:27:c1:06:5e:75: fd:62:4f:ee:c8:78:5f:31:ab:19:50:6e:7a:62:83:64:15:54: 2a:ec:38:c1:f2:bf:17:d5:2e:7f:fd:90:f6:08:2a:e8:f7:4d: 81:23:9d:23:21:28:6f:2d:d7:f6:37:8c:9d:be:01:4c:1b:85: 06:d3:a0:00:ac:0f:36:6f:5c:dd:32:f7:56:b1:b7:dc:ac:8e: 3d:66:2c:e9:20:1b:78:e9:0a:78:9e:63:96:f7:59:65:96:70: 09:a1:da:d7:24:a0:85:f7:fc:9f:9f:2a:5c:e6:f7:c5:aa:3a: 44:43:07:73:bc:81:77:9b:a9:11:45:d7:01:75:35:67:35:92: 66:10:fe:73:6b:48:14:71:f1:4a:98:99:28:39:58:08:8d:47: 31:c8:62:29:53:d1:ef:21:1f:f1:27:03:f4:36:c8:77:ba:bb: 03:07:82:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHHuRPae4pPdRrUbcyPR946sVia8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIxMjgx RTVFRENBMTAeFw0yNTA1MTIwMzI1MzhaFw0yNTA1MTUxNTI1MzhaMDMxMTAvBgNV BAMTKERDRUQ0MDA1MzMyNDk0NDlDRUI3OERDODM3RTlEMkNDODZEQTQ2NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMwGyxA9zNPQjm148N7pFKQ9ZD a2ekcoiuaQ8Pe9VojjIKPZ12TdNb3It6xkH4fzc2Jh0Dfb8AV6dFgiPnQqW96ZAf GwE86N53myFpHgslivo4I9/eTzLdl5nTVm7p8SQfc6nypLqBlKFxh3UbRqQ39TzO tGcPV+sKQDsk93/BN1MVG0TYrGyvQ9jIRJYgdLeFoYANpnhoUq2SDCOJJE25YT2e JPbR9HXodLiXmYYXtdajlp8fOJ0mnm0cKDZbZ44VyeRYbMvDq9iQ0OuTdZPKHJCm yR3Ff6syl1fmbuNT5ABe58iWqUv8xgSHoe1ZYmhbcUYP6cDA83oN/o1m07rFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3O1ABTMklEnOt43IN+nSzIbaRmMwHwYDVR0j BBgwFoAU7nLeOE+at/rWw7KGOl2xKB5e3KEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NTdlNjg3OC02Y2IyLTRhNWYtYjU1My1iY2ViMmM5NWM3NmMvMC9FRTcyREUzODRG OUFCN0ZBRDZDM0IyODYzQTVEQjEyODFFNUVEQ0ExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIxMjgxRTVF RENBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzU3ZTY4NzgtNmNiMi00YTVmLWI1 NTMtYmNlYjJjOTVjNzZjLzAvRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIx MjgxRTVFRENBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALM0msqCFgwHnFvkTCZDMkUn7c1s99eU98y L0TjDe48m0hHW+q4pQs6gUK6tzBKzkeCi/RK9LrAgVlpF1M6sP6zz6jG6v3fn8j/ vsRp2jz1XD7mRpInwQZedf1iT+7IeF8xqxlQbnpig2QVVCrsOMHyvxfVLn/9kPYI Kuj3TYEjnSMhKG8t1/Y3jJ2+AUwbhQbToACsDzZvXN0y91axt9ysjj1mLOkgG3jp CnieY5b3WWWWcAmh2tckoIX3/J+fKlzm98WqOkRDB3O8gXebqRFF1wF1NWc1kmYQ /nNrSBRx8UqYmSg5WAiNRzHIYilT0e8hH/EnA/Q2yHe6uwMHgtw= -----END CERTIFICATE-----Generated at Mon May 12 20:32:49 2025 by rpki-client