$ rpki-client -vvf repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.mft File: E810D41602DB2D5449939EA97EB71C350841BC5D.mft (raw, json) Hash identifier: 1byMhxG1/vUXkcjXlquUS2wvnQXts20HlRW4XdzCjFM= Subject key identifier: B3:F3:7A:83:EE:2A:43:B3:92:46:E4:7E:A5:AF:7A:FA:3D:1F:DE:B7 Authority key identifier: E8:10:D4:16:02:DB:2D:54:49:93:9E:A9:7E:B7:1C:35:08:41:BC:5D Certificate issuer: /CN=E810D41602DB2D5449939EA97EB71C350841BC5D Certificate serial: 5E7FAD3BA5A6FF40886ED7F0C704B11EC1A28BED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E810D41602DB2D5449939EA97EB71C350841BC5D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.mft Manifest number: 01E8 Signing time: Tue 06 May 2025 17:11:04 +0000 Manifest this update: Tue 06 May 2025 17:06:04 +0000 Manifest next update: Sat 10 May 2025 02:45:04 +0000 Files and hashes: 1: E810D41602DB2D5449939EA97EB71C350841BC5D.crl (hash: edBtSyX1bZ50YcPrWk0Cugmmd/cWsb9O39vaZT7DXx0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.crl rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E810D41602DB2D5449939EA97EB71C350841BC5D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 02:45:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:7f:ad:3b:a5:a6:ff:40:88:6e:d7:f0:c7:04:b1:1e:c1:a2:8b:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E810D41602DB2D5449939EA97EB71C350841BC5D Validity Not Before: May 6 17:06:04 2025 GMT Not After : May 10 02:45:04 2025 GMT Subject: CN=B3F37A83EE2A43B39246E47EA5AF7AFA3D1FDEB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:51:a8:03:17:90:41:87:e2:63:f7:64:6b:f8: 62:0b:bf:8e:8f:d8:ca:a9:3d:13:ed:c6:36:87:64: 6e:4b:ea:f6:b2:c5:91:8d:10:eb:0d:af:bc:5b:c0: 42:98:1b:e0:ae:00:79:7c:07:9e:98:e4:66:26:a6: 81:ff:d8:12:cd:51:76:e7:5b:60:2a:a6:89:39:4e: 98:82:17:7d:50:b6:3e:84:b6:83:b9:1d:e1:4e:80: 89:8e:70:7a:89:66:a9:03:24:1a:31:14:cb:68:38: a7:1b:08:f4:e6:79:82:23:67:33:b7:10:a9:50:05: a2:8f:d1:8b:74:64:82:b7:c5:fa:c5:ed:25:ef:56: ed:2d:86:77:9e:93:42:ab:60:4d:60:3d:6d:d5:cd: 7f:21:a9:fe:10:ea:82:ab:1d:aa:89:d2:d8:1c:75: 52:d9:07:dc:ee:d6:10:9a:56:70:32:86:b6:be:58: e4:e2:b7:9d:cf:15:0d:d9:44:c2:03:a1:82:a0:c1: 31:03:57:14:8d:e1:2d:04:3b:37:11:a9:22:e5:fa: 53:2c:f7:e5:52:7e:21:07:02:9c:2e:14:ba:98:7f: 5c:67:75:2d:71:45:e0:a8:74:36:97:8b:42:3b:88: b1:41:79:20:7b:15:c4:a2:a7:20:a2:bb:a4:f6:7e: ae:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F3:7A:83:EE:2A:43:B3:92:46:E4:7E:A5:AF:7A:FA:3D:1F:DE:B7 X509v3 Authority Key Identifier: keyid:E8:10:D4:16:02:DB:2D:54:49:93:9E:A9:7E:B7:1C:35:08:41:BC:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E810D41602DB2D5449939EA97EB71C350841BC5D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:6e:44:b9:8f:24:0e:28:e8:12:52:37:8b:f5:d0:ae:c6:2b: f7:43:98:03:1a:df:d7:09:e1:85:b2:c7:b2:65:49:95:d3:fd: 11:87:9b:c3:57:b2:64:5d:e4:51:08:d7:fd:98:b6:4b:48:3e: f2:9f:35:5e:7f:01:e9:f3:40:d4:81:3c:6c:32:1b:3e:1a:5e: 67:0a:49:55:dc:8c:d3:82:c0:6d:ac:5a:c5:70:db:5f:a6:e5: f4:a1:27:d4:f2:d6:06:f7:4f:69:c2:23:56:24:bf:e4:75:cc: b3:bb:8d:8a:70:52:d9:82:e8:d4:90:ee:07:bd:bc:38:4e:5b: 84:8b:e7:61:6b:2f:00:c9:c0:3c:07:6e:22:61:5c:97:ef:99: 24:71:49:03:03:d9:80:69:cd:cd:fc:03:35:be:94:1a:fe:e3: 87:e0:e2:26:00:cb:ec:89:de:db:b4:16:f9:ca:06:62:89:95: 58:96:c9:cb:d2:96:6e:8c:1f:62:d6:cf:5c:50:55:5d:cc:73: 52:a7:7a:88:16:38:ba:51:ec:6c:71:d8:5d:50:b6:af:40:da: 39:b2:2d:5a:5d:98:f0:3a:e7:38:60:f7:0e:4c:7c:d2:26:cc: 8c:d1:c8:bb:33:ff:f3:fb:40:eb:fd:fb:2b:6a:d5:0e:ff:c8: 22:99:e6:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXn+tO6Wm/0CIbtfwxwSxHsGii+0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTgxMEQ0MTYwMkRCMkQ1NDQ5OTM5RUE5N0VCNzFDMzUw ODQxQkM1RDAeFw0yNTA1MDYxNzA2MDRaFw0yNTA1MTAwMjQ1MDRaMDMxMTAvBgNV BAMTKEIzRjM3QTgzRUUyQTQzQjM5MjQ2RTQ3RUE1QUY3QUZBM0QxRkRFQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHUagDF5BBh+Jj92Rr+GILv46P 2MqpPRPtxjaHZG5L6vayxZGNEOsNr7xbwEKYG+CuAHl8B56Y5GYmpoH/2BLNUXbn W2Aqpok5TpiCF31Qtj6EtoO5HeFOgImOcHqJZqkDJBoxFMtoOKcbCPTmeYIjZzO3 EKlQBaKP0Yt0ZIK3xfrF7SXvVu0thneek0KrYE1gPW3VzX8hqf4Q6oKrHaqJ0tgc dVLZB9zu1hCaVnAyhra+WOTit53PFQ3ZRMIDoYKgwTEDVxSN4S0EOzcRqSLl+lMs 9+VSfiEHApwuFLqYf1xndS1xReCodDaXi0I7iLFBeSB7FcSipyCiu6T2fq7jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs/N6g+4qQ7OSRuR+pa96+j0f3rcwHwYDVR0j BBgwFoAU6BDUFgLbLVRJk56pfrccNQhBvF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTkwNWI4Zi01YzBhLTQ1NzktYjRmNy0wOTI2N2I1NTg5NjgvMC9FODEwRDQxNjAy REIyRDU0NDk5MzlFQTk3RUI3MUMzNTA4NDFCQzVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTgxMEQ0MTYwMkRCMkQ1NDQ5OTM5RUE5N0VCNzFDMzUwODQx QkM1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk5MDViOGYtNWMwYS00NTc5LWI0 ZjctMDkyNjdiNTU4OTY4LzAvRTgxMEQ0MTYwMkRCMkQ1NDQ5OTM5RUE5N0VCNzFD MzUwODQxQkM1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADxuRLmPJA4o6BJSN4v10K7GK/dDmAMa39cJ 4YWyx7JlSZXT/RGHm8NXsmRd5FEI1/2YtktIPvKfNV5/AenzQNSBPGwyGz4aXmcK SVXcjNOCwG2sWsVw21+m5fShJ9Ty1gb3T2nCI1Ykv+R1zLO7jYpwUtmC6NSQ7ge9 vDhOW4SL52FrLwDJwDwHbiJhXJfvmSRxSQMD2YBpzc38AzW+lBr+44fg4iYAy+yJ 3tu0FvnKBmKJlViWycvSlm6MH2LWz1xQVV3Mc1KneogWOLpR7Gxx2F1Qtq9A2jmy LVpdmPA65zhg9w5MfNImzIzRyLsz//P7QOv9+ytq1Q7/yCKZ5jY= -----END CERTIFICATE-----Generated at Thu May 8 18:56:44 2025 by rpki-client