$ rpki-client -vvf repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft File: ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft (raw, json) Hash identifier: J0lzpGqHAcCOp8/2ZQVuPFOkfKroS3YrqTQL8Rs/EC0= Subject key identifier: 5E:C1:CD:76:82:13:AB:DA:46:20:34:70:DB:77:2D:1B:AE:72:8C:5A Authority key identifier: ED:7A:48:EA:D1:0D:1F:E9:7C:7E:F2:3A:A6:EA:2A:D6:55:BF:B0:AF Certificate issuer: /CN=ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF Certificate serial: 6E688556209ED4AC06B1760C1F165402A052C160 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft Manifest number: 0204 Signing time: Sun 29 Jun 2025 00:01:30 +0000 Manifest this update: Sat 28 Jun 2025 23:56:30 +0000 Manifest next update: Wed 02 Jul 2025 00:14:30 +0000 Files and hashes: 1: ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.crl (hash: pgMNVJIfvITlkyB+aORvkRW+xZUf8LIY3CmVXgakYok=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.crl rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 00:14:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:68:85:56:20:9e:d4:ac:06:b1:76:0c:1f:16:54:02:a0:52:c1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF Validity Not Before: Jun 28 23:56:30 2025 GMT Not After : Jul 2 00:14:30 2025 GMT Subject: CN=5EC1CD768213ABDA46203470DB772D1BAE728C5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:55:f8:5e:4c:d8:2b:65:92:a6:d5:21:d9:90: a4:59:2b:51:25:4a:44:92:41:3f:78:97:fc:75:b2: ab:41:c9:84:cf:d9:2c:d2:11:00:0e:dd:a2:a2:cc: a7:d1:8a:f4:0d:3f:52:64:21:3b:43:b8:a6:3f:c6: 15:87:72:3a:56:11:ac:b3:eb:f9:fb:75:69:ab:41: c1:b2:62:20:7a:12:26:69:fd:62:31:a5:93:29:96: 84:e7:aa:d4:af:3f:49:df:63:51:bb:7d:d6:ba:87: b4:32:8a:64:bc:c0:20:61:3b:b3:2e:e2:fb:34:8f: 3b:32:31:6e:6c:b2:7c:83:e3:c3:1b:1e:bc:59:6b: d8:2b:1f:64:f0:35:93:f3:7e:89:b5:00:94:ed:ef: b2:f4:89:83:e3:ff:2d:9e:92:6b:41:80:72:c5:58: 85:27:f8:0a:90:24:8a:80:5a:ea:b5:61:41:7e:12: da:94:09:fd:e6:da:a0:6d:58:31:d8:b3:64:da:06: 55:b7:d7:de:21:73:7b:53:2b:35:5d:33:fc:20:06: 50:55:bc:83:57:dd:11:21:98:01:2f:f7:29:ce:8d: 14:98:c0:36:d1:df:ca:8e:46:1e:58:e3:56:38:8a: ff:9c:54:a1:71:ce:01:d3:f1:29:f8:71:a8:d2:93: d5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C1:CD:76:82:13:AB:DA:46:20:34:70:DB:77:2D:1B:AE:72:8C:5A X509v3 Authority Key Identifier: keyid:ED:7A:48:EA:D1:0D:1F:E9:7C:7E:F2:3A:A6:EA:2A:D6:55:BF:B0:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:51:27:32:43:93:2f:fe:ea:a5:d3:9b:fd:ea:5c:79:e0:0a: 43:2e:da:bf:da:f1:62:bb:d3:7a:81:8e:96:1d:fb:f4:f3:b9: d6:5f:f6:ad:6c:e2:f7:3d:a0:f7:19:19:cf:e8:f5:ea:b2:b0: 76:8b:d4:78:04:85:45:92:37:bb:c4:ad:a2:04:13:11:8f:f7: 60:fa:43:b0:b8:a7:37:9f:90:8a:ea:bc:cc:4b:21:14:a7:5d: 4d:9d:ac:26:b6:6f:ba:ea:c2:28:b3:a6:6a:2d:ef:71:a1:2c: ff:44:47:30:5b:36:f9:3f:41:41:a9:02:f4:35:22:1e:4c:61: 91:06:50:da:0d:98:df:fc:69:1a:69:93:93:b5:a4:ab:3a:08: a4:ba:b3:53:5a:3e:45:14:ff:f6:4f:9d:a9:2a:10:47:1a:93: eb:14:ac:bc:c4:24:f3:68:58:bd:b6:9b:db:e6:a8:1d:c2:0d: 9e:6a:93:a7:9f:e7:dd:f2:1c:4b:a1:a4:2a:4c:d0:0e:23:43: 78:9d:6c:ee:8e:40:f9:24:e0:36:70:eb:60:7b:70:f1:22:24: 6e:67:e8:d5:91:38:4c:47:8b:6a:6f:f4:16:17:3c:1d:4b:17: 89:b2:81:8f:4b:ed:c3:47:f5:07:1f:d5:93:17:d2:f5:dc:47: 22:48:e7:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbmiFViCe1KwGsXYMHxZUAqBSwWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ3QTQ4RUFEMTBEMUZFOTdDN0VGMjNBQTZFQTJBRDY1 NUJGQjBBRjAeFw0yNTA2MjgyMzU2MzBaFw0yNTA3MDIwMDE0MzBaMDMxMTAvBgNV BAMTKDVFQzFDRDc2ODIxM0FCREE0NjIwMzQ3MERCNzcyRDFCQUU3MjhDNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAVfheTNgrZZKm1SHZkKRZK1El SkSSQT94l/x1sqtByYTP2SzSEQAO3aKizKfRivQNP1JkITtDuKY/xhWHcjpWEayz 6/n7dWmrQcGyYiB6EiZp/WIxpZMploTnqtSvP0nfY1G7fda6h7QyimS8wCBhO7Mu 4vs0jzsyMW5ssnyD48MbHrxZa9grH2TwNZPzfom1AJTt77L0iYPj/y2ekmtBgHLF WIUn+AqQJIqAWuq1YUF+EtqUCf3m2qBtWDHYs2TaBlW3194hc3tTKzVdM/wgBlBV vINX3REhmAEv9ynOjRSYwDbR38qORh5Y41Y4iv+cVKFxzgHT8Sn4cajSk9UVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXsHNdoITq9pGIDRw23ctG65yjFowHwYDVR0j BBgwFoAU7XpI6tENH+l8fvI6puoq1lW/sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDMzZTM0NC1lODE5LTQ0MzgtYjhjYS0xZjU4YzNkNTI3Y2IvMC9FRDdBNDhFQUQx MEQxRkU5N0M3RUYyM0FBNkVBMkFENjU1QkZCMEFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUQ3QTQ4RUFEMTBEMUZFOTdDN0VGMjNBQTZFQTJBRDY1NUJG QjBBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQzM2UzNDQtZTgxOS00NDM4LWI4 Y2EtMWY1OGMzZDUyN2NiLzAvRUQ3QTQ4RUFEMTBEMUZFOTdDN0VGMjNBQTZFQTJB RDY1NUJGQjBBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIlRJzJDky/+6qXTm/3qXHngCkMu2r/a8WK7 03qBjpYd+/TzudZf9q1s4vc9oPcZGc/o9eqysHaL1HgEhUWSN7vEraIEExGP92D6 Q7C4pzefkIrqvMxLIRSnXU2drCa2b7rqwiizpmot73GhLP9ERzBbNvk/QUGpAvQ1 Ih5MYZEGUNoNmN/8aRppk5O1pKs6CKS6s1NaPkUU//ZPnakqEEcak+sUrLzEJPNo WL22m9vmqB3CDZ5qk6ef593yHEuhpCpM0A4jQ3idbO6OQPkk4DZw62B7cPEiJG5n 6NWROExHi2pv9BYXPB1LF4mygY9L7cNH9Qcf1ZMX0vXcRyJI5/A= -----END CERTIFICATE-----Generated at Sun Jun 29 18:44:57 2025 by rpki-client