$ rpki-client -vvf repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft File: ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft (raw, json) Hash identifier: SxsGIG4D5C+sgDrZFm6+Lze484pViB8LnveKxGmB334= Subject key identifier: 24:82:8D:6C:63:6F:A2:7F:4D:E2:9F:06:E0:2B:0B:65:1E:90:E8:2D Authority key identifier: ED:7A:48:EA:D1:0D:1F:E9:7C:7E:F2:3A:A6:EA:2A:D6:55:BF:B0:AF Certificate issuer: /CN=ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF Certificate serial: 7873068E8E6359F059DCB5EE0A978D06DACD6679 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft Manifest number: 01EC Signing time: Mon 05 May 2025 00:21:29 +0000 Manifest this update: Mon 05 May 2025 00:16:29 +0000 Manifest next update: Thu 08 May 2025 11:06:29 +0000 Files and hashes: 1: ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.crl (hash: 6jDCONCb7aapKZB4UhV+CJp6+gjaMAYPjlHU5tqdpRg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.crl rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 11:06:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:73:06:8e:8e:63:59:f0:59:dc:b5:ee:0a:97:8d:06:da:cd:66:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF Validity Not Before: May 5 00:16:29 2025 GMT Not After : May 8 11:06:29 2025 GMT Subject: CN=24828D6C636FA27F4DE29F06E02B0B651E90E82D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:93:07:f4:2b:79:6b:bb:eb:b3:88:4e:be:f8: b1:b8:43:b1:d0:13:ac:b3:f0:25:c6:ff:da:7a:ea: a6:e8:66:0e:99:14:d1:3a:5f:91:36:67:de:2a:cb: 7a:c4:79:1f:52:a7:49:9a:1d:46:9f:7c:f0:7a:5e: e6:74:60:59:65:e7:7e:da:e5:c0:f6:11:20:19:48: 3a:95:19:70:ef:ce:ce:5a:ae:de:e1:c4:79:3b:9d: 9d:72:07:98:67:f4:8e:ec:bd:1a:c9:70:8f:85:63: 60:e0:59:2b:90:08:23:21:5b:ec:6e:39:70:7f:ff: b3:39:a4:d4:ee:4a:5b:1d:31:09:fd:99:10:92:38: 0a:42:b0:63:e3:79:59:6b:32:51:64:77:34:1b:42: 15:b9:05:9e:44:e9:3e:cb:5f:fd:1f:00:48:57:b6: 64:1a:d6:57:8d:60:49:3f:9f:40:a6:87:0a:28:e1: 8e:6c:00:d9:1c:0a:69:39:9b:70:6e:ef:3d:51:a2: 89:74:df:b0:b5:c8:5b:d3:d5:5a:9c:82:27:7c:8d: b6:b0:c0:67:96:f2:c0:c3:8f:41:44:26:22:53:77: f2:41:72:13:e9:e8:94:92:3e:18:06:b0:fe:0e:93: ea:6b:1b:bc:ba:d5:c8:94:60:ad:97:94:c2:ec:8d: cf:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:82:8D:6C:63:6F:A2:7F:4D:E2:9F:06:E0:2B:0B:65:1E:90:E8:2D X509v3 Authority Key Identifier: keyid:ED:7A:48:EA:D1:0D:1F:E9:7C:7E:F2:3A:A6:EA:2A:D6:55:BF:B0:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:62:1c:00:1d:53:ca:f8:28:1a:c2:ee:9d:d4:33:f9:28:9e: ca:8c:65:75:be:b3:bd:fc:8c:c1:db:08:bf:10:d7:e0:05:a8: e2:d6:64:e1:d0:84:24:10:9a:73:cd:0e:7f:6d:19:3a:b9:26: 00:ec:cd:7f:a7:ff:6e:de:10:bb:02:2e:46:6f:e7:14:17:2e: 59:58:b5:fe:a9:93:76:d3:68:06:9b:93:f5:46:5f:1a:87:a1: 83:21:28:62:52:3b:45:60:eb:21:dd:68:ce:b2:a6:86:7f:a3: 6e:b1:94:ec:e8:2d:61:12:93:78:13:74:48:84:98:77:39:c6: ad:6a:45:05:47:e5:70:c7:a6:9d:dd:16:57:c0:6f:3c:ba:78: 38:93:01:21:62:39:0a:4d:b1:a5:06:b4:b3:07:ef:e0:17:a2: 25:aa:88:71:ba:e7:d9:26:51:91:7a:a9:3a:bb:06:da:47:9f: 7c:9d:8b:d0:99:58:b5:1c:9f:47:f2:40:f5:c6:ba:c9:5a:62: 71:6f:90:ea:a3:d7:d9:e2:99:56:fc:48:b1:8b:df:8c:2d:07: 84:b3:a7:8c:b3:0d:e0:0c:9f:2c:14:27:b2:40:aa:6c:db:21: df:f4:3d:23:b7:17:fc:f4:aa:1f:9c:48:4a:aa:22:1d:c4:89: b4:d8:e0:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeHMGjo5jWfBZ3LXuCpeNBtrNZnkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ3QTQ4RUFEMTBEMUZFOTdDN0VGMjNBQTZFQTJBRDY1 NUJGQjBBRjAeFw0yNTA1MDUwMDE2MjlaFw0yNTA1MDgxMTA2MjlaMDMxMTAvBgNV BAMTKDI0ODI4RDZDNjM2RkEyN0Y0REUyOUYwNkUwMkIwQjY1MUU5MEU4MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSkwf0K3lru+uziE6++LG4Q7HQ E6yz8CXG/9p66qboZg6ZFNE6X5E2Z94qy3rEeR9Sp0maHUaffPB6XuZ0YFll537a 5cD2ESAZSDqVGXDvzs5art7hxHk7nZ1yB5hn9I7svRrJcI+FY2DgWSuQCCMhW+xu OXB//7M5pNTuSlsdMQn9mRCSOApCsGPjeVlrMlFkdzQbQhW5BZ5E6T7LX/0fAEhX tmQa1leNYEk/n0Cmhwoo4Y5sANkcCmk5m3Bu7z1Rool037C1yFvT1Vqcgid8jbaw wGeW8sDDj0FEJiJTd/JBchPp6JSSPhgGsP4Ok+prG7y61ciUYK2XlMLsjc8zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJIKNbGNvon9N4p8G4CsLZR6Q6C0wHwYDVR0j BBgwFoAU7XpI6tENH+l8fvI6puoq1lW/sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDMzZTM0NC1lODE5LTQ0MzgtYjhjYS0xZjU4YzNkNTI3Y2IvMC9FRDdBNDhFQUQx MEQxRkU5N0M3RUYyM0FBNkVBMkFENjU1QkZCMEFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUQ3QTQ4RUFEMTBEMUZFOTdDN0VGMjNBQTZFQTJBRDY1NUJG QjBBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQzM2UzNDQtZTgxOS00NDM4LWI4 Y2EtMWY1OGMzZDUyN2NiLzAvRUQ3QTQ4RUFEMTBEMUZFOTdDN0VGMjNBQTZFQTJB RDY1NUJGQjBBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFdiHAAdU8r4KBrC7p3UM/konsqMZXW+s738 jMHbCL8Q1+AFqOLWZOHQhCQQmnPNDn9tGTq5JgDszX+n/27eELsCLkZv5xQXLllY tf6pk3bTaAabk/VGXxqHoYMhKGJSO0Vg6yHdaM6ypoZ/o26xlOzoLWESk3gTdEiE mHc5xq1qRQVH5XDHpp3dFlfAbzy6eDiTASFiOQpNsaUGtLMH7+AXoiWqiHG659km UZF6qTq7BtpHn3ydi9CZWLUcn0fyQPXGuslaYnFvkOqj19nimVb8SLGL34wtB4Sz p4yzDeAMnywUJ7JAqmzbId/0PSO3F/z0qh+cSEqqIh3EibTY4EI= -----END CERTIFICATE-----Generated at Wed May 7 10:04:49 2025 by rpki-client