$ rpki-client -vvf repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft File: E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft (raw, json) Hash identifier: gz7rcIxp05iSHOy2t5mI/Mxj/KX2O/q09JzTIG09o1U= Subject key identifier: C9:4A:0E:8D:95:B8:5B:70:7B:D9:AB:87:24:4F:E7:82:80:08:8A:A3 Authority key identifier: E1:41:ED:0B:8F:1B:83:AB:AC:98:B8:DB:75:8C:25:18:8C:6E:65:A5 Certificate issuer: /CN=E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5 Certificate serial: 67FAAA387B58B02D7A19EF194CE7DD8163361CFA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft Manifest number: CA Signing time: Sun 29 Jun 2025 22:02:00 +0000 Manifest this update: Sun 29 Jun 2025 21:57:00 +0000 Manifest next update: Thu 03 Jul 2025 09:45:00 +0000 Files and hashes: 1: E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.crl (hash: zHuOefiRaaqIX0oKWAxNG5fyMjDX1/FEin0Ihmsasls=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.crl rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 09:45:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:fa:aa:38:7b:58:b0:2d:7a:19:ef:19:4c:e7:dd:81:63:36:1c:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5 Validity Not Before: Jun 29 21:57:00 2025 GMT Not After : Jul 3 09:45:00 2025 GMT Subject: CN=C94A0E8D95B85B707BD9AB87244FE78280088AA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:52:a1:ad:eb:fb:e2:50:77:3d:1a:fa:8a:61: 73:cd:6c:75:5f:a0:06:e1:90:ba:14:83:87:3d:93: 06:2b:54:eb:9b:d4:0d:b1:e0:11:0e:08:d8:dd:27: f6:7d:ed:03:ba:b8:d4:d5:f8:6b:67:69:93:93:de: 1f:d0:f5:25:f7:26:c7:29:cc:99:13:96:81:27:73: ff:3e:a0:52:4f:fc:51:bb:76:eb:d4:5b:47:8a:07: e7:f3:05:0b:e8:5b:9f:e6:d5:13:b8:cc:8d:ab:37: 5e:7c:54:ff:83:7a:8d:e7:97:e1:67:b7:fd:f0:0f: 8f:a6:41:9b:b0:d4:9b:28:b3:57:5f:f8:79:12:e4: 8d:da:d5:f8:99:70:00:25:04:09:30:69:38:19:05: cb:4a:0e:86:2e:9f:6f:d6:11:96:fa:cb:c6:52:27: a2:91:24:fd:14:04:e0:ed:f8:a1:97:77:8a:27:23: 9c:e9:9e:2d:7c:2b:c9:fd:66:1f:20:45:b4:c9:2c: 17:6a:02:c9:7f:a2:87:c0:03:99:a3:65:87:ce:fb: 5a:98:3c:72:05:1c:37:97:31:ee:40:99:1a:88:41: ec:b1:a3:09:1e:ac:91:ed:bc:25:5d:86:68:75:81: 0b:ec:df:63:66:80:49:5b:86:3d:88:e4:32:ca:12: c4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:4A:0E:8D:95:B8:5B:70:7B:D9:AB:87:24:4F:E7:82:80:08:8A:A3 X509v3 Authority Key Identifier: keyid:E1:41:ED:0B:8F:1B:83:AB:AC:98:B8:DB:75:8C:25:18:8C:6E:65:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:54:0f:66:f6:0e:d9:74:10:aa:39:ba:1f:1d:bd:0a:f9:12: 1e:a8:b9:e4:91:5e:2e:e6:30:09:eb:eb:aa:08:d8:d8:33:d0: fe:50:73:20:fc:80:d5:23:e1:be:06:39:f2:b5:b1:ed:3e:67: f4:7b:6c:24:df:55:15:d9:e5:1b:7c:32:30:d0:2f:dc:ed:bb: 8c:5a:fe:8e:8e:79:27:d7:c2:2b:5d:c4:9f:29:df:00:a0:8c: 27:48:40:0b:89:8e:c9:e8:e6:dd:d5:74:0c:d6:4a:a6:fe:e4: 20:15:ba:29:3c:53:19:f4:d6:b9:3f:ce:42:3f:e1:4d:66:a3: c2:52:cf:bf:f3:aa:ec:d3:cc:cc:df:f1:d8:a2:4f:37:39:e1: 16:d2:73:6f:0a:de:55:51:1b:b0:cc:1b:88:e4:e7:b8:7f:d0: 93:f3:28:6a:ac:8f:c0:81:e5:a8:36:a9:7e:b5:fc:1f:d4:50: 02:e0:93:61:e8:81:49:ca:a0:af:30:69:2c:fd:4f:c0:2f:c5: 27:6a:41:de:f9:ad:31:e1:e6:5c:27:47:c6:17:75:25:1a:3c: ea:99:0d:a2:59:0a:cc:a4:a8:45:4b:6a:b7:65:d7:27:b8:4b: f8:c8:24:04:d6:ed:f1:93:2a:c9:a3:98:70:25:e8:2d:bf:eb: d1:7c:38:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ/qqOHtYsC16Ge8ZTOfdgWM2HPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE0MUVEMEI4RjFCODNBQkFDOThCOERCNzU4QzI1MTg4 QzZFNjVBNTAeFw0yNTA2MjkyMTU3MDBaFw0yNTA3MDMwOTQ1MDBaMDMxMTAvBgNV BAMTKEM5NEEwRThEOTVCODVCNzA3QkQ5QUI4NzI0NEZFNzgyODAwODhBQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnUqGt6/viUHc9GvqKYXPNbHVf oAbhkLoUg4c9kwYrVOub1A2x4BEOCNjdJ/Z97QO6uNTV+GtnaZOT3h/Q9SX3Jscp zJkTloEnc/8+oFJP/FG7duvUW0eKB+fzBQvoW5/m1RO4zI2rN158VP+Deo3nl+Fn t/3wD4+mQZuw1Jsos1df+HkS5I3a1fiZcAAlBAkwaTgZBctKDoYun2/WEZb6y8ZS J6KRJP0UBODt+KGXd4onI5zpni18K8n9Zh8gRbTJLBdqAsl/oofAA5mjZYfO+1qY PHIFHDeXMe5AmRqIQeyxowkerJHtvCVdhmh1gQvs32NmgElbhj2I5DLKEsSzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyUoOjZW4W3B72auHJE/ngoAIiqMwHwYDVR0j BBgwFoAU4UHtC48bg6usmLjbdYwlGIxuZaUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzFlNjkzYy0yZmQ3LTRmNGMtYWY2My1mZWU2OTA3NmUwZDEvMC9FMTQxRUQwQjhG MUI4M0FCQUM5OEI4REI3NThDMjUxODhDNkU2NUE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTE0MUVEMEI4RjFCODNBQkFDOThCOERCNzU4QzI1MTg4QzZF NjVBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTMxZTY5M2MtMmZkNy00ZjRjLWFm NjMtZmVlNjkwNzZlMGQxLzAvRTE0MUVEMEI4RjFCODNBQkFDOThCOERCNzU4QzI1 MTg4QzZFNjVBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJlUD2b2Dtl0EKo5uh8dvQr5Eh6oueSRXi7m MAnr66oI2Ngz0P5QcyD8gNUj4b4GOfK1se0+Z/R7bCTfVRXZ5Rt8MjDQL9ztu4xa /o6OeSfXwitdxJ8p3wCgjCdIQAuJjsno5t3VdAzWSqb+5CAVuik8Uxn01rk/zkI/ 4U1mo8JSz7/zquzTzMzf8diiTzc54RbSc28K3lVRG7DMG4jk57h/0JPzKGqsj8CB 5ag2qX61/B/UUALgk2HogUnKoK8waSz9T8AvxSdqQd75rTHh5lwnR8YXdSUaPOqZ DaJZCsykqEVLardl1ye4S/jIJATW7fGTKsmjmHAl6C2/69F8OMU= -----END CERTIFICATE-----Generated at Tue Jul 1 11:37:51 2025 by rpki-client