$ rpki-client -vvf repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft File: E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft (raw, json) Hash identifier: tusLB60nAriH9m9BsKMFssyYWmqxoPuF5RhQFcwubg0= Subject key identifier: 5A:38:28:10:AE:93:FD:04:42:A9:E3:68:30:FE:3E:9C:28:9C:ED:A7 Authority key identifier: E1:41:ED:0B:8F:1B:83:AB:AC:98:B8:DB:75:8C:25:18:8C:6E:65:A5 Certificate issuer: /CN=E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5 Certificate serial: 1915C83F2E267A90194AF8E5B7EFA19C87749DF1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft Manifest number: B3 Signing time: Fri 09 May 2025 15:31:58 +0000 Manifest this update: Fri 09 May 2025 15:26:58 +0000 Manifest next update: Mon 12 May 2025 22:42:58 +0000 Files and hashes: 1: E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.crl (hash: Y/LbIMySHoYrcAppJSwcaUiwT7wCP53cyq6IRQomLUk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.crl rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 22:42:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:15:c8:3f:2e:26:7a:90:19:4a:f8:e5:b7:ef:a1:9c:87:74:9d:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5 Validity Not Before: May 9 15:26:58 2025 GMT Not After : May 12 22:42:58 2025 GMT Subject: CN=5A382810AE93FD0442A9E36830FE3E9C289CEDA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:e4:ab:5f:57:bc:de:41:a7:89:20:ee:ef:33: 10:4e:07:cf:7e:9d:d6:c2:1c:4c:f5:a5:a5:e1:9e: 6a:de:38:81:b5:06:46:69:bd:91:09:c2:98:b1:74: 22:49:32:ae:fa:34:0a:48:ae:ae:b1:2b:8b:c9:d5: fb:39:ec:90:c7:98:0e:52:7d:d5:9b:d1:f9:06:f2: be:85:96:cb:08:90:10:77:f9:b6:da:a0:80:d4:ab: d0:06:19:d4:e1:54:76:a3:89:6c:f0:7a:a0:cf:d8: b2:0d:11:c5:e9:45:93:0e:ab:24:f1:b2:d6:0d:11: 51:b1:71:b7:e9:d5:45:44:ab:ea:93:51:6d:3f:0d: 99:1a:ab:a6:a4:eb:a5:6d:a4:0c:59:aa:68:89:01: 92:cd:b7:55:9e:24:44:a8:dd:8f:e1:aa:67:19:2c: de:d2:8d:f9:28:be:ba:47:be:65:c0:da:4b:a7:33: 59:45:8a:82:99:15:7f:c1:e6:ba:2a:47:98:29:29: 00:4c:e2:99:f4:93:96:9f:58:ef:bc:07:05:1b:09: 33:67:b8:e8:ed:c6:b5:d3:57:ef:27:e7:ad:07:7a: bb:e7:c1:70:ab:ee:52:2d:8e:87:c0:a5:ad:1e:93: 70:2f:74:48:35:9d:2e:f3:9b:14:a4:3c:54:e9:ae: 31:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:38:28:10:AE:93:FD:04:42:A9:E3:68:30:FE:3E:9C:28:9C:ED:A7 X509v3 Authority Key Identifier: keyid:E1:41:ED:0B:8F:1B:83:AB:AC:98:B8:DB:75:8C:25:18:8C:6E:65:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:9a:19:0a:79:f1:d3:72:c6:ea:e1:dd:80:d2:68:02:34:09: 57:19:ef:99:3f:e5:09:cb:51:c2:ef:6d:b2:44:a0:f6:1c:7d: 05:a3:01:8a:a2:9e:0d:c1:42:56:da:b1:24:5e:a0:dd:9e:dd: 5b:15:b0:8d:aa:c7:d2:48:f4:7b:3c:28:47:e2:fd:a5:ca:cb: 23:19:f8:79:95:7a:64:45:bf:7a:93:fb:6c:b4:29:d5:6a:fb: 2d:59:c9:53:fa:97:45:e3:00:4a:8e:f7:21:76:8b:49:3a:80: ca:13:92:4c:32:01:81:ec:7b:01:a9:b2:fc:46:c8:f7:58:e6: 95:90:7a:56:df:f1:22:f9:6f:7d:8c:9e:b3:6a:77:51:43:86: 17:62:be:7b:0f:f5:9b:9c:7c:d9:5f:bd:97:3e:13:57:05:aa: 27:f5:3d:87:0d:e4:a6:9b:12:00:38:e5:47:5e:40:67:6e:e8: 44:c3:38:41:4b:78:1c:11:d1:04:35:1e:21:06:a7:98:d3:f2: a1:6e:c1:cd:fe:29:ad:94:19:7a:7b:bc:02:db:77:db:01:4e: 75:76:bd:58:48:3d:12:5d:ab:d3:30:a4:ae:0e:1c:81:6f:d4: 9c:b6:62:42:e8:d0:08:8e:a8:b4:a4:45:24:4d:e0:4f:8b:58: ca:57:83:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGRXIPy4mepAZSvjlt++hnId0nfEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE0MUVEMEI4RjFCODNBQkFDOThCOERCNzU4QzI1MTg4 QzZFNjVBNTAeFw0yNTA1MDkxNTI2NThaFw0yNTA1MTIyMjQyNThaMDMxMTAvBgNV BAMTKDVBMzgyODEwQUU5M0ZEMDQ0MkE5RTM2ODMwRkUzRTlDMjg5Q0VEQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu5KtfV7zeQaeJIO7vMxBOB89+ ndbCHEz1paXhnmreOIG1BkZpvZEJwpixdCJJMq76NApIrq6xK4vJ1fs57JDHmA5S fdWb0fkG8r6FlssIkBB3+bbaoIDUq9AGGdThVHajiWzweqDP2LINEcXpRZMOqyTx stYNEVGxcbfp1UVEq+qTUW0/DZkaq6ak66VtpAxZqmiJAZLNt1WeJESo3Y/hqmcZ LN7SjfkovrpHvmXA2kunM1lFioKZFX/B5roqR5gpKQBM4pn0k5afWO+8BwUbCTNn uOjtxrXTV+8n560HervnwXCr7lItjofApa0ek3AvdEg1nS7zmxSkPFTprjFVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWjgoEK6T/QRCqeNoMP4+nCic7acwHwYDVR0j BBgwFoAU4UHtC48bg6usmLjbdYwlGIxuZaUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzFlNjkzYy0yZmQ3LTRmNGMtYWY2My1mZWU2OTA3NmUwZDEvMC9FMTQxRUQwQjhG MUI4M0FCQUM5OEI4REI3NThDMjUxODhDNkU2NUE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTE0MUVEMEI4RjFCODNBQkFDOThCOERCNzU4QzI1MTg4QzZF NjVBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTMxZTY5M2MtMmZkNy00ZjRjLWFm NjMtZmVlNjkwNzZlMGQxLzAvRTE0MUVEMEI4RjFCODNBQkFDOThCOERCNzU4QzI1 MTg4QzZFNjVBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADWaGQp58dNyxurh3YDSaAI0CVcZ75k/5QnL UcLvbbJEoPYcfQWjAYqing3BQlbasSReoN2e3VsVsI2qx9JI9Hs8KEfi/aXKyyMZ +HmVemRFv3qT+2y0KdVq+y1ZyVP6l0XjAEqO9yF2i0k6gMoTkkwyAYHsewGpsvxG yPdY5pWQelbf8SL5b32MnrNqd1FDhhdivnsP9ZucfNlfvZc+E1cFqif1PYcN5Kab EgA45UdeQGdu6ETDOEFLeBwR0QQ1HiEGp5jT8qFuwc3+Ka2UGXp7vALbd9sBTnV2 vVhIPRJdq9MwpK4OHIFv1Jy2YkLo0AiOqLSkRSRN4E+LWMpXgzQ= -----END CERTIFICATE-----Generated at Sun May 11 23:16:15 2025 by rpki-client