$ rpki-client -vvf repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft File: ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft (raw, json) Hash identifier: ZxOGDFCoTC/+OAPDXRUiyj0tYyEPrW8P2RxFlZpbkbg= Subject key identifier: BD:2A:23:7E:45:AE:EC:D8:B3:F7:D6:31:3B:94:AB:11:13:C8:4A:4D Authority key identifier: ED:7A:48:EA:D1:0D:1F:E9:7C:7E:F2:3A:A6:EA:2A:D6:55:BF:B0:AF Certificate issuer: /CN=ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF Certificate serial: 24749E3804D67EF27E2B2FC4386DF92D50B0639E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft Manifest number: 020E Signing time: Mon 21 Jul 2025 01:11:29 +0000 Manifest this update: Mon 21 Jul 2025 01:06:29 +0000 Manifest next update: Thu 24 Jul 2025 06:18:29 +0000 Files and hashes: 1: ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.crl (hash: wKwh/gH1ZcHRmEul5pjetRbYFp9yiNOU9hUlLKlRUb8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.crl rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 06:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:74:9e:38:04:d6:7e:f2:7e:2b:2f:c4:38:6d:f9:2d:50:b0:63:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF Validity Not Before: Jul 21 01:06:29 2025 GMT Not After : Jul 24 06:18:29 2025 GMT Subject: CN=BD2A237E45AEECD8B3F7D6313B94AB1113C84A4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f6:00:7b:a5:6c:46:6f:0d:fc:e5:23:d8:7e: 71:dc:21:64:2f:9d:66:f7:67:36:38:a5:b3:be:b9: 21:2e:f9:b9:b2:1c:96:dd:ea:4e:58:f8:17:27:95: 82:44:53:94:3b:ab:f3:63:94:d1:dd:c1:7d:75:cd: 87:ad:84:1f:da:95:d8:ff:b5:bf:0d:45:7c:2a:38: 2b:0d:db:27:4d:94:33:9c:13:4f:a5:00:24:ea:1d: a6:4a:be:62:e7:92:23:07:c3:a4:f8:90:25:e0:5c: 66:3c:4f:82:25:40:f6:f4:57:f3:90:4e:74:34:ce: f9:a0:73:46:1a:08:ae:df:91:8e:45:77:b2:47:52: 13:6e:b1:ae:e5:d2:e0:3b:6b:22:55:31:1f:95:05: f3:3a:00:43:47:10:4c:a7:48:6f:4c:33:67:96:29: 54:f4:53:fe:6d:2f:ca:a7:6b:01:f5:d3:8a:f7:80: 79:ec:f7:99:01:8a:f9:7b:4b:a7:35:25:6a:d0:a6: c1:33:d8:21:8f:99:e3:37:36:3a:aa:36:3a:36:2d: 55:d0:1c:5a:14:8c:8c:9d:75:94:72:a5:0d:eb:62: 4a:68:19:b2:27:4e:10:d5:66:81:b3:d0:4f:f8:f1: 94:ec:44:00:6f:77:e6:dd:e7:3c:8c:f8:28:ee:12: 0a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:2A:23:7E:45:AE:EC:D8:B3:F7:D6:31:3B:94:AB:11:13:C8:4A:4D X509v3 Authority Key Identifier: keyid:ED:7A:48:EA:D1:0D:1F:E9:7C:7E:F2:3A:A6:EA:2A:D6:55:BF:B0:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:0f:c9:37:28:d5:3c:23:64:ae:5b:76:bd:85:6f:f4:89:11: e2:8a:c6:9d:85:55:42:bf:a0:0a:c4:e7:a8:21:ca:09:7d:c8: 9a:c1:90:3b:bf:e7:ed:c4:88:b8:1e:b4:f2:22:c9:32:98:d0: 60:5d:17:30:16:2a:3a:c2:fd:ed:41:4d:33:90:10:cc:3a:b7: 13:f4:a0:fd:e5:47:3c:7d:70:a6:ae:ad:e1:4c:c9:a0:4c:ea: 5d:32:a0:4b:0e:f3:ad:21:c7:a8:46:fd:73:12:72:f7:3e:8d: 9b:50:bb:29:35:6e:72:01:0f:19:38:eb:1d:52:de:ef:5a:66: 69:8b:8b:65:3e:41:b2:c5:ed:32:3d:84:51:f1:b3:84:3e:a1: 69:e2:e6:a9:9b:f9:ea:9d:e7:4d:a7:e7:e2:58:fe:c9:ed:d2: db:58:37:7a:52:39:a2:44:c2:e0:58:00:d5:ec:82:df:42:cf: 51:dd:cd:54:0a:56:6c:5c:82:fa:e1:33:22:05:9d:0a:ce:ce: aa:46:34:90:ce:b7:5b:66:fd:fb:d7:01:c4:ef:28:9c:19:83: cc:5c:e1:79:61:da:dc:4f:d2:58:2e:9d:cc:a6:12:6e:9b:68: cd:38:ea:b8:5c:73:fc:f9:61:d8:f5:d8:e9:84:91:73:d7:33: 51:1c:01:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJHSeOATWfvJ+Ky/EOG35LVCwY54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ3QTQ4RUFEMTBEMUZFOTdDN0VGMjNBQTZFQTJBRDY1 NUJGQjBBRjAeFw0yNTA3MjEwMTA2MjlaFw0yNTA3MjQwNjE4MjlaMDMxMTAvBgNV BAMTKEJEMkEyMzdFNDVBRUVDRDhCM0Y3RDYzMTNCOTRBQjExMTNDODRBNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP9gB7pWxGbw385SPYfnHcIWQv nWb3ZzY4pbO+uSEu+bmyHJbd6k5Y+BcnlYJEU5Q7q/NjlNHdwX11zYethB/aldj/ tb8NRXwqOCsN2ydNlDOcE0+lACTqHaZKvmLnkiMHw6T4kCXgXGY8T4IlQPb0V/OQ TnQ0zvmgc0YaCK7fkY5Fd7JHUhNusa7l0uA7ayJVMR+VBfM6AENHEEynSG9MM2eW KVT0U/5tL8qnawH104r3gHns95kBivl7S6c1JWrQpsEz2CGPmeM3NjqqNjo2LVXQ HFoUjIyddZRypQ3rYkpoGbInThDVZoGz0E/48ZTsRABvd+bd5zyM+CjuEgozAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvSojfkWu7Niz99YxO5SrERPISk0wHwYDVR0j BBgwFoAU7XpI6tENH+l8fvI6puoq1lW/sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDMzZTM0NC1lODE5LTQ0MzgtYjhjYS0xZjU4YzNkNTI3Y2IvMC9FRDdBNDhFQUQx MEQxRkU5N0M3RUYyM0FBNkVBMkFENjU1QkZCMEFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUQ3QTQ4RUFEMTBEMUZFOTdDN0VGMjNBQTZFQTJBRDY1NUJG QjBBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQzM2UzNDQtZTgxOS00NDM4LWI4 Y2EtMWY1OGMzZDUyN2NiLzAvRUQ3QTQ4RUFEMTBEMUZFOTdDN0VGMjNBQTZFQTJB RDY1NUJGQjBBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGIPyTco1TwjZK5bdr2Fb/SJEeKKxp2FVUK/ oArE56ghygl9yJrBkDu/5+3EiLgetPIiyTKY0GBdFzAWKjrC/e1BTTOQEMw6txP0 oP3lRzx9cKaureFMyaBM6l0yoEsO860hx6hG/XMScvc+jZtQuyk1bnIBDxk46x1S 3u9aZmmLi2U+QbLF7TI9hFHxs4Q+oWni5qmb+eqd502n5+JY/snt0ttYN3pSOaJE wuBYANXsgt9Cz1HdzVQKVmxcgvrhMyIFnQrOzqpGNJDOt1tm/fvXAcTvKJwZg8xc 4Xlh2txP0lguncymEm6baM046rhcc/z5Ydj12OmEkXPXM1EcAcA= -----END CERTIFICATE-----Generated at Mon Jul 21 10:34:11 2025 by rpki-client