$ rpki-client -vvf repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft File: E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft (raw, json) Hash identifier: 6YbLULIlVRfjIK4QAbOzPQUVNctt6eBQS5df7igC5BE= Subject key identifier: 86:98:EE:3C:1B:43:2D:44:60:21:0E:02:5E:3E:C7:84:7F:FF:96:9A Authority key identifier: E6:FE:A7:CE:7F:6F:A5:EA:E0:5E:BB:DF:D8:6F:D5:3E:84:FA:75:A8 Certificate issuer: /CN=E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8 Certificate serial: 6191D3ECF6C737BADD48F552A69F0A9EF212FE35 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft Manifest number: 89 Signing time: Tue 03 Jun 2025 20:41:06 +0000 Manifest this update: Tue 03 Jun 2025 20:36:06 +0000 Manifest next update: Sat 07 Jun 2025 03:42:06 +0000 Files and hashes: 1: E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl (hash: bCIpLHpPG+TLGxIX4orIDzB2xd2Onk4aPr8DqAyDhC4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:42:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:91:d3:ec:f6:c7:37:ba:dd:48:f5:52:a6:9f:0a:9e:f2:12:fe:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8 Validity Not Before: Jun 3 20:36:06 2025 GMT Not After : Jun 7 03:42:06 2025 GMT Subject: CN=8698EE3C1B432D4460210E025E3EC7847FFF969A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:65:9a:5d:13:cc:07:af:3d:41:40:47:c8:a9: b0:66:ec:4a:ed:2d:37:75:65:ec:41:00:34:5a:0c: 15:db:53:ff:66:26:43:72:e3:ff:d8:95:86:c3:7a: 39:25:52:d4:ba:f6:e2:87:d1:f8:04:1f:df:d7:48: b8:c7:84:c0:5d:52:90:94:4b:67:20:29:d6:60:26: 5d:07:71:12:cf:5b:a7:4a:3f:bb:a1:a0:d8:11:31: ef:f2:0f:60:52:b1:85:10:fa:90:fc:5e:da:5c:5a: 73:99:09:35:5f:69:af:e8:09:73:61:aa:1b:a5:43: 77:0f:0e:75:48:a8:e9:6d:f8:f9:e1:09:14:ef:f7: d9:85:0d:ad:7b:fb:c3:7f:88:25:33:5a:68:b0:42: be:c7:71:1e:d9:32:9a:72:64:5b:d8:27:5a:b6:cc: b6:58:cb:52:6a:33:d0:ae:2f:a9:2d:6b:98:a2:8c: b0:10:59:8d:f1:99:a8:72:92:5e:28:aa:96:6e:3d: 8d:7d:c4:a8:25:bb:ec:fd:02:8d:16:19:5a:fe:4b: a5:4f:07:c4:1b:f5:b9:65:83:6d:07:d1:71:8a:ff: 2a:85:1d:13:5b:35:95:59:e3:df:05:58:f7:c0:04: 49:95:69:c8:e3:3a:0c:aa:63:53:aa:78:7e:98:54: 23:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:98:EE:3C:1B:43:2D:44:60:21:0E:02:5E:3E:C7:84:7F:FF:96:9A X509v3 Authority Key Identifier: keyid:E6:FE:A7:CE:7F:6F:A5:EA:E0:5E:BB:DF:D8:6F:D5:3E:84:FA:75:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:18:1c:5c:15:f5:ca:06:d0:c4:df:d1:25:ef:ea:7d:40:cc: 78:15:0d:c7:f4:52:bb:a3:1d:9f:47:95:b6:be:84:98:e8:f5: 32:c6:e4:45:4d:ae:cb:ca:18:f1:37:67:aa:a0:7a:19:aa:14: f9:d4:00:00:14:82:b8:81:2c:f7:26:46:75:01:d2:28:8a:a1: 0d:fb:ee:4a:68:cf:09:00:df:c9:63:d8:4e:1e:39:71:6c:bc: 6c:d0:f7:32:75:63:48:d2:b4:7d:59:6c:d5:dd:34:ec:66:44: 5b:87:fd:55:4d:75:b4:99:70:86:b2:a1:61:30:e3:78:72:19: 77:85:e7:da:fa:19:80:0f:84:eb:6a:55:ea:f3:2f:97:b7:60: 79:30:79:b2:5e:9d:72:d6:63:8b:0b:9c:be:20:fa:ac:0d:7c: 8e:ec:e3:56:94:38:73:d1:14:fb:2c:ee:d1:a1:b4:59:d0:89: 65:93:c5:19:e9:ea:94:7c:7b:b3:c9:c1:3b:e2:5e:0c:79:0a: 01:9f:15:d4:7a:71:ce:ee:82:be:a3:1f:45:91:6e:17:b2:f8: b4:a5:a7:85:df:f0:ff:da:fe:34:88:7d:e8:74:8a:cb:25:c8: ca:5c:99:57:10:b1:22:3c:45:79:78:4d:6a:10:aa:5c:7f:95: 9b:64:aa:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYZHT7PbHN7rdSPVSpp8KnvIS/jUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTZGRUE3Q0U3RjZGQTVFQUUwNUVCQkRGRDg2RkQ1M0U4 NEZBNzVBODAeFw0yNTA2MDMyMDM2MDZaFw0yNTA2MDcwMzQyMDZaMDMxMTAvBgNV BAMTKDg2OThFRTNDMUI0MzJENDQ2MDIxMEUwMjVFM0VDNzg0N0ZGRjk2OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsZZpdE8wHrz1BQEfIqbBm7Ert LTd1ZexBADRaDBXbU/9mJkNy4//YlYbDejklUtS69uKH0fgEH9/XSLjHhMBdUpCU S2cgKdZgJl0HcRLPW6dKP7uhoNgRMe/yD2BSsYUQ+pD8XtpcWnOZCTVfaa/oCXNh qhulQ3cPDnVIqOlt+PnhCRTv99mFDa17+8N/iCUzWmiwQr7HcR7ZMppyZFvYJ1q2 zLZYy1JqM9CuL6kta5iijLAQWY3xmahykl4oqpZuPY19xKglu+z9Ao0WGVr+S6VP B8Qb9bllg20H0XGK/yqFHRNbNZVZ498FWPfABEmVacjjOgyqY1OqeH6YVCMxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhpjuPBtDLURgIQ4CXj7HhH//lpowHwYDVR0j BBgwFoAU5v6nzn9vpergXrvf2G/VPoT6dagwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTMxNTlmMi0wY2YwLTQzYzYtYjI4Mi1jNjlmYmExM2ExNGEvMC9FNkZFQTdDRTdG NkZBNUVBRTA1RUJCREZEODZGRDUzRTg0RkE3NUE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTZGRUE3Q0U3RjZGQTVFQUUwNUVCQkRGRDg2RkQ1M0U4NEZB NzVBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWUzMTU5ZjItMGNmMC00M2M2LWIy ODItYzY5ZmJhMTNhMTRhLzAvRTZGRUE3Q0U3RjZGQTVFQUUwNUVCQkRGRDg2RkQ1 M0U4NEZBNzVBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFEYHFwV9coG0MTf0SXv6n1AzHgVDcf0Uruj HZ9Hlba+hJjo9TLG5EVNrsvKGPE3Z6qgehmqFPnUAAAUgriBLPcmRnUB0iiKoQ37 7kpozwkA38lj2E4eOXFsvGzQ9zJ1Y0jStH1ZbNXdNOxmRFuH/VVNdbSZcIayoWEw 43hyGXeF59r6GYAPhOtqVerzL5e3YHkwebJenXLWY4sLnL4g+qwNfI7s41aUOHPR FPss7tGhtFnQiWWTxRnp6pR8e7PJwTviXgx5CgGfFdR6cc7ugr6jH0WRbhey+LSl p4Xf8P/a/jSIfeh0isslyMpcmVcQsSI8RXl4TWoQqlx/lZtkqsA= -----END CERTIFICATE-----Generated at Thu Jun 5 18:10:22 2025 by rpki-client