$ rpki-client -vvf repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft File: E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft (raw, json) Hash identifier: yzVZTCj3HYw7BLQATd9/OkCrcs7szagR+RprNYGwvD8= Subject key identifier: 7A:B7:05:0A:1C:BA:04:29:CD:2B:AE:43:18:C4:6F:B7:C7:75:47:43 Authority key identifier: E6:FE:A7:CE:7F:6F:A5:EA:E0:5E:BB:DF:D8:6F:D5:3E:84:FA:75:A8 Certificate issuer: /CN=E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8 Certificate serial: 3BC62632A653DABE6ABAF2B29B15A69817FAB262 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft Manifest number: 6E Signing time: Fri 04 Apr 2025 23:30:41 +0000 Manifest this update: Fri 04 Apr 2025 23:25:41 +0000 Manifest next update: Tue 08 Apr 2025 00:40:41 +0000 Files and hashes: 1: E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl (hash: XMkk23/DhiYa2u3iutHc/NW9eSCZr8H1850w37YPtsg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:c6:26:32:a6:53:da:be:6a:ba:f2:b2:9b:15:a6:98:17:fa:b2:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8 Validity Not Before: Apr 4 23:25:41 2025 GMT Not After : Apr 8 00:40:41 2025 GMT Subject: CN=7AB7050A1CBA0429CD2BAE4318C46FB7C7754743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:50:3c:5a:cb:dd:ef:e8:e1:55:aa:1f:0e:b5: f7:29:b1:45:c9:34:be:a2:48:18:e4:46:82:e7:6b: 88:ba:9d:57:ad:bb:b4:96:27:60:f2:d7:d0:e8:cf: 4b:38:17:10:3c:97:5a:0f:7c:bb:fd:ab:1c:1c:51: 26:e5:44:f4:1b:be:81:6a:9c:78:d0:d5:6c:7a:dc: 45:06:da:5f:f1:80:75:46:48:ac:92:0f:4d:7b:2d: df:f5:30:f1:0e:1d:2b:72:e1:96:9c:74:77:60:47: e6:52:3b:ad:f5:e4:18:99:8a:8d:39:00:30:65:5c: 67:7b:9d:0b:1c:8c:61:a2:ce:7b:d0:0e:53:b4:cf: 57:27:52:ee:7a:04:1e:87:24:bf:55:b4:c3:a7:2f: bd:b6:c5:27:b0:ca:02:d5:db:f5:02:15:fc:f5:08: 38:92:4d:9d:c7:85:6e:9c:06:5b:0d:1b:99:c8:4d: cf:81:3d:b7:e0:7a:dd:5f:e6:36:75:80:ec:5f:c2: a2:b3:b0:1a:77:49:4e:24:0f:cc:3a:0d:d7:8a:19: c5:8c:a0:5d:5f:75:cc:f8:37:df:e8:d2:69:1a:15: be:3d:66:de:4f:3a:14:15:b8:2d:35:15:1a:3c:f4: 33:5e:5b:08:c8:3f:6f:e0:f9:a9:cf:cc:73:48:1b: aa:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B7:05:0A:1C:BA:04:29:CD:2B:AE:43:18:C4:6F:B7:C7:75:47:43 X509v3 Authority Key Identifier: keyid:E6:FE:A7:CE:7F:6F:A5:EA:E0:5E:BB:DF:D8:6F:D5:3E:84:FA:75:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:09:0b:a7:3c:ff:11:a8:74:58:70:97:3b:31:52:21:c5:e9: 6e:81:01:74:d5:33:05:2a:53:63:dc:f0:87:b1:d0:fb:1d:3c: 31:fb:36:ba:02:8e:d4:85:e8:91:40:33:0b:cf:ba:bf:f8:06: e4:0f:49:f9:c0:3a:19:1e:c1:fa:0d:0d:89:f2:97:ea:c1:a1: b0:a5:8d:7b:04:d8:7f:03:a3:89:49:8e:ac:1d:46:ee:3a:81: 47:17:aa:0c:ad:37:89:a8:a9:d8:70:09:93:e2:bc:09:08:62: f7:cb:91:30:a6:6a:79:4e:f1:ec:69:94:ec:db:66:7e:7d:b5: 4b:02:c0:cb:f3:df:98:f6:ed:38:e2:c7:e0:0f:95:67:dc:35: fd:ce:21:1c:bc:d8:8e:e1:1d:de:30:1b:96:aa:3a:e4:7c:23: 7c:34:8c:af:8b:4a:14:8e:4d:9c:91:4d:96:6d:16:61:4e:b9: 6b:fc:cd:79:ac:7f:bf:98:7d:01:ce:ca:a9:c2:0b:43:62:96: 41:28:8d:b7:b1:2c:c8:85:93:bb:40:3c:08:50:d6:78:20:77: 0b:d7:82:9b:99:db:f6:e7:45:b4:32:c1:ce:3c:42:2d:35:a1: 02:5b:9d:b3:42:2e:eb:6e:6e:b8:81:9d:40:19:d4:fb:26:be: eb:7c:4a:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO8YmMqZT2r5quvKymxWmmBf6smIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTZGRUE3Q0U3RjZGQTVFQUUwNUVCQkRGRDg2RkQ1M0U4 NEZBNzVBODAeFw0yNTA0MDQyMzI1NDFaFw0yNTA0MDgwMDQwNDFaMDMxMTAvBgNV BAMTKDdBQjcwNTBBMUNCQTA0MjlDRDJCQUU0MzE4QzQ2RkI3Qzc3NTQ3NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEUDxay93v6OFVqh8OtfcpsUXJ NL6iSBjkRoLna4i6nVetu7SWJ2Dy19Doz0s4FxA8l1oPfLv9qxwcUSblRPQbvoFq nHjQ1Wx63EUG2l/xgHVGSKySD017Ld/1MPEOHSty4ZacdHdgR+ZSO6315BiZio05 ADBlXGd7nQscjGGiznvQDlO0z1cnUu56BB6HJL9VtMOnL722xSewygLV2/UCFfz1 CDiSTZ3HhW6cBlsNG5nITc+BPbfget1f5jZ1gOxfwqKzsBp3SU4kD8w6DdeKGcWM oF1fdcz4N9/o0mkaFb49Zt5POhQVuC01FRo89DNeWwjIP2/g+anPzHNIG6oFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUercFChy6BCnNK65DGMRvt8d1R0MwHwYDVR0j BBgwFoAU5v6nzn9vpergXrvf2G/VPoT6dagwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTMxNTlmMi0wY2YwLTQzYzYtYjI4Mi1jNjlmYmExM2ExNGEvMC9FNkZFQTdDRTdG NkZBNUVBRTA1RUJCREZEODZGRDUzRTg0RkE3NUE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTZGRUE3Q0U3RjZGQTVFQUUwNUVCQkRGRDg2RkQ1M0U4NEZB NzVBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWUzMTU5ZjItMGNmMC00M2M2LWIy ODItYzY5ZmJhMTNhMTRhLzAvRTZGRUE3Q0U3RjZGQTVFQUUwNUVCQkRGRDg2RkQ1 M0U4NEZBNzVBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHUJC6c8/xGodFhwlzsxUiHF6W6BAXTVMwUq U2Pc8Iex0PsdPDH7NroCjtSF6JFAMwvPur/4BuQPSfnAOhkewfoNDYnyl+rBobCl jXsE2H8Do4lJjqwdRu46gUcXqgytN4moqdhwCZPivAkIYvfLkTCmanlO8explOzb Zn59tUsCwMvz35j27Tjix+APlWfcNf3OIRy82I7hHd4wG5aqOuR8I3w0jK+LShSO TZyRTZZtFmFOuWv8zXmsf7+YfQHOyqnCC0NilkEojbexLMiFk7tAPAhQ1nggdwvX gpuZ2/bnRbQywc48Qi01oQJbnbNCLutubriBnUAZ1Psmvut8Smw= -----END CERTIFICATE-----Generated at Sat Apr 5 15:30:53 2025 by rpki-client