$ rpki-client -vvf repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft File: E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft (raw, json) Hash identifier: C1JO+P6v4vpH2p7wDv3zlRGTBil9jcVIzJQ1dWbPup8= Subject key identifier: DD:86:D5:2D:98:C2:84:00:EF:FD:8A:B2:DB:CB:D9:3C:12:A5:F6:15 Authority key identifier: E8:DA:87:F3:4A:55:0D:00:47:EE:C0:39:A2:0C:84:41:F0:66:EC:5B Certificate issuer: /CN=E8DA87F34A550D0047EEC039A20C8441F066EC5B Certificate serial: 03A6FC33DCF66DFCF75A5D29184E09A0E112B25F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E8DA87F34A550D0047EEC039A20C8441F066EC5B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft Manifest number: 02C7 Signing time: Sun 06 Apr 2025 03:30:35 +0000 Manifest this update: Sun 06 Apr 2025 03:25:35 +0000 Manifest next update: Wed 09 Apr 2025 05:59:35 +0000 Files and hashes: 1: E8DA87F34A550D0047EEC039A20C8441F066EC5B.crl (hash: dTwL37qBLil31tQxgulc8g62DSpnrBVclH6SmSw9f9w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.crl rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E8DA87F34A550D0047EEC039A20C8441F066EC5B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 05:59:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:a6:fc:33:dc:f6:6d:fc:f7:5a:5d:29:18:4e:09:a0:e1:12:b2:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E8DA87F34A550D0047EEC039A20C8441F066EC5B Validity Not Before: Apr 6 03:25:35 2025 GMT Not After : Apr 9 05:59:35 2025 GMT Subject: CN=DD86D52D98C28400EFFD8AB2DBCBD93C12A5F615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:55:44:9b:9a:15:be:d4:07:57:0f:7b:7d:8b: 04:70:f4:a8:c6:f2:1a:1e:5f:67:08:37:d9:46:24: d4:5d:cb:ec:b0:ab:c5:5f:64:fb:17:b6:b7:36:f2: 0d:a7:65:61:2f:8c:08:59:d0:6f:54:8a:61:be:87: d7:8d:ec:2c:be:9d:6e:f2:56:46:84:cf:6a:0a:6c: e3:73:7e:8b:85:e2:64:d1:08:4a:2e:09:d2:3a:b1: 24:29:d6:8a:cb:dc:73:f6:91:2b:69:1b:61:c5:50: 0c:3a:55:03:5b:79:58:8e:17:82:c2:80:92:31:16: 02:ef:99:1c:1b:01:7b:9f:de:5d:10:67:29:9e:38: 00:53:10:36:d8:ed:de:1e:82:75:26:3e:a5:52:f3: ed:24:6d:40:96:80:f4:d0:ad:79:6e:f2:ef:31:4e: 97:a3:de:a0:15:06:95:19:28:4c:41:bf:ff:14:c5: 4c:c7:62:d9:17:19:e8:28:cc:f9:f3:fe:78:0b:e3: 47:bf:19:91:7a:7a:a1:2f:f2:ce:9c:e0:98:91:6b: f3:e6:22:57:c3:68:3e:dd:bc:53:1c:56:5e:92:67: 7e:bd:e2:21:2a:01:37:dc:03:4d:0c:b8:ba:56:bb: 26:7e:2b:00:71:84:09:fe:6a:c2:b1:af:69:be:45: ac:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:86:D5:2D:98:C2:84:00:EF:FD:8A:B2:DB:CB:D9:3C:12:A5:F6:15 X509v3 Authority Key Identifier: keyid:E8:DA:87:F3:4A:55:0D:00:47:EE:C0:39:A2:0C:84:41:F0:66:EC:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E8DA87F34A550D0047EEC039A20C8441F066EC5B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:df:05:7f:4a:05:5a:5a:08:3c:5c:6d:82:c9:8f:98:e1:d2: c3:c6:4f:3b:ca:d1:38:08:ba:66:a3:ee:5c:e4:2e:17:2e:da: 29:dd:1c:a4:6d:90:46:d2:e1:10:b2:be:c9:c5:d0:f7:0d:5b: 5b:e2:ea:e3:1a:be:c8:8f:eb:ab:82:5b:ab:cb:a5:47:1c:dd: f4:0c:80:34:15:1b:72:d1:b2:c4:bd:5e:8a:52:cd:55:7a:0c: 19:0f:d6:8a:fd:43:2f:20:6b:23:8a:bd:8b:44:b5:4d:36:95: 01:17:4f:64:81:07:f3:f1:9d:7d:4d:6a:11:02:1b:4d:69:b8: 17:f9:7e:a0:53:4a:f0:bb:97:01:cf:31:90:21:10:ea:b0:e1: e2:0d:5d:4e:8c:9a:23:07:33:f1:55:68:a8:c1:91:20:ae:37: 8f:12:ae:01:26:5d:19:0e:88:be:f1:0b:f2:cc:ea:69:db:df: 43:96:bc:be:73:43:4b:5d:68:4a:f7:09:ff:38:83:ec:b3:ec: 92:6d:f2:80:8f:a1:74:ff:1f:95:82:fa:2f:67:87:4c:03:8d: f6:19:cf:ac:ff:0f:62:33:f3:e3:df:34:d1:b4:2c:f8:80:b0: 90:94:ea:a1:b1:2b:c0:97:a1:c8:04:68:d4:d7:13:63:64:0c: ad:16:dd:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA6b8M9z2bfz3Wl0pGE4JoOESsl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRThEQTg3RjM0QTU1MEQwMDQ3RUVDMDM5QTIwQzg0NDFG MDY2RUM1QjAeFw0yNTA0MDYwMzI1MzVaFw0yNTA0MDkwNTU5MzVaMDMxMTAvBgNV BAMTKEREODZENTJEOThDMjg0MDBFRkZEOEFCMkRCQ0JEOTNDMTJBNUY2MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPVUSbmhW+1AdXD3t9iwRw9KjG 8hoeX2cIN9lGJNRdy+ywq8VfZPsXtrc28g2nZWEvjAhZ0G9UimG+h9eN7Cy+nW7y VkaEz2oKbONzfouF4mTRCEouCdI6sSQp1orL3HP2kStpG2HFUAw6VQNbeViOF4LC gJIxFgLvmRwbAXuf3l0QZymeOABTEDbY7d4egnUmPqVS8+0kbUCWgPTQrXlu8u8x Tpej3qAVBpUZKExBv/8UxUzHYtkXGegozPnz/ngL40e/GZF6eqEv8s6c4JiRa/Pm IlfDaD7dvFMcVl6SZ3694iEqATfcA00MuLpWuyZ+KwBxhAn+asKxr2m+RaznAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3YbVLZjChADv/Yqy28vZPBKl9hUwHwYDVR0j BBgwFoAU6NqH80pVDQBH7sA5ogyEQfBm7FswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTQ2NzZjZC1kZTM5LTQ2OGEtYWQyNS02NzVlMWI5MTBmYWMvMC9FOERBODdGMzRB NTUwRDAwNDdFRUMwMzlBMjBDODQ0MUYwNjZFQzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRThEQTg3RjM0QTU1MEQwMDQ3RUVDMDM5QTIwQzg0NDFGMDY2 RUM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjE0Njc2Y2QtZGUzOS00NjhhLWFk MjUtNjc1ZTFiOTEwZmFjLzAvRThEQTg3RjM0QTU1MEQwMDQ3RUVDMDM5QTIwQzg0 NDFGMDY2RUM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEvfBX9KBVpaCDxcbYLJj5jh0sPGTzvK0TgI umaj7lzkLhcu2indHKRtkEbS4RCyvsnF0PcNW1vi6uMavsiP66uCW6vLpUcc3fQM gDQVG3LRssS9XopSzVV6DBkP1or9Qy8gayOKvYtEtU02lQEXT2SBB/PxnX1NahEC G01puBf5fqBTSvC7lwHPMZAhEOqw4eINXU6MmiMHM/FVaKjBkSCuN48SrgEmXRkO iL7xC/LM6mnb30OWvL5zQ0tdaEr3Cf84g+yz7JJt8oCPoXT/H5WC+i9nh0wDjfYZ z6z/D2Iz8+PfNNG0LPiAsJCU6qGxK8CXocgEaNTXE2NkDK0W3S4= -----END CERTIFICATE-----Generated at Sun Apr 6 12:45:16 2025 by rpki-client