$ rpki-client -vvf repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft File: E74A2346929DE84143E5DF0DD921764C285B01A2.mft (raw, json) Hash identifier: 3ZwxsCcg09OO4U39xmy5ckCu46gKo2kftCvsffjc4Jg= Subject key identifier: 06:1A:A0:6D:D8:56:BC:3C:0F:83:0D:EC:B0:1B:90:E6:7C:7E:25:B3 Authority key identifier: E7:4A:23:46:92:9D:E8:41:43:E5:DF:0D:D9:21:76:4C:28:5B:01:A2 Certificate issuer: /CN=E74A2346929DE84143E5DF0DD921764C285B01A2 Certificate serial: 0D82611F5B6667437251A9B534C62E7A51BDD3C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft Manifest number: 86 Signing time: Tue 03 Jun 2025 03:01:14 +0000 Manifest this update: Tue 03 Jun 2025 02:56:14 +0000 Manifest next update: Fri 06 Jun 2025 03:57:14 +0000 Files and hashes: 1: E74A2346929DE84143E5DF0DD921764C285B01A2.crl (hash: Ya1FhsZ6gJjB6K+Y+g2swScvlUv0Ys3Sv6nQYEsP34Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.crl rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 03:57:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:82:61:1f:5b:66:67:43:72:51:a9:b5:34:c6:2e:7a:51:bd:d3:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E74A2346929DE84143E5DF0DD921764C285B01A2 Validity Not Before: Jun 3 02:56:14 2025 GMT Not After : Jun 6 03:57:14 2025 GMT Subject: CN=061AA06DD856BC3C0F830DECB01B90E67C7E25B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:14:23:20:ff:b5:1f:85:9a:81:f9:f5:03:98: 6d:9e:df:ac:a3:62:6a:75:38:35:0c:43:7e:bb:48: 91:9b:73:00:9b:01:50:84:e4:60:5b:5d:c8:0b:37: 2f:43:04:49:2e:d9:c0:7d:f1:22:63:99:77:93:e3: 45:f1:11:61:8b:2b:aa:08:50:ae:de:13:7a:7f:50: 5a:8f:73:18:6e:d7:34:c4:1d:14:f3:f8:12:b9:8f: c7:58:ff:a7:99:43:03:46:bd:c4:ec:2a:2c:3a:b8: 33:ec:8c:cd:18:df:90:10:f5:44:c7:20:c4:c3:31: 4b:40:1e:36:08:67:15:f4:54:14:c8:ff:40:57:c6: 33:5a:9f:27:b2:d7:c2:03:ba:b9:20:c6:e0:1c:ce: 86:83:94:77:f1:a1:e8:26:f2:52:c8:a7:07:15:27: 92:65:27:b6:6a:70:52:c8:10:6f:a1:f2:52:d2:11: 56:3d:cd:9a:db:16:01:e8:52:76:89:09:b1:88:81: e2:0a:cd:f8:32:78:51:c0:3b:bf:2c:6c:bc:eb:21: 75:62:57:8e:12:8b:3b:d3:d2:d8:9a:ec:b4:19:a9: a1:4b:10:4b:35:31:97:c4:5a:74:97:f7:1c:f0:95: 07:f1:e4:2c:7a:3d:e9:ff:ec:1b:25:40:49:3f:2a: c5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:1A:A0:6D:D8:56:BC:3C:0F:83:0D:EC:B0:1B:90:E6:7C:7E:25:B3 X509v3 Authority Key Identifier: keyid:E7:4A:23:46:92:9D:E8:41:43:E5:DF:0D:D9:21:76:4C:28:5B:01:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:51:eb:8d:b9:34:6e:bb:85:f1:f6:a4:66:e7:4a:58:f3:e8: 2c:12:89:85:f5:a9:1d:47:bc:bc:c5:6f:6e:38:5d:19:68:2e: 5b:4a:5f:5b:7a:9d:d0:59:d3:a2:f5:f5:16:53:3a:d9:1d:ef: d3:9c:cb:d9:a9:5a:89:c6:b0:85:9b:d8:26:ac:9b:35:01:b1: b3:4c:f0:65:54:e3:b0:40:e8:5e:ba:61:05:41:71:d7:9f:67: a0:f6:07:63:b6:58:fa:3e:75:48:a5:37:dd:a4:df:d8:99:fe: 46:e5:d0:4f:be:bb:1f:a6:4d:f2:2d:a1:9f:30:6c:86:0f:f0: 81:d3:95:db:d9:1f:71:66:24:32:c5:52:a5:a0:ef:6b:0a:13: e7:62:dc:33:48:d3:20:5e:37:86:b6:e8:d6:e5:2b:c6:fb:83: b8:05:93:3d:1e:5d:78:e8:c0:97:e9:cb:55:16:3a:99:9a:6b: 5f:81:38:47:42:7e:3c:42:2e:c2:b1:cd:fd:24:35:13:e3:1a: ff:45:ae:42:c9:bc:d4:57:c5:8a:38:d1:19:a2:a4:ce:be:16: c2:51:eb:8e:c7:f0:14:c4:73:a6:eb:ea:af:21:6f:29:9d:43: a5:c9:65:3e:0b:3c:51:1d:cb:11:a0:3f:c2:bf:0d:81:74:1c: d2:66:4a:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDYJhH1tmZ0NyUam1NMYuelG908EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTc0QTIzNDY5MjlERTg0MTQzRTVERjBERDkyMTc2NEMy ODVCMDFBMjAeFw0yNTA2MDMwMjU2MTRaFw0yNTA2MDYwMzU3MTRaMDMxMTAvBgNV BAMTKDA2MUFBMDZERDg1NkJDM0MwRjgzMERFQ0IwMUI5MEU2N0M3RTI1QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBFCMg/7UfhZqB+fUDmG2e36yj Ymp1ODUMQ367SJGbcwCbAVCE5GBbXcgLNy9DBEku2cB98SJjmXeT40XxEWGLK6oI UK7eE3p/UFqPcxhu1zTEHRTz+BK5j8dY/6eZQwNGvcTsKiw6uDPsjM0Y35AQ9UTH IMTDMUtAHjYIZxX0VBTI/0BXxjNanyey18IDurkgxuAczoaDlHfxoegm8lLIpwcV J5JlJ7ZqcFLIEG+h8lLSEVY9zZrbFgHoUnaJCbGIgeIKzfgyeFHAO78sbLzrIXVi V44SizvT0tia7LQZqaFLEEs1MZfEWnSX9xzwlQfx5Cx6Pen/7BslQEk/KsXbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBhqgbdhWvDwPgw3ssBuQ5nx+JbMwHwYDVR0j BBgwFoAU50ojRpKd6EFD5d8N2SF2TChbAaIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2RlNTAzNS04NGUxLTQ0YzYtOWNmOS00ZWEwYmJhYTA5M2YvMC9FNzRBMjM0Njky OURFODQxNDNFNURGMEREOTIxNzY0QzI4NUIwMUEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTc0QTIzNDY5MjlERTg0MTQzRTVERjBERDkyMTc2NEMyODVC MDFBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNkZTUwMzUtODRlMS00NGM2LTlj ZjktNGVhMGJiYWEwOTNmLzAvRTc0QTIzNDY5MjlERTg0MTQzRTVERjBERDkyMTc2 NEMyODVCMDFBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIVR6425NG67hfH2pGbnSljz6CwSiYX1qR1H vLzFb244XRloLltKX1t6ndBZ06L19RZTOtkd79Ocy9mpWonGsIWb2CasmzUBsbNM 8GVU47BA6F66YQVBcdefZ6D2B2O2WPo+dUilN92k39iZ/kbl0E++ux+mTfItoZ8w bIYP8IHTldvZH3FmJDLFUqWg72sKE+di3DNI0yBeN4a26NblK8b7g7gFkz0eXXjo wJfpy1UWOpmaa1+BOEdCfjxCLsKxzf0kNRPjGv9FrkLJvNRXxYo40RmipM6+FsJR 647H8BTEc6br6q8hbymdQ6XJZT4LPFEdyxGgP8K/DYF0HNJmSuc= -----END CERTIFICATE-----Generated at Tue Jun 3 23:43:00 2025 by rpki-client