$ rpki-client -vvf repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft File: E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft (raw, json) Hash identifier: fwwA7ggB7g7ovuQnPcoc54RuKBtZgS9C+Ehm5SROKcc= Subject key identifier: 24:FB:B6:38:E2:08:53:CB:00:30:17:FD:23:32:BE:86:79:DC:07:BA Authority key identifier: E1:B7:08:FE:CC:3E:90:64:3F:33:B8:31:1E:29:F1:B4:6F:E9:2B:7F Certificate issuer: /CN=E1B708FECC3E90643F33B8311E29F1B46FE92B7F Certificate serial: 1D51BD6DD992ABA8D1279417E439106F3E08EEB9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft Manifest number: 0167 Signing time: Wed 04 Jun 2025 12:01:40 +0000 Manifest this update: Wed 04 Jun 2025 11:56:40 +0000 Manifest next update: Sat 07 Jun 2025 19:57:40 +0000 Files and hashes: 1: E1B708FECC3E90643F33B8311E29F1B46FE92B7F.crl (hash: tK/Q6s11DxUz1nG08MEPoFC6S1mltc+U7KPX07PYFso=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.crl rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 19:57:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:51:bd:6d:d9:92:ab:a8:d1:27:94:17:e4:39:10:6f:3e:08:ee:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1B708FECC3E90643F33B8311E29F1B46FE92B7F Validity Not Before: Jun 4 11:56:40 2025 GMT Not After : Jun 7 19:57:40 2025 GMT Subject: CN=24FBB638E20853CB003017FD2332BE8679DC07BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:77:dd:b5:5a:ed:23:60:ab:98:22:0d:83:56: 0d:a0:a0:d3:c0:6e:d9:24:e7:13:93:61:43:1c:fe: 24:96:f9:2f:6d:6f:3f:70:e3:12:e0:b6:c5:06:22: 84:2f:dd:2f:af:c5:a7:4a:44:b1:a9:0f:e7:ba:27: ee:68:93:69:84:9f:d3:a9:24:ac:fe:97:dc:45:df: 53:5c:81:44:76:c9:e1:21:40:85:9e:49:b3:47:12: 65:df:c3:e1:57:7f:72:3b:96:8a:b4:1f:44:c6:5b: 54:d7:43:51:32:6e:5c:cc:01:0e:f2:37:8c:63:df: e3:db:9a:d7:c8:d1:b9:fe:a6:df:1c:c1:8f:0c:11: 5c:09:6e:08:4e:8e:0b:dd:07:cf:6c:d8:35:1e:ec: d5:4a:39:36:aa:d5:b6:cd:47:c8:6c:ec:c9:fc:09: c9:7d:07:7c:b9:f0:6f:ca:93:e6:ea:eb:34:8a:9c: 8d:b2:d4:8b:da:f3:63:2f:f9:8c:2d:e5:54:0f:4a: 23:39:f1:15:7d:4d:d6:e3:6e:a4:e2:18:f7:e0:ab: e1:d0:84:85:48:9e:c1:b5:76:87:78:bf:ca:5c:a4: 55:4e:91:0c:36:e7:ec:0a:c5:5c:32:e9:f4:5a:b6: 95:27:f1:24:89:09:7a:b6:91:bc:d8:37:57:d6:79: 56:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:FB:B6:38:E2:08:53:CB:00:30:17:FD:23:32:BE:86:79:DC:07:BA X509v3 Authority Key Identifier: keyid:E1:B7:08:FE:CC:3E:90:64:3F:33:B8:31:1E:29:F1:B4:6F:E9:2B:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:88:bd:cc:a8:22:90:5b:7a:cf:11:b3:38:ba:d0:17:00:a8: 3e:3c:e4:ab:65:1d:08:1b:25:09:ca:24:17:74:70:ab:fd:bb: 8f:4b:ef:22:15:a3:c1:81:92:06:56:f3:02:63:c9:2e:36:b4: a6:8f:67:ad:64:0e:94:31:0d:bc:e1:5e:d6:65:76:3c:b7:a6: b6:64:58:97:52:8d:ca:ac:c0:a2:9c:17:12:80:ab:91:ca:ac: 1a:68:47:3b:59:c8:65:7d:e1:2e:dc:9a:72:18:f6:31:ff:5a: 13:4d:e9:21:07:cd:83:60:a5:96:e9:97:8f:9c:86:b5:e1:ec: 27:c8:a5:69:22:11:87:ba:29:9d:37:13:77:cb:d7:62:41:5c: ea:90:54:06:05:13:be:04:ae:3e:0c:e3:1b:ed:28:5e:0f:ef: ca:f7:14:0b:17:4d:40:98:cb:d7:36:0d:fd:7d:d9:e7:07:7e: 19:02:4f:35:29:3c:25:47:82:9f:d6:e0:66:26:a1:eb:64:94: f3:65:cd:0c:ca:01:8e:96:d2:6e:3d:6d:f7:5b:97:90:91:95: 4a:76:b0:50:a3:88:9b:cd:87:93:2f:79:92:de:a8:2b:2c:44: 2e:e9:1d:a1:96:80:47:f5:ad:2f:3d:1a:f6:a2:e4:0a:e9:e2: d9:59:ce:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHVG9bdmSq6jRJ5QX5DkQbz4I7rkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFCNzA4RkVDQzNFOTA2NDNGMzNCODMxMUUyOUYxQjQ2 RkU5MkI3RjAeFw0yNTA2MDQxMTU2NDBaFw0yNTA2MDcxOTU3NDBaMDMxMTAvBgNV BAMTKDI0RkJCNjM4RTIwODUzQ0IwMDMwMTdGRDIzMzJCRTg2NzlEQzA3QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9d921Wu0jYKuYIg2DVg2goNPA btkk5xOTYUMc/iSW+S9tbz9w4xLgtsUGIoQv3S+vxadKRLGpD+e6J+5ok2mEn9Op JKz+l9xF31NcgUR2yeEhQIWeSbNHEmXfw+FXf3I7loq0H0TGW1TXQ1EyblzMAQ7y N4xj3+PbmtfI0bn+pt8cwY8MEVwJbghOjgvdB89s2DUe7NVKOTaq1bbNR8hs7Mn8 Ccl9B3y58G/Kk+bq6zSKnI2y1Iva82Mv+Ywt5VQPSiM58RV9TdbjbqTiGPfgq+HQ hIVInsG1dod4v8pcpFVOkQw25+wKxVwy6fRatpUn8SSJCXq2kbzYN1fWeVZZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJPu2OOIIU8sAMBf9IzK+hnncB7owHwYDVR0j BBgwFoAU4bcI/sw+kGQ/M7gxHinxtG/pK38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZjRkMWMzNi00YTMxLTQ4NTctOWUzNi0wZGRmM2Q2OTFlYjUvMC9FMUI3MDhGRUND M0U5MDY0M0YzM0I4MzExRTI5RjFCNDZGRTkyQjdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTFCNzA4RkVDQzNFOTA2NDNGMzNCODMxMUUyOUYxQjQ2RkU5 MkI3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmY0ZDFjMzYtNGEzMS00ODU3LTll MzYtMGRkZjNkNjkxZWI1LzAvRTFCNzA4RkVDQzNFOTA2NDNGMzNCODMxMUUyOUYx QjQ2RkU5MkI3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM2IvcyoIpBbes8Rszi60BcAqD485KtlHQgb JQnKJBd0cKv9u49L7yIVo8GBkgZW8wJjyS42tKaPZ61kDpQxDbzhXtZldjy3prZk WJdSjcqswKKcFxKAq5HKrBpoRztZyGV94S7cmnIY9jH/WhNN6SEHzYNgpZbpl4+c hrXh7CfIpWkiEYe6KZ03E3fL12JBXOqQVAYFE74Erj4M4xvtKF4P78r3FAsXTUCY y9c2Df192ecHfhkCTzUpPCVHgp/W4GYmoetklPNlzQzKAY6W0m49bfdbl5CRlUp2 sFCjiJvNh5MveZLeqCssRC7pHaGWgEf1rS89Gvai5Arp4tlZzpk= -----END CERTIFICATE-----Generated at Thu Jun 5 18:30:44 2025 by rpki-client