$ rpki-client -vvf repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft File: E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft (raw, json) Hash identifier: /pOxE8GIzIsyTTQZfRSIzw9Fcci7IJXZi21pT1Q47b4= Subject key identifier: 48:97:0C:A1:AB:A3:7E:67:7F:F7:16:A2:4A:DC:C9:6C:CC:8D:C1:21 Authority key identifier: E1:B7:08:FE:CC:3E:90:64:3F:33:B8:31:1E:29:F1:B4:6F:E9:2B:7F Certificate issuer: /CN=E1B708FECC3E90643F33B8311E29F1B46FE92B7F Certificate serial: 2CFFACFC32582F8F58B5CBD278EA4E8EE4B7FF00 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft Manifest number: 014C Signing time: Fri 04 Apr 2025 09:11:37 +0000 Manifest this update: Fri 04 Apr 2025 09:06:37 +0000 Manifest next update: Mon 07 Apr 2025 19:18:37 +0000 Files and hashes: 1: E1B708FECC3E90643F33B8311E29F1B46FE92B7F.crl (hash: dFsYMfb6lI5Uu0kAxqcLmZkpHvTkS4TnoWu9bW1F2cw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.crl rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 19:18:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:ff:ac:fc:32:58:2f:8f:58:b5:cb:d2:78:ea:4e:8e:e4:b7:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1B708FECC3E90643F33B8311E29F1B46FE92B7F Validity Not Before: Apr 4 09:06:37 2025 GMT Not After : Apr 7 19:18:37 2025 GMT Subject: CN=48970CA1ABA37E677FF716A24ADCC96CCC8DC121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8b:6c:34:85:bb:d0:ed:b6:ff:56:37:37:6f: 21:9d:7e:95:52:b4:d4:ff:ee:88:22:ed:58:a1:37: 74:0e:b6:27:14:f7:7e:1e:4d:4d:0f:2c:31:10:bc: 95:bf:ce:96:c9:f5:e4:ca:9d:6b:58:a0:60:85:62: eb:d3:72:54:a2:c2:be:75:2a:9b:78:ca:40:32:04: e1:46:49:8e:8e:1f:2e:a9:2f:fe:d4:14:32:42:b0: fa:68:8c:da:c5:1e:b9:6a:33:e4:77:10:0a:04:6b: 32:b5:39:de:f2:dd:73:7c:1b:82:be:a2:3f:c8:73: 89:01:14:20:cd:d9:29:ac:c0:ac:71:be:21:9a:83: f6:aa:8e:50:16:73:0c:b9:83:3e:73:42:8e:fe:b4: 5f:d8:b5:7c:4b:c7:ed:15:ae:78:c4:2f:56:c4:95: 3f:4f:19:0b:40:c3:87:31:51:1d:c7:84:6f:d3:93: 95:ed:89:4d:f7:21:97:78:6b:eb:0e:d0:ca:4b:d7: 04:9f:d2:9e:e3:4f:4e:cf:3c:3a:91:8c:f0:f6:b8: 85:f7:c6:f0:57:19:b4:4e:ef:9e:79:84:5a:9a:54: 4b:ef:4e:1f:54:58:cd:1f:62:86:60:c0:05:a1:70: 63:e4:5b:0b:64:38:b0:70:f3:e0:1d:14:a5:dd:85: ed:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:97:0C:A1:AB:A3:7E:67:7F:F7:16:A2:4A:DC:C9:6C:CC:8D:C1:21 X509v3 Authority Key Identifier: keyid:E1:B7:08:FE:CC:3E:90:64:3F:33:B8:31:1E:29:F1:B4:6F:E9:2B:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:e1:9c:4e:15:59:c8:87:b4:6a:da:11:42:cb:bb:e1:ad:4e: cf:08:6d:92:3e:84:f2:39:12:2a:b3:d8:75:5d:d1:c5:93:6e: 54:89:2c:93:3f:ab:90:5b:19:d6:5e:e0:b9:5c:b7:92:54:e9: b8:d6:47:01:1e:0c:6d:69:96:ea:f3:e7:44:3b:33:00:20:20: b8:03:ed:e3:99:62:71:4b:e4:c7:d9:5c:15:f5:7e:64:62:87: 22:03:b7:85:53:a7:ee:71:fc:35:a0:ec:f6:69:e7:66:a5:93: cf:fe:75:c0:05:0a:78:1b:df:b7:7e:70:1b:9e:43:b6:dd:ee: ea:3c:9d:fe:53:61:5d:c0:c6:7a:37:49:d8:66:8f:a4:f4:52: a0:4a:64:3f:64:84:4a:2e:fa:cb:1b:2c:7c:5c:f2:41:5b:54: 55:5e:5f:68:bb:48:f5:45:73:97:5c:59:b9:55:fc:67:01:e6: c7:3f:5b:97:46:5f:2c:7b:01:52:15:a1:2e:3d:0e:f8:03:db: 37:7f:22:e4:de:0e:b0:76:17:9b:46:39:4e:d6:10:28:b1:bb: e5:8b:86:79:67:71:2e:de:08:05:71:21:0c:ec:0e:a0:23:e8: ec:c3:8d:b7:64:79:72:fa:d4:f7:4e:54:a8:b1:21:65:bc:01: 0a:f9:5c:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULP+s/DJYL49YtcvSeOpOjuS3/wAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFCNzA4RkVDQzNFOTA2NDNGMzNCODMxMUUyOUYxQjQ2 RkU5MkI3RjAeFw0yNTA0MDQwOTA2MzdaFw0yNTA0MDcxOTE4MzdaMDMxMTAvBgNV BAMTKDQ4OTcwQ0ExQUJBMzdFNjc3RkY3MTZBMjRBRENDOTZDQ0M4REMxMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdi2w0hbvQ7bb/Vjc3byGdfpVS tNT/7ogi7VihN3QOticU934eTU0PLDEQvJW/zpbJ9eTKnWtYoGCFYuvTclSiwr51 Kpt4ykAyBOFGSY6OHy6pL/7UFDJCsPpojNrFHrlqM+R3EAoEazK1Od7y3XN8G4K+ oj/Ic4kBFCDN2SmswKxxviGag/aqjlAWcwy5gz5zQo7+tF/YtXxLx+0VrnjEL1bE lT9PGQtAw4cxUR3HhG/Tk5XtiU33IZd4a+sO0MpL1wSf0p7jT07PPDqRjPD2uIX3 xvBXGbRO7555hFqaVEvvTh9UWM0fYoZgwAWhcGPkWwtkOLBw8+AdFKXdhe0NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSJcMoaujfmd/9xaiStzJbMyNwSEwHwYDVR0j BBgwFoAU4bcI/sw+kGQ/M7gxHinxtG/pK38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZjRkMWMzNi00YTMxLTQ4NTctOWUzNi0wZGRmM2Q2OTFlYjUvMC9FMUI3MDhGRUND M0U5MDY0M0YzM0I4MzExRTI5RjFCNDZGRTkyQjdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTFCNzA4RkVDQzNFOTA2NDNGMzNCODMxMUUyOUYxQjQ2RkU5 MkI3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmY0ZDFjMzYtNGEzMS00ODU3LTll MzYtMGRkZjNkNjkxZWI1LzAvRTFCNzA4RkVDQzNFOTA2NDNGMzNCODMxMUUyOUYx QjQ2RkU5MkI3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFrhnE4VWciHtGraEULLu+GtTs8IbZI+hPI5 Eiqz2HVd0cWTblSJLJM/q5BbGdZe4Llct5JU6bjWRwEeDG1plurz50Q7MwAgILgD 7eOZYnFL5MfZXBX1fmRihyIDt4VTp+5x/DWg7PZp52alk8/+dcAFCngb37d+cBue Q7bd7uo8nf5TYV3Axno3Sdhmj6T0UqBKZD9khEou+ssbLHxc8kFbVFVeX2i7SPVF c5dcWblV/GcB5sc/W5dGXyx7AVIVoS49DvgD2zd/IuTeDrB2F5tGOU7WECixu+WL hnlncS7eCAVxIQzsDqAj6OzDjbdkeXL61PdOVKixIWW8AQr5XGE= -----END CERTIFICATE-----Generated at Sun Apr 6 07:13:40 2025 by rpki-client