$ rpki-client -vvf repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft File: EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft (raw, json) Hash identifier: j7SFPhHe2IdAIIftByy9MIFm4Yxhd4pc/W7kqMBh3fY= Subject key identifier: 60:93:8C:BC:72:30:6D:03:E1:91:F9:A8:13:D7:9C:12:85:EE:68:45 Authority key identifier: EE:72:DE:38:4F:9A:B7:FA:D6:C3:B2:86:3A:5D:B1:28:1E:5E:DC:A1 Certificate issuer: /CN=EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1 Certificate serial: 1C4059C2C2BAA9AB1FEC9CD308101FAD4955A37B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft Manifest number: FB Signing time: Mon 02 Jun 2025 04:00:38 +0000 Manifest this update: Mon 02 Jun 2025 03:55:38 +0000 Manifest next update: Thu 05 Jun 2025 10:36:38 +0000 Files and hashes: 1: EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl (hash: 3RKzy4OFT6+L+LzTCKNqlFaks2ffPpaYHmtVmXdJPbc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 10:36:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:40:59:c2:c2:ba:a9:ab:1f:ec:9c:d3:08:10:1f:ad:49:55:a3:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1 Validity Not Before: Jun 2 03:55:38 2025 GMT Not After : Jun 5 10:36:38 2025 GMT Subject: CN=60938CBC72306D03E191F9A813D79C1285EE6845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:44:80:db:9b:c1:7a:9f:f7:9c:34:dd:6c:7e: 6d:d8:51:24:29:8f:80:20:a5:d5:c5:76:98:e3:05: dc:56:37:59:f5:9c:46:b4:0c:a1:cd:27:57:24:15: d9:7b:17:23:fb:59:9e:69:b0:99:8b:fe:30:04:cf: ad:7d:e3:96:8c:ad:6f:9b:f0:2e:7f:02:f3:dd:64: 73:c4:11:86:f6:3d:ca:b3:97:7b:30:40:ae:75:70: a7:69:d4:7a:b8:96:88:58:7c:53:34:7e:43:76:05: f8:8d:2f:72:83:63:07:65:7f:6c:51:b1:62:69:67: 3f:26:b1:5e:1b:1f:5b:e8:22:df:83:90:aa:fa:4e: 90:50:be:a4:6e:db:7b:52:2a:f7:6d:d6:8c:5a:ba: b8:8b:11:c5:cc:a7:25:83:e2:be:36:82:02:45:55: 25:2a:aa:7e:23:8e:0d:6a:ce:13:6b:fd:eb:44:d7: 0f:d0:e2:7d:05:a0:5d:ed:e7:8d:42:37:b9:11:0a: 2f:46:e6:4e:c9:17:05:50:0d:a2:b6:a0:46:74:f6: b1:a4:9f:c0:90:81:74:32:50:1a:75:0e:16:7d:9c: 81:f1:ef:00:b0:de:e8:df:44:5f:ea:83:88:17:70: bb:ed:05:1c:74:27:3f:7c:e5:3d:68:43:5b:24:ff: 6d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:93:8C:BC:72:30:6D:03:E1:91:F9:A8:13:D7:9C:12:85:EE:68:45 X509v3 Authority Key Identifier: keyid:EE:72:DE:38:4F:9A:B7:FA:D6:C3:B2:86:3A:5D:B1:28:1E:5E:DC:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:79:6d:1d:5d:68:2d:2e:5e:30:49:14:25:26:85:9f:ec:5e: d1:9c:aa:fc:c9:3f:81:80:e0:a1:ca:6c:b3:a7:1a:b5:18:50: 5b:4a:aa:6c:aa:77:bf:af:04:ef:7e:24:8d:7e:21:5d:a0:4c: 97:6a:75:ea:25:d8:fc:08:97:83:93:42:e1:2a:4b:3d:14:81: b1:3a:8c:8f:14:83:61:de:ea:65:43:6d:26:ab:07:37:6f:a9: 6b:44:a0:fa:b2:d0:20:8a:90:46:fb:a7:ea:29:17:a7:54:85: 0e:a3:39:02:b8:24:72:7e:0e:f0:30:89:93:7b:c4:a0:de:17: ed:15:1f:60:04:09:fd:d8:c9:cd:30:c8:14:17:f9:1b:21:9a: 5c:48:3e:e7:71:52:65:12:3f:e5:8a:6b:dd:02:6a:d5:06:52: 94:af:d5:9f:1d:64:1f:60:9b:f9:7d:59:ff:8d:9c:2b:b9:a8: f2:02:72:d6:2a:03:fa:c4:52:0c:54:ca:22:ff:39:f0:64:94: 02:42:79:60:cb:7e:6a:76:8a:0a:46:53:80:95:53:41:bd:8f: ee:80:3e:72:2c:d0:61:da:c2:93:0b:f7:a3:4d:26:55:04:71: 9d:81:e4:82:f1:8e:6a:59:36:da:3d:a4:8d:19:9c:7b:d3:d1: bd:2e:f8:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHEBZwsK6qasf7JzTCBAfrUlVo3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIxMjgx RTVFRENBMTAeFw0yNTA2MDIwMzU1MzhaFw0yNTA2MDUxMDM2MzhaMDMxMTAvBgNV BAMTKDYwOTM4Q0JDNzIzMDZEMDNFMTkxRjlBODEzRDc5QzEyODVFRTY4NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/RIDbm8F6n/ecNN1sfm3YUSQp j4AgpdXFdpjjBdxWN1n1nEa0DKHNJ1ckFdl7FyP7WZ5psJmL/jAEz61945aMrW+b 8C5/AvPdZHPEEYb2Pcqzl3swQK51cKdp1Hq4lohYfFM0fkN2BfiNL3KDYwdlf2xR sWJpZz8msV4bH1voIt+DkKr6TpBQvqRu23tSKvdt1oxauriLEcXMpyWD4r42ggJF VSUqqn4jjg1qzhNr/etE1w/Q4n0FoF3t541CN7kRCi9G5k7JFwVQDaK2oEZ09rGk n8CQgXQyUBp1DhZ9nIHx7wCw3ujfRF/qg4gXcLvtBRx0Jz985T1oQ1sk/20RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYJOMvHIwbQPhkfmoE9ecEoXuaEUwHwYDVR0j BBgwFoAU7nLeOE+at/rWw7KGOl2xKB5e3KEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NTdlNjg3OC02Y2IyLTRhNWYtYjU1My1iY2ViMmM5NWM3NmMvMC9FRTcyREUzODRG OUFCN0ZBRDZDM0IyODYzQTVEQjEyODFFNUVEQ0ExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIxMjgxRTVF RENBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzU3ZTY4NzgtNmNiMi00YTVmLWI1 NTMtYmNlYjJjOTVjNzZjLzAvRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIx MjgxRTVFRENBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAx5bR1daC0uXjBJFCUmhZ/sXtGcqvzJP4GA 4KHKbLOnGrUYUFtKqmyqd7+vBO9+JI1+IV2gTJdqdeol2PwIl4OTQuEqSz0UgbE6 jI8Ug2He6mVDbSarBzdvqWtEoPqy0CCKkEb7p+opF6dUhQ6jOQK4JHJ+DvAwiZN7 xKDeF+0VH2AECf3Yyc0wyBQX+RshmlxIPudxUmUSP+WKa90CatUGUpSv1Z8dZB9g m/l9Wf+NnCu5qPICctYqA/rEUgxUyiL/OfBklAJCeWDLfmp2igpGU4CVU0G9j+6A PnIs0GHawpML96NNJlUEcZ2B5ILxjmpZNto9pI0ZnHvT0b0u+CQ= -----END CERTIFICATE-----Generated at Tue Jun 3 23:41:59 2025 by rpki-client