$ rpki-client -vvf repo-rpki.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/5EF007981390128F8F14B087123454D686E41CB8.mft File: 5EF007981390128F8F14B087123454D686E41CB8.mft (raw, json) Hash identifier: 2dVGzJlc5LIuyr7QUJrbuX2djb9O4X9kqNC6DjLops4= Subject key identifier: 3F:E3:A8:52:66:D9:DB:8F:C8:E4:AD:1C:BB:D9:0C:BA:56:E0:8C:88 Authority key identifier: 5E:F0:07:98:13:90:12:8F:8F:14:B0:87:12:34:54:D6:86:E4:1C:B8 Certificate issuer: /CN=5EF007981390128F8F14B087123454D686E41CB8 Certificate serial: 1294C72466B224B74AC30F56C43F4D560E39FABC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EF007981390128F8F14B087123454D686E41CB8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/5EF007981390128F8F14B087123454D686E41CB8.mft Manifest number: 019B Signing time: Fri 04 Apr 2025 11:31:47 +0000 Manifest this update: Fri 04 Apr 2025 11:26:47 +0000 Manifest next update: Mon 07 Apr 2025 23:17:47 +0000 Files and hashes: 1: 5EF007981390128F8F14B087123454D686E41CB8.crl (hash: GMPjbRUWq1R4puU12VBTRsPYe/63DTZ4eC8WAiWrEn4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/5EF007981390128F8F14B087123454D686E41CB8.crl rsync://repo-rpki.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/5EF007981390128F8F14B087123454D686E41CB8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EF007981390128F8F14B087123454D686E41CB8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:94:c7:24:66:b2:24:b7:4a:c3:0f:56:c4:3f:4d:56:0e:39:fa:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EF007981390128F8F14B087123454D686E41CB8 Validity Not Before: Apr 4 11:26:47 2025 GMT Not After : Apr 7 23:17:47 2025 GMT Subject: CN=3FE3A85266D9DB8FC8E4AD1CBBD90CBA56E08C88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2d:7b:7f:a3:ed:bb:c9:78:ab:eb:ba:30:d2: f2:f9:27:67:9a:d1:ec:1a:8d:4d:5a:ec:8f:da:42: 01:7f:56:ba:ba:35:bb:08:74:8d:f1:cf:72:db:e1: c7:cc:ac:b7:c9:b1:3f:62:eb:3f:5e:d3:85:a0:e0: 25:b1:de:ff:45:21:c6:01:89:4a:97:ae:27:29:f3: 4e:dd:9f:bf:3b:6b:d3:21:a6:d0:d0:15:52:46:46: 3e:0f:e4:4a:01:d9:0d:e3:af:88:f2:ff:1c:7c:9e: 1e:3a:16:63:3f:11:ef:8f:f7:3e:06:3c:36:13:0d: a1:ef:6c:8e:2f:5e:0e:3f:0a:74:1e:5d:10:e0:cb: d6:00:18:77:73:51:de:6c:19:c3:75:95:e8:96:57: 33:dc:d2:ae:3f:d6:f6:6a:eb:7a:6a:79:5b:9b:1e: 58:95:63:67:f4:40:af:f5:70:32:78:74:8a:a6:8a: bc:7d:e5:a9:1b:33:58:61:3f:c7:2b:94:ec:1f:ff: 55:f9:b2:7f:9d:6b:42:e5:17:2b:64:fb:ab:4b:c2: 38:36:e6:25:90:12:68:46:56:22:b8:82:bd:64:34: 85:9a:7e:57:76:21:11:ab:06:41:cc:82:a7:8d:05: c9:af:60:d8:6f:46:dc:3b:8d:d7:20:2e:35:94:d2: 97:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E3:A8:52:66:D9:DB:8F:C8:E4:AD:1C:BB:D9:0C:BA:56:E0:8C:88 X509v3 Authority Key Identifier: keyid:5E:F0:07:98:13:90:12:8F:8F:14:B0:87:12:34:54:D6:86:E4:1C:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/5EF007981390128F8F14B087123454D686E41CB8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EF007981390128F8F14B087123454D686E41CB8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/5EF007981390128F8F14B087123454D686E41CB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:84:c3:b7:80:25:d6:58:3f:0d:4d:95:92:db:95:e8:ff:f6: 6d:6a:f4:69:3c:82:e6:16:a9:56:b2:f1:1a:a5:2d:ae:f9:aa: e2:67:cb:62:95:cb:73:22:d5:f8:4f:c7:8a:e3:65:ee:28:d1: e5:6a:f5:50:98:6a:fc:ce:98:47:0e:29:03:ae:eb:c0:b3:c8: 38:f9:68:95:4a:1e:6e:07:3f:76:b0:6d:47:85:91:88:98:f0: 1e:5b:ad:f6:d6:3e:89:b7:fb:24:7c:ac:eb:ba:9a:4e:ed:c1: 76:ab:d2:61:84:91:0c:f8:46:ea:e8:fe:c1:97:8d:8f:a0:91: 60:9d:be:57:24:70:8e:da:6e:1c:3e:27:dd:fa:08:e6:84:33: 11:1a:3b:3a:61:20:02:9f:c4:f7:b5:38:d6:d1:2b:f9:f3:ce: 76:76:1f:7d:32:8d:d2:36:bb:ba:43:0c:66:9a:40:16:81:77: cd:ab:1d:47:0a:18:e8:bc:ca:31:16:98:b1:31:45:b3:95:18: 79:4c:d5:6c:0b:be:50:00:8e:d3:19:35:8f:0d:e3:f1:9a:85: 76:b4:d0:8b:7d:bf:c6:81:46:f2:02:92:51:ee:ef:f2:d6:44: 49:16:7c:35:65:c7:3b:dd:2f:fd:37:fd:37:b2:67:92:9f:89: 30:84:cb:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEpTHJGayJLdKww9WxD9NVg45+rwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVGMDA3OTgxMzkwMTI4RjhGMTRCMDg3MTIzNDU0RDY4 NkU0MUNCODAeFw0yNTA0MDQxMTI2NDdaFw0yNTA0MDcyMzE3NDdaMDMxMTAvBgNV BAMTKDNGRTNBODUyNjZEOURCOEZDOEU0QUQxQ0JCRDkwQ0JBNTZFMDhDODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1LXt/o+27yXir67ow0vL5J2ea 0ewajU1a7I/aQgF/Vrq6NbsIdI3xz3Lb4cfMrLfJsT9i6z9e04Wg4CWx3v9FIcYB iUqXricp807dn787a9MhptDQFVJGRj4P5EoB2Q3jr4jy/xx8nh46FmM/Ee+P9z4G PDYTDaHvbI4vXg4/CnQeXRDgy9YAGHdzUd5sGcN1leiWVzPc0q4/1vZq63pqeVub HliVY2f0QK/1cDJ4dIqmirx95akbM1hhP8crlOwf/1X5sn+da0LlFytk+6tLwjg2 5iWQEmhGViK4gr1kNIWafld2IRGrBkHMgqeNBcmvYNhvRtw7jdcgLjWU0pdzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP+OoUmbZ24/I5K0cu9kMulbgjIgwHwYDVR0j BBgwFoAUXvAHmBOQEo+PFLCHEjRU1obkHLgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjU5OTQ3NC1mNmI2LTQwODctYTk3ZS03ODhiNTk0OWQ1N2IvMC81RUYwMDc5ODEz OTAxMjhGOEYxNEIwODcxMjM0NTRENjg2RTQxQ0I4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUVGMDA3OTgxMzkwMTI4RjhGMTRCMDg3MTIzNDU0RDY4NkU0 MUNCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY1OTk0NzQtZjZiNi00MDg3LWE5 N2UtNzg4YjU5NDlkNTdiLzAvNUVGMDA3OTgxMzkwMTI4RjhGMTRCMDg3MTIzNDU0 RDY4NkU0MUNCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH2Ew7eAJdZYPw1NlZLblej/9m1q9Gk8guYW qVay8RqlLa75quJny2KVy3Mi1fhPx4rjZe4o0eVq9VCYavzOmEcOKQOu68CzyDj5 aJVKHm4HP3awbUeFkYiY8B5brfbWPom3+yR8rOu6mk7twXar0mGEkQz4Ruro/sGX jY+gkWCdvlckcI7abhw+J936COaEMxEaOzphIAKfxPe1ONbRK/nzznZ2H30yjdI2 u7pDDGaaQBaBd82rHUcKGOi8yjEWmLExRbOVGHlM1WwLvlAAjtMZNY8N4/GahXa0 0It9v8aBRvICklHu7/LWREkWfDVlxzvdL/03/TeyZ5KfiTCEy+A= -----END CERTIFICATE-----Generated at Sat Apr 5 16:46:59 2025 by rpki-client