$ rpki-client -vvf repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft File: DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft (raw, json) Hash identifier: kTeBPJrrAU5LibyBX7RxC9fLEaTDLX8A5yV5dxapINQ= Subject key identifier: 6C:E6:DC:83:F4:3F:09:4B:78:7D:F1:C1:19:DF:09:6E:2D:74:26:CD Authority key identifier: DE:5F:8F:89:EA:28:57:71:91:25:EA:66:66:F5:93:A8:27:9B:3C:D9 Certificate issuer: /CN=DE5F8F89EA2857719125EA6666F593A8279B3CD9 Certificate serial: 7E8C9FCABF84F501F64DFD1407CD1EBDF028A0DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft Manifest number: 75 Signing time: Thu 03 Apr 2025 07:00:48 +0000 Manifest this update: Thu 03 Apr 2025 06:55:48 +0000 Manifest next update: Sun 06 Apr 2025 16:06:48 +0000 Files and hashes: 1: DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl (hash: 8Wd9Z37LL8an4Ed+UDoYJufyuh9O3vg1f0fOd35VGn4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 16:06:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:8c:9f:ca:bf:84:f5:01:f6:4d:fd:14:07:cd:1e:bd:f0:28:a0:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE5F8F89EA2857719125EA6666F593A8279B3CD9 Validity Not Before: Apr 3 06:55:48 2025 GMT Not After : Apr 6 16:06:48 2025 GMT Subject: CN=6CE6DC83F43F094B787DF1C119DF096E2D7426CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:fc:c4:37:b4:a2:ba:9c:db:c7:30:c4:00:c5: 9b:b2:9e:20:9f:a5:74:0f:17:c2:27:0a:26:74:c5: f2:3b:1b:3a:a5:60:f3:f8:4f:8e:ce:3a:a1:f1:f0: 77:fb:11:ad:de:a8:7c:d4:f3:c2:32:3e:e3:06:b8: f1:99:58:f1:86:f0:7a:40:e3:b9:dc:39:ff:ee:ce: df:98:9f:aa:62:56:f0:39:5a:ff:48:31:eb:1d:52: 25:88:f1:27:67:55:02:11:cf:d6:4c:64:6d:aa:2b: e3:46:6b:a8:a2:33:fb:e9:e8:0c:b4:0a:6f:b4:db: ff:11:75:09:7e:41:12:c8:63:6b:49:d5:1c:f2:56: bc:87:28:73:73:22:35:c8:84:76:8e:cf:17:87:b1: dd:fb:43:1b:fb:50:69:51:dd:76:90:a6:33:80:1b: 28:3f:26:0a:20:a3:86:e1:19:bd:97:8a:48:fc:57: 0c:e5:46:81:61:72:61:fd:42:ee:2f:26:89:e6:a0: 57:1d:33:30:11:c2:10:b0:91:b6:df:08:7b:ac:8b: 6c:91:4a:74:a9:06:29:e8:20:6e:89:02:1f:96:2e: 0c:6c:e4:cb:5c:4a:de:b8:87:cb:19:d0:19:29:98: b4:2c:ee:60:e7:a9:3f:85:45:95:95:17:a3:0c:0a: 95:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:E6:DC:83:F4:3F:09:4B:78:7D:F1:C1:19:DF:09:6E:2D:74:26:CD X509v3 Authority Key Identifier: keyid:DE:5F:8F:89:EA:28:57:71:91:25:EA:66:66:F5:93:A8:27:9B:3C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:1a:70:30:2b:4f:7c:f8:3b:c7:4c:01:8d:69:1f:b1:d8:1c: ef:89:d2:20:20:46:7b:fa:2c:8b:ad:c5:57:be:19:13:26:d0: 2a:d6:06:69:bc:3c:86:d0:cd:ef:4f:e8:41:32:cb:81:e6:69: 8f:fa:2c:6c:9b:a2:ba:3c:dd:29:4a:41:23:f3:0f:17:09:2d: db:22:39:fb:34:99:0a:1c:c6:7e:9f:0e:e0:d5:3a:d9:97:80: 44:d4:60:10:43:e8:b2:d5:eb:40:60:21:24:d6:ef:be:02:e7: 62:75:ae:8e:63:55:76:e9:f0:e4:13:7c:79:a7:05:fe:e3:4c: d4:a2:47:1e:e3:e8:fa:13:9a:66:96:cc:12:63:78:f2:8e:2a: 4d:2a:a3:bc:1b:df:55:29:c9:3e:7e:3d:6c:19:60:03:89:da: f1:e4:6d:e8:55:bf:b1:da:8d:2b:ba:52:74:da:24:61:12:77: d1:24:9e:be:f4:e2:35:0e:d1:53:b4:0d:f7:7a:55:a1:ac:37: 78:28:da:0b:5c:f2:b3:59:6d:cb:a5:c5:be:eb:8e:09:b7:f7: 97:be:34:24:ce:7f:ac:f3:77:1a:f7:f2:42:a7:95:3b:81:f5: 78:a0:03:67:92:5e:7c:47:07:6b:1c:ae:c4:a2:43:9f:c2:1f: 22:55:6e:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfoyfyr+E9QH2Tf0UB80evfAooN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkzQTgy NzlCM0NEOTAeFw0yNTA0MDMwNjU1NDhaFw0yNTA0MDYxNjA2NDhaMDMxMTAvBgNV BAMTKDZDRTZEQzgzRjQzRjA5NEI3ODdERjFDMTE5REYwOTZFMkQ3NDI2Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY/MQ3tKK6nNvHMMQAxZuyniCf pXQPF8InCiZ0xfI7GzqlYPP4T47OOqHx8Hf7Ea3eqHzU88IyPuMGuPGZWPGG8HpA 47ncOf/uzt+Yn6piVvA5Wv9IMesdUiWI8SdnVQIRz9ZMZG2qK+NGa6iiM/vp6Ay0 Cm+02/8RdQl+QRLIY2tJ1RzyVryHKHNzIjXIhHaOzxeHsd37Qxv7UGlR3XaQpjOA Gyg/Jgogo4bhGb2Xikj8VwzlRoFhcmH9Qu4vJonmoFcdMzARwhCwkbbfCHusi2yR SnSpBinoIG6JAh+WLgxs5MtcSt64h8sZ0BkpmLQs7mDnqT+FRZWVF6MMCpUpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbObcg/Q/CUt4ffHBGd8Jbi10Js0wHwYDVR0j BBgwFoAU3l+PieooV3GRJepmZvWTqCebPNkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZmQ2ZWFjYS1mNWZkLTRhY2ItODVhNS1lYjhkMzcwODIzYWYvMC9ERTVGOEY4OUVB Mjg1NzcxOTEyNUVBNjY2NkY1OTNBODI3OUIzQ0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkzQTgyNzlC M0NEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGZkNmVhY2EtZjVmZC00YWNiLTg1 YTUtZWI4ZDM3MDgyM2FmLzAvREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkz QTgyNzlCM0NEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK4acDArT3z4O8dMAY1pH7HYHO+J0iAgRnv6 LIutxVe+GRMm0CrWBmm8PIbQze9P6EEyy4HmaY/6LGyboro83SlKQSPzDxcJLdsi Ofs0mQocxn6fDuDVOtmXgETUYBBD6LLV60BgISTW774C52J1ro5jVXbp8OQTfHmn Bf7jTNSiRx7j6PoTmmaWzBJjePKOKk0qo7wb31UpyT5+PWwZYAOJ2vHkbehVv7Ha jSu6UnTaJGESd9Eknr704jUO0VO0Dfd6VaGsN3go2gtc8rNZbculxb7rjgm395e+ NCTOf6zzdxr38kKnlTuB9XigA2eSXnxHB2scrsSiQ5/CHyJVbk4= -----END CERTIFICATE-----Generated at Sat Apr 5 16:45:15 2025 by rpki-client