$ rpki-client -vvf repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft File: E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft (raw, json) Hash identifier: 1DCaBIYkGiwnaSktb8JiMTgJGYejxThHQ0gTkkwGJbA= Subject key identifier: 71:4E:93:F5:6E:2E:68:F1:B3:AE:C6:77:20:3A:16:0E:7D:7A:AC:03 Authority key identifier: E0:B3:E0:49:B0:31:30:8B:37:78:BB:68:5F:D3:D1:49:FA:69:DD:3B Certificate issuer: /CN=E0B3E049B031308B3778BB685FD3D149FA69DD3B Certificate serial: 1BAB844288B6637F813F7BE4E07AE34BA8D4CCCF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B3E049B031308B3778BB685FD3D149FA69DD3B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft Manifest number: FB Signing time: Tue 03 Jun 2025 09:43:31 +0000 Manifest this update: Tue 03 Jun 2025 09:38:31 +0000 Manifest next update: Fri 06 Jun 2025 19:10:31 +0000 Files and hashes: 1: E0B3E049B031308B3778BB685FD3D149FA69DD3B.crl (hash: TdE9gHNj+J6CHRNVD+zbH9eOifClqTEm736B8Ly6mEs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.crl rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B3E049B031308B3778BB685FD3D149FA69DD3B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:10:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:ab:84:42:88:b6:63:7f:81:3f:7b:e4:e0:7a:e3:4b:a8:d4:cc:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0B3E049B031308B3778BB685FD3D149FA69DD3B Validity Not Before: Jun 3 09:38:31 2025 GMT Not After : Jun 6 19:10:31 2025 GMT Subject: CN=714E93F56E2E68F1B3AEC677203A160E7D7AAC03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2a:ed:0e:65:bf:1d:32:1a:66:7c:7b:57:43: 14:ee:2e:23:3e:63:76:32:3a:5f:49:ae:55:31:62: 55:11:77:a8:09:61:3e:61:17:e6:7d:15:6d:67:de: cb:02:09:2c:37:9c:f4:d7:12:47:5d:09:14:c4:28: 8e:dd:d5:bb:7a:2d:e4:94:a7:2a:e4:8d:42:5a:27: ae:35:8d:7a:15:c0:5c:2c:e2:83:f5:6f:46:5f:be: f9:71:7e:eb:72:40:f3:7c:75:68:52:ca:45:68:78: 63:d0:1d:3e:0d:24:ca:33:12:ba:7b:9a:58:aa:65: 5b:30:ca:c6:5b:f5:98:55:68:23:25:41:87:0a:c6: 17:b9:c7:43:a5:48:dc:7d:1f:36:8d:34:46:26:b8: c7:89:dc:32:e0:a4:4e:1f:9b:3b:97:a9:b4:38:5b: 5c:26:b7:9c:9f:91:7f:18:dc:77:1c:1f:32:10:bf: 9c:40:db:18:2a:37:97:6a:ed:f9:77:06:8c:d6:78: e9:62:b6:b6:bc:68:3d:c1:06:c5:12:3c:d7:5a:3d: e2:61:3e:72:b0:e0:2d:2e:a7:09:40:04:af:d6:a9: ff:11:e2:53:f7:61:3e:db:da:43:75:fe:71:4f:cc: 55:22:95:6a:1e:a2:d9:8b:71:6c:a0:5f:86:ea:84: f3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:4E:93:F5:6E:2E:68:F1:B3:AE:C6:77:20:3A:16:0E:7D:7A:AC:03 X509v3 Authority Key Identifier: keyid:E0:B3:E0:49:B0:31:30:8B:37:78:BB:68:5F:D3:D1:49:FA:69:DD:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B3E049B031308B3778BB685FD3D149FA69DD3B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:1f:0a:57:91:30:cf:56:92:0c:ac:9f:e6:af:57:a8:80:bb: 9d:fc:e2:89:30:94:c9:58:1a:b2:cf:f4:87:74:9f:c1:c2:34: 33:61:ba:cc:5b:da:fd:13:33:27:0b:f2:8a:ae:de:07:a7:22: 41:c7:72:c1:6c:c1:cc:83:b5:68:ff:e6:5e:af:aa:72:8c:e1: 68:5e:3a:1f:67:d4:d9:5e:05:2b:a6:0d:dc:31:92:ea:f4:d4: 52:94:37:01:9c:b4:83:de:04:73:36:3c:38:94:ee:e9:b2:66: 2e:be:bb:52:4a:15:7b:86:67:a9:d0:c8:e3:d2:15:a7:70:7b: dc:73:c4:37:62:fc:f7:f2:74:ec:ff:1c:3c:15:8d:ab:62:82: 06:f2:fa:1f:fd:66:3b:9d:2d:7f:2b:19:c1:63:2b:73:37:8b: c2:b2:50:19:53:d2:c6:b0:c1:3a:92:91:ef:3d:ec:bd:5a:07: 36:63:92:ac:e3:43:2f:83:85:2f:53:ca:05:a7:40:21:7e:5c: b6:8f:2d:65:64:8d:42:ec:a0:1c:9b:95:9a:19:0e:4c:11:21: 60:a1:be:ba:a8:7b:ea:c8:dc:dd:bf:67:f5:fd:15:0c:6b:79: 1a:9d:68:13:44:62:3e:d6:c7:42:71:b3:5d:37:d0:7e:22:96: 74:52:d3:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG6uEQoi2Y3+BP3vk4HrjS6jUzM8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBCM0UwNDlCMDMxMzA4QjM3NzhCQjY4NUZEM0QxNDlG QTY5REQzQjAeFw0yNTA2MDMwOTM4MzFaFw0yNTA2MDYxOTEwMzFaMDMxMTAvBgNV BAMTKDcxNEU5M0Y1NkUyRTY4RjFCM0FFQzY3NzIwM0ExNjBFN0Q3QUFDMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDKu0OZb8dMhpmfHtXQxTuLiM+ Y3YyOl9JrlUxYlURd6gJYT5hF+Z9FW1n3ssCCSw3nPTXEkddCRTEKI7d1bt6LeSU pyrkjUJaJ641jXoVwFws4oP1b0ZfvvlxfutyQPN8dWhSykVoeGPQHT4NJMozErp7 mliqZVswysZb9ZhVaCMlQYcKxhe5x0OlSNx9HzaNNEYmuMeJ3DLgpE4fmzuXqbQ4 W1wmt5yfkX8Y3HccHzIQv5xA2xgqN5dq7fl3BozWeOlitra8aD3BBsUSPNdaPeJh PnKw4C0upwlABK/Wqf8R4lP3YT7b2kN1/nFPzFUilWoeotmLcWygX4bqhPPBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcU6T9W4uaPGzrsZ3IDoWDn16rAMwHwYDVR0j BBgwFoAU4LPgSbAxMIs3eLtoX9PRSfpp3TswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MWM3ZTgzMy02YzU0LTRlMGItODMxYy0xYzFhNzEwY2U4ZTMvMC9FMEIzRTA0OUIw MzEzMDhCMzc3OEJCNjg1RkQzRDE0OUZBNjlERDNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTBCM0UwNDlCMDMxMzA4QjM3NzhCQjY4NUZEM0QxNDlGQTY5 REQzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjFjN2U4MzMtNmM1NC00ZTBiLTgz MWMtMWMxYTcxMGNlOGUzLzAvRTBCM0UwNDlCMDMxMzA4QjM3NzhCQjY4NUZEM0Qx NDlGQTY5REQzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4fCleRMM9Wkgysn+avV6iAu5384okwlMlY GrLP9Id0n8HCNDNhusxb2v0TMycL8oqu3genIkHHcsFswcyDtWj/5l6vqnKM4Whe Oh9n1NleBSumDdwxkur01FKUNwGctIPeBHM2PDiU7umyZi6+u1JKFXuGZ6nQyOPS Fadwe9xzxDdi/PfydOz/HDwVjatiggby+h/9ZjudLX8rGcFjK3M3i8KyUBlT0saw wTqSke897L1aBzZjkqzjQy+DhS9TygWnQCF+XLaPLWVkjULsoByblZoZDkwRIWCh vrqoe+rI3N2/Z/X9FQxreRqdaBNEYj7Wx0Jxs1030H4ilnRS03M= -----END CERTIFICATE-----Generated at Tue Jun 3 23:59:40 2025 by rpki-client