$ rpki-client -vvf repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft File: E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft (raw, json) Hash identifier: 9JPnW63TwFlvBzNEETlRLn8tG6555MHdDFGZsiU1ZYs= Subject key identifier: 63:88:17:DE:2F:F5:D2:23:33:45:03:6F:32:A2:F4:CD:5F:45:BC:06 Authority key identifier: E1:41:ED:0B:8F:1B:83:AB:AC:98:B8:DB:75:8C:25:18:8C:6E:65:A5 Certificate issuer: /CN=E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5 Certificate serial: 48125BD10E817E5018D3FA67DACDE0ECFDD693C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft Manifest number: C0 Signing time: Sat 07 Jun 2025 16:41:58 +0000 Manifest this update: Sat 07 Jun 2025 16:36:58 +0000 Manifest next update: Tue 10 Jun 2025 20:54:58 +0000 Files and hashes: 1: E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.crl (hash: n/wC1rTubh7Qv/ZWszC6z9Ysr2FUqttgral9FB3DTME=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.crl rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 20:54:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:12:5b:d1:0e:81:7e:50:18:d3:fa:67:da:cd:e0:ec:fd:d6:93:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5 Validity Not Before: Jun 7 16:36:58 2025 GMT Not After : Jun 10 20:54:58 2025 GMT Subject: CN=638817DE2FF5D2233345036F32A2F4CD5F45BC06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:03:9c:01:ec:d7:3d:ec:1d:8d:b2:7a:e0:7a: 21:91:fd:c6:f1:10:cb:ac:62:42:d6:58:6f:e6:ea: 0c:88:33:dd:4e:ba:a7:39:f5:1b:e7:c4:9a:c4:77: 77:4e:c0:fd:ab:ce:b7:0b:0c:f8:16:e7:74:b8:cf: e5:36:93:d3:49:1c:e2:d4:61:7e:e4:d2:d8:76:c9: 10:fb:52:60:94:c6:66:69:06:88:87:58:42:e6:f3: 31:5f:17:14:e6:a5:48:84:bb:67:e6:c1:6e:7c:ff: 61:18:74:49:69:89:03:bf:5f:d4:63:e1:ca:e1:0e: f8:5a:68:a3:f8:7a:4d:ca:db:a3:1f:72:1b:78:26: fc:5e:9d:0b:ac:e5:44:49:07:16:1e:c8:62:d9:5a: 4b:52:67:08:31:30:eb:49:32:2d:ce:39:32:74:ad: 2f:42:97:81:4e:b8:a2:86:0d:45:f9:32:9f:5a:c4: d2:5d:60:99:07:25:9a:b6:25:88:a9:26:cc:df:d5: 28:db:c5:92:ed:9f:0d:37:fe:73:21:01:65:82:97: 86:86:e2:84:28:8c:de:91:ba:8e:16:2d:00:ae:24: 68:0c:5b:d4:ec:7b:47:ed:5a:b1:f9:53:dc:42:93: 68:03:e3:96:28:cf:9f:1b:33:d1:04:82:f7:6d:a4: 4c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:88:17:DE:2F:F5:D2:23:33:45:03:6F:32:A2:F4:CD:5F:45:BC:06 X509v3 Authority Key Identifier: keyid:E1:41:ED:0B:8F:1B:83:AB:AC:98:B8:DB:75:8C:25:18:8C:6E:65:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:bb:21:00:f7:8c:e1:e0:04:37:8f:ff:dd:19:8f:1b:50:25: b6:3d:ca:10:ee:b0:11:32:2d:a2:cf:39:45:5c:85:48:d6:35: 81:c3:df:73:42:c4:08:aa:5f:dc:26:1a:38:d7:7a:7a:08:2d: da:4b:c8:9e:20:b0:0e:86:30:2f:70:b3:37:ad:c1:c1:75:8e: bb:7f:e4:a9:36:45:ed:03:d7:fb:4d:03:28:fc:2d:b3:54:a6: 36:85:fa:d8:4d:08:88:f3:a2:35:56:11:d0:11:de:fd:fe:ab: a0:fd:7f:77:f5:bc:71:bd:57:5e:0d:f7:52:b4:96:79:75:86: 5e:ad:cf:88:6f:7f:ac:02:10:fd:6a:d0:ee:62:d1:fb:a1:37: c5:e8:6f:bb:77:46:55:19:f0:7a:ef:5f:6a:d5:0b:7f:c7:37: 21:e5:cc:50:ee:81:e2:15:8e:de:bc:87:9f:71:df:12:d0:ac: ae:c2:c0:dd:2f:c3:a9:6c:45:f3:df:4b:0f:2f:1a:05:28:6f: 8a:53:ab:00:52:67:a4:a4:50:c7:ba:6a:1f:15:b1:67:93:56: 5d:4e:eb:2f:71:ef:30:5b:10:9a:68:bd:d5:bb:07:92:12:5c: da:e5:1e:ec:80:11:d3:30:d1:da:4b:ce:17:e3:66:62:1e:41: 2d:fc:85:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSBJb0Q6BflAY0/pn2s3g7P3Wk8QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE0MUVEMEI4RjFCODNBQkFDOThCOERCNzU4QzI1MTg4 QzZFNjVBNTAeFw0yNTA2MDcxNjM2NThaFw0yNTA2MTAyMDU0NThaMDMxMTAvBgNV BAMTKDYzODgxN0RFMkZGNUQyMjMzMzQ1MDM2RjMyQTJGNENENUY0NUJDMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwA5wB7Nc97B2NsnrgeiGR/cbx EMusYkLWWG/m6gyIM91Ouqc59RvnxJrEd3dOwP2rzrcLDPgW53S4z+U2k9NJHOLU YX7k0th2yRD7UmCUxmZpBoiHWELm8zFfFxTmpUiEu2fmwW58/2EYdElpiQO/X9Rj 4crhDvhaaKP4ek3K26Mfcht4JvxenQus5URJBxYeyGLZWktSZwgxMOtJMi3OOTJ0 rS9Cl4FOuKKGDUX5Mp9axNJdYJkHJZq2JYipJszf1SjbxZLtnw03/nMhAWWCl4aG 4oQojN6Ruo4WLQCuJGgMW9Tse0ftWrH5U9xCk2gD45Yoz58bM9EEgvdtpEwtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY4gX3i/10iMzRQNvMqL0zV9FvAYwHwYDVR0j BBgwFoAU4UHtC48bg6usmLjbdYwlGIxuZaUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzFlNjkzYy0yZmQ3LTRmNGMtYWY2My1mZWU2OTA3NmUwZDEvMC9FMTQxRUQwQjhG MUI4M0FCQUM5OEI4REI3NThDMjUxODhDNkU2NUE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTE0MUVEMEI4RjFCODNBQkFDOThCOERCNzU4QzI1MTg4QzZF NjVBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTMxZTY5M2MtMmZkNy00ZjRjLWFm NjMtZmVlNjkwNzZlMGQxLzAvRTE0MUVEMEI4RjFCODNBQkFDOThCOERCNzU4QzI1 MTg4QzZFNjVBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI27IQD3jOHgBDeP/90ZjxtQJbY9yhDusBEy LaLPOUVchUjWNYHD33NCxAiqX9wmGjjXenoILdpLyJ4gsA6GMC9wszetwcF1jrt/ 5Kk2Re0D1/tNAyj8LbNUpjaF+thNCIjzojVWEdAR3v3+q6D9f3f1vHG9V14N91K0 lnl1hl6tz4hvf6wCEP1q0O5i0fuhN8Xob7t3RlUZ8HrvX2rVC3/HNyHlzFDugeIV jt68h59x3xLQrK7CwN0vw6lsRfPfSw8vGgUob4pTqwBSZ6SkUMe6ah8VsWeTVl1O 6y9x7zBbEJpovdW7B5ISXNrlHuyAEdMw0dpLzhfjZmIeQS38hV0= -----END CERTIFICATE-----Generated at Sun Jun 8 02:04:18 2025 by rpki-client