$ rpki-client -vvf repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft File: E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft (raw, json) Hash identifier: vmlncCGo9DJ+YLDoZqttCr7wr50PCH43/L5zGataqeI= Subject key identifier: EA:0C:D5:E7:CD:BE:E5:2F:48:1D:FE:E4:F5:2D:45:CD:D3:8A:EF:EC Authority key identifier: E1:41:ED:0B:8F:1B:83:AB:AC:98:B8:DB:75:8C:25:18:8C:6E:65:A5 Certificate issuer: /CN=E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5 Certificate serial: 3BEC09CC38ECE3320AB111EB7DB6B6BA1ABF7212 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft Manifest number: AA Signing time: Sat 19 Apr 2025 16:11:57 +0000 Manifest this update: Sat 19 Apr 2025 16:06:57 +0000 Manifest next update: Wed 23 Apr 2025 00:10:57 +0000 Files and hashes: 1: E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.crl (hash: bBAc8bBaeVIy7teCooaGy2YicA1YgjS5xDu5nzqtrAs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.crl rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 00:10:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:ec:09:cc:38:ec:e3:32:0a:b1:11:eb:7d:b6:b6:ba:1a:bf:72:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5 Validity Not Before: Apr 19 16:06:57 2025 GMT Not After : Apr 23 00:10:57 2025 GMT Subject: CN=EA0CD5E7CDBEE52F481DFEE4F52D45CDD38AEFEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:50:f6:98:e8:78:e3:ce:bb:e9:66:c8:6e:dc: 9c:0e:c6:44:cc:f5:6e:d9:8e:2f:c8:f4:a3:7e:9d: 77:ea:57:73:78:fa:de:d6:a3:7d:bd:39:74:95:c9: c0:b9:e2:77:bd:66:6f:ed:0e:dc:d3:fc:e5:75:10: dc:9c:34:bb:de:bf:15:5b:33:c4:cf:e2:67:47:a7: 25:d7:88:e0:5b:ee:7d:65:53:c2:5a:73:c6:37:78: 11:a6:3a:d3:4a:26:2c:45:b2:64:af:d1:c8:07:8d: e2:37:eb:44:b0:bb:40:b4:f9:1b:6e:3a:3b:e3:b2: a9:2d:5b:a8:30:1f:c6:ae:5b:ce:a8:ef:1f:3a:71: 93:61:f3:8b:a0:44:5f:23:a3:fc:be:e5:ea:08:b5: de:53:2b:60:31:a2:e6:d2:ce:ff:df:77:22:6b:2e: 2e:86:fc:b8:3f:46:a0:33:6a:24:b8:28:39:d8:52: ca:b0:5a:80:1b:c4:dd:11:c9:53:49:10:38:93:53: 93:8e:d9:fc:c4:14:85:36:a2:8c:8f:b4:da:9c:fa: ba:a3:12:c7:10:b2:43:2b:df:07:5e:b9:21:f8:77: 12:a4:bd:b9:d7:b0:e8:f9:49:69:8e:1b:1d:46:79: 5a:ee:94:83:a6:46:aa:01:c6:26:18:0d:a9:d4:af: f5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:0C:D5:E7:CD:BE:E5:2F:48:1D:FE:E4:F5:2D:45:CD:D3:8A:EF:EC X509v3 Authority Key Identifier: keyid:E1:41:ED:0B:8F:1B:83:AB:AC:98:B8:DB:75:8C:25:18:8C:6E:65:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:18:b8:32:c5:57:2a:39:aa:0f:00:ca:2b:6f:d6:41:44:05: dd:1d:c7:c5:5e:80:22:0e:9f:dd:b6:b4:55:ca:04:92:a7:1c: 71:fe:7b:73:02:82:10:06:a3:11:13:46:3e:2b:c6:f3:de:df: c0:36:b1:52:b1:65:ea:72:75:e3:c9:be:89:b0:5f:ba:3e:08: 51:43:f7:d6:02:c2:89:20:c4:e4:e5:47:03:1c:57:7e:0f:77: 45:3b:fd:c2:d5:c7:f6:76:7b:24:11:87:5d:ac:dc:51:12:e0: c0:0c:63:c3:64:ac:9c:95:7b:bd:7e:b8:87:43:64:95:86:18: dd:4c:85:15:68:b1:fd:86:2f:8f:14:0a:35:03:54:49:ca:7f: 6a:b6:5f:a7:ed:7f:34:32:25:7f:c4:45:7f:89:7e:76:ba:b9: e7:d5:2e:eb:86:9b:4a:29:dd:22:79:96:2b:b6:9e:62:c2:40: de:3e:62:6b:74:e7:28:b5:8f:af:ea:28:d1:f9:56:d8:e4:ab: c8:db:ed:a7:90:20:86:b9:43:6d:44:35:ad:b4:b8:8c:f5:12: fc:8b:36:15:9e:f3:7c:82:38:2a:10:c2:ca:db:22:eb:77:fb: 57:1c:71:d9:87:21:00:8d:ee:9f:1c:45:d5:ea:d6:8b:8a:9d: 86:d3:71:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO+wJzDjs4zIKsRHrfba2uhq/chIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE0MUVEMEI4RjFCODNBQkFDOThCOERCNzU4QzI1MTg4 QzZFNjVBNTAeFw0yNTA0MTkxNjA2NTdaFw0yNTA0MjMwMDEwNTdaMDMxMTAvBgNV BAMTKEVBMENENUU3Q0RCRUU1MkY0ODFERkVFNEY1MkQ0NUNERDM4QUVGRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6UPaY6HjjzrvpZshu3JwOxkTM 9W7Zji/I9KN+nXfqV3N4+t7Wo329OXSVycC54ne9Zm/tDtzT/OV1ENycNLvevxVb M8TP4mdHpyXXiOBb7n1lU8Jac8Y3eBGmOtNKJixFsmSv0cgHjeI360Swu0C0+Rtu OjvjsqktW6gwH8auW86o7x86cZNh84ugRF8jo/y+5eoItd5TK2AxoubSzv/fdyJr Li6G/Lg/RqAzaiS4KDnYUsqwWoAbxN0RyVNJEDiTU5OO2fzEFIU2ooyPtNqc+rqj EscQskMr3wdeuSH4dxKkvbnXsOj5SWmOGx1GeVrulIOmRqoBxiYYDanUr/W3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6gzV582+5S9IHf7k9S1FzdOK7+wwHwYDVR0j BBgwFoAU4UHtC48bg6usmLjbdYwlGIxuZaUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzFlNjkzYy0yZmQ3LTRmNGMtYWY2My1mZWU2OTA3NmUwZDEvMC9FMTQxRUQwQjhG MUI4M0FCQUM5OEI4REI3NThDMjUxODhDNkU2NUE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTE0MUVEMEI4RjFCODNBQkFDOThCOERCNzU4QzI1MTg4QzZF NjVBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTMxZTY5M2MtMmZkNy00ZjRjLWFm NjMtZmVlNjkwNzZlMGQxLzAvRTE0MUVEMEI4RjFCODNBQkFDOThCOERCNzU4QzI1 MTg4QzZFNjVBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHEYuDLFVyo5qg8Ayitv1kFEBd0dx8VegCIO n922tFXKBJKnHHH+e3MCghAGoxETRj4rxvPe38A2sVKxZepydePJvomwX7o+CFFD 99YCwokgxOTlRwMcV34Pd0U7/cLVx/Z2eyQRh12s3FES4MAMY8NkrJyVe71+uIdD ZJWGGN1MhRVosf2GL48UCjUDVEnKf2q2X6ftfzQyJX/ERX+Jfna6uefVLuuGm0op 3SJ5liu2nmLCQN4+Ymt05yi1j6/qKNH5Vtjkq8jb7aeQIIa5Q21ENa20uIz1EvyL NhWe83yCOCoQwsrbIut3+1cccdmHIQCN7p8cRdXq1ouKnYbTcdo= -----END CERTIFICATE-----Generated at Sun Apr 20 12:17:10 2025 by rpki-client