$ rpki-client -vvf repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.mft File: E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.mft (raw, json) Hash identifier: 67bEwCutsUAbN0zvtWzrV7EbSlkKs9WzzkzjOl5kvy4= Subject key identifier: A7:EC:DF:15:43:8C:C2:FB:AB:EF:F7:72:B4:E9:09:67:C1:7B:47:95 Authority key identifier: E5:1A:77:F5:DB:FB:16:B1:60:6D:E1:A4:FF:6D:FD:05:73:42:0E:38 Certificate issuer: /CN=E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38 Certificate serial: 57C2CB74E42FFA4577EB1F9CD6E0B459191DB236 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.mft Manifest number: 01A6 Signing time: Sun 06 Apr 2025 04:00:51 +0000 Manifest this update: Sun 06 Apr 2025 03:55:51 +0000 Manifest next update: Wed 09 Apr 2025 09:18:51 +0000 Files and hashes: 1: E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.crl (hash: 8uD9+BzEdT/+EMBhEIqhZ9o3DcN8mydU3cevJN/Qf3Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.crl rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 09:18:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:c2:cb:74:e4:2f:fa:45:77:eb:1f:9c:d6:e0:b4:59:19:1d:b2:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38 Validity Not Before: Apr 6 03:55:51 2025 GMT Not After : Apr 9 09:18:51 2025 GMT Subject: CN=A7ECDF15438CC2FBABEFF772B4E90967C17B4795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:76:e4:c8:8c:90:cb:ec:19:6c:30:72:1f:55: 2a:f6:07:fc:43:6d:78:b7:6d:04:00:90:31:c2:f2: f5:13:e1:bf:b9:9e:89:2d:de:c7:2b:e9:15:8b:f3: 1d:d1:04:04:37:53:52:5e:51:9f:69:e9:3a:51:6d: 26:8c:f2:8a:b7:40:9b:f7:43:10:09:e5:07:88:d3: f4:a8:ff:ff:a9:a8:f5:bf:3e:7a:a6:23:05:b3:ab: 47:4b:f9:93:72:e3:cb:c7:37:f0:ae:35:8c:7f:3f: ed:fa:e4:29:dd:e9:4a:34:a7:27:fe:e0:9e:6d:af: bb:9e:ed:56:7d:2b:9c:31:f7:11:2c:e9:c6:ee:33: 16:93:aa:6d:bf:85:45:b6:02:3f:a9:d4:c9:ba:a0: 6d:c5:7d:0e:4e:f3:67:6c:94:19:93:77:65:ab:c5: 0c:f1:fe:cd:da:08:19:ed:23:52:1f:fb:96:79:cf: 04:07:72:41:c4:79:99:c4:e8:00:54:29:aa:2f:a0: c2:35:e6:4b:39:1c:13:f0:be:ca:12:8b:93:6b:a1: b2:7e:63:22:2b:f6:a9:c9:47:23:4a:0a:fd:b3:53: 7a:c6:aa:11:4c:00:2d:da:43:8f:eb:d9:a2:08:8e: ee:30:72:b4:84:60:27:51:28:fb:6f:83:b3:ce:03: 9c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:EC:DF:15:43:8C:C2:FB:AB:EF:F7:72:B4:E9:09:67:C1:7B:47:95 X509v3 Authority Key Identifier: keyid:E5:1A:77:F5:DB:FB:16:B1:60:6D:E1:A4:FF:6D:FD:05:73:42:0E:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:c6:c1:e9:7f:96:6f:b6:3e:c3:8f:7f:25:bf:53:e1:db:e3: fe:53:23:a0:f5:e8:e2:67:d4:66:35:ce:32:1d:31:69:6a:2f: de:44:59:f8:b5:bc:34:cc:fc:78:85:2c:e1:d7:ae:19:52:75: 78:aa:8c:5b:c8:fe:c3:46:50:f1:c4:a2:ea:49:22:30:67:35: 8d:5f:c2:b2:ae:b6:4a:a6:c3:73:1b:06:fc:d9:55:49:be:30: 6a:04:57:57:3c:9d:96:57:a3:65:d1:6d:57:da:54:68:9d:55: 42:71:e4:24:b0:12:e5:c0:17:04:4d:b0:a2:af:eb:88:aa:94: 3b:36:35:a8:1a:05:38:76:8e:80:e8:e5:f5:4a:de:78:f2:25: 04:5b:af:34:61:a1:2b:3c:94:04:b6:45:42:9e:2d:7c:75:0d: 1b:40:1a:ce:92:6b:fd:1c:85:a9:2e:3d:2f:b8:65:e0:17:95: 0b:0e:9e:1f:15:a9:15:c0:d9:7a:c2:9f:a3:c8:af:6f:f6:b0: a2:c3:76:39:27:95:69:49:8e:1a:c4:42:37:54:a3:2b:a8:b0: 8f:61:df:ee:20:a8:ed:40:fc:7f:f4:62:2b:29:e6:91:24:3a: 75:18:a6:bf:ed:fd:15:42:fb:5e:13:bc:79:3a:d0:c3:9b:12: 1e:3c:0e:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV8LLdOQv+kV36x+c1uC0WRkdsjYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTUxQTc3RjVEQkZCMTZCMTYwNkRFMUE0RkY2REZEMDU3 MzQyMEUzODAeFw0yNTA0MDYwMzU1NTFaFw0yNTA0MDkwOTE4NTFaMDMxMTAvBgNV BAMTKEE3RUNERjE1NDM4Q0MyRkJBQkVGRjc3MkI0RTkwOTY3QzE3QjQ3OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjduTIjJDL7BlsMHIfVSr2B/xD bXi3bQQAkDHC8vUT4b+5nokt3scr6RWL8x3RBAQ3U1JeUZ9p6TpRbSaM8oq3QJv3 QxAJ5QeI0/So//+pqPW/PnqmIwWzq0dL+ZNy48vHN/CuNYx/P+365Cnd6Uo0pyf+ 4J5tr7ue7VZ9K5wx9xEs6cbuMxaTqm2/hUW2Aj+p1Mm6oG3FfQ5O82dslBmTd2Wr xQzx/s3aCBntI1If+5Z5zwQHckHEeZnE6ABUKaovoMI15ks5HBPwvsoSi5NrobJ+ YyIr9qnJRyNKCv2zU3rGqhFMAC3aQ4/r2aIIju4wcrSEYCdRKPtvg7POA5ynAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp+zfFUOMwvur7/dytOkJZ8F7R5UwHwYDVR0j BBgwFoAU5Rp39dv7FrFgbeGk/239BXNCDjgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NDBlMWYyMC1iMGNkLTQ2OWItOTEwNi0xZWEwMDA3OTVmOWYvMC9FNTFBNzdGNURC RkIxNkIxNjA2REUxQTRGRjZERkQwNTczNDIwRTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTUxQTc3RjVEQkZCMTZCMTYwNkRFMUE0RkY2REZEMDU3MzQy MEUzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQwZTFmMjAtYjBjZC00NjliLTkx MDYtMWVhMDAwNzk1ZjlmLzAvRTUxQTc3RjVEQkZCMTZCMTYwNkRFMUE0RkY2REZE MDU3MzQyMEUzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIPGwel/lm+2PsOPfyW/U+Hb4/5TI6D16OJn 1GY1zjIdMWlqL95EWfi1vDTM/HiFLOHXrhlSdXiqjFvI/sNGUPHEoupJIjBnNY1f wrKutkqmw3MbBvzZVUm+MGoEV1c8nZZXo2XRbVfaVGidVUJx5CSwEuXAFwRNsKKv 64iqlDs2NagaBTh2joDo5fVK3njyJQRbrzRhoSs8lAS2RUKeLXx1DRtAGs6Sa/0c hakuPS+4ZeAXlQsOnh8VqRXA2XrCn6PIr2/2sKLDdjknlWlJjhrEQjdUoyuosI9h 3+4gqO1A/H/0Yisp5pEkOnUYpr/t/RVC+14TvHk60MObEh48Dsw= -----END CERTIFICATE-----Generated at Sun Apr 6 11:03:13 2025 by rpki-client