$ rpki-client -vvf repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft File: E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft (raw, json) Hash identifier: QIBjJWkiCyu3/BNgMWPBhyrJAxNII5O49XyL+4QlLMM= Subject key identifier: 26:2C:0C:B0:1A:91:02:B6:73:40:0C:06:7E:BC:1D:1C:C5:B7:C2:00 Authority key identifier: E6:FE:A7:CE:7F:6F:A5:EA:E0:5E:BB:DF:D8:6F:D5:3E:84:FA:75:A8 Certificate issuer: /CN=E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8 Certificate serial: 54DFD4BBAA7A99C2B80521DC4215AF11C8962D35 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft Manifest number: 79 Signing time: Mon 28 Apr 2025 20:50:41 +0000 Manifest this update: Mon 28 Apr 2025 20:45:41 +0000 Manifest next update: Thu 01 May 2025 22:34:41 +0000 Files and hashes: 1: E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl (hash: 4O0OHFT26EBb0NTQKdsHjRr17mhLzfYzK+3OIgjeBRM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:df:d4:bb:aa:7a:99:c2:b8:05:21:dc:42:15:af:11:c8:96:2d:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8 Validity Not Before: Apr 28 20:45:41 2025 GMT Not After : May 1 22:34:41 2025 GMT Subject: CN=262C0CB01A9102B673400C067EBC1D1CC5B7C200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4d:09:4f:14:0a:55:f5:cb:7f:4e:c4:bb:d4: ef:9d:a0:4c:1a:93:4d:9e:8f:82:4b:b1:aa:0d:68: e2:9d:b4:3d:f0:2a:c2:94:05:34:86:26:a8:e6:e3: ba:f5:34:10:f9:74:94:7b:7a:c9:82:5d:24:4f:d9: 1f:67:65:18:ae:bf:82:05:24:4f:d0:58:89:57:b9: c9:45:cb:15:4c:2b:1f:46:30:a6:34:fe:17:1f:92: 13:b1:32:66:fa:8a:fc:a0:06:e9:7a:a9:52:82:3e: 0c:a1:d7:7f:71:6b:ca:33:e1:c4:5f:35:21:0a:c5: e1:c1:f9:b6:21:19:d4:8b:bd:48:13:a1:a7:cf:4f: 4b:e7:6f:a8:09:02:6e:b9:72:01:b8:98:7e:9b:7f: e6:88:1c:95:93:62:d2:d6:de:a7:11:45:e9:47:4b: f3:e2:d4:22:3f:aa:0c:dd:83:94:70:dd:fd:21:c3: a4:3a:ca:c4:47:0c:17:24:d6:37:07:e3:30:fe:42: c4:bb:ad:97:6d:5a:6e:5e:7c:3f:a4:32:8a:80:21: a9:91:9a:83:37:33:ef:d0:e4:21:7a:74:0e:ea:29: 68:da:70:aa:6d:d0:d0:22:12:ec:31:9f:68:a9:f4: aa:72:19:96:b3:0a:98:ea:d2:32:70:17:69:31:88: 36:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:2C:0C:B0:1A:91:02:B6:73:40:0C:06:7E:BC:1D:1C:C5:B7:C2:00 X509v3 Authority Key Identifier: keyid:E6:FE:A7:CE:7F:6F:A5:EA:E0:5E:BB:DF:D8:6F:D5:3E:84:FA:75:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:81:7e:55:68:78:fb:73:83:f8:f6:3f:9e:8a:71:3e:4a:f3: b6:49:0e:d9:0e:a1:9b:3b:97:51:ea:8b:78:49:c7:17:82:70: b3:5a:4e:4a:67:21:bb:c6:0d:b5:9c:e8:e6:2c:24:4d:1b:92: 3d:d1:50:59:35:27:14:85:aa:ff:13:6a:05:34:e9:d2:c2:91: 91:11:3b:7b:73:c9:9e:52:b6:af:37:e8:fb:34:61:a7:25:4c: a4:3d:22:1f:b3:8b:d6:88:de:bb:a4:98:88:62:6b:7f:f0:0d: f8:9c:bc:89:70:75:72:4d:a0:1c:05:c3:2a:7e:fe:e6:a7:78: 8a:3d:0d:87:1c:20:78:e1:8c:f8:56:58:6b:a1:81:84:c9:6e: b4:12:a4:e4:07:df:3e:22:89:3c:40:0a:cf:fa:d3:95:e7:d3: fb:64:44:c9:0d:ea:ee:c5:4b:5f:0b:b2:fb:09:a7:eb:8c:f5: 35:5d:24:2c:fa:16:3e:29:da:0f:d6:f3:49:da:2c:bb:ec:00: cd:af:19:81:c8:1d:67:ef:40:01:29:6a:c7:65:6d:90:82:46: 39:fc:c2:a0:13:62:80:1e:8b:4d:67:91:24:41:49:16:de:2b: bd:3b:53:4f:6d:9a:a0:46:3d:79:6e:9e:11:6d:6c:03:51:e5: 98:df:38:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVN/Uu6p6mcK4BSHcQhWvEciWLTUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTZGRUE3Q0U3RjZGQTVFQUUwNUVCQkRGRDg2RkQ1M0U4 NEZBNzVBODAeFw0yNTA0MjgyMDQ1NDFaFw0yNTA1MDEyMjM0NDFaMDMxMTAvBgNV BAMTKDI2MkMwQ0IwMUE5MTAyQjY3MzQwMEMwNjdFQkMxRDFDQzVCN0MyMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeTQlPFApV9ct/TsS71O+doEwa k02ej4JLsaoNaOKdtD3wKsKUBTSGJqjm47r1NBD5dJR7esmCXSRP2R9nZRiuv4IF JE/QWIlXuclFyxVMKx9GMKY0/hcfkhOxMmb6ivygBul6qVKCPgyh139xa8oz4cRf NSEKxeHB+bYhGdSLvUgToafPT0vnb6gJAm65cgG4mH6bf+aIHJWTYtLW3qcRRelH S/Pi1CI/qgzdg5Rw3f0hw6Q6ysRHDBck1jcH4zD+QsS7rZdtWm5efD+kMoqAIamR moM3M+/Q5CF6dA7qKWjacKpt0NAiEuwxn2ip9KpyGZazCpjq0jJwF2kxiDZnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJiwMsBqRArZzQAwGfrwdHMW3wgAwHwYDVR0j BBgwFoAU5v6nzn9vpergXrvf2G/VPoT6dagwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTMxNTlmMi0wY2YwLTQzYzYtYjI4Mi1jNjlmYmExM2ExNGEvMC9FNkZFQTdDRTdG NkZBNUVBRTA1RUJCREZEODZGRDUzRTg0RkE3NUE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTZGRUE3Q0U3RjZGQTVFQUUwNUVCQkRGRDg2RkQ1M0U4NEZB NzVBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWUzMTU5ZjItMGNmMC00M2M2LWIy ODItYzY5ZmJhMTNhMTRhLzAvRTZGRUE3Q0U3RjZGQTVFQUUwNUVCQkRGRDg2RkQ1 M0U4NEZBNzVBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALKBflVoePtzg/j2P56KcT5K87ZJDtkOoZs7 l1Hqi3hJxxeCcLNaTkpnIbvGDbWc6OYsJE0bkj3RUFk1JxSFqv8TagU06dLCkZER O3tzyZ5Stq836Ps0YaclTKQ9Ih+zi9aI3rukmIhia3/wDficvIlwdXJNoBwFwyp+ /uaneIo9DYccIHjhjPhWWGuhgYTJbrQSpOQH3z4iiTxACs/605Xn0/tkRMkN6u7F S18LsvsJp+uM9TVdJCz6Fj4p2g/W80naLLvsAM2vGYHIHWfvQAEpasdlbZCCRjn8 wqATYoAei01nkSRBSRbeK707U09tmqBGPXlunhFtbANR5ZjfOFU= -----END CERTIFICATE-----Generated at Wed Apr 30 08:14:20 2025 by rpki-client