$ rpki-client -vvf repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft File: E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft (raw, json) Hash identifier: pNFg65rq5kd6fllY9EgRonvPtASZgcbuQZKyNcHGzOI= Subject key identifier: 5B:E8:6E:38:CF:25:E7:34:7C:FE:00:EC:B7:C5:CC:70:F3:17:BD:D2 Authority key identifier: E6:FE:A7:CE:7F:6F:A5:EA:E0:5E:BB:DF:D8:6F:D5:3E:84:FA:75:A8 Certificate issuer: /CN=E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8 Certificate serial: 280D5D27BF5ECB7AAE7FBA7BA9DDCEBF1C5C1249 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft Manifest number: 8E Signing time: Sun 15 Jun 2025 05:10:42 +0000 Manifest this update: Sun 15 Jun 2025 05:05:42 +0000 Manifest next update: Wed 18 Jun 2025 06:09:42 +0000 Files and hashes: 1: E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl (hash: 3avVjxpmnShbPcrm//Xjl1bI3SWyWU+0M1PApqGltoQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 06:09:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:0d:5d:27:bf:5e:cb:7a:ae:7f:ba:7b:a9:dd:ce:bf:1c:5c:12:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8 Validity Not Before: Jun 15 05:05:42 2025 GMT Not After : Jun 18 06:09:42 2025 GMT Subject: CN=5BE86E38CF25E7347CFE00ECB7C5CC70F317BDD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1e:cf:5c:cc:0e:dd:e1:d9:0d:03:7d:60:ad: 94:ae:2a:a1:f4:05:c2:a8:4f:56:0e:e3:86:61:78: a7:fb:e1:89:c4:bc:ab:9c:ff:f7:9e:a7:0f:b3:b8: 94:0d:78:71:a5:b6:a5:1f:bd:1d:48:b2:c7:6c:7b: 5c:57:78:33:2a:6f:d4:6a:a4:3d:9f:a0:95:3d:31: 34:23:99:c9:58:19:a0:dd:84:65:be:7c:dc:3c:c7: be:c4:f2:34:4e:29:b5:31:bb:bd:18:a7:30:1d:4a: 24:f8:55:2d:9c:85:d8:7d:bd:17:56:cd:4b:d1:a7: 11:c8:63:e7:ce:e2:5a:aa:15:45:18:3a:1c:45:bc: 32:fb:1c:1a:2b:53:33:e9:0a:47:cb:1e:01:1e:5e: 0a:92:33:87:7d:f6:2b:32:4f:57:59:c2:33:04:a9: 56:a9:4e:9b:67:76:d1:53:8c:72:d0:c5:5c:05:94: ee:04:38:02:be:00:4a:40:4c:1f:4e:b2:b1:45:ad: d1:65:ed:00:9a:e0:e3:1b:6d:bc:25:e8:0a:ca:ad: 8d:c2:78:9f:d0:e2:67:8d:10:d1:03:48:3e:5a:f8: 41:6b:f2:32:9e:2a:1f:d4:9a:36:58:c5:36:db:7b: 9f:f6:f0:22:53:af:df:45:15:27:9f:09:f3:a5:50: 21:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:E8:6E:38:CF:25:E7:34:7C:FE:00:EC:B7:C5:CC:70:F3:17:BD:D2 X509v3 Authority Key Identifier: keyid:E6:FE:A7:CE:7F:6F:A5:EA:E0:5E:BB:DF:D8:6F:D5:3E:84:FA:75:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:43:dd:80:c6:ad:31:f3:b5:ba:d1:f4:01:5a:18:28:8d:b7: 8b:22:80:36:3c:5b:96:ed:b3:8d:2b:ff:48:1f:78:17:45:5f: c2:8b:9d:39:d6:bd:d6:da:68:1f:86:e7:93:89:fc:6c:75:7e: 47:aa:a2:d7:9f:f8:5e:03:80:87:d8:f3:08:aa:33:75:39:3c: 00:e5:dd:81:5e:29:37:87:2a:9d:d9:67:6d:59:5a:9d:29:2c: 1e:18:3e:da:57:25:12:f3:fc:85:73:b0:92:69:bc:19:a9:9f: 18:eb:9b:3f:8c:6c:47:34:56:0f:3d:76:e4:25:3c:09:5c:d6: 14:65:c3:d8:e4:fc:0d:b9:c1:fd:b3:18:ea:2c:2e:db:fe:1e: 90:c2:19:28:ff:78:28:93:08:7a:27:ac:30:47:58:4b:70:d5: 7d:ff:a3:d5:cb:e5:7c:54:00:dc:b2:98:ff:dc:35:5d:8f:ad: 0f:f4:58:34:ce:93:c1:d8:78:ff:1b:e2:e0:88:06:ec:e8:ad: 95:1c:8d:54:61:9c:97:94:ff:e4:c3:dd:31:bb:cb:96:e6:c1: ba:24:b8:1d:e3:25:6d:f1:eb:57:1b:86:4b:6d:ac:34:ce:fa: d6:89:ad:51:38:af:f5:cf:01:94:66:ea:40:fc:07:3d:84:07: 53:b4:99:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKA1dJ79ey3quf7p7qd3OvxxcEkkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTZGRUE3Q0U3RjZGQTVFQUUwNUVCQkRGRDg2RkQ1M0U4 NEZBNzVBODAeFw0yNTA2MTUwNTA1NDJaFw0yNTA2MTgwNjA5NDJaMDMxMTAvBgNV BAMTKDVCRTg2RTM4Q0YyNUU3MzQ3Q0ZFMDBFQ0I3QzVDQzcwRjMxN0JERDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgHs9czA7d4dkNA31grZSuKqH0 BcKoT1YO44ZheKf74YnEvKuc//eepw+zuJQNeHGltqUfvR1Issdse1xXeDMqb9Rq pD2foJU9MTQjmclYGaDdhGW+fNw8x77E8jROKbUxu70YpzAdSiT4VS2chdh9vRdW zUvRpxHIY+fO4lqqFUUYOhxFvDL7HBorUzPpCkfLHgEeXgqSM4d99isyT1dZwjME qVapTptndtFTjHLQxVwFlO4EOAK+AEpATB9OsrFFrdFl7QCa4OMbbbwl6ArKrY3C eJ/Q4meNENEDSD5a+EFr8jKeKh/UmjZYxTbbe5/28CJTr99FFSefCfOlUCHjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW+huOM8l5zR8/gDst8XMcPMXvdIwHwYDVR0j BBgwFoAU5v6nzn9vpergXrvf2G/VPoT6dagwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTMxNTlmMi0wY2YwLTQzYzYtYjI4Mi1jNjlmYmExM2ExNGEvMC9FNkZFQTdDRTdG NkZBNUVBRTA1RUJCREZEODZGRDUzRTg0RkE3NUE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTZGRUE3Q0U3RjZGQTVFQUUwNUVCQkRGRDg2RkQ1M0U4NEZB NzVBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWUzMTU5ZjItMGNmMC00M2M2LWIy ODItYzY5ZmJhMTNhMTRhLzAvRTZGRUE3Q0U3RjZGQTVFQUUwNUVCQkRGRDg2RkQ1 M0U4NEZBNzVBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAZD3YDGrTHztbrR9AFaGCiNt4sigDY8W5bt s40r/0gfeBdFX8KLnTnWvdbaaB+G55OJ/Gx1fkeqotef+F4DgIfY8wiqM3U5PADl 3YFeKTeHKp3ZZ21ZWp0pLB4YPtpXJRLz/IVzsJJpvBmpnxjrmz+MbEc0Vg89duQl PAlc1hRlw9jk/A25wf2zGOosLtv+HpDCGSj/eCiTCHonrDBHWEtw1X3/o9XL5XxU ANyymP/cNV2PrQ/0WDTOk8HYeP8b4uCIBuzorZUcjVRhnJeU/+TD3TG7y5bmwbok uB3jJW3x61cbhkttrDTO+taJrVE4r/XPAZRm6kD8Bz2EB1O0mXY= -----END CERTIFICATE-----Generated at Tue Jun 17 01:37:47 2025 by rpki-client