$ rpki-client -vvf repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft File: E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft (raw, json) Hash identifier: oJYfzP+EX2GM1Zxpc0+EgwjSEcb83GcSpdhjqV1otgI= Subject key identifier: FE:5C:6B:5C:03:ED:18:2D:39:58:72:B0:7D:DB:44:50:58:8A:28:E7 Authority key identifier: E8:DA:87:F3:4A:55:0D:00:47:EE:C0:39:A2:0C:84:41:F0:66:EC:5B Certificate issuer: /CN=E8DA87F34A550D0047EEC039A20C8441F066EC5B Certificate serial: 1B7BA51F1323159E335D4B94E6E7B6D4F3EC10D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E8DA87F34A550D0047EEC039A20C8441F066EC5B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft Manifest number: 02D1 Signing time: Mon 28 Apr 2025 21:40:35 +0000 Manifest this update: Mon 28 Apr 2025 21:35:35 +0000 Manifest next update: Fri 02 May 2025 08:46:35 +0000 Files and hashes: 1: E8DA87F34A550D0047EEC039A20C8441F066EC5B.crl (hash: Jf17j1Na0GrhIQjU6XU+XRQPeXuLmhXvhNhNQ7EO+E4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.crl rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E8DA87F34A550D0047EEC039A20C8441F066EC5B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 08:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:7b:a5:1f:13:23:15:9e:33:5d:4b:94:e6:e7:b6:d4:f3:ec:10:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E8DA87F34A550D0047EEC039A20C8441F066EC5B Validity Not Before: Apr 28 21:35:35 2025 GMT Not After : May 2 08:46:35 2025 GMT Subject: CN=FE5C6B5C03ED182D395872B07DDB4450588A28E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b3:3a:cc:96:82:43:64:55:5a:0f:ca:1f:35: 22:88:f3:d1:ed:89:37:91:c3:3c:a2:07:84:aa:50: 9b:d2:86:7e:90:06:e7:7b:ca:c9:b4:c9:a0:5f:e9: 09:09:91:bd:84:1a:3f:eb:14:38:b3:30:6e:8d:f3: 4c:95:cd:a7:5e:16:a6:2c:0b:7e:34:b2:20:a5:ca: 38:08:06:20:dd:81:1b:8e:55:8d:1f:97:e3:bc:34: ff:5b:97:60:aa:41:1b:41:2f:c1:7b:24:b3:e5:27: f9:a1:da:54:51:04:e0:eb:5a:91:8f:21:71:9d:2e: 98:c5:66:44:ea:52:3b:89:d5:39:88:1e:07:d5:91: cf:bb:36:57:2a:e1:1c:e5:72:ca:fa:dd:c6:b5:e2: ad:60:41:29:68:cb:06:c6:ef:24:df:b3:5c:42:18: 1e:6d:8f:e7:e4:f6:96:23:2a:32:bd:e2:ab:07:2a: c8:e8:84:f2:1c:a7:b7:07:38:b5:14:45:59:77:f9: f6:96:54:ac:b8:fb:57:e8:51:61:85:f7:c4:75:30: 19:07:74:dd:39:bc:d7:8a:3b:92:b2:2a:20:13:80: b9:ad:47:93:f0:47:83:29:80:b6:ff:5d:02:fe:0e: 94:8b:d5:9f:22:d6:c5:c7:33:aa:bf:e8:bf:dd:b3: 0d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:5C:6B:5C:03:ED:18:2D:39:58:72:B0:7D:DB:44:50:58:8A:28:E7 X509v3 Authority Key Identifier: keyid:E8:DA:87:F3:4A:55:0D:00:47:EE:C0:39:A2:0C:84:41:F0:66:EC:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E8DA87F34A550D0047EEC039A20C8441F066EC5B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:81:6a:6b:9f:56:7a:a2:5f:55:8b:d6:18:b9:3c:bb:44:7e: 26:2f:4a:2c:c5:62:af:23:4e:65:16:09:4f:16:7b:da:97:3b: dc:a7:95:ba:8e:7e:81:49:5b:cb:95:77:21:af:5e:f6:46:f8: fc:ae:06:f4:b9:84:de:b5:16:f0:b0:33:94:16:44:05:87:1c: 33:db:7b:d0:c0:11:af:21:1c:2a:06:8f:ed:56:c5:e2:f7:49: 95:82:5d:f7:d4:12:71:2e:b0:03:63:6f:bc:69:0b:5a:47:21: fe:81:99:28:4c:65:c4:f3:90:b0:e7:8c:c7:30:da:b9:0d:bc: b9:85:77:8c:93:d5:57:16:9a:94:36:6f:f2:45:65:20:c7:6a: ba:52:a6:a6:79:35:d7:53:33:8c:22:61:0d:85:6e:15:d3:1b: cc:9a:ff:9a:19:50:9a:ca:ac:f1:8d:18:66:48:6f:de:10:a5: 60:89:8a:6c:58:ed:1c:df:83:e9:72:f8:3a:67:e4:0f:77:57: 2e:fa:aa:10:96:26:ec:cc:e6:57:cf:2e:84:ee:cc:94:83:16: 7b:c1:66:87:f3:20:53:4c:4c:f7:c5:de:43:55:71:2c:72:0a: a8:a4:18:0f:27:f9:a3:84:82:a3:60:60:07:91:14:a1:09:6a: cb:f7:95:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG3ulHxMjFZ4zXUuU5ue21PPsENkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRThEQTg3RjM0QTU1MEQwMDQ3RUVDMDM5QTIwQzg0NDFG MDY2RUM1QjAeFw0yNTA0MjgyMTM1MzVaFw0yNTA1MDIwODQ2MzVaMDMxMTAvBgNV BAMTKEZFNUM2QjVDMDNFRDE4MkQzOTU4NzJCMDdEREI0NDUwNTg4QTI4RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXszrMloJDZFVaD8ofNSKI89Ht iTeRwzyiB4SqUJvShn6QBud7ysm0yaBf6QkJkb2EGj/rFDizMG6N80yVzadeFqYs C340siClyjgIBiDdgRuOVY0fl+O8NP9bl2CqQRtBL8F7JLPlJ/mh2lRRBODrWpGP IXGdLpjFZkTqUjuJ1TmIHgfVkc+7Nlcq4Rzlcsr63ca14q1gQSloywbG7yTfs1xC GB5tj+fk9pYjKjK94qsHKsjohPIcp7cHOLUURVl3+faWVKy4+1foUWGF98R1MBkH dN05vNeKO5KyKiATgLmtR5PwR4MpgLb/XQL+DpSL1Z8i1sXHM6q/6L/dsw33AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/lxrXAPtGC05WHKwfdtEUFiKKOcwHwYDVR0j BBgwFoAU6NqH80pVDQBH7sA5ogyEQfBm7FswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTQ2NzZjZC1kZTM5LTQ2OGEtYWQyNS02NzVlMWI5MTBmYWMvMC9FOERBODdGMzRB NTUwRDAwNDdFRUMwMzlBMjBDODQ0MUYwNjZFQzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRThEQTg3RjM0QTU1MEQwMDQ3RUVDMDM5QTIwQzg0NDFGMDY2 RUM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjE0Njc2Y2QtZGUzOS00NjhhLWFk MjUtNjc1ZTFiOTEwZmFjLzAvRThEQTg3RjM0QTU1MEQwMDQ3RUVDMDM5QTIwQzg0 NDFGMDY2RUM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEuBamufVnqiX1WL1hi5PLtEfiYvSizFYq8j TmUWCU8We9qXO9ynlbqOfoFJW8uVdyGvXvZG+PyuBvS5hN61FvCwM5QWRAWHHDPb e9DAEa8hHCoGj+1WxeL3SZWCXffUEnEusANjb7xpC1pHIf6BmShMZcTzkLDnjMcw 2rkNvLmFd4yT1VcWmpQ2b/JFZSDHarpSpqZ5NddTM4wiYQ2FbhXTG8ya/5oZUJrK rPGNGGZIb94QpWCJimxY7Rzfg+ly+Dpn5A93Vy76qhCWJuzM5lfPLoTuzJSDFnvB ZofzIFNMTPfF3kNVcSxyCqikGA8n+aOEgqNgYAeRFKEJasv3lX0= -----END CERTIFICATE-----Generated at Wed Apr 30 13:46:31 2025 by rpki-client