$ rpki-client -vvf repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft File: E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft (raw, json) Hash identifier: Pgggi65yc8xNptafK0zC/mvc5CJ/l8kRcpSE5GfZxtY= Subject key identifier: 5A:14:7D:6E:63:EF:CD:C9:BD:8B:24:03:BA:DC:DA:C8:86:56:7F:BC Authority key identifier: E3:36:CD:49:5C:4F:48:0E:C4:FA:92:EB:0B:59:42:D9:8D:E4:B8:8C Certificate issuer: /CN=E336CD495C4F480EC4FA92EB0B5942D98DE4B88C Certificate serial: 643631F17D1B8FE7BCAF97A14FC5182B7B11A098 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft Manifest number: E2 Signing time: Sun 15 Jun 2025 12:01:59 +0000 Manifest this update: Sun 15 Jun 2025 11:56:59 +0000 Manifest next update: Wed 18 Jun 2025 20:04:59 +0000 Files and hashes: 1: E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl (hash: qhUCHUoeQ9cmztrEiayrq/YSVb9gVg//7nhsIB4DoD0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:36:31:f1:7d:1b:8f:e7:bc:af:97:a1:4f:c5:18:2b:7b:11:a0:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E336CD495C4F480EC4FA92EB0B5942D98DE4B88C Validity Not Before: Jun 15 11:56:59 2025 GMT Not After : Jun 18 20:04:59 2025 GMT Subject: CN=5A147D6E63EFCDC9BD8B2403BADCDAC886567FBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:42:ff:a1:37:07:56:a3:74:cd:50:22:e1:81: 04:40:34:da:fb:e2:35:9a:c5:e8:76:8e:0b:85:3d: 2d:07:90:15:16:86:e9:e6:32:02:9d:c0:48:77:e9: 83:e0:16:6d:10:73:4d:73:f6:92:2c:51:56:23:c0: 1b:8e:0f:be:ff:dc:a3:a9:3c:b3:20:c4:06:99:b6: b4:2f:64:ef:d7:17:e8:37:a3:b6:e6:8e:b5:57:d3: 38:0b:a0:11:e2:0a:79:68:f4:26:9d:c7:6d:dd:34: 16:c4:8a:56:79:30:5f:64:38:bc:12:ea:86:69:c7: 26:01:ab:b4:e3:38:d1:c0:43:d6:20:38:67:1d:f8: eb:79:25:21:54:91:13:d5:7b:90:60:54:ef:44:fa: 0b:ae:18:2c:a0:38:c5:ca:3f:1b:56:22:ce:5a:a2: 94:08:9a:81:1b:47:e2:02:80:1a:51:b7:cc:c9:84: 89:ca:d7:ba:5f:ea:0d:6d:11:a7:e4:76:d8:65:b7: e2:81:47:94:14:12:85:ac:e2:53:6c:2c:19:cb:fa: 4c:bf:5e:01:04:b8:d3:9f:80:3b:02:eb:90:85:68: 23:a3:7c:de:92:e5:d1:34:aa:ba:03:ae:08:2e:11: 82:30:05:d2:39:5a:a0:5c:be:4a:d4:7c:91:7c:90: 9d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:14:7D:6E:63:EF:CD:C9:BD:8B:24:03:BA:DC:DA:C8:86:56:7F:BC X509v3 Authority Key Identifier: keyid:E3:36:CD:49:5C:4F:48:0E:C4:FA:92:EB:0B:59:42:D9:8D:E4:B8:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:13:85:3c:b5:bb:68:42:d9:ef:f8:6e:ec:13:de:94:d7:3c: ae:55:65:6b:f8:20:6c:ed:20:72:83:3c:a6:f3:61:92:61:7e: 42:cf:11:16:47:94:0a:81:84:62:5f:05:11:e5:86:8b:19:9f: d3:e5:46:48:b8:cf:60:25:ac:82:28:06:b7:2b:8c:f6:5d:b4: a8:c7:30:e4:a3:fa:b6:ed:e9:ce:c3:a0:62:e6:1f:f9:61:e2: 1e:91:4d:eb:42:b9:c2:3b:66:54:23:14:40:92:81:81:1c:05: 3d:01:db:d6:3e:d2:61:b7:ba:b1:37:de:c2:45:6b:2d:e2:fb: 67:8e:d2:7d:c1:e9:23:9f:32:df:9c:1b:b0:be:0d:a7:87:40: f1:9f:09:b1:6f:15:89:c9:1d:90:9b:c3:0a:e9:49:1b:16:b9: 5b:d5:aa:76:2b:0a:27:cf:a2:bc:5c:e2:ec:d8:59:b4:96:fa: b9:dd:01:4b:07:4c:95:7a:1e:49:bc:36:3c:0f:33:a8:77:20: 7e:4e:e2:d4:18:cc:95:bc:c8:e2:84:b2:d7:00:3a:99:ad:29: 58:ca:c9:e7:c5:5c:18:97:ec:a4:7d:9f:9d:22:2b:0c:39:9f: 29:3d:c9:3e:ff:2b:b0:56:b4:79:73:94:a8:05:ed:d5:22:c5: 8f:81:9c:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZDYx8X0bj+e8r5ehT8UYK3sRoJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTMzNkNENDk1QzRGNDgwRUM0RkE5MkVCMEI1OTQyRDk4 REU0Qjg4QzAeFw0yNTA2MTUxMTU2NTlaFw0yNTA2MTgyMDA0NTlaMDMxMTAvBgNV BAMTKDVBMTQ3RDZFNjNFRkNEQzlCRDhCMjQwM0JBRENEQUM4ODY1NjdGQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Qv+hNwdWo3TNUCLhgQRANNr7 4jWaxeh2jguFPS0HkBUWhunmMgKdwEh36YPgFm0Qc01z9pIsUVYjwBuOD77/3KOp PLMgxAaZtrQvZO/XF+g3o7bmjrVX0zgLoBHiCnlo9Cadx23dNBbEilZ5MF9kOLwS 6oZpxyYBq7TjONHAQ9YgOGcd+Ot5JSFUkRPVe5BgVO9E+guuGCygOMXKPxtWIs5a opQImoEbR+ICgBpRt8zJhInK17pf6g1tEafkdthlt+KBR5QUEoWs4lNsLBnL+ky/ XgEEuNOfgDsC65CFaCOjfN6S5dE0qroDrgguEYIwBdI5WqBcvkrUfJF8kJ2nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWhR9bmPvzcm9iyQDutzayIZWf7wwHwYDVR0j BBgwFoAU4zbNSVxPSA7E+pLrC1lC2Y3kuIwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZjdiZDk0NC0wMTdhLTQzYTMtOTRmMy1mZjQ3YWYwMzg5ODAvMC9FMzM2Q0Q0OTVD NEY0ODBFQzRGQTkyRUIwQjU5NDJEOThERTRCODhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTMzNkNENDk1QzRGNDgwRUM0RkE5MkVCMEI1OTQyRDk4REU0 Qjg4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Y3YmQ5NDQtMDE3YS00M2EzLTk0 ZjMtZmY0N2FmMDM4OTgwLzAvRTMzNkNENDk1QzRGNDgwRUM0RkE5MkVCMEI1OTQy RDk4REU0Qjg4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACIThTy1u2hC2e/4buwT3pTXPK5VZWv4IGzt IHKDPKbzYZJhfkLPERZHlAqBhGJfBRHlhosZn9PlRki4z2AlrIIoBrcrjPZdtKjH MOSj+rbt6c7DoGLmH/lh4h6RTetCucI7ZlQjFECSgYEcBT0B29Y+0mG3urE33sJF ay3i+2eO0n3B6SOfMt+cG7C+DaeHQPGfCbFvFYnJHZCbwwrpSRsWuVvVqnYrCifP orxc4uzYWbSW+rndAUsHTJV6Hkm8NjwPM6h3IH5O4tQYzJW8yOKEstcAOpmtKVjK yefFXBiX7KR9n50iKww5nyk9yT7/K7BWtHlzlKgF7dUixY+BnHE= -----END CERTIFICATE-----Generated at Sun Jun 15 20:40:21 2025 by rpki-client