$ rpki-client -vvf repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft File: E74A2346929DE84143E5DF0DD921764C285B01A2.mft (raw, json) Hash identifier: uARwMUE2DIRj1KfxB7KJWwtgr6wGa2S/+Tl91cAthfI= Subject key identifier: 7C:34:65:49:45:19:58:37:E0:CE:B4:6F:28:6E:1B:FB:53:7E:30:58 Authority key identifier: E7:4A:23:46:92:9D:E8:41:43:E5:DF:0D:D9:21:76:4C:28:5B:01:A2 Certificate issuer: /CN=E74A2346929DE84143E5DF0DD921764C285B01A2 Certificate serial: 12C3A00635CBF888C808F5F686C29375647C3DAA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft Manifest number: 8C Signing time: Mon 16 Jun 2025 05:11:15 +0000 Manifest this update: Mon 16 Jun 2025 05:06:15 +0000 Manifest next update: Thu 19 Jun 2025 10:25:15 +0000 Files and hashes: 1: E74A2346929DE84143E5DF0DD921764C285B01A2.crl (hash: hrirGl+Zm4fMDZvtlY+pT2IZD8s3HgzBDXns39oe+6Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.crl rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 10:25:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:c3:a0:06:35:cb:f8:88:c8:08:f5:f6:86:c2:93:75:64:7c:3d:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E74A2346929DE84143E5DF0DD921764C285B01A2 Validity Not Before: Jun 16 05:06:15 2025 GMT Not After : Jun 19 10:25:15 2025 GMT Subject: CN=7C34654945195837E0CEB46F286E1BFB537E3058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:24:8a:69:d1:2e:94:b9:df:d3:1d:d4:ff:b5: dd:33:fe:77:22:92:65:bb:24:ea:91:03:a5:74:f4: e7:94:0d:4e:c6:0c:2b:26:ae:1e:b8:c9:aa:2e:0d: 64:7e:9f:79:30:64:88:72:65:14:97:a8:c3:25:3b: ba:2a:f3:d2:24:92:98:c7:0f:bf:b0:7a:51:ee:a7: 79:b0:98:4a:64:13:89:ec:1a:e9:da:db:d8:03:be: 81:fe:42:f5:3c:f9:b3:6d:b3:f4:86:66:3a:30:86: 36:6b:31:e1:9e:6c:2c:ae:f7:d3:4a:3e:e3:87:16: 46:17:7a:07:43:37:71:da:39:5b:5b:79:94:af:be: 03:1e:ea:db:28:25:fe:f8:42:af:b7:dc:05:1d:81: c1:30:71:8a:17:92:5c:25:44:f1:f0:87:01:6c:26: d8:fc:36:31:26:da:b3:06:6c:0b:c5:1f:17:2f:44: 94:c2:4b:64:f9:4e:b2:e3:a7:71:64:0c:fd:46:52: e8:01:ac:48:a8:f4:01:6d:cd:10:85:76:1e:8f:a3: a8:06:ec:eb:ff:d2:e8:89:e0:d1:62:50:f5:60:40: 77:12:ff:84:93:9f:31:19:fd:e4:bb:89:71:a4:53: 14:9e:8b:3b:8e:63:c0:ad:17:8e:85:a9:6c:d3:24: b9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:34:65:49:45:19:58:37:E0:CE:B4:6F:28:6E:1B:FB:53:7E:30:58 X509v3 Authority Key Identifier: keyid:E7:4A:23:46:92:9D:E8:41:43:E5:DF:0D:D9:21:76:4C:28:5B:01:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:29:c8:bf:57:b4:af:26:75:00:d8:2c:e9:b4:53:28:64:1a: 27:31:7e:c5:84:58:4b:01:91:a1:18:17:21:02:57:5d:fd:8c: 0f:3c:c1:2a:e2:fb:7e:a5:3e:04:ea:cb:aa:bf:ef:f5:b2:72: 88:5a:14:52:77:2d:33:00:b1:b3:2f:a9:62:61:fd:a7:5b:59: f8:49:8e:c3:3f:97:a2:a5:86:fa:70:5e:87:ec:b1:63:2d:77: 88:2a:36:6c:8d:cf:4a:ef:0b:44:f9:64:b7:a7:3a:c7:5b:39: a5:fd:2a:15:09:4b:83:c6:84:db:b7:bc:3b:4b:ff:75:60:bd: 95:4b:90:68:b3:7f:49:c5:23:2f:3e:db:7b:d9:72:a7:2f:44: 4d:07:1f:25:49:dd:d5:54:d9:bf:8b:5d:b7:8d:ee:8d:0d:20: 7a:ca:01:2d:08:09:cc:5d:8b:68:27:9c:40:e4:08:9b:2c:44: 89:fd:0c:c7:cb:c6:25:b8:e3:ff:f7:91:6c:2f:24:e9:44:c4: b5:bf:e4:d5:50:b6:d7:9f:d1:35:1a:a4:46:db:36:12:c4:a2: f2:5f:8b:52:c8:2b:ac:ff:0f:46:cb:6c:9a:c4:16:8c:05:b3: 48:45:a6:7f:b0:70:d8:26:66:a5:89:07:70:f1:0c:be:a7:b8: b7:4e:38:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEsOgBjXL+IjICPX2hsKTdWR8PaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTc0QTIzNDY5MjlERTg0MTQzRTVERjBERDkyMTc2NEMy ODVCMDFBMjAeFw0yNTA2MTYwNTA2MTVaFw0yNTA2MTkxMDI1MTVaMDMxMTAvBgNV BAMTKDdDMzQ2NTQ5NDUxOTU4MzdFMENFQjQ2RjI4NkUxQkZCNTM3RTMwNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlJIpp0S6Uud/THdT/td0z/nci kmW7JOqRA6V09OeUDU7GDCsmrh64yaouDWR+n3kwZIhyZRSXqMMlO7oq89IkkpjH D7+welHup3mwmEpkE4nsGuna29gDvoH+QvU8+bNts/SGZjowhjZrMeGebCyu99NK PuOHFkYXegdDN3HaOVtbeZSvvgMe6tsoJf74Qq+33AUdgcEwcYoXklwlRPHwhwFs Jtj8NjEm2rMGbAvFHxcvRJTCS2T5TrLjp3FkDP1GUugBrEio9AFtzRCFdh6Po6gG 7Ov/0uiJ4NFiUPVgQHcS/4STnzEZ/eS7iXGkUxSeizuOY8CtF46FqWzTJLk9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfDRlSUUZWDfgzrRvKG4b+1N+MFgwHwYDVR0j BBgwFoAU50ojRpKd6EFD5d8N2SF2TChbAaIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2RlNTAzNS04NGUxLTQ0YzYtOWNmOS00ZWEwYmJhYTA5M2YvMC9FNzRBMjM0Njky OURFODQxNDNFNURGMEREOTIxNzY0QzI4NUIwMUEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTc0QTIzNDY5MjlERTg0MTQzRTVERjBERDkyMTc2NEMyODVC MDFBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNkZTUwMzUtODRlMS00NGM2LTlj ZjktNGVhMGJiYWEwOTNmLzAvRTc0QTIzNDY5MjlERTg0MTQzRTVERjBERDkyMTc2 NEMyODVCMDFBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADUpyL9XtK8mdQDYLOm0UyhkGicxfsWEWEsB kaEYFyECV139jA88wSri+36lPgTqy6q/7/WycohaFFJ3LTMAsbMvqWJh/adbWfhJ jsM/l6KlhvpwXofssWMtd4gqNmyNz0rvC0T5ZLenOsdbOaX9KhUJS4PGhNu3vDtL /3VgvZVLkGizf0nFIy8+23vZcqcvRE0HHyVJ3dVU2b+LXbeN7o0NIHrKAS0ICcxd i2gnnEDkCJssRIn9DMfLxiW44//3kWwvJOlExLW/5NVQttef0TUapEbbNhLEovJf i1LIK6z/D0bLbJrEFowFs0hFpn+wcNgmZqWJB3DxDL6nuLdOOHc= -----END CERTIFICATE-----Generated at Tue Jun 17 11:10:25 2025 by rpki-client