$ rpki-client -vvf repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft File: E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft (raw, json) Hash identifier: RIybIA2iVVrdyaMbPd1yVaYq0GvwmteXf/wsa5n2t3s= Subject key identifier: 88:6F:E0:05:E2:CA:06:17:4E:6A:B0:FF:AD:4F:81:77:DE:7E:3D:9D Authority key identifier: E1:B7:08:FE:CC:3E:90:64:3F:33:B8:31:1E:29:F1:B4:6F:E9:2B:7F Certificate issuer: /CN=E1B708FECC3E90643F33B8311E29F1B46FE92B7F Certificate serial: 08B1A1F706B8D4BA1D3A44C6766DC3E7A43567D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft Manifest number: 0157 Signing time: Mon 28 Apr 2025 20:41:35 +0000 Manifest this update: Mon 28 Apr 2025 20:36:35 +0000 Manifest next update: Fri 02 May 2025 03:02:35 +0000 Files and hashes: 1: E1B708FECC3E90643F33B8311E29F1B46FE92B7F.crl (hash: 4sXXuTJLVIPAd+EuxTlY6xCKn+TDLmc+9TXwHn9A0kU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.crl rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:b1:a1:f7:06:b8:d4:ba:1d:3a:44:c6:76:6d:c3:e7:a4:35:67:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1B708FECC3E90643F33B8311E29F1B46FE92B7F Validity Not Before: Apr 28 20:36:35 2025 GMT Not After : May 2 03:02:35 2025 GMT Subject: CN=886FE005E2CA06174E6AB0FFAD4F8177DE7E3D9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:17:5f:9c:5d:3f:9a:85:7d:0a:3b:42:13:01: bd:9c:6e:30:06:84:d9:5b:15:02:89:e8:60:c7:57: 51:64:9c:43:30:e3:29:16:9f:93:0e:68:c3:5e:e7: 13:26:f5:93:3a:35:dc:4f:f1:09:24:f0:7b:b0:42: 95:db:4f:fb:81:49:40:67:ae:72:bc:ec:2e:13:3a: 5b:b8:95:3d:c2:24:a2:c0:5e:ed:20:23:37:b2:24: f2:8b:68:60:65:96:0f:d5:86:1a:cb:be:eb:c0:69: d8:73:7b:0e:88:ac:a0:5f:06:4f:50:6c:d8:a6:25: 6c:09:45:62:ad:b4:dc:73:bf:4f:99:f3:69:12:1e: 0b:50:70:06:24:07:40:bb:de:bc:07:1d:2e:87:b0: a8:b3:41:aa:5f:ce:96:d3:59:1a:8d:ab:68:81:02: 9f:cc:56:4d:5a:e1:e7:85:5d:ec:3a:a3:e6:9d:c1: aa:21:60:3e:ae:a7:77:ce:25:e9:84:3f:12:71:ba: 15:ff:37:97:77:c9:f1:08:89:23:8d:02:e8:5a:1f: 39:83:f6:75:5d:c1:33:6e:1a:cf:b7:f5:db:60:91: b8:19:0c:5d:fb:17:24:98:c9:14:59:10:b1:ed:f1: 67:18:fe:c3:e4:7a:6a:d2:f8:7c:4c:29:1b:22:ac: 53:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:6F:E0:05:E2:CA:06:17:4E:6A:B0:FF:AD:4F:81:77:DE:7E:3D:9D X509v3 Authority Key Identifier: keyid:E1:B7:08:FE:CC:3E:90:64:3F:33:B8:31:1E:29:F1:B4:6F:E9:2B:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:62:1e:f0:10:7d:d8:77:c3:65:ea:23:07:e7:10:e4:a0:8f: b0:51:a4:17:c6:b6:6f:1c:c0:a9:55:79:ef:3c:7f:1e:8e:c3: 49:cc:90:08:96:fe:3e:49:cb:b2:78:44:b3:8b:85:35:a0:fb: 2a:e3:2f:49:e2:4a:55:6d:1c:92:03:0e:2e:6b:f3:b3:85:12: 06:ac:30:22:aa:31:b4:cb:93:1e:d6:04:94:45:0e:0d:db:30: 72:e2:4c:8e:c3:b8:bf:cc:eb:50:58:82:62:c0:96:ae:ad:6a: 2c:4e:2b:8f:c1:36:0e:f0:40:0b:45:e2:45:fd:71:08:fe:9e: 79:1d:7f:d0:08:30:21:c2:bc:91:52:c8:38:51:4b:cf:d5:d7: e4:05:9a:bf:92:77:63:06:a9:03:4c:c6:74:a8:d7:ae:5f:1d: ee:09:0f:d5:4d:23:99:e4:ae:6c:43:74:4e:e7:9b:11:d4:1b: 4f:ab:45:f9:a5:70:f0:39:0f:d5:75:6c:3c:88:10:3b:5f:04: 33:1e:99:ec:78:a7:68:69:ed:d4:2c:8c:c8:43:a3:0c:73:69: 9a:8e:b0:63:da:38:eb:8c:2d:72:39:1f:db:c1:79:77:4f:ca: 62:eb:f0:5b:6d:4e:10:9b:69:5c:52:49:6b:9e:9f:61:ec:d9: 6b:c4:f0:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCLGh9wa41LodOkTGdm3D56Q1Z9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFCNzA4RkVDQzNFOTA2NDNGMzNCODMxMUUyOUYxQjQ2 RkU5MkI3RjAeFw0yNTA0MjgyMDM2MzVaFw0yNTA1MDIwMzAyMzVaMDMxMTAvBgNV BAMTKDg4NkZFMDA1RTJDQTA2MTc0RTZBQjBGRkFENEY4MTc3REU3RTNEOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnF1+cXT+ahX0KO0ITAb2cbjAG hNlbFQKJ6GDHV1FknEMw4ykWn5MOaMNe5xMm9ZM6NdxP8Qkk8HuwQpXbT/uBSUBn rnK87C4TOlu4lT3CJKLAXu0gIzeyJPKLaGBllg/VhhrLvuvAadhzew6IrKBfBk9Q bNimJWwJRWKttNxzv0+Z82kSHgtQcAYkB0C73rwHHS6HsKizQapfzpbTWRqNq2iB Ap/MVk1a4eeFXew6o+adwaohYD6up3fOJemEPxJxuhX/N5d3yfEIiSONAuhaHzmD 9nVdwTNuGs+39dtgkbgZDF37FySYyRRZELHt8WcY/sPkemrS+HxMKRsirFMJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiG/gBeLKBhdOarD/rU+Bd95+PZ0wHwYDVR0j BBgwFoAU4bcI/sw+kGQ/M7gxHinxtG/pK38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZjRkMWMzNi00YTMxLTQ4NTctOWUzNi0wZGRmM2Q2OTFlYjUvMC9FMUI3MDhGRUND M0U5MDY0M0YzM0I4MzExRTI5RjFCNDZGRTkyQjdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTFCNzA4RkVDQzNFOTA2NDNGMzNCODMxMUUyOUYxQjQ2RkU5 MkI3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmY0ZDFjMzYtNGEzMS00ODU3LTll MzYtMGRkZjNkNjkxZWI1LzAvRTFCNzA4RkVDQzNFOTA2NDNGMzNCODMxMUUyOUYx QjQ2RkU5MkI3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM1iHvAQfdh3w2XqIwfnEOSgj7BRpBfGtm8c wKlVee88fx6Ow0nMkAiW/j5Jy7J4RLOLhTWg+yrjL0niSlVtHJIDDi5r87OFEgas MCKqMbTLkx7WBJRFDg3bMHLiTI7DuL/M61BYgmLAlq6taixOK4/BNg7wQAtF4kX9 cQj+nnkdf9AIMCHCvJFSyDhRS8/V1+QFmr+Sd2MGqQNMxnSo165fHe4JD9VNI5nk rmxDdE7nmxHUG0+rRfmlcPA5D9V1bDyIEDtfBDMemex4p2hp7dQsjMhDowxzaZqO sGPaOOuMLXI5H9vBeXdPymLr8FttThCbaVxSSWuen2Hs2WvE8MI= -----END CERTIFICATE-----Generated at Tue Apr 29 14:33:57 2025 by rpki-client