$ rpki-client -vvf repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft File: EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft (raw, json) Hash identifier: kDiX/KLcbUH36WNUKWrs+zoUaJbfGysx66wCQcysM4I= Subject key identifier: 92:D2:43:1C:08:C5:D1:F9:D9:0D:F2:8C:8B:0A:3B:16:58:FF:20:80 Authority key identifier: EE:72:DE:38:4F:9A:B7:FA:D6:C3:B2:86:3A:5D:B1:28:1E:5E:DC:A1 Certificate issuer: /CN=EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1 Certificate serial: 23658FBDFF9A6DA544081DB9BC4662E59D59146B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft Manifest number: 0101 Signing time: Mon 16 Jun 2025 02:10:39 +0000 Manifest this update: Mon 16 Jun 2025 02:05:39 +0000 Manifest next update: Thu 19 Jun 2025 13:19:39 +0000 Files and hashes: 1: EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl (hash: alSWSIYuCNBuFOgK+6Xeyi1/ZJrbWy2W0bmGwEN3NK4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 13:19:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:65:8f:bd:ff:9a:6d:a5:44:08:1d:b9:bc:46:62:e5:9d:59:14:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1 Validity Not Before: Jun 16 02:05:39 2025 GMT Not After : Jun 19 13:19:39 2025 GMT Subject: CN=92D2431C08C5D1F9D90DF28C8B0A3B1658FF2080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:36:ee:f4:a9:1f:b8:4a:16:2e:ce:57:bb:eb: 23:46:db:f2:86:55:f5:13:cf:33:f7:0f:ca:cf:33: 39:5f:f9:96:21:68:57:8b:b5:87:1d:b2:2d:df:94: a5:2a:ea:d9:c4:e0:36:93:61:e5:df:e2:b7:bf:8b: de:61:d3:3d:4e:b8:32:6e:47:22:c1:d9:1a:a7:1f: a1:ab:a7:fe:6b:63:18:fd:be:cb:bf:22:4b:f3:cf: 5c:b6:9d:2c:1f:4d:ab:e6:76:fc:24:0c:9f:c9:e2: 53:26:2e:76:2d:87:20:fb:05:06:fe:b1:ba:c0:87: 85:f5:93:b1:06:90:fb:3e:9a:d9:34:2c:e7:bd:22: 0c:de:c4:fb:e5:82:6d:db:5d:88:16:e0:4a:da:2a: d3:58:f3:a4:f1:15:66:85:68:c0:9c:d8:d1:44:12: c7:0d:93:c4:ca:6a:b8:cb:ff:bf:e5:68:b3:81:ae: ab:89:36:17:0f:98:d4:97:99:c4:c9:3f:b7:83:26: 85:f8:7e:8f:03:57:86:e5:4b:b6:3e:90:e7:5c:f1: d7:a1:65:dd:37:3c:8a:de:46:ad:38:41:d1:2a:3d: 66:c8:79:01:a3:3d:89:a7:a1:ef:05:4b:22:a4:79: e5:57:1c:9a:58:c6:fa:38:7b:4b:72:14:08:e4:00: ae:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D2:43:1C:08:C5:D1:F9:D9:0D:F2:8C:8B:0A:3B:16:58:FF:20:80 X509v3 Authority Key Identifier: keyid:EE:72:DE:38:4F:9A:B7:FA:D6:C3:B2:86:3A:5D:B1:28:1E:5E:DC:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:4f:da:8a:cc:3c:4a:00:93:63:49:c1:f0:e0:3a:ad:c5:97: a5:53:dd:f7:77:c5:40:16:82:83:9a:63:7c:f3:fc:6b:d1:03: ae:b3:da:5a:23:3e:02:3a:e1:3b:26:9b:29:48:f1:84:a1:8b: 3e:03:a3:e1:68:93:92:ea:90:1f:59:60:33:2c:12:8b:d3:83: 8b:0b:6d:89:34:cb:25:97:7f:b2:24:ca:3a:1a:21:cf:cf:47: 4e:5e:bd:48:fe:72:c9:dc:5c:62:f5:7a:13:6e:4d:7d:0c:0b: 4e:05:16:f2:23:c1:bb:61:c6:f9:f0:0e:81:b5:81:ae:ed:26: c6:5a:df:28:e6:61:4f:07:8e:bd:c4:22:c4:00:7b:1b:67:34: 2b:30:d1:63:bd:af:31:91:09:d4:97:32:8f:12:78:33:c2:fb: 11:2f:cf:8e:7e:2f:1f:b5:20:70:06:4b:3a:46:3e:2f:62:c3: 02:ea:11:95:0b:7c:1c:37:72:77:c5:78:cf:a3:33:7c:38:aa: 76:23:00:ed:cd:0b:9b:d2:d7:45:6c:aa:70:f4:fb:16:2e:6f: e5:90:9b:db:44:c8:1c:85:64:3b:86:d8:a9:53:19:77:55:19: a7:32:e0:9a:4d:9b:5d:5f:f3:86:21:b4:6e:f7:f9:19:58:94: 92:5e:a8:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI2WPvf+abaVECB25vEZi5Z1ZFGswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIxMjgx RTVFRENBMTAeFw0yNTA2MTYwMjA1MzlaFw0yNTA2MTkxMzE5MzlaMDMxMTAvBgNV BAMTKDkyRDI0MzFDMDhDNUQxRjlEOTBERjI4QzhCMEEzQjE2NThGRjIwODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSNu70qR+4ShYuzle76yNG2/KG VfUTzzP3D8rPMzlf+ZYhaFeLtYcdsi3flKUq6tnE4DaTYeXf4re/i95h0z1OuDJu RyLB2RqnH6Grp/5rYxj9vsu/Ikvzz1y2nSwfTavmdvwkDJ/J4lMmLnYthyD7BQb+ sbrAh4X1k7EGkPs+mtk0LOe9IgzexPvlgm3bXYgW4EraKtNY86TxFWaFaMCc2NFE EscNk8TKarjL/7/laLOBrquJNhcPmNSXmcTJP7eDJoX4fo8DV4blS7Y+kOdc8deh Zd03PIreRq04QdEqPWbIeQGjPYmnoe8FSyKkeeVXHJpYxvo4e0tyFAjkAK5pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUktJDHAjF0fnZDfKMiwo7Flj/IIAwHwYDVR0j BBgwFoAU7nLeOE+at/rWw7KGOl2xKB5e3KEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NTdlNjg3OC02Y2IyLTRhNWYtYjU1My1iY2ViMmM5NWM3NmMvMC9FRTcyREUzODRG OUFCN0ZBRDZDM0IyODYzQTVEQjEyODFFNUVEQ0ExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIxMjgxRTVF RENBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzU3ZTY4NzgtNmNiMi00YTVmLWI1 NTMtYmNlYjJjOTVjNzZjLzAvRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIx MjgxRTVFRENBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHFP2orMPEoAk2NJwfDgOq3Fl6VT3fd3xUAW goOaY3zz/GvRA66z2lojPgI64TsmmylI8YShiz4Do+Fok5LqkB9ZYDMsEovTg4sL bYk0yyWXf7IkyjoaIc/PR05evUj+csncXGL1ehNuTX0MC04FFvIjwbthxvnwDoG1 ga7tJsZa3yjmYU8Hjr3EIsQAextnNCsw0WO9rzGRCdSXMo8SeDPC+xEvz45+Lx+1 IHAGSzpGPi9iwwLqEZULfBw3cnfFeM+jM3w4qnYjAO3NC5vS10VsqnD0+xYub+WQ m9tEyByFZDuG2KlTGXdVGacy4JpNm11f84YhtG73+RlYlJJeqNE= -----END CERTIFICATE-----Generated at Wed Jun 18 12:32:58 2025 by rpki-client