$ rpki-client -vvf repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft File: 01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft (raw, json) Hash identifier: KPiZPbph8TF27FV9NAgTcYwS8EjqMzS7hBZ8n6jKMEE= Subject key identifier: 41:F3:BF:73:82:5C:24:DD:D4:A3:F2:A9:D4:30:68:42:F1:7E:4B:2A Authority key identifier: 01:E8:7E:DC:BE:90:1A:9A:E8:6C:F5:E4:1C:BA:8B:24:83:E9:B6:AC Certificate issuer: /CN=01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC Certificate serial: 3E4DE536D3FDEE9581A84CCC838EC5EB6D506B23 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft Manifest number: 12 Signing time: Mon 16 Jun 2025 04:42:11 +0000 Manifest this update: Mon 16 Jun 2025 04:37:11 +0000 Manifest next update: Thu 19 Jun 2025 07:49:11 +0000 Files and hashes: 1: 01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.crl (hash: q8vK7QMDphP5cpkdruEW52hzSb8o/L8yKnRiAbIxR1s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.crl rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 07:49:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:4d:e5:36:d3:fd:ee:95:81:a8:4c:cc:83:8e:c5:eb:6d:50:6b:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC Validity Not Before: Jun 16 04:37:11 2025 GMT Not After : Jun 19 07:49:11 2025 GMT Subject: CN=41F3BF73825C24DDD4A3F2A9D4306842F17E4B2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:15:4d:a8:64:2e:b6:20:b0:d6:2b:87:62:da: 24:03:57:e0:f3:d1:3e:35:5e:e0:b7:9a:60:4c:74: 5f:b7:4a:57:7b:e2:be:c4:7b:87:96:90:60:8a:03: 88:c0:46:72:8b:b9:7a:f6:20:85:5d:b6:57:5d:0e: c3:a2:8d:22:d6:12:fb:ab:17:8f:61:77:6d:dd:93: e3:7f:00:11:55:1e:f5:b4:6a:b0:e2:9d:f3:59:c3: 0c:5c:62:e3:1f:c5:b2:87:f5:64:c2:14:ba:0a:f7: 29:fe:da:50:6f:2f:5d:e1:83:62:ef:e2:b5:a7:a3: 9d:ae:20:8c:23:33:ab:d1:2a:1b:ba:69:d8:a0:2b: 7e:a5:a6:a5:8f:2c:4c:a1:23:14:ae:d3:ca:1f:40: 14:74:db:cd:11:f0:62:24:13:da:82:4a:6b:e9:dd: 5b:5f:73:46:16:b5:85:5e:d4:9c:32:4e:6d:75:5c: ed:5d:03:38:20:d2:0c:f9:65:50:f6:b2:66:bc:f7: be:51:0b:b5:f9:65:55:71:a7:d6:33:6d:f1:57:52: 8a:a5:ca:cc:a7:b5:2b:68:70:97:97:e7:b7:f5:d9: a7:ee:5a:d6:48:4d:67:a5:97:4f:b6:86:4e:95:0a: 60:83:32:7a:78:0e:ba:a4:76:9b:03:1c:f2:59:8b: 68:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F3:BF:73:82:5C:24:DD:D4:A3:F2:A9:D4:30:68:42:F1:7E:4B:2A X509v3 Authority Key Identifier: keyid:01:E8:7E:DC:BE:90:1A:9A:E8:6C:F5:E4:1C:BA:8B:24:83:E9:B6:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:ca:b7:d3:ec:fa:da:bd:1f:10:81:ae:f7:46:ab:81:44:74: 31:ee:28:6b:17:c3:fa:dc:aa:47:7b:44:d6:a6:d1:89:c3:a2: df:56:4f:6a:57:06:6a:aa:16:0f:ee:c4:7f:e9:0c:bf:81:05: e8:28:f2:da:ea:0f:73:0f:fe:97:8e:ad:95:4d:1c:21:d4:fc: 53:eb:ec:73:4b:b5:68:4e:60:cb:26:5e:28:54:00:b3:20:31: 08:31:35:a3:cc:ba:40:c6:54:3b:c8:04:a9:19:29:10:28:48: ee:32:20:a7:35:f4:9d:36:f5:78:f2:b8:37:c0:12:49:3d:2d: 20:91:21:cb:c7:d0:f4:e3:5a:55:cb:8d:dc:56:56:09:1f:fa: a8:73:72:f2:5e:e9:b3:93:bc:f1:e5:f1:56:45:54:63:c3:52: 62:a9:ae:a6:0e:70:26:a0:85:0d:27:23:ae:9e:29:94:1a:2e: dd:e0:cc:ea:6b:10:3b:bf:5e:4f:6d:6b:aa:29:11:bc:62:fe: 08:80:ff:ec:08:1a:83:6d:6b:62:31:db:29:a0:67:2e:93:d1: ef:96:02:f9:83:24:a1:39:b0:99:17:a5:18:23:b0:5e:5f:2f: 4a:e6:2f:b5:f8:c0:fe:55:a2:b3:a1:ac:dc:fb:b7:34:24:06: d6:da:b0:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPk3lNtP97pWBqEzMg47F621QayMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFFODdFRENCRTkwMUE5QUU4NkNGNUU0MUNCQThCMjQ4 M0U5QjZBQzAeFw0yNTA2MTYwNDM3MTFaFw0yNTA2MTkwNzQ5MTFaMDMxMTAvBgNV BAMTKDQxRjNCRjczODI1QzI0RERENEEzRjJBOUQ0MzA2ODQyRjE3RTRCMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWFU2oZC62ILDWK4di2iQDV+Dz 0T41XuC3mmBMdF+3Sld74r7Ee4eWkGCKA4jARnKLuXr2IIVdtlddDsOijSLWEvur F49hd23dk+N/ABFVHvW0arDinfNZwwxcYuMfxbKH9WTCFLoK9yn+2lBvL13hg2Lv 4rWno52uIIwjM6vRKhu6adigK36lpqWPLEyhIxSu08ofQBR0280R8GIkE9qCSmvp 3Vtfc0YWtYVe1JwyTm11XO1dAzgg0gz5ZVD2sma8975RC7X5ZVVxp9YzbfFXUoql ysyntStocJeX57f12afuWtZITWell0+2hk6VCmCDMnp4DrqkdpsDHPJZi2ibAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQfO/c4JcJN3Uo/Kp1DBoQvF+SyowHwYDVR0j BBgwFoAUAeh+3L6QGprobPXkHLqLJIPptqwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTZiNTk5ZC03ZmJiLTQ0OTgtODZlZi0xODY0NWFlOThlM2QvMC8wMUU4N0VEQ0JF OTAxQTlBRTg2Q0Y1RTQxQ0JBOEIyNDgzRTlCNkFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDFFODdFRENCRTkwMUE5QUU4NkNGNUU0MUNCQThCMjQ4M0U5 QjZBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODE2YjU5OWQtN2ZiYi00NDk4LTg2 ZWYtMTg2NDVhZTk4ZTNkLzAvMDFFODdFRENCRTkwMUE5QUU4NkNGNUU0MUNCQThC MjQ4M0U5QjZBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJrKt9Ps+tq9HxCBrvdGq4FEdDHuKGsXw/rc qkd7RNam0YnDot9WT2pXBmqqFg/uxH/pDL+BBego8trqD3MP/peOrZVNHCHU/FPr 7HNLtWhOYMsmXihUALMgMQgxNaPMukDGVDvIBKkZKRAoSO4yIKc19J029XjyuDfA Ekk9LSCRIcvH0PTjWlXLjdxWVgkf+qhzcvJe6bOTvPHl8VZFVGPDUmKprqYOcCag hQ0nI66eKZQaLt3gzOprEDu/Xk9ta6opEbxi/giA/+wIGoNta2Ix2ymgZy6T0e+W AvmDJKE5sJkXpRgjsF5fL0rmL7X4wP5VorOhrNz7tzQkBtbasIE= -----END CERTIFICATE-----Generated at Tue Jun 17 06:57:57 2025 by rpki-client