$ rpki-client -vvf repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft File: E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft (raw, json) Hash identifier: /9Re0ejzKpgpqNMFAeehSEoQ4oYvU0o2sLR0I3sD+no= Subject key identifier: 30:B5:CA:A5:F4:0D:05:E5:ED:25:99:4C:75:F3:BD:22:84:95:C6:0E Authority key identifier: E0:B3:E0:49:B0:31:30:8B:37:78:BB:68:5F:D3:D1:49:FA:69:DD:3B Certificate issuer: /CN=E0B3E049B031308B3778BB685FD3D149FA69DD3B Certificate serial: 78B6FD060099E08967B663A81122600432126356 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B3E049B031308B3778BB685FD3D149FA69DD3B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft Manifest number: EC Signing time: Thu 01 May 2025 04:52:04 +0000 Manifest this update: Thu 01 May 2025 04:47:04 +0000 Manifest next update: Sun 04 May 2025 11:10:04 +0000 Files and hashes: 1: E0B3E049B031308B3778BB685FD3D149FA69DD3B.crl (hash: svRUavtCHHk9be0RLgFkCCNjmmR6Y2lwmR5MDqQrQDI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.crl rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B3E049B031308B3778BB685FD3D149FA69DD3B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 11:10:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:b6:fd:06:00:99:e0:89:67:b6:63:a8:11:22:60:04:32:12:63:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0B3E049B031308B3778BB685FD3D149FA69DD3B Validity Not Before: May 1 04:47:04 2025 GMT Not After : May 4 11:10:04 2025 GMT Subject: CN=30B5CAA5F40D05E5ED25994C75F3BD228495C60E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1a:b9:11:b1:4c:ea:18:ee:f2:d7:dd:5e:be: cc:5b:cd:a6:69:a1:ff:df:18:d6:e8:a5:d5:3f:0b: 92:b8:c6:1c:bd:27:60:97:4d:87:58:6f:00:2f:b4: 32:3d:48:08:de:05:65:87:f4:7c:9f:4a:24:39:2b: 26:26:86:6a:e4:ba:a2:68:52:e7:1a:32:89:ed:b1: 94:5b:19:79:4d:d2:d5:42:5f:65:43:ab:c1:c9:6a: 55:b1:65:c2:78:25:13:83:4d:87:9f:bd:44:3f:fe: e9:88:72:c0:e0:69:7a:b6:eb:ca:f5:da:53:15:8c: f0:b9:57:82:a9:82:ff:1d:59:c5:21:2c:66:f6:1a: a3:19:6f:dc:17:ab:be:72:17:75:70:0a:45:76:c8: 8d:19:92:1e:ea:e8:67:8d:d1:46:bb:6e:ff:2c:46: 02:ce:0e:40:e1:34:bf:7d:3d:55:b9:41:43:bf:aa: ca:d3:9b:be:f9:66:c4:c0:4e:4a:ac:13:07:51:53: be:a1:80:cb:7a:9d:ee:a1:0b:aa:5b:79:cb:fa:01: d7:cc:2c:65:bf:f7:e1:91:40:69:a3:e9:80:98:b5: 46:75:88:ae:8e:81:80:21:50:f0:8a:f7:50:d4:d6: 13:13:96:d1:3a:50:6b:e7:f8:a6:02:7a:c8:e8:84: b8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:B5:CA:A5:F4:0D:05:E5:ED:25:99:4C:75:F3:BD:22:84:95:C6:0E X509v3 Authority Key Identifier: keyid:E0:B3:E0:49:B0:31:30:8B:37:78:BB:68:5F:D3:D1:49:FA:69:DD:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B3E049B031308B3778BB685FD3D149FA69DD3B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:35:ad:bf:05:3f:25:07:fa:01:0c:bf:c1:58:4a:15:98:e9: 20:96:d2:bb:99:b3:d5:c3:df:24:2e:81:90:c3:0e:70:9f:d0: 1b:e3:1e:c6:b0:b4:3a:d2:71:73:1d:a9:96:88:42:a2:bd:ef: 4b:d3:3c:f9:5a:3e:ed:d4:f4:42:b6:4f:af:c7:e5:e6:46:69: a8:4d:40:68:a5:ac:5b:c6:b8:5c:41:de:d8:56:81:03:65:c1: ee:64:f3:05:c2:4f:14:52:0c:74:0d:cc:c5:c1:02:db:3e:ef: 11:5a:c4:32:03:d5:f6:2c:90:24:01:4e:08:f5:14:97:be:c6: af:6e:a0:7a:09:74:01:a9:70:33:78:14:da:3a:90:db:83:9d: 67:9e:ca:34:f8:1b:42:28:10:25:dd:55:37:e8:0e:b6:a8:53: bd:65:be:a6:d6:65:80:03:c5:57:57:4c:25:80:6d:02:c4:24: e2:5b:58:a9:3d:da:c8:1c:78:e6:16:5c:33:15:7a:19:7c:2a: ee:ff:ee:cd:6d:28:bf:be:3e:b1:fb:06:ec:1d:9c:9e:1d:ba: 7a:2a:6f:1b:3f:c4:3f:65:40:04:d5:3d:97:ec:4b:55:59:cb: f7:e5:52:39:e1:54:b7:5f:7c:77:f3:11:06:ee:ec:30:76:f1: 5e:e2:e2:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeLb9BgCZ4IlntmOoESJgBDISY1YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBCM0UwNDlCMDMxMzA4QjM3NzhCQjY4NUZEM0QxNDlG QTY5REQzQjAeFw0yNTA1MDEwNDQ3MDRaFw0yNTA1MDQxMTEwMDRaMDMxMTAvBgNV BAMTKDMwQjVDQUE1RjQwRDA1RTVFRDI1OTk0Qzc1RjNCRDIyODQ5NUM2MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfGrkRsUzqGO7y191evsxbzaZp of/fGNbopdU/C5K4xhy9J2CXTYdYbwAvtDI9SAjeBWWH9HyfSiQ5KyYmhmrkuqJo UucaMontsZRbGXlN0tVCX2VDq8HJalWxZcJ4JRODTYefvUQ//umIcsDgaXq268r1 2lMVjPC5V4Kpgv8dWcUhLGb2GqMZb9wXq75yF3VwCkV2yI0Zkh7q6GeN0Ua7bv8s RgLODkDhNL99PVW5QUO/qsrTm775ZsTATkqsEwdRU76hgMt6ne6hC6pbecv6AdfM LGW/9+GRQGmj6YCYtUZ1iK6OgYAhUPCK91DU1hMTltE6UGvn+KYCesjohLhJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMLXKpfQNBeXtJZlMdfO9IoSVxg4wHwYDVR0j BBgwFoAU4LPgSbAxMIs3eLtoX9PRSfpp3TswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MWM3ZTgzMy02YzU0LTRlMGItODMxYy0xYzFhNzEwY2U4ZTMvMC9FMEIzRTA0OUIw MzEzMDhCMzc3OEJCNjg1RkQzRDE0OUZBNjlERDNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTBCM0UwNDlCMDMxMzA4QjM3NzhCQjY4NUZEM0QxNDlGQTY5 REQzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjFjN2U4MzMtNmM1NC00ZTBiLTgz MWMtMWMxYTcxMGNlOGUzLzAvRTBCM0UwNDlCMDMxMzA4QjM3NzhCQjY4NUZEM0Qx NDlGQTY5REQzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIM1rb8FPyUH+gEMv8FYShWY6SCW0ruZs9XD 3yQugZDDDnCf0BvjHsawtDrScXMdqZaIQqK970vTPPlaPu3U9EK2T6/H5eZGaahN QGilrFvGuFxB3thWgQNlwe5k8wXCTxRSDHQNzMXBAts+7xFaxDID1fYskCQBTgj1 FJe+xq9uoHoJdAGpcDN4FNo6kNuDnWeeyjT4G0IoECXdVTfoDraoU71lvqbWZYAD xVdXTCWAbQLEJOJbWKk92sgceOYWXDMVehl8Ku7/7s1tKL++PrH7BuwdnJ4dunoq bxs/xD9lQATVPZfsS1VZy/flUjnhVLdffHfzEQbu7DB28V7i4pk= -----END CERTIFICATE-----Generated at Thu May 1 20:55:28 2025 by rpki-client