$ rpki-client -vvf repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft File: E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft (raw, json) Hash identifier: SDDJlORU0je0pXNriSyUr503PfiW3I+zwmqDUzQgITQ= Subject key identifier: 8F:27:13:C4:B2:1A:61:0C:70:D3:EA:2D:DA:C8:02:61:C4:D8:82:84 Authority key identifier: E0:B3:E0:49:B0:31:30:8B:37:78:BB:68:5F:D3:D1:49:FA:69:DD:3B Certificate issuer: /CN=E0B3E049B031308B3778BB685FD3D149FA69DD3B Certificate serial: 04CACCD193922CF6A6DBD20A07848F519BE482F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B3E049B031308B3778BB685FD3D149FA69DD3B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft Manifest number: 0102 Signing time: Thu 19 Jun 2025 05:42:00 +0000 Manifest this update: Thu 19 Jun 2025 05:37:00 +0000 Manifest next update: Sun 22 Jun 2025 11:32:00 +0000 Files and hashes: 1: E0B3E049B031308B3778BB685FD3D149FA69DD3B.crl (hash: E22TcJFsmL+XgBBwjTTAcUBCDd2AD7bLPtZ0N1efay4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.crl rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B3E049B031308B3778BB685FD3D149FA69DD3B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 11:32:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:ca:cc:d1:93:92:2c:f6:a6:db:d2:0a:07:84:8f:51:9b:e4:82:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0B3E049B031308B3778BB685FD3D149FA69DD3B Validity Not Before: Jun 19 05:37:00 2025 GMT Not After : Jun 22 11:32:00 2025 GMT Subject: CN=8F2713C4B21A610C70D3EA2DDAC80261C4D88284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:15:13:77:e2:33:cf:97:42:ba:6f:b1:2e:c7: 63:f8:85:c2:f5:1a:13:1c:0e:5b:6c:92:68:10:73: d7:e7:84:f9:63:c0:ed:34:13:e6:e3:22:2f:5b:32: 87:eb:1f:02:75:da:bd:ea:2b:d2:92:23:58:f2:be: 7d:56:f8:15:e5:5b:ea:cc:cc:bf:05:a8:3a:8d:b9: ab:eb:72:3e:b8:5d:9d:63:b7:f9:c0:52:67:99:2e: 5f:e2:ed:e5:d6:dd:79:ee:dd:41:4c:b0:bf:d1:3c: 05:59:38:66:97:1a:91:b7:95:8e:27:ba:26:42:64: 1c:ab:f4:12:e1:f7:f4:4b:e6:3e:62:13:bd:f6:0c: 0b:01:74:c9:70:54:59:44:d0:c7:d6:48:a9:84:ed: 59:ba:45:b4:79:a6:bd:32:39:df:0c:01:7d:b3:9f: 71:76:aa:6c:f5:2e:09:17:68:95:70:e3:c0:9e:6b: ae:34:82:68:4a:36:de:93:ac:ce:f9:52:86:55:a5: 23:80:6c:b8:b3:a5:b4:6b:bc:c4:62:de:31:e6:e9: 51:14:b9:0c:74:9b:40:9b:98:4c:82:4f:00:64:b9: 98:de:e9:a2:6e:d4:3f:31:1d:54:d1:6a:24:ff:2c: 20:fc:7d:54:f6:64:80:89:55:61:ac:b8:58:fb:a5: 10:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:27:13:C4:B2:1A:61:0C:70:D3:EA:2D:DA:C8:02:61:C4:D8:82:84 X509v3 Authority Key Identifier: keyid:E0:B3:E0:49:B0:31:30:8B:37:78:BB:68:5F:D3:D1:49:FA:69:DD:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B3E049B031308B3778BB685FD3D149FA69DD3B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:9e:50:99:4e:da:fd:e4:45:ac:5b:4f:03:ed:76:d4:ca:b2: 96:cb:38:cd:5a:02:94:98:d0:2f:45:bf:f3:00:26:9b:a8:fd: b7:07:ea:ad:d8:c6:ff:bf:48:0f:0c:26:e5:74:a1:18:bd:cc: 42:ba:d3:e2:96:14:32:da:49:01:de:a3:d3:c7:4e:9c:95:15: 82:c7:e1:76:89:b1:94:49:f5:54:87:4d:0b:d8:7e:b6:8b:56: 68:69:6d:cf:63:a4:dc:d1:dd:a3:88:51:97:04:5b:79:a8:c0: 08:21:60:55:ff:21:29:b2:dc:e9:9e:f0:6d:c9:94:ec:a2:e9: 66:72:e0:32:76:d5:a6:f2:1d:8a:79:a2:4a:cf:48:c9:01:39: b3:97:7c:9a:77:5e:95:b4:9d:9c:30:f5:23:ca:00:0f:e7:55: 4d:a4:ce:c7:3d:3f:c6:5d:b2:be:6f:80:20:fa:7d:cf:61:ec: e9:6d:6c:9d:36:99:65:66:c3:0a:22:c4:fb:c3:d4:d4:5c:9a: 50:ad:99:ca:53:8c:a7:65:75:a1:d0:2e:98:38:34:99:60:86: 9b:f1:8c:4b:4e:89:7a:7d:ee:80:41:64:77:8a:0d:ec:dd:f0: 82:35:55:a0:a5:1c:48:7a:7d:35:a8:cc:42:36:48:c8:e2:44: c2:10:10:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBMrM0ZOSLPam29IKB4SPUZvkgvMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBCM0UwNDlCMDMxMzA4QjM3NzhCQjY4NUZEM0QxNDlG QTY5REQzQjAeFw0yNTA2MTkwNTM3MDBaFw0yNTA2MjIxMTMyMDBaMDMxMTAvBgNV BAMTKDhGMjcxM0M0QjIxQTYxMEM3MEQzRUEyRERBQzgwMjYxQzREODgyODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjFRN34jPPl0K6b7Eux2P4hcL1 GhMcDltskmgQc9fnhPljwO00E+bjIi9bMofrHwJ12r3qK9KSI1jyvn1W+BXlW+rM zL8FqDqNuavrcj64XZ1jt/nAUmeZLl/i7eXW3Xnu3UFMsL/RPAVZOGaXGpG3lY4n uiZCZByr9BLh9/RL5j5iE732DAsBdMlwVFlE0MfWSKmE7Vm6RbR5pr0yOd8MAX2z n3F2qmz1LgkXaJVw48Cea640gmhKNt6TrM75UoZVpSOAbLizpbRrvMRi3jHm6VEU uQx0m0CbmEyCTwBkuZje6aJu1D8xHVTRaiT/LCD8fVT2ZICJVWGsuFj7pRCZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjycTxLIaYQxw0+ot2sgCYcTYgoQwHwYDVR0j BBgwFoAU4LPgSbAxMIs3eLtoX9PRSfpp3TswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MWM3ZTgzMy02YzU0LTRlMGItODMxYy0xYzFhNzEwY2U4ZTMvMC9FMEIzRTA0OUIw MzEzMDhCMzc3OEJCNjg1RkQzRDE0OUZBNjlERDNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTBCM0UwNDlCMDMxMzA4QjM3NzhCQjY4NUZEM0QxNDlGQTY5 REQzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjFjN2U4MzMtNmM1NC00ZTBiLTgz MWMtMWMxYTcxMGNlOGUzLzAvRTBCM0UwNDlCMDMxMzA4QjM3NzhCQjY4NUZEM0Qx NDlGQTY5REQzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAImeUJlO2v3kRaxbTwPtdtTKspbLOM1aApSY 0C9Fv/MAJpuo/bcH6q3Yxv+/SA8MJuV0oRi9zEK60+KWFDLaSQHeo9PHTpyVFYLH 4XaJsZRJ9VSHTQvYfraLVmhpbc9jpNzR3aOIUZcEW3mowAghYFX/ISmy3Ome8G3J lOyi6WZy4DJ21abyHYp5okrPSMkBObOXfJp3XpW0nZww9SPKAA/nVU2kzsc9P8Zd sr5vgCD6fc9h7OltbJ02mWVmwwoixPvD1NRcmlCtmcpTjKdldaHQLpg4NJlghpvx jEtOiXp97oBBZHeKDezd8II1VaClHEh6fTWozEI2SMjiRMIQEPQ= -----END CERTIFICATE-----Generated at Sat Jun 21 07:38:04 2025 by rpki-client