$ rpki-client -vvf repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft File: ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft (raw, json) Hash identifier: f3SPqszx32nMG59aT5f2rNCozbEIn65x6LkQ5Tf1xB0= Subject key identifier: 57:E8:9E:85:B5:9A:C7:31:9E:73:36:79:11:71:C1:CE:11:F7:80:37 Authority key identifier: ED:7A:48:EA:D1:0D:1F:E9:7C:7E:F2:3A:A6:EA:2A:D6:55:BF:B0:AF Certificate issuer: /CN=ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF Certificate serial: 5245016F4BED43313D94563A4832CF8A6C834A2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft Manifest number: 01FE Signing time: Sun 15 Jun 2025 05:31:30 +0000 Manifest this update: Sun 15 Jun 2025 05:26:30 +0000 Manifest next update: Wed 18 Jun 2025 12:00:30 +0000 Files and hashes: 1: ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.crl (hash: boQKVLXaHFDDHfQuM45Mh7lBTJgc8RmK39sYE58NCjQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.crl rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:45:01:6f:4b:ed:43:31:3d:94:56:3a:48:32:cf:8a:6c:83:4a:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF Validity Not Before: Jun 15 05:26:30 2025 GMT Not After : Jun 18 12:00:30 2025 GMT Subject: CN=57E89E85B59AC7319E7336791171C1CE11F78037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:09:61:d8:57:a5:78:cf:67:f8:69:8d:fa:8a: cc:58:9f:7d:6f:61:18:00:31:ac:a8:9c:4e:c2:36: c2:f8:bd:74:f2:17:41:43:f2:cd:e3:b2:24:08:67: e7:c3:7b:8f:e7:e5:1e:cf:c9:96:5b:7b:c2:8d:e4: 75:1e:bd:21:fe:73:32:ff:8d:09:9f:b1:d1:26:07: 09:45:8c:c7:8f:a5:a9:82:a9:8e:5e:fa:9c:04:49: 98:43:a5:b5:61:ef:f3:b9:a2:5d:e4:db:b6:da:ce: 04:78:f9:07:32:73:ab:e9:3a:f1:2d:79:9b:a6:60: 73:7c:7b:ec:1f:64:3a:58:fa:95:4e:f8:78:80:b5: 6e:ad:d3:81:68:a3:8a:59:73:fe:c2:e0:5c:43:d0: df:2c:e1:99:57:00:39:2c:69:07:54:91:c4:f3:fe: be:61:21:c0:bf:1c:14:77:cb:a6:b0:c9:6e:f1:76: 20:1a:38:02:c0:92:cc:90:28:74:95:95:23:72:28: 9d:f1:f2:ea:24:91:f8:81:e1:d3:46:d2:5b:4b:04: 0e:1a:9b:a1:22:d2:74:a1:2a:11:2c:28:12:e3:ed: a9:20:20:38:f7:80:5e:69:f4:b7:ad:b2:fe:b9:f0: 66:8f:2d:28:b2:7d:ca:11:a5:0b:9b:23:c3:b9:39: 13:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E8:9E:85:B5:9A:C7:31:9E:73:36:79:11:71:C1:CE:11:F7:80:37 X509v3 Authority Key Identifier: keyid:ED:7A:48:EA:D1:0D:1F:E9:7C:7E:F2:3A:A6:EA:2A:D6:55:BF:B0:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:91:24:5b:cd:72:0e:cc:fa:3a:6b:e3:e0:41:76:1c:06:ff: ad:71:4b:f6:5f:bc:82:d1:f7:a9:3c:d4:92:b9:67:ef:05:4b: 32:c9:bb:44:72:38:bf:84:4c:db:27:8e:f3:cf:6f:df:3f:ca: 37:e5:59:df:2c:44:f5:84:99:68:a2:81:c7:15:48:f1:c0:a6: 20:dc:1d:47:07:4e:1b:db:90:b6:58:7d:54:28:55:53:68:88: 09:a3:67:83:f3:2f:98:e4:bb:60:d5:c4:87:56:c0:ab:cc:52: 38:bc:ca:c3:3b:85:03:f9:68:4c:89:1f:82:20:dd:ac:1a:ca: d7:bd:b8:51:5b:71:b1:ef:89:46:25:16:be:39:34:d3:40:20: 32:a7:ab:45:b9:e7:42:dd:a0:6f:b2:1d:85:0b:5a:b5:9e:27: 08:60:30:e3:84:5c:96:9a:b1:65:4a:58:f2:a5:1a:ed:65:d7: 65:4e:b2:1e:bf:36:9c:dc:ae:51:c4:0e:02:e4:db:42:5e:d8: 71:19:b3:02:2e:96:33:88:a8:25:1a:0f:af:b6:d6:d1:b8:24: 49:5a:29:2d:2e:40:ff:81:41:df:9e:39:1b:5f:66:9e:23:12: 1b:e9:43:e5:9a:76:b9:f8:de:16:af:41:e7:55:1d:02:5e:28: 7c:62:66:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUkUBb0vtQzE9lFY6SDLPimyDSi8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ3QTQ4RUFEMTBEMUZFOTdDN0VGMjNBQTZFQTJBRDY1 NUJGQjBBRjAeFw0yNTA2MTUwNTI2MzBaFw0yNTA2MTgxMjAwMzBaMDMxMTAvBgNV BAMTKDU3RTg5RTg1QjU5QUM3MzE5RTczMzY3OTExNzFDMUNFMTFGNzgwMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOCWHYV6V4z2f4aY36isxYn31v YRgAMayonE7CNsL4vXTyF0FD8s3jsiQIZ+fDe4/n5R7PyZZbe8KN5HUevSH+czL/ jQmfsdEmBwlFjMePpamCqY5e+pwESZhDpbVh7/O5ol3k27bazgR4+Qcyc6vpOvEt eZumYHN8e+wfZDpY+pVO+HiAtW6t04Foo4pZc/7C4FxD0N8s4ZlXADksaQdUkcTz /r5hIcC/HBR3y6awyW7xdiAaOALAksyQKHSVlSNyKJ3x8uokkfiB4dNG0ltLBA4a m6Ei0nShKhEsKBLj7akgIDj3gF5p9Letsv658GaPLSiyfcoRpQubI8O5ORPzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV+iehbWaxzGeczZ5EXHBzhH3gDcwHwYDVR0j BBgwFoAU7XpI6tENH+l8fvI6puoq1lW/sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDMzZTM0NC1lODE5LTQ0MzgtYjhjYS0xZjU4YzNkNTI3Y2IvMC9FRDdBNDhFQUQx MEQxRkU5N0M3RUYyM0FBNkVBMkFENjU1QkZCMEFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUQ3QTQ4RUFEMTBEMUZFOTdDN0VGMjNBQTZFQTJBRDY1NUJG QjBBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQzM2UzNDQtZTgxOS00NDM4LWI4 Y2EtMWY1OGMzZDUyN2NiLzAvRUQ3QTQ4RUFEMTBEMUZFOTdDN0VGMjNBQTZFQTJB RDY1NUJGQjBBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALKRJFvNcg7M+jpr4+BBdhwG/61xS/ZfvILR 96k81JK5Z+8FSzLJu0RyOL+ETNsnjvPPb98/yjflWd8sRPWEmWiigccVSPHApiDc HUcHThvbkLZYfVQoVVNoiAmjZ4PzL5jku2DVxIdWwKvMUji8ysM7hQP5aEyJH4Ig 3awayte9uFFbcbHviUYlFr45NNNAIDKnq0W550LdoG+yHYULWrWeJwhgMOOEXJaa sWVKWPKlGu1l12VOsh6/NpzcrlHEDgLk20Je2HEZswIuljOIqCUaD6+21tG4JEla KS0uQP+BQd+eORtfZp4jEhvpQ+Wadrn43havQedVHQJeKHxiZr8= -----END CERTIFICATE-----Generated at Sun Jun 15 15:23:26 2025 by rpki-client