$ rpki-client -vvf repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft File: E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft (raw, json) Hash identifier: jLM0Z+tW5xQWIwMXqRWKH7ml7PAOuHR/kzWUmRSbEwU= Subject key identifier: 00:4D:6E:80:F8:2F:00:63:04:E2:BF:F9:91:80:62:22:C3:85:AC:CE Authority key identifier: E1:41:ED:0B:8F:1B:83:AB:AC:98:B8:DB:75:8C:25:18:8C:6E:65:A5 Certificate issuer: /CN=E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5 Certificate serial: 41FDF7B9A4E03C2D719E2E57CEF5ECC25A687F29 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft Manifest number: C4 Signing time: Mon 16 Jun 2025 05:12:00 +0000 Manifest this update: Mon 16 Jun 2025 05:07:00 +0000 Manifest next update: Thu 19 Jun 2025 11:38:00 +0000 Files and hashes: 1: E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.crl (hash: powKA/mM9hIOW2okrKVW2nJgW52eiM+hoGhojO0LrDw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.crl rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 11:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:fd:f7:b9:a4:e0:3c:2d:71:9e:2e:57:ce:f5:ec:c2:5a:68:7f:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5 Validity Not Before: Jun 16 05:07:00 2025 GMT Not After : Jun 19 11:38:00 2025 GMT Subject: CN=004D6E80F82F006304E2BFF991806222C385ACCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:23:31:fa:95:25:93:cf:f2:97:50:40:d9:45: 6a:88:8a:20:1b:5c:a6:1b:07:41:f4:c0:a7:d0:d8: 2e:a3:93:50:72:b5:e9:43:8a:17:4a:6d:99:12:95: bf:75:98:6d:6f:e8:d5:dd:97:88:8a:22:70:bf:65: 13:d8:c9:22:2e:f5:b5:6a:3b:15:2e:5e:34:26:fe: 24:22:3b:88:39:39:93:ad:78:93:e8:36:ef:72:c1: 71:31:cd:41:79:25:1f:f3:74:ed:47:f5:7b:aa:b2: 9d:b5:3e:3c:bc:f6:3c:cc:54:3d:64:ca:0d:16:25: ac:c6:f7:cb:df:9c:ba:30:77:51:66:14:54:30:91: ee:dd:11:5d:84:ce:a1:9f:60:5f:ac:e0:dc:a8:b2: 64:ed:fa:13:71:c6:42:a9:09:91:48:74:9a:17:e3: ab:a7:de:96:e2:b7:fa:d7:2b:80:d4:6c:4f:80:0b: e9:fe:fc:3c:9a:ba:9f:20:5d:bb:f7:9b:76:04:dd: 2c:da:02:28:70:1a:33:3c:a5:95:bd:ea:37:55:47: db:6a:de:6d:36:af:37:be:d0:af:9c:d3:2d:c3:ab: 3d:60:d7:e1:67:51:d8:5b:a6:1f:a8:be:1a:a0:53: 57:58:f0:60:4e:d6:67:84:03:f0:0b:b8:d4:dd:11: 11:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:4D:6E:80:F8:2F:00:63:04:E2:BF:F9:91:80:62:22:C3:85:AC:CE X509v3 Authority Key Identifier: keyid:E1:41:ED:0B:8F:1B:83:AB:AC:98:B8:DB:75:8C:25:18:8C:6E:65:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:0f:a6:59:0a:2b:88:a5:9a:84:29:4e:bd:77:c1:13:ee:7b: e5:49:a3:43:d8:dd:a8:24:58:17:1d:16:c4:5e:1a:91:30:b0: db:5e:5e:ee:e0:67:ee:1f:12:9b:e8:97:a1:d4:39:cd:0a:15: b1:67:44:40:fd:ea:58:6f:6a:b0:98:0a:a2:b3:58:8f:b0:37: 6b:aa:7d:1a:a6:a8:2b:71:5b:f3:af:e9:9d:4f:37:2e:a5:95: 8d:12:b7:0f:0b:66:c8:21:b0:a2:ce:e5:7e:4f:cc:fd:35:18: 31:51:6a:1c:22:7f:c2:8a:34:f4:6a:b1:4a:a9:80:50:0a:13: 84:73:de:b6:90:e5:52:ec:7f:86:a4:86:3a:9a:8c:82:33:8a: f9:12:9a:a5:e5:4a:11:74:e4:5b:78:f6:58:75:a5:8b:ef:2b: 66:b2:ed:c7:07:f8:ab:4d:a5:da:62:53:97:a4:31:de:86:89: 1a:1c:c4:3a:d8:df:d2:93:3f:32:3c:f9:57:b2:31:cd:dc:ce: 44:da:ac:9c:a5:5b:61:87:df:4b:82:cd:0f:0e:05:f3:92:85: df:ae:1b:5d:6a:93:60:fe:ee:9d:06:6e:d8:51:dc:cb:e7:ac: 12:82:cb:89:59:c8:4c:52:a3:90:68:d2:07:6a:ec:db:19:e5: 06:32:f3:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQf33uaTgPC1xni5XzvXswlpofykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE0MUVEMEI4RjFCODNBQkFDOThCOERCNzU4QzI1MTg4 QzZFNjVBNTAeFw0yNTA2MTYwNTA3MDBaFw0yNTA2MTkxMTM4MDBaMDMxMTAvBgNV BAMTKDAwNEQ2RTgwRjgyRjAwNjMwNEUyQkZGOTkxODA2MjIyQzM4NUFDQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLIzH6lSWTz/KXUEDZRWqIiiAb XKYbB0H0wKfQ2C6jk1BytelDihdKbZkSlb91mG1v6NXdl4iKInC/ZRPYySIu9bVq OxUuXjQm/iQiO4g5OZOteJPoNu9ywXExzUF5JR/zdO1H9Xuqsp21Pjy89jzMVD1k yg0WJazG98vfnLowd1FmFFQwke7dEV2EzqGfYF+s4NyosmTt+hNxxkKpCZFIdJoX 46un3pbit/rXK4DUbE+AC+n+/Dyaup8gXbv3m3YE3SzaAihwGjM8pZW96jdVR9tq 3m02rze+0K+c0y3Dqz1g1+FnUdhbph+ovhqgU1dY8GBO1meEA/ALuNTdERG/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAE1ugPgvAGME4r/5kYBiIsOFrM4wHwYDVR0j BBgwFoAU4UHtC48bg6usmLjbdYwlGIxuZaUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzFlNjkzYy0yZmQ3LTRmNGMtYWY2My1mZWU2OTA3NmUwZDEvMC9FMTQxRUQwQjhG MUI4M0FCQUM5OEI4REI3NThDMjUxODhDNkU2NUE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTE0MUVEMEI4RjFCODNBQkFDOThCOERCNzU4QzI1MTg4QzZF NjVBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTMxZTY5M2MtMmZkNy00ZjRjLWFm NjMtZmVlNjkwNzZlMGQxLzAvRTE0MUVEMEI4RjFCODNBQkFDOThCOERCNzU4QzI1 MTg4QzZFNjVBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKgPplkKK4ilmoQpTr13wRPue+VJo0PY3agk WBcdFsReGpEwsNteXu7gZ+4fEpvol6HUOc0KFbFnRED96lhvarCYCqKzWI+wN2uq fRqmqCtxW/Ov6Z1PNy6llY0Stw8LZsghsKLO5X5PzP01GDFRahwif8KKNPRqsUqp gFAKE4Rz3raQ5VLsf4akhjqajIIzivkSmqXlShF05Ft49lh1pYvvK2ay7ccH+KtN pdpiU5ekMd6GiRocxDrY39KTPzI8+VeyMc3czkTarJylW2GH30uCzQ8OBfOShd+u G11qk2D+7p0GbthR3MvnrBKCy4lZyExSo5Bo0gdq7NsZ5QYy82w= -----END CERTIFICATE-----Generated at Mon Jun 16 20:47:08 2025 by rpki-client