$ rpki-client -vvf repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.mft File: 1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.mft (raw, json) Hash identifier: AJ6sKazwZWS836JoSWp8U3ja5KQvK3HzgeHVEisUuT0= Subject key identifier: 42:47:3C:73:A8:8F:7D:C2:E5:00:46:9D:5F:65:4D:6D:90:BC:7F:2F Authority key identifier: 1E:EA:71:B4:C7:0A:47:D5:3B:E3:20:4F:E2:C4:8C:EF:92:7E:C7:31 Certificate issuer: /CN=1EEA71B4C70A47D53BE3204FE2C48CEF927EC731 Certificate serial: 22883C87A855ECF6B748B6CCD693B0BF1F6D233F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.mft Manifest number: 0150 Signing time: Sun 20 Jul 2025 04:32:00 +0000 Manifest this update: Sun 20 Jul 2025 04:27:00 +0000 Manifest next update: Wed 23 Jul 2025 10:14:00 +0000 Files and hashes: 1: 1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.crl (hash: 9kxaBzDv9HJWujPk64Fvl0JIHR7mbT/+YfsCmh3UW2w=) 2: 3130332e31342e37342e302f32342d3234203d3e20313334363332.roa (hash: kRl6IfQghVcIhK14CpOe+4+3tl4P/DD5zma96SwY1Qw=) 3: 3130332e31342e37352e302f32342d3234203d3e20313334363332.roa (hash: d03ba4w3/cMHa6YrFwbQZXYz0UgEChS2sqo8pZVU9h0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.crl rsync://repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 10:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:88:3c:87:a8:55:ec:f6:b7:48:b6:cc:d6:93:b0:bf:1f:6d:23:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EEA71B4C70A47D53BE3204FE2C48CEF927EC731 Validity Not Before: Jul 20 04:27:00 2025 GMT Not After : Jul 23 10:14:00 2025 GMT Subject: CN=42473C73A88F7DC2E500469D5F654D6D90BC7F2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:be:65:a3:c6:40:46:b6:90:a2:e3:cd:c0:0a: f3:31:43:f6:2c:68:9e:62:43:71:1c:90:af:20:9e: 55:27:9d:8c:25:f5:fa:4a:88:8d:bc:61:6c:a9:51: 2e:b8:90:d9:ab:fd:4d:25:07:8f:6d:51:7b:e4:27: c8:d9:ca:a1:1b:d2:01:85:33:7c:aa:59:5f:6b:f3: d1:e2:d7:e3:fa:b3:97:9c:03:c9:1f:3e:62:a2:39: 63:30:b5:d8:26:e8:69:9f:19:91:45:42:24:8f:22: 20:ae:98:a1:02:35:43:2c:42:08:c3:63:60:c9:01: 44:c8:d7:59:65:b7:a8:b8:2a:f0:57:a9:25:c8:e8: aa:f6:09:c2:0e:92:cf:ad:de:d3:a0:35:58:6d:a2: c5:8e:1f:54:d2:dc:bf:bb:5d:ca:b6:e3:1a:d2:ba: fe:29:b8:81:58:47:a6:88:5a:fd:56:12:8c:47:86: 57:2e:2a:fb:93:28:91:e5:08:df:36:55:cf:e4:93: b6:63:d7:5e:b4:e3:c8:41:77:b1:5f:c2:21:cf:b5: 55:f7:9a:f8:46:51:48:5c:ca:eb:dd:09:07:ee:5b: 7e:a9:ca:4e:81:29:78:a8:ae:4e:0a:d8:14:f6:8d: 48:9d:aa:22:db:4f:39:02:fa:05:f5:c6:04:5d:ff: 2e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:47:3C:73:A8:8F:7D:C2:E5:00:46:9D:5F:65:4D:6D:90:BC:7F:2F X509v3 Authority Key Identifier: keyid:1E:EA:71:B4:C7:0A:47:D5:3B:E3:20:4F:E2:C4:8C:EF:92:7E:C7:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:50:06:fd:45:34:b3:98:bc:38:05:23:b9:ef:9a:13:f9:13: 5a:84:de:00:c6:ff:33:ab:e2:fb:59:87:27:76:3e:e3:96:28: 46:6d:f2:35:9b:bc:fd:1c:f3:21:eb:88:3f:68:58:bb:c2:a0: e5:30:dc:00:fd:b3:c2:ca:1c:bf:33:5e:b2:67:12:0f:f7:88: 72:96:f0:0c:e1:fa:a8:fc:63:cd:35:cb:16:b8:b6:85:f8:1d: ca:cb:7b:6c:29:e0:bd:2b:ec:df:74:42:35:cb:d5:14:51:88: 08:d2:5c:2a:09:0c:01:ff:58:ed:1f:4d:42:12:09:c2:bc:db: c5:92:fc:8a:3e:3e:61:38:f7:48:1a:21:4d:8f:87:a8:ff:43: 82:6a:01:61:01:5e:53:78:87:f2:f2:2d:3a:1a:88:fe:c3:1d: 91:cb:8c:33:8d:d7:a4:42:15:66:7a:0b:68:01:eb:fe:cd:c9: 13:40:c5:40:24:67:f2:b4:1c:de:58:20:ee:cc:25:9d:c4:bf: 9a:f0:bc:01:e3:63:e6:d7:c4:9b:ae:40:bf:55:c2:b3:fb:04: 54:7d:00:1f:ea:ce:8f:be:11:54:57:b6:1b:77:e5:28:a3:32: f0:1b:c9:49:9f:58:ee:77:9c:50:1c:d1:67:b2:56:68:82:bf: 1b:89:36:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIog8h6hV7Pa3SLbM1pOwvx9tIz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVFQTcxQjRDNzBBNDdENTNCRTMyMDRGRTJDNDhDRUY5 MjdFQzczMTAeFw0yNTA3MjAwNDI3MDBaFw0yNTA3MjMxMDE0MDBaMDMxMTAvBgNV BAMTKDQyNDczQzczQTg4RjdEQzJFNTAwNDY5RDVGNjU0RDZEOTBCQzdGMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQvmWjxkBGtpCi483ACvMxQ/Ys aJ5iQ3EckK8gnlUnnYwl9fpKiI28YWypUS64kNmr/U0lB49tUXvkJ8jZyqEb0gGF M3yqWV9r89Hi1+P6s5ecA8kfPmKiOWMwtdgm6GmfGZFFQiSPIiCumKECNUMsQgjD Y2DJAUTI11llt6i4KvBXqSXI6Kr2CcIOks+t3tOgNVhtosWOH1TS3L+7Xcq24xrS uv4puIFYR6aIWv1WEoxHhlcuKvuTKJHlCN82Vc/kk7Zj116048hBd7FfwiHPtVX3 mvhGUUhcyuvdCQfuW36pyk6BKXiork4K2BT2jUidqiLbTzkC+gX1xgRd/y49AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQkc8c6iPfcLlAEadX2VNbZC8fy8wHwYDVR0j BBgwFoAUHupxtMcKR9U74yBP4sSM75J+xzEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MDAwZTIzZS1mNDRhLTRjZmMtYmY1Ni1kOTlhMDkyZDczMTQvMC8xRUVBNzFCNEM3 MEE0N0Q1M0JFMzIwNEZFMkM0OENFRjkyN0VDNzMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUVFQTcxQjRDNzBBNDdENTNCRTMyMDRGRTJDNDhDRUY5MjdF QzczMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTAwMGUyM2UtZjQ0YS00Y2ZjLWJm NTYtZDk5YTA5MmQ3MzE0LzAvMUVFQTcxQjRDNzBBNDdENTNCRTMyMDRGRTJDNDhD RUY5MjdFQzczMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABtQBv1FNLOYvDgFI7nvmhP5E1qE3gDG/zOr 4vtZhyd2PuOWKEZt8jWbvP0c8yHriD9oWLvCoOUw3AD9s8LKHL8zXrJnEg/3iHKW 8Azh+qj8Y801yxa4toX4HcrLe2wp4L0r7N90QjXL1RRRiAjSXCoJDAH/WO0fTUIS CcK828WS/Io+PmE490gaIU2Ph6j/Q4JqAWEBXlN4h/LyLToaiP7DHZHLjDON16RC FWZ6C2gB6/7NyRNAxUAkZ/K0HN5YIO7MJZ3Ev5rwvAHjY+bXxJuuQL9VwrP7BFR9 AB/qzo++EVRXtht35SijMvAbyUmfWO53nFAc0WeyVmiCvxuJNsQ= -----END CERTIFICATE-----Generated at Sun Jul 20 21:55:29 2025 by rpki-client