$ rpki-client -vvf repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft File: E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft (raw, json) Hash identifier: 4DYd+HqcF7pL16+cMR9anSEjbeu0rYARLZFDyF4w4sg= Subject key identifier: DF:0B:16:F1:BF:EA:2D:5D:E1:B1:C8:A4:18:A0:80:95:66:61:59:3C Authority key identifier: E6:FE:A7:CE:7F:6F:A5:EA:E0:5E:BB:DF:D8:6F:D5:3E:84:FA:75:A8 Certificate issuer: /CN=E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8 Certificate serial: 7E61AC436177EFFB9C9DE1CB53A8348DB8830AF3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft Manifest number: 9D Signing time: Sat 19 Jul 2025 20:10:43 +0000 Manifest this update: Sat 19 Jul 2025 20:05:43 +0000 Manifest next update: Tue 22 Jul 2025 20:43:43 +0000 Files and hashes: 1: E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl (hash: wR46blC/laN0nKJPSxuhcJBcq3VA0sOhN+RgZSRAFW4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 20:43:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:61:ac:43:61:77:ef:fb:9c:9d:e1:cb:53:a8:34:8d:b8:83:0a:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8 Validity Not Before: Jul 19 20:05:43 2025 GMT Not After : Jul 22 20:43:43 2025 GMT Subject: CN=DF0B16F1BFEA2D5DE1B1C8A418A080956661593C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f1:27:a7:9c:2b:73:3c:ae:e7:2a:74:a0:9c: c7:a9:17:3a:69:ed:fb:7b:47:12:f8:0a:51:fc:f3: 5b:e6:9d:0a:e5:33:b0:82:3e:ee:f0:22:d1:66:78: 2c:1c:ab:6c:5d:e2:b5:34:28:90:5c:2a:df:35:cd: 2a:36:53:36:b8:3a:1e:72:ff:d7:dc:f2:fa:46:85: c0:0b:08:02:5d:26:e2:26:61:ee:01:e4:9a:7e:86: ec:44:4f:35:45:0d:b7:06:aa:d3:29:f4:83:db:fd: 97:6f:70:1c:05:f0:8a:25:65:ff:b5:3b:be:78:9e: 16:0a:7b:40:23:84:1e:c1:84:06:de:7a:f2:69:ec: 2b:9e:6b:5d:2e:de:f7:1d:3d:26:94:7a:75:5a:15: d6:6d:5e:57:87:11:fc:31:78:9a:59:94:07:08:8a: 34:0b:23:a7:78:99:58:df:7c:14:32:1d:f3:c2:e3: 6d:d8:b3:ea:6d:b1:8d:58:0c:a7:78:6a:84:b0:f6: 1e:09:30:16:b2:62:a6:ed:68:3a:b1:fe:ee:70:dc: 40:6d:ab:6f:fa:02:8b:c7:df:9f:78:2c:35:cc:bc: 0d:3e:5f:8d:ff:aa:67:6e:2e:f1:d5:97:d6:a0:76: e8:07:82:10:6f:44:4a:e3:24:0a:17:ea:b9:3c:47: 7e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:0B:16:F1:BF:EA:2D:5D:E1:B1:C8:A4:18:A0:80:95:66:61:59:3C X509v3 Authority Key Identifier: keyid:E6:FE:A7:CE:7F:6F:A5:EA:E0:5E:BB:DF:D8:6F:D5:3E:84:FA:75:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:2b:c6:0c:21:a0:f5:7d:48:58:f1:d7:40:f2:62:6b:4d:01: 60:a9:82:e1:99:45:e7:34:8a:fe:15:f6:3b:5d:07:90:78:ac: a0:27:ee:78:29:3b:d8:7c:a5:cf:da:aa:49:92:95:76:bf:60: ae:5e:17:14:5f:71:f3:81:b2:f2:56:bb:67:b1:2e:6e:88:6b: 81:ca:4b:f4:73:3e:44:81:13:23:d3:94:81:ee:92:78:d1:51: ed:5c:0a:3b:cc:69:72:a8:af:be:53:66:c5:07:bc:7e:b7:ff: c3:de:04:2f:9f:9b:38:1e:2f:d7:ef:90:96:98:03:a0:9a:db: b6:49:14:96:42:a9:da:a8:5b:d2:86:84:e4:8d:7c:84:27:98: 4e:03:3e:da:01:dc:e6:d3:e7:fc:d3:da:23:79:2a:22:dc:17: 48:4b:b4:2c:5d:1d:eb:9b:91:e0:cd:81:15:6a:1a:b5:42:13: 75:ec:b0:e6:4f:ec:84:31:28:56:41:2c:e8:57:1d:16:15:d8: 8e:76:9c:39:69:3d:aa:ac:c8:36:d5:3b:64:de:ec:67:6d:85: 59:c2:8e:20:86:52:fa:9d:66:fb:bf:5f:72:66:16:4a:f3:c8: 03:02:b2:e7:eb:ed:8b:13:e8:7a:69:3f:8b:f4:c3:aa:c5:05: e7:aa:1a:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfmGsQ2F37/ucneHLU6g0jbiDCvMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTZGRUE3Q0U3RjZGQTVFQUUwNUVCQkRGRDg2RkQ1M0U4 NEZBNzVBODAeFw0yNTA3MTkyMDA1NDNaFw0yNTA3MjIyMDQzNDNaMDMxMTAvBgNV BAMTKERGMEIxNkYxQkZFQTJENURFMUIxQzhBNDE4QTA4MDk1NjY2MTU5M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg8SennCtzPK7nKnSgnMepFzpp 7ft7RxL4ClH881vmnQrlM7CCPu7wItFmeCwcq2xd4rU0KJBcKt81zSo2Uza4Oh5y /9fc8vpGhcALCAJdJuImYe4B5Jp+huxETzVFDbcGqtMp9IPb/ZdvcBwF8IolZf+1 O754nhYKe0AjhB7BhAbeevJp7Cuea10u3vcdPSaUenVaFdZtXleHEfwxeJpZlAcI ijQLI6d4mVjffBQyHfPC423Ys+ptsY1YDKd4aoSw9h4JMBayYqbtaDqx/u5w3EBt q2/6AovH3594LDXMvA0+X43/qmduLvHVl9agdugHghBvRErjJAoX6rk8R367AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3wsW8b/qLV3hscikGKCAlWZhWTwwHwYDVR0j BBgwFoAU5v6nzn9vpergXrvf2G/VPoT6dagwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTMxNTlmMi0wY2YwLTQzYzYtYjI4Mi1jNjlmYmExM2ExNGEvMC9FNkZFQTdDRTdG NkZBNUVBRTA1RUJCREZEODZGRDUzRTg0RkE3NUE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTZGRUE3Q0U3RjZGQTVFQUUwNUVCQkRGRDg2RkQ1M0U4NEZB NzVBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWUzMTU5ZjItMGNmMC00M2M2LWIy ODItYzY5ZmJhMTNhMTRhLzAvRTZGRUE3Q0U3RjZGQTVFQUUwNUVCQkRGRDg2RkQ1 M0U4NEZBNzVBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEwrxgwhoPV9SFjx10DyYmtNAWCpguGZRec0 iv4V9jtdB5B4rKAn7ngpO9h8pc/aqkmSlXa/YK5eFxRfcfOBsvJWu2exLm6Ia4HK S/RzPkSBEyPTlIHuknjRUe1cCjvMaXKor75TZsUHvH63/8PeBC+fmzgeL9fvkJaY A6Ca27ZJFJZCqdqoW9KGhOSNfIQnmE4DPtoB3ObT5/zT2iN5KiLcF0hLtCxdHeub keDNgRVqGrVCE3XssOZP7IQxKFZBLOhXHRYV2I52nDlpPaqsyDbVO2Te7GdthVnC jiCGUvqdZvu/X3JmFkrzyAMCsufr7YsT6HppP4v0w6rFBeeqGp0= -----END CERTIFICATE-----Generated at Mon Jul 21 10:31:02 2025 by rpki-client