$ rpki-client -vvf repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft File: E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft (raw, json) Hash identifier: FwtlbwwNIQH4PzmDHzqt0VT8F9LFxtgU9mMC9xOparA= Subject key identifier: D6:C0:D4:B8:47:FA:1E:3F:EF:F9:74:B9:E5:35:0E:AA:E3:98:C8:53 Authority key identifier: E8:DA:87:F3:4A:55:0D:00:47:EE:C0:39:A2:0C:84:41:F0:66:EC:5B Certificate issuer: /CN=E8DA87F34A550D0047EEC039A20C8441F066EC5B Certificate serial: 31B2DACF5EC48233400CD2999ACDD75AAFE7BD48 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E8DA87F34A550D0047EEC039A20C8441F066EC5B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft Manifest number: 02F6 Signing time: Mon 21 Jul 2025 10:20:36 +0000 Manifest this update: Mon 21 Jul 2025 10:15:36 +0000 Manifest next update: Thu 24 Jul 2025 11:13:36 +0000 Files and hashes: 1: E8DA87F34A550D0047EEC039A20C8441F066EC5B.crl (hash: /+gmlr7QUEpXQzUxxg24g3jAQnrgyAo2ijs8dfuwpjA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.crl rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E8DA87F34A550D0047EEC039A20C8441F066EC5B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 11:13:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:b2:da:cf:5e:c4:82:33:40:0c:d2:99:9a:cd:d7:5a:af:e7:bd:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E8DA87F34A550D0047EEC039A20C8441F066EC5B Validity Not Before: Jul 21 10:15:36 2025 GMT Not After : Jul 24 11:13:36 2025 GMT Subject: CN=D6C0D4B847FA1E3FEFF974B9E5350EAAE398C853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:30:1b:f7:da:08:1a:32:ed:6f:ab:3c:2d:38: cb:a3:28:45:81:22:e2:94:bf:48:e2:ff:1a:b8:cc: e3:23:61:31:9f:87:40:29:6c:1a:17:af:e7:31:fc: c6:27:27:5d:9a:9b:2f:45:5a:72:de:1f:9d:ed:28: d5:a4:84:da:67:be:0a:e1:e8:9d:96:f7:8d:c9:66: 9c:f8:3e:fb:63:75:16:91:ae:29:5f:96:64:39:12: a0:9d:b2:f6:77:56:cb:b2:4c:6d:ab:3e:18:d1:c1: 82:a2:63:d2:41:49:c4:59:64:62:4e:27:32:f2:4d: c6:c5:99:da:3c:bc:40:98:aa:04:1a:95:ae:91:21: 84:53:5c:fb:6c:96:b0:83:7f:94:d1:38:6a:3b:b3: e8:65:90:59:5f:ba:82:ba:84:df:1f:f7:19:47:fb: 45:49:b5:a8:c5:d5:68:c6:cd:de:47:15:a2:d4:03: 67:fd:82:75:cb:05:29:e0:37:d9:25:17:f8:5e:1a: d8:73:95:15:df:b8:e1:49:a7:9a:39:54:b4:19:a7: 13:ab:7e:c1:59:e8:b5:47:d2:91:a2:7d:04:25:9a: bd:f0:64:6b:e5:8d:7a:6d:7f:37:5b:7c:4e:cd:13: 0c:c4:cb:85:9a:1a:6d:23:53:28:ba:38:94:4c:9d: 5a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C0:D4:B8:47:FA:1E:3F:EF:F9:74:B9:E5:35:0E:AA:E3:98:C8:53 X509v3 Authority Key Identifier: keyid:E8:DA:87:F3:4A:55:0D:00:47:EE:C0:39:A2:0C:84:41:F0:66:EC:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E8DA87F34A550D0047EEC039A20C8441F066EC5B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:49:98:5a:ea:22:da:b1:45:06:46:52:de:4b:ca:f3:1e:b3: ce:ce:0a:53:74:ca:2e:17:e7:b0:5b:32:42:2b:c4:b3:7a:cb: ee:b2:7e:ef:d7:55:55:ae:4c:a2:8f:a8:14:79:e5:5c:cc:e0: e1:84:c1:ba:77:4a:31:52:0d:3a:6b:2c:f5:36:20:dd:ec:38: 2e:9a:a3:59:1c:64:1f:dc:d7:99:1f:12:2c:f7:e5:43:cf:f2: 67:ec:7a:9e:a2:90:e8:36:b8:d6:fb:8f:74:43:70:f0:12:72: 90:ad:85:68:2e:f6:58:85:10:38:e7:19:9a:7b:d0:28:64:e1: 59:f7:1d:bc:a1:ff:78:42:63:d5:20:88:1d:87:c4:53:05:fd: 38:98:e6:d4:72:fe:44:c6:f3:cb:45:4a:0e:b3:b8:64:3c:0a: 28:43:45:2c:d3:cf:da:f3:d4:2e:7b:06:e1:1d:7f:e6:53:d0: 1f:d0:60:38:b6:4d:ca:00:00:5f:ab:55:73:42:bf:f0:88:97: bd:29:de:cf:ca:1a:a6:2b:e7:67:bd:a9:e2:e5:48:3b:f6:39: 58:ca:7c:0d:7d:51:77:78:f4:cd:60:28:88:8e:6b:26:4d:ec: 0b:b3:c9:1e:b4:a9:12:f5:e3:16:ef:16:d2:8d:28:66:ec:3f: 75:1f:2a:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMbLaz17EgjNADNKZms3XWq/nvUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRThEQTg3RjM0QTU1MEQwMDQ3RUVDMDM5QTIwQzg0NDFG MDY2RUM1QjAeFw0yNTA3MjExMDE1MzZaFw0yNTA3MjQxMTEzMzZaMDMxMTAvBgNV BAMTKEQ2QzBENEI4NDdGQTFFM0ZFRkY5NzRCOUU1MzUwRUFBRTM5OEM4NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpMBv32ggaMu1vqzwtOMujKEWB IuKUv0ji/xq4zOMjYTGfh0ApbBoXr+cx/MYnJ12amy9FWnLeH53tKNWkhNpnvgrh 6J2W943JZpz4PvtjdRaRrilflmQ5EqCdsvZ3VsuyTG2rPhjRwYKiY9JBScRZZGJO JzLyTcbFmdo8vECYqgQala6RIYRTXPtslrCDf5TROGo7s+hlkFlfuoK6hN8f9xlH +0VJtajF1WjGzd5HFaLUA2f9gnXLBSngN9klF/heGthzlRXfuOFJp5o5VLQZpxOr fsFZ6LVH0pGifQQlmr3wZGvljXptfzdbfE7NEwzEy4WaGm0jUyi6OJRMnVoJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1sDUuEf6Hj/v+XS55TUOquOYyFMwHwYDVR0j BBgwFoAU6NqH80pVDQBH7sA5ogyEQfBm7FswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTQ2NzZjZC1kZTM5LTQ2OGEtYWQyNS02NzVlMWI5MTBmYWMvMC9FOERBODdGMzRB NTUwRDAwNDdFRUMwMzlBMjBDODQ0MUYwNjZFQzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRThEQTg3RjM0QTU1MEQwMDQ3RUVDMDM5QTIwQzg0NDFGMDY2 RUM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjE0Njc2Y2QtZGUzOS00NjhhLWFk MjUtNjc1ZTFiOTEwZmFjLzAvRThEQTg3RjM0QTU1MEQwMDQ3RUVDMDM5QTIwQzg0 NDFGMDY2RUM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKpJmFrqItqxRQZGUt5LyvMes87OClN0yi4X 57BbMkIrxLN6y+6yfu/XVVWuTKKPqBR55VzM4OGEwbp3SjFSDTprLPU2IN3sOC6a o1kcZB/c15kfEiz35UPP8mfsep6ikOg2uNb7j3RDcPAScpCthWgu9liFEDjnGZp7 0Chk4Vn3Hbyh/3hCY9UgiB2HxFMF/TiY5tRy/kTG88tFSg6zuGQ8CihDRSzTz9rz 1C57BuEdf+ZT0B/QYDi2TcoAAF+rVXNCv/CIl70p3s/KGqYr52e9qeLlSDv2OVjK fA19UXd49M1gKIiOayZN7AuzyR60qRL14xbvFtKNKGbsP3UfKic= -----END CERTIFICATE-----Generated at Tue Jul 22 05:13:14 2025 by rpki-client