$ rpki-client -vvf repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft File: E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft (raw, json) Hash identifier: kY/wGBcJBlQjzHWa2unMo/Fd2bKpegFToTlZtjAqCjw= Subject key identifier: 4E:66:9D:35:59:3C:5A:33:43:5B:16:AF:EE:15:6C:14:60:B9:FD:59 Authority key identifier: E1:B7:08:FE:CC:3E:90:64:3F:33:B8:31:1E:29:F1:B4:6F:E9:2B:7F Certificate issuer: /CN=E1B708FECC3E90643F33B8311E29F1B46FE92B7F Certificate serial: 78B2F3368A8AA2BE74A95719B94D28EC6756CB02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft Manifest number: 017B Signing time: Sat 19 Jul 2025 23:21:38 +0000 Manifest this update: Sat 19 Jul 2025 23:16:38 +0000 Manifest next update: Wed 23 Jul 2025 09:55:38 +0000 Files and hashes: 1: E1B708FECC3E90643F33B8311E29F1B46FE92B7F.crl (hash: gbB/QsoyhqEHYtoeNpJKhBeZGN2M0rrBKe9fvhxJrKo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.crl rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 09:55:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:b2:f3:36:8a:8a:a2:be:74:a9:57:19:b9:4d:28:ec:67:56:cb:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1B708FECC3E90643F33B8311E29F1B46FE92B7F Validity Not Before: Jul 19 23:16:38 2025 GMT Not After : Jul 23 09:55:38 2025 GMT Subject: CN=4E669D35593C5A33435B16AFEE156C1460B9FD59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:80:1f:0e:6d:71:14:f4:f3:11:15:7b:bb:3b: 8e:f4:97:fe:e2:e9:c8:bd:bc:9b:68:cc:1c:9e:c4: d1:85:35:d8:55:a1:2c:77:e7:6c:50:a0:d7:9f:02: 4d:f1:89:9b:ea:85:58:82:a6:47:24:e5:6c:d2:68: 55:cf:c1:10:5a:8c:d3:9a:98:d1:cc:6c:bc:d5:f6: 79:6e:9d:af:1f:21:27:8b:66:0a:c7:fa:8b:82:fb: 45:7b:64:8b:c7:8a:0e:a0:98:15:b2:c6:1e:17:5e: a0:de:32:d8:ef:10:92:fb:df:c1:61:51:e0:4b:44: 5b:f7:97:0e:58:67:68:49:d1:63:69:f2:85:04:60: 97:77:07:82:c9:eb:67:af:a1:83:cd:17:46:94:7d: da:29:71:1e:32:98:26:51:d0:f1:f4:8f:c4:62:23: 42:4a:6f:d9:93:d0:3c:40:a0:7b:62:26:36:bc:5c: 20:b1:6e:b9:9b:d1:b1:16:d8:8d:cb:dc:6a:76:8f: 36:b8:2c:f5:15:7b:36:2f:74:73:4d:46:e8:89:1a: a3:ac:4e:de:44:e3:e3:43:d2:18:6b:34:bd:5f:eb: 67:d9:92:07:16:b7:0d:17:77:39:b4:76:05:27:26: e3:b4:7f:8f:ff:de:b2:98:32:29:07:ea:8b:f9:99: 08:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:66:9D:35:59:3C:5A:33:43:5B:16:AF:EE:15:6C:14:60:B9:FD:59 X509v3 Authority Key Identifier: keyid:E1:B7:08:FE:CC:3E:90:64:3F:33:B8:31:1E:29:F1:B4:6F:E9:2B:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:67:8d:66:c0:52:fc:82:6a:26:ff:0a:2e:c8:85:6b:c4:f7: 27:e0:77:71:1c:8f:56:83:dd:35:a0:f3:62:ec:fa:15:b6:62: f6:8a:41:a1:dc:2e:ac:f4:63:d7:04:97:cd:5e:4f:4d:49:16: e6:a2:d4:63:6b:04:a9:2d:25:c2:a2:38:b0:10:bb:3e:3c:3c: 18:b6:b7:58:fa:cf:81:e1:54:fc:d6:06:7e:9e:36:bd:aa:4c: 8c:76:df:e0:22:8e:55:ad:1a:8e:18:dd:a0:87:3d:d4:54:59: 32:2d:de:ff:c9:27:ce:3a:c7:10:fa:3f:ba:53:3f:c1:d3:b6: 40:85:a4:6d:aa:d8:74:a0:55:c5:b7:b3:f8:77:ad:5f:10:bb: 3b:31:b5:f1:8d:19:34:c1:bd:97:ab:8c:14:3d:19:78:01:70: 6e:73:0d:39:61:9d:a1:78:eb:a4:10:44:84:cc:da:d9:5d:61: a5:67:ed:3c:14:b3:77:77:82:60:13:ed:e4:f8:d7:57:5d:e0: ba:2e:af:cc:8c:66:0a:52:34:70:f0:9d:47:46:92:90:4f:85: 16:d0:07:53:94:7d:23:a7:4c:71:d1:57:72:7c:f3:b8:4e:98: 24:93:41:63:b0:5c:2e:3a:cc:28:1c:e4:4f:ae:1c:30:82:c9: cc:93:06:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeLLzNoqKor50qVcZuU0o7GdWywIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFCNzA4RkVDQzNFOTA2NDNGMzNCODMxMUUyOUYxQjQ2 RkU5MkI3RjAeFw0yNTA3MTkyMzE2MzhaFw0yNTA3MjMwOTU1MzhaMDMxMTAvBgNV BAMTKDRFNjY5RDM1NTkzQzVBMzM0MzVCMTZBRkVFMTU2QzE0NjBCOUZENTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5gB8ObXEU9PMRFXu7O470l/7i 6ci9vJtozByexNGFNdhVoSx352xQoNefAk3xiZvqhViCpkck5WzSaFXPwRBajNOa mNHMbLzV9nluna8fISeLZgrH+ouC+0V7ZIvHig6gmBWyxh4XXqDeMtjvEJL738Fh UeBLRFv3lw5YZ2hJ0WNp8oUEYJd3B4LJ62evoYPNF0aUfdopcR4ymCZR0PH0j8Ri I0JKb9mT0DxAoHtiJja8XCCxbrmb0bEW2I3L3Gp2jza4LPUVezYvdHNNRuiJGqOs Tt5E4+ND0hhrNL1f62fZkgcWtw0Xdzm0dgUnJuO0f4//3rKYMikH6ov5mQjPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTmadNVk8WjNDWxav7hVsFGC5/VkwHwYDVR0j BBgwFoAU4bcI/sw+kGQ/M7gxHinxtG/pK38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZjRkMWMzNi00YTMxLTQ4NTctOWUzNi0wZGRmM2Q2OTFlYjUvMC9FMUI3MDhGRUND M0U5MDY0M0YzM0I4MzExRTI5RjFCNDZGRTkyQjdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTFCNzA4RkVDQzNFOTA2NDNGMzNCODMxMUUyOUYxQjQ2RkU5 MkI3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmY0ZDFjMzYtNGEzMS00ODU3LTll MzYtMGRkZjNkNjkxZWI1LzAvRTFCNzA4RkVDQzNFOTA2NDNGMzNCODMxMUUyOUYx QjQ2RkU5MkI3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFNnjWbAUvyCaib/Ci7IhWvE9yfgd3Ecj1aD 3TWg82Ls+hW2YvaKQaHcLqz0Y9cEl81eT01JFuai1GNrBKktJcKiOLAQuz48PBi2 t1j6z4HhVPzWBn6eNr2qTIx23+AijlWtGo4Y3aCHPdRUWTIt3v/JJ846xxD6P7pT P8HTtkCFpG2q2HSgVcW3s/h3rV8QuzsxtfGNGTTBvZerjBQ9GXgBcG5zDTlhnaF4 66QQRITM2tldYaVn7TwUs3d3gmAT7eT411dd4Lour8yMZgpSNHDwnUdGkpBPhRbQ B1OUfSOnTHHRV3J887hOmCSTQWOwXC46zCgc5E+uHDCCycyTBqs= -----END CERTIFICATE-----Generated at Sun Jul 20 21:28:30 2025 by rpki-client