$ rpki-client -vvf repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft File: 01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft (raw, json) Hash identifier: Z8F/ckpFFobiHW+Ykr0WHDOWzQ9PYCikrFbq6N91NcI= Subject key identifier: 70:C0:28:E3:40:DD:B0:D9:82:24:E2:88:FE:C9:D3:5A:AE:8A:63:71 Authority key identifier: 01:E8:7E:DC:BE:90:1A:9A:E8:6C:F5:E4:1C:BA:8B:24:83:E9:B6:AC Certificate issuer: /CN=01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC Certificate serial: 2DF2AE05AA73481C314D61D10921704AB21F9E59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft Manifest number: 21 Signing time: Sat 19 Jul 2025 13:22:13 +0000 Manifest this update: Sat 19 Jul 2025 13:17:13 +0000 Manifest next update: Wed 23 Jul 2025 01:02:13 +0000 Files and hashes: 1: 01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.crl (hash: 0HjlrmwUxpeXyoC1+75vOWQ1Br2h5UnBwJPGnFhGKyg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.crl rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 01:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:f2:ae:05:aa:73:48:1c:31:4d:61:d1:09:21:70:4a:b2:1f:9e:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC Validity Not Before: Jul 19 13:17:13 2025 GMT Not After : Jul 23 01:02:13 2025 GMT Subject: CN=70C028E340DDB0D98224E288FEC9D35AAE8A6371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:14:6c:53:a4:af:86:d3:0e:f0:c0:ac:ba:d1: d4:ac:2e:5e:81:dd:3b:fe:4b:54:b1:1d:5b:a8:97: a4:0e:47:62:c4:ba:82:2f:d5:86:30:71:ab:78:5f: bc:26:1f:70:c8:e1:9d:7d:93:a8:96:5c:69:a6:6e: a8:c7:41:01:63:66:a5:5f:53:25:f4:27:bc:a6:c6: 60:5a:14:90:8a:fe:9c:73:74:cf:cc:58:58:f8:a2: fb:f5:6d:54:47:7f:77:1b:5d:ee:a2:c5:e4:d1:24: c0:17:34:3b:86:2a:c6:08:3d:fd:c6:e2:66:aa:15: af:42:cf:8a:92:28:da:f4:51:fc:69:32:4d:c5:a7: 99:9b:37:e1:00:85:3b:cc:77:f6:42:e4:f4:ae:da: f8:5c:c2:cb:a7:aa:0a:a6:37:97:7c:32:bf:90:e1: 63:45:3d:a5:0e:ea:a3:86:6e:f0:56:c7:fe:c8:06: 9f:47:6f:aa:67:8b:01:1b:a4:fa:f2:af:71:e5:e0: 57:2a:9f:b4:bf:92:8d:a6:1e:82:a7:c0:cd:06:29: c6:6a:18:d1:83:32:94:81:49:ae:6c:1c:2d:6a:68: 47:9c:f3:a1:cb:4f:ef:0d:38:8e:72:90:ed:3b:93: 9a:34:6b:8d:db:28:26:7b:97:6e:84:e6:48:de:6e: 8a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C0:28:E3:40:DD:B0:D9:82:24:E2:88:FE:C9:D3:5A:AE:8A:63:71 X509v3 Authority Key Identifier: keyid:01:E8:7E:DC:BE:90:1A:9A:E8:6C:F5:E4:1C:BA:8B:24:83:E9:B6:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:ac:74:a3:6f:3f:25:4f:d9:66:1c:a5:ba:79:9e:02:87:8e: 57:8b:03:a6:9d:3c:4d:64:dc:9f:9b:b3:30:c1:20:27:fb:71: e6:e3:bd:ca:8f:ba:ff:1c:92:1a:47:fa:de:af:58:bb:13:f6: c9:3d:47:df:d5:04:50:89:8b:7c:e7:61:2d:c4:95:c6:a2:bc: 05:8a:1b:73:3e:55:ae:91:cc:93:2e:a6:31:cd:59:78:6d:49: 54:53:67:72:f8:26:a0:62:17:b6:5b:2e:85:06:97:ce:37:da: 13:b3:22:d1:3e:20:40:ef:fd:0d:71:b3:ac:0a:3e:8c:7e:c6: 10:94:36:14:1d:6b:d6:83:24:e3:8e:79:a3:89:1f:e0:62:95: c7:4f:a1:58:99:2a:d7:75:97:a3:81:2a:00:7a:05:cc:30:09: 88:08:57:f2:cb:a4:6c:44:58:92:7a:41:85:79:fe:14:d5:bb: 2b:97:7e:13:25:fd:e8:7a:27:08:e9:09:e9:b7:71:8b:06:1d: ea:f8:a9:59:8a:7c:fe:a1:b8:a6:89:d2:b0:82:35:2d:21:79: b3:2f:22:b2:3f:5e:e5:73:82:8d:c2:d5:f1:e0:fd:df:a6:d9: 93:cf:7c:a5:6a:8a:1d:a6:14:27:ab:4c:9f:d9:6d:1c:ad:46: 52:c5:d6:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULfKuBapzSBwxTWHRCSFwSrIfnlkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFFODdFRENCRTkwMUE5QUU4NkNGNUU0MUNCQThCMjQ4 M0U5QjZBQzAeFw0yNTA3MTkxMzE3MTNaFw0yNTA3MjMwMTAyMTNaMDMxMTAvBgNV BAMTKDcwQzAyOEUzNDBEREIwRDk4MjI0RTI4OEZFQzlEMzVBQUU4QTYzNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgFGxTpK+G0w7wwKy60dSsLl6B 3Tv+S1SxHVuol6QOR2LEuoIv1YYwcat4X7wmH3DI4Z19k6iWXGmmbqjHQQFjZqVf UyX0J7ymxmBaFJCK/pxzdM/MWFj4ovv1bVRHf3cbXe6ixeTRJMAXNDuGKsYIPf3G 4maqFa9Cz4qSKNr0UfxpMk3Fp5mbN+EAhTvMd/ZC5PSu2vhcwsunqgqmN5d8Mr+Q 4WNFPaUO6qOGbvBWx/7IBp9Hb6pniwEbpPryr3Hl4Fcqn7S/ko2mHoKnwM0GKcZq GNGDMpSBSa5sHC1qaEec86HLT+8NOI5ykO07k5o0a43bKCZ7l26E5kjebopzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcMAo40DdsNmCJOKI/snTWq6KY3EwHwYDVR0j BBgwFoAUAeh+3L6QGprobPXkHLqLJIPptqwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTZiNTk5ZC03ZmJiLTQ0OTgtODZlZi0xODY0NWFlOThlM2QvMC8wMUU4N0VEQ0JF OTAxQTlBRTg2Q0Y1RTQxQ0JBOEIyNDgzRTlCNkFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDFFODdFRENCRTkwMUE5QUU4NkNGNUU0MUNCQThCMjQ4M0U5 QjZBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODE2YjU5OWQtN2ZiYi00NDk4LTg2 ZWYtMTg2NDVhZTk4ZTNkLzAvMDFFODdFRENCRTkwMUE5QUU4NkNGNUU0MUNCQThC MjQ4M0U5QjZBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADWsdKNvPyVP2WYcpbp5ngKHjleLA6adPE1k 3J+bszDBICf7cebjvcqPuv8ckhpH+t6vWLsT9sk9R9/VBFCJi3znYS3ElcaivAWK G3M+Va6RzJMupjHNWXhtSVRTZ3L4JqBiF7ZbLoUGl8432hOzItE+IEDv/Q1xs6wK Pox+xhCUNhQda9aDJOOOeaOJH+BilcdPoViZKtd1l6OBKgB6BcwwCYgIV/LLpGxE WJJ6QYV5/hTVuyuXfhMl/eh6JwjpCem3cYsGHer4qVmKfP6huKaJ0rCCNS0hebMv IrI/XuVzgo3C1fHg/d+m2ZPPfKVqih2mFCerTJ/ZbRytRlLF1hM= -----END CERTIFICATE-----Generated at Mon Jul 21 07:31:27 2025 by rpki-client