$ rpki-client -vvf repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft File: 1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft (raw, json) Hash identifier: koNxEIr4Xj7TOvO4WbkMML4sEgpZeXdVTkfK3JfHr1o= Subject key identifier: F1:EB:99:A3:17:F4:FA:51:39:09:D5:62:7A:E6:68:86:5B:FC:B4:D1 Authority key identifier: 1E:8E:85:3B:D0:B0:EC:8B:2C:02:0B:97:5B:20:5A:55:6C:14:E8:E9 Certificate issuer: /CN=1E8E853BD0B0EC8B2C020B975B205A556C14E8E9 Certificate serial: 68A94AFCBA502D577C546E0B51EC34776AC86085 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft Manifest number: 016E Signing time: Mon 21 Jul 2025 05:01:38 +0000 Manifest this update: Mon 21 Jul 2025 04:56:38 +0000 Manifest next update: Thu 24 Jul 2025 13:35:38 +0000 Files and hashes: 1: 3130332e3136352e3235322e302f32342d3234203d3e20313531353231.roa (hash: ea9xX+sjo0TrPI9LqLlWLLsF36pbdmxUxQfCCeXAHFc=) 2: 1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.crl (hash: dB1KsFcyexPPcjqSZs4unoZmqQoWdHK5YqaxDCYOEXI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.crl rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 13:35:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:a9:4a:fc:ba:50:2d:57:7c:54:6e:0b:51:ec:34:77:6a:c8:60:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E8E853BD0B0EC8B2C020B975B205A556C14E8E9 Validity Not Before: Jul 21 04:56:38 2025 GMT Not After : Jul 24 13:35:38 2025 GMT Subject: CN=F1EB99A317F4FA513909D5627AE668865BFCB4D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:1c:c1:7e:d4:87:c6:4a:71:e6:dc:21:aa:b4: 7c:12:7b:8a:73:2b:39:f3:fb:bb:be:99:34:92:22: b5:34:29:28:89:b2:fa:ba:50:09:de:e1:35:1b:68: 54:57:16:39:58:5f:a1:f2:b7:f7:05:f8:69:53:10: 62:22:ad:f4:cf:f2:2a:f3:c7:65:cd:04:68:ec:ed: a2:b4:df:88:98:93:e5:dd:7f:a3:c1:54:d7:7a:d5: 75:92:b9:09:1f:30:cc:d1:5b:4f:40:af:eb:62:3a: b2:e6:5f:d7:48:f7:79:a3:a0:fe:77:3a:63:fb:40: e9:f6:c6:15:c2:0b:9d:37:e6:a8:49:92:41:17:ad: 81:99:ee:c7:5f:3d:d9:0b:ec:2a:bd:74:cd:d0:a1: 87:a0:7d:53:72:fa:83:a1:b7:e2:01:a7:07:56:e6: 94:2d:ed:14:f3:6b:bb:7a:67:ab:15:39:e6:87:b1: f4:d4:f4:5f:1a:a9:59:f6:c2:4d:e3:08:ef:fe:cd: d1:34:96:f2:9d:76:e8:58:7c:76:3a:4d:96:24:0f: 39:a6:35:74:83:64:d2:66:58:d2:02:da:b5:7a:bc: 22:b9:f6:fd:c5:ba:df:7b:7f:00:56:90:13:9a:3c: 5a:f4:00:5a:0b:4d:8c:ce:e2:94:fd:53:dc:0e:1b: 8e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:EB:99:A3:17:F4:FA:51:39:09:D5:62:7A:E6:68:86:5B:FC:B4:D1 X509v3 Authority Key Identifier: keyid:1E:8E:85:3B:D0:B0:EC:8B:2C:02:0B:97:5B:20:5A:55:6C:14:E8:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:0c:bb:1f:1b:93:bf:fe:90:2d:95:9e:f6:af:64:b4:ba:3d: 70:79:e8:d9:d1:f5:6d:40:d3:1b:36:3d:a6:dc:37:53:73:66: da:22:60:c1:85:77:d4:ac:8d:fe:3f:0d:b6:94:dc:80:6e:ce: 68:b0:18:9e:7b:9a:9a:7a:82:cb:0f:d3:bb:19:c6:1e:47:13: ff:70:e9:1c:89:eb:16:25:62:c1:58:94:bf:a3:f1:40:d0:1a: be:09:2e:23:02:df:ac:3d:35:93:bd:0f:e2:45:a1:b8:f5:6d: 21:ea:66:e1:79:0d:b5:f5:82:89:0b:7e:f4:e5:93:11:a4:bd: 70:4c:68:0c:1a:d9:db:cc:07:76:c5:16:f0:62:14:bc:21:18: 46:86:3e:de:81:cb:10:0f:cd:7f:c1:4b:e1:c7:45:57:bf:8e: 3a:de:2b:33:b9:43:96:e0:34:b7:95:80:35:dc:ce:5f:19:04: c4:1d:e6:a0:0e:e0:cf:4b:55:0d:32:43:bf:8e:f8:09:17:68: c0:1c:33:cc:93:9e:c2:f9:75:4f:03:46:87:b9:03:45:56:08: 2b:0f:83:29:a4:e3:a2:0a:e6:11:0d:63:6f:01:5c:83:9e:c1: 01:f1:cd:94:eb:37:31:d4:a9:df:fc:cb:08:f3:af:d5:d4:77: d5:64:97:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaKlK/LpQLVd8VG4LUew0d2rIYIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU4RTg1M0JEMEIwRUM4QjJDMDIwQjk3NUIyMDVBNTU2 QzE0RThFOTAeFw0yNTA3MjEwNDU2MzhaFw0yNTA3MjQxMzM1MzhaMDMxMTAvBgNV BAMTKEYxRUI5OUEzMTdGNEZBNTEzOTA5RDU2MjdBRTY2ODg2NUJGQ0I0RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeHMF+1IfGSnHm3CGqtHwSe4pz Kznz+7u+mTSSIrU0KSiJsvq6UAne4TUbaFRXFjlYX6Hyt/cF+GlTEGIirfTP8irz x2XNBGjs7aK034iYk+Xdf6PBVNd61XWSuQkfMMzRW09Ar+tiOrLmX9dI93mjoP53 OmP7QOn2xhXCC5035qhJkkEXrYGZ7sdfPdkL7Cq9dM3QoYegfVNy+oOht+IBpwdW 5pQt7RTza7t6Z6sVOeaHsfTU9F8aqVn2wk3jCO/+zdE0lvKdduhYfHY6TZYkDzmm NXSDZNJmWNIC2rV6vCK59v3Fut97fwBWkBOaPFr0AFoLTYzO4pT9U9wOG451AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8euZoxf0+lE5CdVieuZohlv8tNEwHwYDVR0j BBgwFoAUHo6FO9Cw7IssAguXWyBaVWwU6OkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTBiZGNjNS00Y2Q5LTQ2YjAtOWQ3Yi1kMjMxYTllNTdiNTAvMC8xRThFODUzQkQw QjBFQzhCMkMwMjBCOTc1QjIwNUE1NTZDMTRFOEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUU4RTg1M0JEMEIwRUM4QjJDMDIwQjk3NUIyMDVBNTU2QzE0 RThFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWEwYmRjYzUtNGNkOS00NmIwLTlk N2ItZDIzMWE5ZTU3YjUwLzAvMUU4RTg1M0JEMEIwRUM4QjJDMDIwQjk3NUIyMDVB NTU2QzE0RThFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADoMux8bk7/+kC2VnvavZLS6PXB56NnR9W1A 0xs2PabcN1NzZtoiYMGFd9Ssjf4/DbaU3IBuzmiwGJ57mpp6gssP07sZxh5HE/9w 6RyJ6xYlYsFYlL+j8UDQGr4JLiMC36w9NZO9D+JFobj1bSHqZuF5DbX1gokLfvTl kxGkvXBMaAwa2dvMB3bFFvBiFLwhGEaGPt6ByxAPzX/BS+HHRVe/jjreKzO5Q5bg NLeVgDXczl8ZBMQd5qAO4M9LVQ0yQ7+O+AkXaMAcM8yTnsL5dU8DRoe5A0VWCCsP gymk46IK5hENY28BXIOewQHxzZTrNzHUqd/8ywjzr9XUd9Vkl2k= -----END CERTIFICATE-----Generated at Tue Jul 22 00:00:20 2025 by rpki-client