$ rpki-client -vvf repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.mft File: 1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.mft (raw, json) Hash identifier: cIe821cYb3luBMQLabEupUNUiEOY26AXxXtm9DItw/E= Subject key identifier: 91:EB:66:C3:2E:B6:D8:6C:3A:16:74:D1:E8:4B:A8:4D:84:5A:2E:DC Authority key identifier: 1E:EA:71:B4:C7:0A:47:D5:3B:E3:20:4F:E2:C4:8C:EF:92:7E:C7:31 Certificate issuer: /CN=1EEA71B4C70A47D53BE3204FE2C48CEF927EC731 Certificate serial: 3C298DC2CEC8541959C183C25660AF3EC6084BC9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.mft Manifest number: 0165 Signing time: Fri 05 Sep 2025 18:31:56 +0000 Manifest this update: Fri 05 Sep 2025 18:26:56 +0000 Manifest next update: Tue 09 Sep 2025 01:21:56 +0000 Files and hashes: 1: 1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.crl (hash: 4V5zE5eDY+wQ51vMEE2WQxYrf+Ls5AS0AQ4KhxiptfA=) 2: 3130332e31342e37352e302f32342d3234203d3e20313334363332.roa (hash: d03ba4w3/cMHa6YrFwbQZXYz0UgEChS2sqo8pZVU9h0=) 3: 3130332e31342e37342e302f32342d3234203d3e20313334363332.roa (hash: kRl6IfQghVcIhK14CpOe+4+3tl4P/DD5zma96SwY1Qw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.crl rsync://repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 01:21:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:29:8d:c2:ce:c8:54:19:59:c1:83:c2:56:60:af:3e:c6:08:4b:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EEA71B4C70A47D53BE3204FE2C48CEF927EC731 Validity Not Before: Sep 5 18:26:56 2025 GMT Not After : Sep 9 01:21:56 2025 GMT Subject: CN=91EB66C32EB6D86C3A1674D1E84BA84D845A2EDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:61:d2:9a:0f:d9:cf:29:ed:71:5a:5e:4c:8a: e9:bf:6d:af:52:85:6c:4e:2f:44:46:02:1b:47:3d: 85:0c:cf:c2:c5:47:f0:b6:b9:00:83:b5:3f:d7:b6: 3a:70:be:37:eb:18:3d:71:3f:eb:fd:7e:a5:c8:ec: 51:4f:7a:04:ba:33:5a:95:ed:f4:84:0d:f5:9f:00: 9c:ab:88:f3:97:58:80:58:9d:f9:89:aa:ae:02:15: 08:73:ea:63:30:9d:a0:98:d6:ba:cb:42:81:c0:fe: dd:67:42:85:bc:ae:ea:b0:aa:60:74:07:10:f0:ee: ba:0e:30:ee:d0:a4:4c:9f:a6:5d:7b:1c:de:61:b7: 83:47:db:30:20:76:46:01:c2:c6:c0:c1:3a:b5:12: 96:2f:f3:60:1f:1b:ef:50:94:fd:d3:a5:ca:fe:8e: 03:3e:43:3d:a9:ce:f1:5e:03:b8:3a:cb:bc:1f:74: 4b:62:17:09:04:d0:dc:56:4f:b8:b2:11:76:61:55: 6b:53:29:52:1e:ba:5b:e7:30:5f:00:de:ab:2b:61: e7:9b:84:f5:e3:9e:4d:53:32:52:4e:7f:5f:94:c0: c8:04:ea:ec:62:8d:c2:89:d9:1c:c5:78:b2:8a:37: 96:4b:49:63:73:3e:9c:ef:bf:c9:1a:d1:b7:cc:07: 8e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:EB:66:C3:2E:B6:D8:6C:3A:16:74:D1:E8:4B:A8:4D:84:5A:2E:DC X509v3 Authority Key Identifier: keyid:1E:EA:71:B4:C7:0A:47:D5:3B:E3:20:4F:E2:C4:8C:EF:92:7E:C7:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:02:61:10:86:d5:94:1e:40:b4:3f:ba:76:99:af:6b:27:ed: 02:b0:3a:96:5a:8c:a7:52:bf:58:06:77:77:53:f4:aa:a0:e0: 00:dc:5a:ca:2f:3f:eb:b0:a5:8d:cf:2a:b6:90:8c:a1:d1:73: f3:37:ab:b8:22:87:35:13:08:9c:44:a0:cc:46:bc:7d:db:ec: 9e:10:3c:3d:af:93:97:12:a3:b1:3e:4f:ad:55:fd:b3:d7:fb: 9d:21:ab:d6:5c:d2:b1:df:2f:9c:d8:e9:47:34:c7:6c:89:33: c4:b9:57:e7:b0:58:79:5a:aa:02:de:22:7c:e8:4d:7c:23:c4: b5:88:48:ca:b3:12:07:9d:ba:23:a5:2e:a5:d5:01:59:e6:f6: 4f:73:f4:b8:ab:b4:62:9c:57:a2:d7:f8:d2:f6:eb:f5:c0:44: 42:a9:6e:ff:1e:1b:01:3d:b3:88:70:6c:60:cd:ea:6a:82:73: b6:50:83:9b:bb:27:db:eb:b9:cf:1a:32:61:a8:da:21:c5:e8: 16:44:67:ce:12:31:ab:85:33:8d:7a:3d:58:8c:82:2c:03:7b: 6e:1f:10:59:d8:b1:57:e3:56:0b:b7:1a:d8:86:47:5e:97:a2: 99:73:2a:75:95:3a:a3:72:28:4f:c1:20:d8:14:1c:1a:5e:5b: c6:98:1a:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPCmNws7IVBlZwYPCVmCvPsYIS8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVFQTcxQjRDNzBBNDdENTNCRTMyMDRGRTJDNDhDRUY5 MjdFQzczMTAeFw0yNTA5MDUxODI2NTZaFw0yNTA5MDkwMTIxNTZaMDMxMTAvBgNV BAMTKDkxRUI2NkMzMkVCNkQ4NkMzQTE2NzREMUU4NEJBODREODQ1QTJFREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpYdKaD9nPKe1xWl5Mium/ba9S hWxOL0RGAhtHPYUMz8LFR/C2uQCDtT/XtjpwvjfrGD1xP+v9fqXI7FFPegS6M1qV 7fSEDfWfAJyriPOXWIBYnfmJqq4CFQhz6mMwnaCY1rrLQoHA/t1nQoW8ruqwqmB0 BxDw7roOMO7QpEyfpl17HN5ht4NH2zAgdkYBwsbAwTq1EpYv82AfG+9QlP3Tpcr+ jgM+Qz2pzvFeA7g6y7wfdEtiFwkE0NxWT7iyEXZhVWtTKVIeulvnMF8A3qsrYeeb hPXjnk1TMlJOf1+UwMgE6uxijcKJ2RzFeLKKN5ZLSWNzPpzvv8ka0bfMB45xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUketmwy622Gw6FnTR6EuoTYRaLtwwHwYDVR0j BBgwFoAUHupxtMcKR9U74yBP4sSM75J+xzEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MDAwZTIzZS1mNDRhLTRjZmMtYmY1Ni1kOTlhMDkyZDczMTQvMC8xRUVBNzFCNEM3 MEE0N0Q1M0JFMzIwNEZFMkM0OENFRjkyN0VDNzMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUVFQTcxQjRDNzBBNDdENTNCRTMyMDRGRTJDNDhDRUY5MjdF QzczMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTAwMGUyM2UtZjQ0YS00Y2ZjLWJm NTYtZDk5YTA5MmQ3MzE0LzAvMUVFQTcxQjRDNzBBNDdENTNCRTMyMDRGRTJDNDhD RUY5MjdFQzczMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIcCYRCG1ZQeQLQ/unaZr2sn7QKwOpZajKdS v1gGd3dT9Kqg4ADcWsovP+uwpY3PKraQjKHRc/M3q7gihzUTCJxEoMxGvH3b7J4Q PD2vk5cSo7E+T61V/bPX+50hq9Zc0rHfL5zY6Uc0x2yJM8S5V+ewWHlaqgLeInzo TXwjxLWISMqzEgeduiOlLqXVAVnm9k9z9LirtGKcV6LX+NL26/XAREKpbv8eGwE9 s4hwbGDN6mqCc7ZQg5u7J9vruc8aMmGo2iHF6BZEZ84SMauFM416PViMgiwDe24f EFnYsVfjVgu3GtiGR16XoplzKnWVOqNyKE/BINgUHBpeW8aYGiE= -----END CERTIFICATE-----Generated at Sun Sep 7 13:57:26 2025 by rpki-client