$ rpki-client -vvf repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft File: E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft (raw, json) Hash identifier: 2bGPjG+E0YQZS2Xgy+RoqZvLyAjibWBb3uXFHnKhJD8= Subject key identifier: 07:00:63:19:A7:73:CB:79:D1:25:C9:D7:4B:32:0C:70:DA:D9:3B:D0 Authority key identifier: E6:FE:A7:CE:7F:6F:A5:EA:E0:5E:BB:DF:D8:6F:D5:3E:84:FA:75:A8 Certificate issuer: /CN=E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8 Certificate serial: 6FE02C435B5F1FA95A01628CE1E3887F2ACCBF13 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft Manifest number: B3 Signing time: Sat 06 Sep 2025 03:00:43 +0000 Manifest this update: Sat 06 Sep 2025 02:55:43 +0000 Manifest next update: Tue 09 Sep 2025 07:29:43 +0000 Files and hashes: 1: E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl (hash: /C7iopDS32fUSPgmhYABAbFdGNODbVlG7daKS304+9g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 07:29:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:e0:2c:43:5b:5f:1f:a9:5a:01:62:8c:e1:e3:88:7f:2a:cc:bf:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8 Validity Not Before: Sep 6 02:55:43 2025 GMT Not After : Sep 9 07:29:43 2025 GMT Subject: CN=07006319A773CB79D125C9D74B320C70DAD93BD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:92:21:a6:73:f6:ea:e2:85:6c:6e:3f:92:ac: bf:67:21:93:9c:94:de:26:19:bb:5a:44:ee:00:bc: a0:33:46:46:7b:92:12:74:21:cc:e9:79:86:00:a2: b0:d3:7e:1e:b3:e2:83:97:9e:96:dd:1c:49:8c:6b: 1c:a6:48:6c:7a:4c:2f:b8:0f:c7:f6:a8:52:d3:02: 38:8a:52:c7:70:4c:b2:62:b8:5f:cf:61:04:c0:1b: 5c:54:63:ec:14:1b:0e:4a:51:6c:4f:ae:49:6f:c6: 67:b7:2e:42:69:c7:d0:c5:ba:52:7a:16:cb:52:d3: aa:1d:2e:c0:67:36:f0:66:35:a2:30:a0:bf:3c:17: 6d:23:09:d2:75:fb:58:06:ac:4b:b5:b9:e6:fd:0c: d9:b9:fb:d7:77:46:4c:7d:3b:f1:dd:a1:f4:45:ff: be:a0:81:7d:f3:85:95:14:c6:2b:69:b8:92:d5:02: 04:43:9c:e9:79:0d:bc:98:a9:16:4b:bb:6a:26:50: cd:95:d1:bc:c4:62:8d:ea:f4:d4:bf:69:d9:b5:a4: 39:60:3a:45:18:2a:53:a7:dc:8c:64:cb:1a:ed:16: ae:b2:0a:d7:a1:93:c1:04:bb:6b:7d:bd:d4:e9:4b: 7d:d3:c3:5b:46:42:fc:c3:8d:79:69:03:ba:6c:07: 25:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:00:63:19:A7:73:CB:79:D1:25:C9:D7:4B:32:0C:70:DA:D9:3B:D0 X509v3 Authority Key Identifier: keyid:E6:FE:A7:CE:7F:6F:A5:EA:E0:5E:BB:DF:D8:6F:D5:3E:84:FA:75:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:85:76:6c:ae:92:11:0c:ff:cb:43:63:3b:b5:0a:fc:f4:c0: d4:74:10:fe:31:d3:25:9e:26:6f:f7:99:6a:5f:75:60:07:e5: c8:82:38:33:38:f5:57:ea:a7:d8:1d:f0:9e:d0:f4:9d:6d:ef: b8:02:90:75:25:fd:c3:f3:77:59:4b:a1:b1:f8:0f:8f:98:48: 47:fb:16:87:2c:8d:5b:6f:d0:fe:e9:f8:a3:40:15:53:b5:29: df:ac:7a:77:aa:0d:21:d0:59:8f:0e:42:fc:ce:38:a4:18:9c: 0f:20:43:17:2e:a8:8a:a6:c2:de:1b:d1:48:0c:f5:36:a4:68: 33:87:8c:04:2b:00:8e:77:0e:7b:3f:0f:9c:6a:bf:3d:6c:19: 72:70:d9:2d:d1:f0:31:a9:84:b6:de:97:c9:f4:a6:56:10:48: d7:a5:c9:0a:25:76:b9:af:1e:52:f6:70:80:2a:4d:3e:14:9e: a1:b0:f9:a3:80:f4:93:0f:b1:47:22:8e:13:82:88:a6:8a:f6: 8f:f8:a2:ba:89:4e:74:cb:ad:9f:b3:13:7e:d9:ae:0e:8c:a9: ad:27:16:17:f0:8c:8a:64:fc:9c:95:26:c6:81:13:9c:e4:34: 49:e0:d7:db:b9:76:56:7b:53:34:61:e1:0e:5b:bf:bf:44:30: de:dc:12:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb+AsQ1tfH6laAWKM4eOIfyrMvxMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTZGRUE3Q0U3RjZGQTVFQUUwNUVCQkRGRDg2RkQ1M0U4 NEZBNzVBODAeFw0yNTA5MDYwMjU1NDNaFw0yNTA5MDkwNzI5NDNaMDMxMTAvBgNV BAMTKDA3MDA2MzE5QTc3M0NCNzlEMTI1QzlENzRCMzIwQzcwREFEOTNCRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrkiGmc/bq4oVsbj+SrL9nIZOc lN4mGbtaRO4AvKAzRkZ7khJ0IczpeYYAorDTfh6z4oOXnpbdHEmMaxymSGx6TC+4 D8f2qFLTAjiKUsdwTLJiuF/PYQTAG1xUY+wUGw5KUWxPrklvxme3LkJpx9DFulJ6 FstS06odLsBnNvBmNaIwoL88F20jCdJ1+1gGrEu1ueb9DNm5+9d3Rkx9O/HdofRF /76ggX3zhZUUxitpuJLVAgRDnOl5DbyYqRZLu2omUM2V0bzEYo3q9NS/adm1pDlg OkUYKlOn3IxkyxrtFq6yCtehk8EEu2t9vdTpS33Tw1tGQvzDjXlpA7psByVFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBwBjGadzy3nRJcnXSzIMcNrZO9AwHwYDVR0j BBgwFoAU5v6nzn9vpergXrvf2G/VPoT6dagwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTMxNTlmMi0wY2YwLTQzYzYtYjI4Mi1jNjlmYmExM2ExNGEvMC9FNkZFQTdDRTdG NkZBNUVBRTA1RUJCREZEODZGRDUzRTg0RkE3NUE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTZGRUE3Q0U3RjZGQTVFQUUwNUVCQkRGRDg2RkQ1M0U4NEZB NzVBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWUzMTU5ZjItMGNmMC00M2M2LWIy ODItYzY5ZmJhMTNhMTRhLzAvRTZGRUE3Q0U3RjZGQTVFQUUwNUVCQkRGRDg2RkQ1 M0U4NEZBNzVBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEiFdmyukhEM/8tDYzu1Cvz0wNR0EP4x0yWe Jm/3mWpfdWAH5ciCODM49Vfqp9gd8J7Q9J1t77gCkHUl/cPzd1lLobH4D4+YSEf7 FocsjVtv0P7p+KNAFVO1Kd+seneqDSHQWY8OQvzOOKQYnA8gQxcuqIqmwt4b0UgM 9TakaDOHjAQrAI53Dns/D5xqvz1sGXJw2S3R8DGphLbel8n0plYQSNelyQoldrmv HlL2cIAqTT4UnqGw+aOA9JMPsUcijhOCiKaK9o/4orqJTnTLrZ+zE37Zrg6Mqa0n FhfwjIpk/JyVJsaBE5zkNEng19u5dlZ7UzRh4Q5bv79EMN7cEtI= -----END CERTIFICATE-----Generated at Sun Sep 7 13:45:27 2025 by rpki-client