$ rpki-client -vvf repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft File: EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft (raw, json) Hash identifier: 7KIYiNnGT7Phph52TJVUi5RYNuSc28hl6E8gzYGDHRk= Subject key identifier: 40:F0:FE:FB:E3:6F:BC:C5:BA:FB:02:AB:BB:BD:79:5D:1C:58:FE:4F Authority key identifier: EE:C1:A7:BF:2D:95:D0:BA:FE:37:10:5E:4B:B1:BB:23:60:1D:D1:DB Certificate issuer: /CN=EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB Certificate serial: 678BA94BBBE4ACDE1A17E81273ACF2286BFCCA5D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft Manifest number: BC Signing time: Sat 06 Sep 2025 03:02:12 +0000 Manifest this update: Sat 06 Sep 2025 02:57:12 +0000 Manifest next update: Tue 09 Sep 2025 13:47:12 +0000 Files and hashes: 1: EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.crl (hash: Vz5uL0biE9A0wzWQdqihwsuC7r8A6SDTgk7CHF5GPEg=) 2: 3136302e32352e34352e302f32342d3234203d3e20313533303639.roa (hash: pjrXRUj5r2IszWCXojX+FWGkandw2VMiyslpGWMGbUA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.crl rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 13:47:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:8b:a9:4b:bb:e4:ac:de:1a:17:e8:12:73:ac:f2:28:6b:fc:ca:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB Validity Not Before: Sep 6 02:57:12 2025 GMT Not After : Sep 9 13:47:12 2025 GMT Subject: CN=40F0FEFBE36FBCC5BAFB02ABBBBD795D1C58FE4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:62:e0:f4:20:80:ff:05:f8:38:79:ae:9b:db: aa:34:7a:4c:86:a6:52:34:b4:6c:57:8a:79:8c:36: a3:a7:37:de:b8:93:74:91:a8:a3:18:7e:92:b7:63: 0d:80:3b:4f:85:34:1f:3a:f1:a1:ee:41:37:ea:d1: 91:cb:6c:88:c1:e6:3e:31:13:32:b2:2b:25:95:d5: 13:da:2e:86:4d:b9:00:37:ef:28:66:c7:9e:d5:7f: 8f:84:fd:ab:fc:09:03:ff:c3:3f:7f:42:4f:58:9a: 50:11:00:92:93:2a:03:99:3e:4c:53:2e:91:21:ef: 35:27:4c:98:30:91:c5:7c:87:f4:7e:90:05:9e:79: ea:1a:e7:24:fc:24:35:05:ba:11:65:f9:92:61:ed: 03:ab:55:15:65:e2:22:75:29:11:32:29:10:b4:e0: a3:c3:b0:f6:c0:26:47:cc:17:6e:c2:e9:0a:5d:eb: 5b:84:13:88:48:24:23:a0:34:a7:02:de:88:51:0c: ea:df:51:45:7b:58:4c:f1:62:a4:f0:85:82:71:1f: 0c:c1:5c:71:56:5c:9b:30:f7:c1:ae:20:d9:40:3e: 5f:7e:1e:93:dd:75:53:fa:86:ac:5c:ba:f6:b5:70: ca:7b:69:28:0c:f3:b2:81:03:74:b9:54:8c:67:87: ef:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F0:FE:FB:E3:6F:BC:C5:BA:FB:02:AB:BB:BD:79:5D:1C:58:FE:4F X509v3 Authority Key Identifier: keyid:EE:C1:A7:BF:2D:95:D0:BA:FE:37:10:5E:4B:B1:BB:23:60:1D:D1:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:42:07:38:55:03:6d:be:f6:a7:76:51:74:2a:04:46:14:4a: 3e:01:07:45:28:3f:2b:43:2a:18:d5:1c:26:06:4e:df:85:ff: e8:bf:1c:59:34:91:5f:46:c4:fb:55:c8:c2:63:c9:d6:37:80: cd:33:23:4f:82:2e:e8:0d:17:e3:c4:90:1a:bf:63:b1:58:a1: a1:0f:db:18:3f:a2:1b:7e:50:6b:34:45:85:24:01:71:38:e3: 8f:bf:7d:51:85:c4:7d:b4:85:d5:92:4c:54:b0:a2:25:85:3d: 22:6a:d1:f0:4c:24:02:56:bb:90:e0:c9:03:ba:3b:6c:cb:ff: 51:88:96:b3:a4:a5:80:82:61:a8:46:49:2a:fb:56:8e:bf:4c: 51:ea:be:98:99:b1:ce:f4:64:f2:93:e7:da:52:ce:bc:99:03: c6:64:c9:02:34:72:7b:b8:b2:2e:df:3f:cc:fc:91:c1:79:af: 88:24:ee:50:41:c3:ac:d5:ec:9e:ba:bf:5a:50:a1:a8:8f:2a: 6a:f3:d7:cb:c0:df:98:de:0c:6f:bc:5b:df:75:67:c8:e5:ef: c3:d0:21:d2:12:ab:c5:e1:90:cc:aa:4e:fe:fe:9f:31:e4:68: bd:2f:a2:52:a8:26:b4:60:1c:3b:39:3f:fe:6a:08:58:e7:16: 46:75:2c:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ4upS7vkrN4aF+gSc6zyKGv8yl0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVDMUE3QkYyRDk1RDBCQUZFMzcxMDVFNEJCMUJCMjM2 MDFERDFEQjAeFw0yNTA5MDYwMjU3MTJaFw0yNTA5MDkxMzQ3MTJaMDMxMTAvBgNV BAMTKDQwRjBGRUZCRTM2RkJDQzVCQUZCMDJBQkJCQkQ3OTVEMUM1OEZFNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBYuD0IID/Bfg4ea6b26o0ekyG plI0tGxXinmMNqOnN964k3SRqKMYfpK3Yw2AO0+FNB868aHuQTfq0ZHLbIjB5j4x EzKyKyWV1RPaLoZNuQA37yhmx57Vf4+E/av8CQP/wz9/Qk9YmlARAJKTKgOZPkxT LpEh7zUnTJgwkcV8h/R+kAWeeeoa5yT8JDUFuhFl+ZJh7QOrVRVl4iJ1KREyKRC0 4KPDsPbAJkfMF27C6Qpd61uEE4hIJCOgNKcC3ohRDOrfUUV7WEzxYqTwhYJxHwzB XHFWXJsw98GuINlAPl9+HpPddVP6hqxcuva1cMp7aSgM87KBA3S5VIxnh+/3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQPD+++NvvMW6+wKru715XRxY/k8wHwYDVR0j BBgwFoAU7sGnvy2V0Lr+NxBeS7G7I2Ad0dswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzY1NjFkNC0yM2M4LTRjOWItODkwZS00ZjI2MzJlNTJjOTcvMC9FRUMxQTdCRjJE OTVEMEJBRkUzNzEwNUU0QkIxQkIyMzYwMUREMURCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRUVDMUE3QkYyRDk1RDBCQUZFMzcxMDVFNEJCMUJCMjM2MDFE RDFEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjM2NTYxZDQtMjNjOC00YzliLTg5 MGUtNGYyNjMyZTUyYzk3LzAvRUVDMUE3QkYyRDk1RDBCQUZFMzcxMDVFNEJCMUJC MjM2MDFERDFEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxCBzhVA22+9qd2UXQqBEYUSj4BB0UoPytD KhjVHCYGTt+F/+i/HFk0kV9GxPtVyMJjydY3gM0zI0+CLugNF+PEkBq/Y7FYoaEP 2xg/oht+UGs0RYUkAXE444+/fVGFxH20hdWSTFSwoiWFPSJq0fBMJAJWu5DgyQO6 O2zL/1GIlrOkpYCCYahGSSr7Vo6/TFHqvpiZsc70ZPKT59pSzryZA8ZkyQI0cnu4 si7fP8z8kcF5r4gk7lBBw6zV7J66v1pQoaiPKmrz18vA35jeDG+8W991Z8jl78PQ IdISq8XhkMyqTv7+nzHkaL0volKoJrRgHDs5P/5qCFjnFkZ1LMg= -----END CERTIFICATE-----Generated at Mon Sep 8 05:09:09 2025 by rpki-client