$ rpki-client -vvf repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft File: EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft (raw, json) Hash identifier: HqF7h5YYkhtiqsOGRgkCUjZ6w+N+vgOhI7qGJrMLSgc= Subject key identifier: 90:32:C5:B4:5C:55:08:56:77:C6:88:90:31:CC:2F:69:81:96:F8:1B Authority key identifier: EE:CC:4A:44:F0:95:94:EB:71:1E:A1:F6:F3:4B:95:8D:19:A3:B4:FD Certificate issuer: /CN=EECC4A44F09594EB711EA1F6F34B958D19A3B4FD Certificate serial: 6DEE046C9E58D43DA2FB98118EE23E7A586A7D35 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft Manifest number: 019A Signing time: Sat 06 Sep 2025 00:11:22 +0000 Manifest this update: Sat 06 Sep 2025 00:06:22 +0000 Manifest next update: Tue 09 Sep 2025 06:54:22 +0000 Files and hashes: 1: EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.crl (hash: Y7klL1U51BqCpybAyDa7ylDAZd0LW/eedYpaY2bzpMQ=) 2: 3130332e3230342e31352e302f32342d3234203d3e20313530393230.roa (hash: 84mIKFs557T9blcI7/exXdbBapxr7Cu4g0VLqBjO/cg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.crl rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 06:54:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:ee:04:6c:9e:58:d4:3d:a2:fb:98:11:8e:e2:3e:7a:58:6a:7d:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EECC4A44F09594EB711EA1F6F34B958D19A3B4FD Validity Not Before: Sep 6 00:06:22 2025 GMT Not After : Sep 9 06:54:22 2025 GMT Subject: CN=9032C5B45C55085677C6889031CC2F698196F81B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:36:aa:24:c1:02:e8:f3:53:0e:09:ee:bc:03: a1:92:db:ec:b3:ff:64:1b:1d:af:fa:c7:12:ec:e7: a8:d9:48:2d:95:c9:68:87:36:ba:37:48:55:75:32: 46:d7:81:96:f7:0a:75:7d:69:5a:47:48:d4:cf:75: 03:71:66:6a:ec:78:af:46:fb:d0:88:2c:2f:2e:c2: 89:c0:6c:53:ae:1c:3d:da:93:49:f5:54:35:43:0a: fb:e5:46:be:22:86:c7:ed:88:ca:e1:2a:d9:af:99: f3:df:80:f1:14:e8:49:14:fc:49:4a:36:ba:12:ca: 91:25:e9:f1:9e:ab:ce:ca:2e:5d:32:4f:42:6b:38: 42:1d:27:52:b0:85:70:9d:8b:f4:65:ba:eb:5c:7d: a3:16:e1:18:cf:66:df:ab:a5:98:f6:95:ba:f7:e4: a5:68:40:67:54:06:7e:99:e2:20:85:9f:3b:73:ba: e2:3c:b9:05:fa:56:9c:f6:7b:e4:a3:09:d4:fd:89: 77:f6:2d:8d:28:21:d0:94:bd:cf:71:2c:0c:c1:8b: 7a:31:61:f5:9d:6a:51:6f:4c:e7:78:33:b0:ee:57: 76:35:7c:5a:f8:e7:15:ec:89:ed:8f:f8:05:ed:4f: 48:89:04:2e:d4:47:ab:cc:b6:8f:b9:98:d6:4a:5a: 25:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:32:C5:B4:5C:55:08:56:77:C6:88:90:31:CC:2F:69:81:96:F8:1B X509v3 Authority Key Identifier: keyid:EE:CC:4A:44:F0:95:94:EB:71:1E:A1:F6:F3:4B:95:8D:19:A3:B4:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:48:16:c0:f1:20:ac:29:11:fc:7b:a2:c7:29:57:78:ef:46: 93:8c:f8:a0:a1:da:16:e9:06:54:03:14:63:58:7e:b5:5b:6a: 86:5a:21:ed:5a:ea:b6:45:55:54:ad:57:5b:f9:7a:96:d8:bd: d2:ae:31:cc:40:96:d2:80:95:d0:71:12:37:23:32:aa:e2:f6: 16:19:1f:5e:04:b5:4c:87:4a:12:59:d9:6f:b1:8b:a7:9d:54: e7:0a:b4:de:98:b3:d1:d1:b2:54:a7:5e:59:24:8f:37:40:dc: d9:a2:c2:cc:83:84:a3:06:57:70:21:ea:1d:20:93:79:c3:46: f1:63:74:86:98:e7:1d:2d:42:a0:8e:0e:a7:c0:5e:13:da:3b: 1c:30:95:f0:0f:41:c0:18:d4:2e:36:87:38:9a:28:3d:f1:72: 90:5e:86:c1:48:5f:3c:2d:42:4d:f8:f4:5f:9e:15:b8:7d:a0: ea:90:90:9a:5b:f9:cd:23:6f:77:7d:ea:f3:b7:01:39:98:2b: 1f:b0:86:7a:43:8c:6d:98:08:62:3e:b1:18:2f:4e:bd:16:61: f5:6e:a7:d3:91:7e:a3:c7:44:c3:28:21:b7:e9:af:50:9d:46: bd:7c:ab:ab:f9:dc:74:13:be:9f:61:34:ff:a3:6d:48:aa:9e: f9:c9:d7:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbe4EbJ5Y1D2i+5gRjuI+elhqfTUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVDQzRBNDRGMDk1OTRFQjcxMUVBMUY2RjM0Qjk1OEQx OUEzQjRGRDAeFw0yNTA5MDYwMDA2MjJaFw0yNTA5MDkwNjU0MjJaMDMxMTAvBgNV BAMTKDkwMzJDNUI0NUM1NTA4NTY3N0M2ODg5MDMxQ0MyRjY5ODE5NkY4MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDONqokwQLo81MOCe68A6GS2+yz /2QbHa/6xxLs56jZSC2VyWiHNro3SFV1MkbXgZb3CnV9aVpHSNTPdQNxZmrseK9G +9CILC8uwonAbFOuHD3ak0n1VDVDCvvlRr4ihsftiMrhKtmvmfPfgPEU6EkU/ElK NroSypEl6fGeq87KLl0yT0JrOEIdJ1KwhXCdi/RluutcfaMW4RjPZt+rpZj2lbr3 5KVoQGdUBn6Z4iCFnztzuuI8uQX6Vpz2e+SjCdT9iXf2LY0oIdCUvc9xLAzBi3ox YfWdalFvTOd4M7DuV3Y1fFr45xXsie2P+AXtT0iJBC7UR6vMto+5mNZKWiXpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkDLFtFxVCFZ3xoiQMcwvaYGW+BswHwYDVR0j BBgwFoAU7sxKRPCVlOtxHqH280uVjRmjtP0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWZjOTk2Zi03MmNhLTRkNmItYTBlNy1mZjViYzQyYjA1ODkvMC9FRUNDNEE0NEYw OTU5NEVCNzExRUExRjZGMzRCOTU4RDE5QTNCNEZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUVDQzRBNDRGMDk1OTRFQjcxMUVBMUY2RjM0Qjk1OEQxOUEz QjRGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjlmYzk5NmYtNzJjYS00ZDZiLWEw ZTctZmY1YmM0MmIwNTg5LzAvRUVDQzRBNDRGMDk1OTRFQjcxMUVBMUY2RjM0Qjk1 OEQxOUEzQjRGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHZIFsDxIKwpEfx7oscpV3jvRpOM+KCh2hbp BlQDFGNYfrVbaoZaIe1a6rZFVVStV1v5epbYvdKuMcxAltKAldBxEjcjMqri9hYZ H14EtUyHShJZ2W+xi6edVOcKtN6Ys9HRslSnXlkkjzdA3NmiwsyDhKMGV3Ah6h0g k3nDRvFjdIaY5x0tQqCODqfAXhPaOxwwlfAPQcAY1C42hziaKD3xcpBehsFIXzwt Qk349F+eFbh9oOqQkJpb+c0jb3d96vO3ATmYKx+whnpDjG2YCGI+sRgvTr0WYfVu p9ORfqPHRMMoIbfpr1CdRr18q6v53HQTvp9hNP+jbUiqnvnJ16s= -----END CERTIFICATE-----Generated at Sun Sep 7 15:36:41 2025 by rpki-client