$ rpki-client -vvf repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft File: E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft (raw, json) Hash identifier: 2ziigjP6X0gOyD6hRS1eSTGZGjSJMm0EF+bxlPrcGPw= Subject key identifier: 93:76:02:A7:DC:3E:1B:6D:3A:9E:4E:C0:F7:A0:11:8C:B6:80:C6:B8 Authority key identifier: E1:B7:08:FE:CC:3E:90:64:3F:33:B8:31:1E:29:F1:B4:6F:E9:2B:7F Certificate issuer: /CN=E1B708FECC3E90643F33B8311E29F1B46FE92B7F Certificate serial: 04D605A4F0E659C16C5EAF90707CF7E29E8E8B8B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft Manifest number: 0190 Signing time: Sat 06 Sep 2025 08:31:39 +0000 Manifest this update: Sat 06 Sep 2025 08:26:39 +0000 Manifest next update: Tue 09 Sep 2025 12:57:39 +0000 Files and hashes: 1: E1B708FECC3E90643F33B8311E29F1B46FE92B7F.crl (hash: KlD6dfnKcJaUFZdXAB8xOTJ0YbjoY9fJGWKwuFyQE1o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.crl rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 12:57:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:d6:05:a4:f0:e6:59:c1:6c:5e:af:90:70:7c:f7:e2:9e:8e:8b:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1B708FECC3E90643F33B8311E29F1B46FE92B7F Validity Not Before: Sep 6 08:26:39 2025 GMT Not After : Sep 9 12:57:39 2025 GMT Subject: CN=937602A7DC3E1B6D3A9E4EC0F7A0118CB680C6B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:67:dd:64:38:c7:b1:7e:d6:32:33:ff:9d:a4: 3c:92:11:1d:1b:3a:0b:94:c2:7c:2f:de:7e:c9:18: 35:ac:74:bf:e7:7f:02:3c:f5:6a:ab:4f:dc:0e:54: c4:94:a4:b8:81:ba:0b:c4:56:92:6b:d5:b7:84:7c: 46:4e:aa:52:98:a3:a3:a0:12:ac:de:ca:2e:b1:b6: 55:ca:aa:b4:40:33:38:87:14:c7:3d:0b:2d:25:42: 57:2a:46:1c:e1:e9:53:00:39:57:2a:eb:38:3f:f8: 76:63:df:6a:26:56:6f:50:06:07:fa:b7:ad:0c:3e: 3b:c0:5f:b1:cb:d4:5e:78:0d:ab:f0:3c:28:8c:4a: 12:fc:8f:71:05:aa:e2:64:ff:ba:66:b2:c2:64:77: d2:3f:63:18:43:da:68:7f:d7:fe:f3:59:a4:62:db: 8f:12:e0:c4:98:fd:e1:fc:fb:fd:a8:81:a7:71:6f: 64:c5:69:3d:f2:80:9c:2a:48:41:46:da:09:85:22: da:14:a8:51:a4:ef:da:71:ed:2e:88:c8:a7:3e:93: 93:4e:8b:d7:eb:72:2e:32:47:1a:a2:89:71:7b:a9: d3:0c:97:92:de:14:db:54:4a:66:91:37:8a:56:a6: 62:9c:de:36:c3:29:4b:b2:81:22:10:87:bd:eb:fa: eb:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:76:02:A7:DC:3E:1B:6D:3A:9E:4E:C0:F7:A0:11:8C:B6:80:C6:B8 X509v3 Authority Key Identifier: keyid:E1:B7:08:FE:CC:3E:90:64:3F:33:B8:31:1E:29:F1:B4:6F:E9:2B:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:ff:90:e0:f0:d8:81:cd:76:dd:66:cb:b8:a3:4e:fc:13:1f: f6:6f:72:a8:27:18:f8:e0:f2:32:3e:fc:c1:3d:05:b3:8d:9a: 50:d7:37:03:c2:0c:41:7c:0d:59:01:99:ce:b6:4f:c1:aa:fd: ad:c5:cf:21:13:27:f4:63:0a:9f:95:d3:3c:74:ee:6b:56:97: 9c:b4:78:d4:3b:ac:a2:14:75:c6:71:8b:a5:98:ec:b8:01:64: 20:5b:9e:76:98:54:ba:6f:60:eb:93:3b:81:1f:55:7d:28:fc: 90:59:66:77:2c:ed:85:db:ac:fe:43:45:fa:81:2c:bb:92:7c: db:59:e7:e8:4d:8f:de:95:f0:71:e2:72:e3:ca:ac:27:30:06: aa:63:58:58:3d:4a:2f:fe:88:67:6b:79:9c:de:d9:7e:b4:a0: cb:33:7c:a6:06:14:93:4a:b4:9c:dd:5f:b8:bc:66:9c:d4:75: a5:f5:c0:2b:5b:8a:38:d1:81:9d:4c:dd:15:b3:f7:d1:ae:89: 7e:c9:84:10:8f:01:16:49:a9:1a:50:c0:f2:b4:f9:c6:76:22: 44:93:a8:53:63:f2:c9:c7:dc:5d:15:ff:fd:19:c0:cf:52:a9: e3:cb:65:66:ae:2a:3d:d6:db:f3:4c:c3:ee:e1:26:94:88:62: ed:d0:2c:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBNYFpPDmWcFsXq+QcHz34p6Oi4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFCNzA4RkVDQzNFOTA2NDNGMzNCODMxMUUyOUYxQjQ2 RkU5MkI3RjAeFw0yNTA5MDYwODI2MzlaFw0yNTA5MDkxMjU3MzlaMDMxMTAvBgNV BAMTKDkzNzYwMkE3REMzRTFCNkQzQTlFNEVDMEY3QTAxMThDQjY4MEM2QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmZ91kOMexftYyM/+dpDySER0b OguUwnwv3n7JGDWsdL/nfwI89WqrT9wOVMSUpLiBugvEVpJr1beEfEZOqlKYo6Og Eqzeyi6xtlXKqrRAMziHFMc9Cy0lQlcqRhzh6VMAOVcq6zg/+HZj32omVm9QBgf6 t60MPjvAX7HL1F54DavwPCiMShL8j3EFquJk/7pmssJkd9I/YxhD2mh/1/7zWaRi 248S4MSY/eH8+/2ogadxb2TFaT3ygJwqSEFG2gmFItoUqFGk79px7S6IyKc+k5NO i9frci4yRxqiiXF7qdMMl5LeFNtUSmaRN4pWpmKc3jbDKUuygSIQh73r+usXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk3YCp9w+G206nk7A96ARjLaAxrgwHwYDVR0j BBgwFoAU4bcI/sw+kGQ/M7gxHinxtG/pK38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZjRkMWMzNi00YTMxLTQ4NTctOWUzNi0wZGRmM2Q2OTFlYjUvMC9FMUI3MDhGRUND M0U5MDY0M0YzM0I4MzExRTI5RjFCNDZGRTkyQjdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTFCNzA4RkVDQzNFOTA2NDNGMzNCODMxMUUyOUYxQjQ2RkU5 MkI3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmY0ZDFjMzYtNGEzMS00ODU3LTll MzYtMGRkZjNkNjkxZWI1LzAvRTFCNzA4RkVDQzNFOTA2NDNGMzNCODMxMUUyOUYx QjQ2RkU5MkI3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALr/kODw2IHNdt1my7ijTvwTH/ZvcqgnGPjg 8jI+/ME9BbONmlDXNwPCDEF8DVkBmc62T8Gq/a3FzyETJ/RjCp+V0zx07mtWl5y0 eNQ7rKIUdcZxi6WY7LgBZCBbnnaYVLpvYOuTO4EfVX0o/JBZZncs7YXbrP5DRfqB LLuSfNtZ5+hNj96V8HHicuPKrCcwBqpjWFg9Si/+iGdreZze2X60oMszfKYGFJNK tJzdX7i8ZpzUdaX1wCtbijjRgZ1M3RWz99GuiX7JhBCPARZJqRpQwPK0+cZ2IkST qFNj8snH3F0V//0ZwM9SqePLZWauKj3W2/NMw+7hJpSIYu3QLMs= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:43 2025 by rpki-client