$ rpki-client -vvf repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft File: 1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft (raw, json) Hash identifier: 0IXaQCXgKcxB62HPLk5BCy4dposgwBb5MHhtKKBtepE= Subject key identifier: 8B:FC:C5:A5:E9:7E:F6:56:91:60:BB:32:2D:53:07:F2:31:88:F2:5D Authority key identifier: 1E:AF:FD:F7:6C:26:1A:0C:98:01:D9:F2:B0:2D:5B:A1:49:67:F3:CD Certificate issuer: /CN=1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD Certificate serial: 36B3FE2805503C0D74AD5E3E1DB36E8579B29C59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft Manifest number: 0173 Signing time: Sat 07 Jun 2025 13:41:22 +0000 Manifest this update: Sat 07 Jun 2025 13:36:22 +0000 Manifest next update: Tue 10 Jun 2025 16:07:22 +0000 Files and hashes: 1: 3130332e3139302e39342e302f32342d3234203d3e20313530353531.roa (hash: ZLit+8UW98ngBL2LPf2rRbdHr7opbJkANqxKGJG/n4c=) 2: 1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.crl (hash: vU3GkZfx7zSg7rXVWtD/YnkU+GqCFBeEr0jEhzNkAMg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.crl rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 16:07:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:b3:fe:28:05:50:3c:0d:74:ad:5e:3e:1d:b3:6e:85:79:b2:9c:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD Validity Not Before: Jun 7 13:36:22 2025 GMT Not After : Jun 10 16:07:22 2025 GMT Subject: CN=8BFCC5A5E97EF6569160BB322D5307F23188F25D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c5:56:c7:cd:60:09:42:45:5f:2a:8a:1e:fc: 89:8b:47:d6:d8:f8:cb:b6:c3:dc:99:58:49:7f:a9: 31:93:99:e7:38:81:b0:8c:bc:fd:6a:aa:1d:a9:c9: c2:8b:bf:46:b0:2a:6b:54:9d:c2:24:69:7c:f4:aa: 82:eb:6f:74:60:23:90:ef:a3:8b:ea:be:73:6f:a5: bf:c6:2e:43:90:93:92:4e:fd:d6:a8:19:47:38:cd: 0c:73:82:b5:d3:91:e5:20:5c:6c:c5:26:6a:26:bb: 8c:f6:33:0a:7d:76:a2:c0:1d:83:e1:a2:6a:09:8a: ab:bf:40:f4:df:4a:50:64:9f:d3:b3:f8:27:9a:72: e4:f9:e5:64:bd:1d:7b:8b:28:f8:7b:84:04:51:f2: d5:22:16:a0:d6:50:93:b9:bf:b2:ae:a4:20:f7:2c: c2:c1:ff:75:95:36:d7:a1:1a:ae:85:fd:2c:83:b6: 6b:58:e9:3d:7a:59:b9:3a:e5:95:1b:0b:d4:48:d4: 29:13:d3:a2:44:f9:eb:1d:4c:84:8d:14:8f:18:6e: 6e:12:69:ed:dc:e6:36:18:be:ca:b9:ce:92:f3:2a: 06:e9:f7:4e:5a:22:84:29:7c:a8:b8:72:5e:34:fa: 10:8b:b0:4b:4e:61:f7:4c:d0:5a:de:d5:44:e0:4b: 04:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:FC:C5:A5:E9:7E:F6:56:91:60:BB:32:2D:53:07:F2:31:88:F2:5D X509v3 Authority Key Identifier: keyid:1E:AF:FD:F7:6C:26:1A:0C:98:01:D9:F2:B0:2D:5B:A1:49:67:F3:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:b1:75:77:3e:b1:ce:4f:4f:b8:13:b7:e4:d4:71:53:a8:81: 56:8a:49:fa:30:63:79:a1:b4:a8:68:29:3c:63:12:cd:91:bc: 4e:0b:9f:ee:f9:5f:28:05:b7:f2:46:01:14:62:95:64:d4:e9: 5e:33:8e:73:0c:ad:9a:92:05:f0:1f:5a:e7:74:b8:87:58:11: 4e:26:88:56:f0:9a:43:ad:e1:f5:c0:f9:4f:4c:e5:65:11:6f: c5:04:b1:3e:2e:3e:4e:f9:43:89:c9:1f:1c:33:21:c1:8f:dc: 74:c9:b1:09:e1:d2:2b:37:ae:a7:5b:09:39:6f:7c:9a:35:01: 49:d8:69:0b:84:36:d7:7f:c4:8a:b3:33:35:7d:ab:db:e0:3a: 35:9b:d0:8e:ab:f1:25:19:9a:9e:78:c1:4a:50:38:eb:89:41: ea:d6:fa:ae:59:2d:66:ce:20:1c:50:9c:a8:56:90:9b:2b:e7: 5e:6e:bf:83:eb:03:55:06:47:e0:32:d2:3b:a8:ea:c8:fb:d1: 28:8c:f9:05:46:68:38:3e:2d:af:ba:25:d8:16:b5:14:ad:c7: 67:60:55:10:86:00:cb:f9:ac:a0:3f:a8:d9:f4:12:bf:72:51: 8c:0f:d6:f2:f4:b5:95:81:78:3e:ae:84:49:0f:38:c7:60:53: 60:29:be:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNrP+KAVQPA10rV4+HbNuhXmynFkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVBRkZERjc2QzI2MUEwQzk4MDFEOUYyQjAyRDVCQTE0 OTY3RjNDRDAeFw0yNTA2MDcxMzM2MjJaFw0yNTA2MTAxNjA3MjJaMDMxMTAvBgNV BAMTKDhCRkNDNUE1RTk3RUY2NTY5MTYwQkIzMjJENTMwN0YyMzE4OEYyNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpxVbHzWAJQkVfKooe/ImLR9bY +Mu2w9yZWEl/qTGTmec4gbCMvP1qqh2pycKLv0awKmtUncIkaXz0qoLrb3RgI5Dv o4vqvnNvpb/GLkOQk5JO/daoGUc4zQxzgrXTkeUgXGzFJmomu4z2Mwp9dqLAHYPh omoJiqu/QPTfSlBkn9Oz+CeacuT55WS9HXuLKPh7hARR8tUiFqDWUJO5v7KupCD3 LMLB/3WVNtehGq6F/SyDtmtY6T16Wbk65ZUbC9RI1CkT06JE+esdTISNFI8Ybm4S ae3c5jYYvsq5zpLzKgbp905aIoQpfKi4cl40+hCLsEtOYfdM0Fre1UTgSwSTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi/zFpel+9laRYLsyLVMH8jGI8l0wHwYDVR0j BBgwFoAUHq/992wmGgyYAdnysC1boUln880wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Nzk4MDkxZS1jMWFlLTQwNDktOTZkMi1jNGNlMzdmZGMzNWIvMC8xRUFGRkRGNzZD MjYxQTBDOTgwMUQ5RjJCMDJENUJBMTQ5NjdGM0NELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUVBRkZERjc2QzI2MUEwQzk4MDFEOUYyQjAyRDVCQTE0OTY3 RjNDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc5ODA5MWUtYzFhZS00MDQ5LTk2 ZDItYzRjZTM3ZmRjMzViLzAvMUVBRkZERjc2QzI2MUEwQzk4MDFEOUYyQjAyRDVC QTE0OTY3RjNDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACqxdXc+sc5PT7gTt+TUcVOogVaKSfowY3mh tKhoKTxjEs2RvE4Ln+75XygFt/JGARRilWTU6V4zjnMMrZqSBfAfWud0uIdYEU4m iFbwmkOt4fXA+U9M5WURb8UEsT4uPk75Q4nJHxwzIcGP3HTJsQnh0is3rqdbCTlv fJo1AUnYaQuENtd/xIqzMzV9q9vgOjWb0I6r8SUZmp54wUpQOOuJQerW+q5ZLWbO IBxQnKhWkJsr515uv4PrA1UGR+Ay0juo6sj70SiM+QVGaDg+La+6JdgWtRStx2dg VRCGAMv5rKA/qNn0Er9yUYwP1vL0tZWBeD6uhEkPOMdgU2Apvic= -----END CERTIFICATE-----Generated at Sun Jun 8 01:29:30 2025 by rpki-client