$ rpki-client -vvf repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.mft File: 1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.mft (raw, json) Hash identifier: tImjEoPQf+V44+GoibNWDddX0LfqpMmK+g4d7APjFp0= Subject key identifier: 95:83:B3:DA:0D:26:BC:35:EA:C3:F1:61:4E:33:00:C9:9E:C4:84:16 Authority key identifier: 1E:EA:71:B4:C7:0A:47:D5:3B:E3:20:4F:E2:C4:8C:EF:92:7E:C7:31 Certificate issuer: /CN=1EEA71B4C70A47D53BE3204FE2C48CEF927EC731 Certificate serial: 5EA6715D6F20259F3201DB70C036DC464EE940DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.mft Manifest number: 015F Signing time: Sat 23 Aug 2025 10:41:56 +0000 Manifest this update: Sat 23 Aug 2025 10:36:56 +0000 Manifest next update: Tue 26 Aug 2025 14:17:56 +0000 Files and hashes: 1: 3130332e31342e37342e302f32342d3234203d3e20313334363332.roa (hash: kRl6IfQghVcIhK14CpOe+4+3tl4P/DD5zma96SwY1Qw=) 2: 1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.crl (hash: jH12xhIMi84pQ6L/EkX0raMCr3Tc7bND1DHobAA0O4w=) 3: 3130332e31342e37352e302f32342d3234203d3e20313334363332.roa (hash: d03ba4w3/cMHa6YrFwbQZXYz0UgEChS2sqo8pZVU9h0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.crl rsync://repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 14:17:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:a6:71:5d:6f:20:25:9f:32:01:db:70:c0:36:dc:46:4e:e9:40:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EEA71B4C70A47D53BE3204FE2C48CEF927EC731 Validity Not Before: Aug 23 10:36:56 2025 GMT Not After : Aug 26 14:17:56 2025 GMT Subject: CN=9583B3DA0D26BC35EAC3F1614E3300C99EC48416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:22:2d:6e:fb:ff:65:c3:33:33:c6:75:e0:02: 02:d6:25:a8:36:4f:2c:06:96:c6:87:b1:2b:87:47: 3e:3a:b4:86:6e:a7:af:0f:92:2b:6c:5f:06:34:56: b8:be:50:3e:5e:1e:f2:6e:ae:b8:27:c6:70:d3:c7: c3:9a:2d:43:2b:15:59:1d:dc:1b:5d:9a:35:e8:8e: 29:d1:33:bd:ca:fa:b6:17:d0:37:24:bd:6d:34:a3: ec:d8:f2:88:7b:6b:20:11:c3:be:4c:19:87:f1:44: 8f:e2:5c:26:8a:05:79:1a:cf:c4:4d:9a:75:7d:e1: cb:a8:3f:34:6b:09:cc:3d:ff:7b:c0:e3:0b:55:8d: b3:b0:69:4c:75:fd:ee:08:11:62:0f:d1:a8:0b:21: 9d:ea:fd:aa:c7:f9:8d:78:04:ce:12:d8:41:f7:e7: 57:74:cf:7e:fe:96:6a:6d:89:f5:4c:96:e5:8f:b5: 91:78:be:da:b3:b3:46:b0:4a:f7:9f:3d:93:e8:11: 6e:ac:5e:bd:17:ab:66:3c:7a:de:e0:fb:fc:01:f5: 3b:ba:a7:8d:98:8c:1b:d1:77:0d:e2:e6:12:aa:aa: b3:50:bf:36:6b:f9:3a:cf:2e:f8:95:75:47:86:1a: 5a:e0:bd:1b:44:cf:4e:f8:55:c7:bc:bb:9c:03:65: 31:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:83:B3:DA:0D:26:BC:35:EA:C3:F1:61:4E:33:00:C9:9E:C4:84:16 X509v3 Authority Key Identifier: keyid:1E:EA:71:B4:C7:0A:47:D5:3B:E3:20:4F:E2:C4:8C:EF:92:7E:C7:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:e2:65:49:ba:ad:3d:e5:4a:8b:09:73:85:26:c8:54:a7:f7: c2:d0:f5:fd:85:0e:d5:2f:a1:09:3b:34:7a:50:49:29:32:a7: aa:8b:8b:7d:af:a0:d8:4f:ac:a9:94:76:58:02:7a:a6:10:87: 45:32:f5:39:a2:28:91:53:45:e8:50:ce:a5:ed:a9:25:67:55: 4a:01:ad:00:b3:ac:b3:fc:b5:7d:cf:17:9f:d8:e2:81:e8:0a: fd:ae:7f:c1:09:c6:6a:d9:c4:aa:f5:b8:3e:72:3e:b2:de:72: 61:ea:14:c6:8c:8c:d9:55:9f:a0:c7:f0:29:80:83:fe:ec:82: d7:bc:51:12:13:f8:83:dc:21:38:37:fb:76:f8:ce:0a:b1:4b: c2:6d:3c:09:a5:90:48:49:6a:cf:d8:83:d3:63:a4:c2:9c:d9: ba:71:42:95:b1:20:cc:3a:94:e5:4d:0d:7a:0f:a5:31:ce:01: 29:75:50:64:2d:38:03:22:be:80:29:66:46:d1:41:dd:b2:e9: ff:35:69:12:db:f4:8d:00:4e:97:ca:c6:75:0d:69:a2:1a:2d: e1:68:16:4e:6d:98:df:57:37:f6:f5:9c:81:56:6c:b0:de:66: 7f:fb:8c:aa:ea:00:4f:91:46:d3:ec:e8:a5:eb:13:14:78:c3: 34:39:08:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXqZxXW8gJZ8yAdtwwDbcRk7pQNowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVFQTcxQjRDNzBBNDdENTNCRTMyMDRGRTJDNDhDRUY5 MjdFQzczMTAeFw0yNTA4MjMxMDM2NTZaFw0yNTA4MjYxNDE3NTZaMDMxMTAvBgNV BAMTKDk1ODNCM0RBMEQyNkJDMzVFQUMzRjE2MTRFMzMwMEM5OUVDNDg0MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbIi1u+/9lwzMzxnXgAgLWJag2 TywGlsaHsSuHRz46tIZup68PkitsXwY0Vri+UD5eHvJurrgnxnDTx8OaLUMrFVkd 3BtdmjXojinRM73K+rYX0DckvW00o+zY8oh7ayARw75MGYfxRI/iXCaKBXkaz8RN mnV94cuoPzRrCcw9/3vA4wtVjbOwaUx1/e4IEWIP0agLIZ3q/arH+Y14BM4S2EH3 51d0z37+lmptifVMluWPtZF4vtqzs0awSvefPZPoEW6sXr0Xq2Y8et7g+/wB9Tu6 p42YjBvRdw3i5hKqqrNQvzZr+TrPLviVdUeGGlrgvRtEz074Vce8u5wDZTHxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlYOz2g0mvDXqw/FhTjMAyZ7EhBYwHwYDVR0j BBgwFoAUHupxtMcKR9U74yBP4sSM75J+xzEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MDAwZTIzZS1mNDRhLTRjZmMtYmY1Ni1kOTlhMDkyZDczMTQvMC8xRUVBNzFCNEM3 MEE0N0Q1M0JFMzIwNEZFMkM0OENFRjkyN0VDNzMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUVFQTcxQjRDNzBBNDdENTNCRTMyMDRGRTJDNDhDRUY5MjdF QzczMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTAwMGUyM2UtZjQ0YS00Y2ZjLWJm NTYtZDk5YTA5MmQ3MzE0LzAvMUVFQTcxQjRDNzBBNDdENTNCRTMyMDRGRTJDNDhD RUY5MjdFQzczMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGDiZUm6rT3lSosJc4UmyFSn98LQ9f2FDtUv oQk7NHpQSSkyp6qLi32voNhPrKmUdlgCeqYQh0Uy9TmiKJFTRehQzqXtqSVnVUoB rQCzrLP8tX3PF5/Y4oHoCv2uf8EJxmrZxKr1uD5yPrLecmHqFMaMjNlVn6DH8CmA g/7sgte8URIT+IPcITg3+3b4zgqxS8JtPAmlkEhJas/Yg9NjpMKc2bpxQpWxIMw6 lOVNDXoPpTHOASl1UGQtOAMivoApZkbRQd2y6f81aRLb9I0ATpfKxnUNaaIaLeFo Fk5tmN9XN/b1nIFWbLDeZn/7jKrqAE+RRtPs6KXrExR4wzQ5CG8= -----END CERTIFICATE-----Generated at Sat Aug 23 20:49:59 2025 by rpki-client