$ rpki-client -vvf repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft File: E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft (raw, json) Hash identifier: +R5Xk184ZeXrtfpy2hB55J9xe/F0En3eKV7FsyHY70M= Subject key identifier: F2:93:AB:ED:0D:60:48:88:22:29:5D:69:13:01:05:6C:AF:A1:CD:07 Authority key identifier: E6:FE:A7:CE:7F:6F:A5:EA:E0:5E:BB:DF:D8:6F:D5:3E:84:FA:75:A8 Certificate issuer: /CN=E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8 Certificate serial: 5133CE513BF663D15F64CEB875ED1B98E361379D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft Manifest number: 94 Signing time: Sat 28 Jun 2025 20:50:44 +0000 Manifest this update: Sat 28 Jun 2025 20:45:44 +0000 Manifest next update: Wed 02 Jul 2025 00:44:44 +0000 Files and hashes: 1: E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl (hash: kfYdIoN+n4cKrnugPQ93nAtxTbse1tujUvKR5BIxa5c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 00:44:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:33:ce:51:3b:f6:63:d1:5f:64:ce:b8:75:ed:1b:98:e3:61:37:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8 Validity Not Before: Jun 28 20:45:44 2025 GMT Not After : Jul 2 00:44:44 2025 GMT Subject: CN=F293ABED0D60488822295D691301056CAFA1CD07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:09:aa:29:5b:67:66:68:c4:fd:c0:c9:3f:ff: f3:26:36:42:51:3c:d7:ba:65:12:88:a4:60:3c:0f: f7:d2:ea:15:f8:24:4e:47:3b:62:6a:9f:1b:28:e2: 22:fc:2d:26:32:27:be:6f:77:cf:e2:ba:d3:96:f0: 18:bd:bf:46:51:85:98:16:ce:97:1a:8d:b9:46:83: ed:ec:f0:0f:4e:23:b6:4b:b6:17:6b:d2:f3:7a:ea: d3:de:c5:33:13:4c:2f:fa:0f:ef:05:33:9f:e4:8f: b4:36:e8:c5:bf:09:9a:c4:27:7f:7f:b9:82:df:4d: a5:e1:60:ba:b4:ef:53:ad:f7:c5:7f:6d:9c:ea:1b: 97:6f:8e:e7:be:59:22:e4:63:15:f9:95:14:96:c7: d6:79:c6:da:17:aa:a9:17:a6:14:ef:d0:da:0b:ea: b3:f9:0e:a6:a9:e9:02:61:fb:46:41:79:60:07:e4: 17:33:b4:ed:d1:82:df:d9:ab:51:2f:ab:97:53:cc: c5:bc:83:3f:5b:80:a7:01:1b:31:4c:da:7b:9c:fc: 26:80:b8:09:1e:07:75:39:2a:d7:34:d2:45:41:31: d3:66:32:d9:43:16:14:d8:18:85:67:d5:69:7a:16: 46:c8:3a:c9:31:e7:0e:f4:ce:9e:69:ef:41:7f:e4: 72:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:93:AB:ED:0D:60:48:88:22:29:5D:69:13:01:05:6C:AF:A1:CD:07 X509v3 Authority Key Identifier: keyid:E6:FE:A7:CE:7F:6F:A5:EA:E0:5E:BB:DF:D8:6F:D5:3E:84:FA:75:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:26:2b:de:1e:86:5f:f0:69:6b:06:1b:cf:12:15:9e:2a:de: e7:ff:79:af:f2:4c:3f:85:f0:1e:e4:5d:8b:f2:d7:18:a6:26: dc:0f:5e:59:ca:c7:d4:ba:cd:a1:c5:bd:3f:0d:80:22:74:0c: a1:96:0e:72:8d:f5:e8:6c:04:fd:81:34:05:f5:4a:f0:ae:67: 1e:78:99:45:7b:60:08:c1:a1:56:24:6f:5d:a4:f9:f8:82:92: d1:61:49:dd:1a:b4:69:52:48:bb:f5:a7:ae:f9:8c:b8:d8:40: f3:79:ab:e5:76:ad:9c:39:40:c1:dd:5d:29:f9:74:20:de:bd: 4e:e9:4b:df:7e:7b:82:e2:99:c7:21:88:b8:4c:e5:fd:a3:40: 50:df:aa:69:51:f3:e3:ac:84:bc:38:b0:e9:94:30:0e:ba:50: d0:77:f2:c3:4f:cf:e6:9b:1d:47:86:26:1f:7f:a2:e6:44:d3: 91:50:6e:5b:7b:67:ed:b9:18:02:ce:37:2f:58:18:f2:02:ad: f2:f9:ee:10:cf:af:97:0d:26:a8:99:6d:8e:2c:9f:28:bc:21: 87:14:e0:21:06:49:34:db:08:46:51:43:ee:54:24:35:b0:28: 17:ef:67:b7:c1:17:e7:96:f8:a7:ae:bf:44:bb:35:03:89:ef: d1:5b:95:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUTPOUTv2Y9FfZM64de0bmONhN50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTZGRUE3Q0U3RjZGQTVFQUUwNUVCQkRGRDg2RkQ1M0U4 NEZBNzVBODAeFw0yNTA2MjgyMDQ1NDRaFw0yNTA3MDIwMDQ0NDRaMDMxMTAvBgNV BAMTKEYyOTNBQkVEMEQ2MDQ4ODgyMjI5NUQ2OTEzMDEwNTZDQUZBMUNEMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaCaopW2dmaMT9wMk///MmNkJR PNe6ZRKIpGA8D/fS6hX4JE5HO2Jqnxso4iL8LSYyJ75vd8/iutOW8Bi9v0ZRhZgW zpcajblGg+3s8A9OI7ZLthdr0vN66tPexTMTTC/6D+8FM5/kj7Q26MW/CZrEJ39/ uYLfTaXhYLq071Ot98V/bZzqG5dvjue+WSLkYxX5lRSWx9Z5xtoXqqkXphTv0NoL 6rP5Dqap6QJh+0ZBeWAH5BcztO3Rgt/Zq1Evq5dTzMW8gz9bgKcBGzFM2nuc/CaA uAkeB3U5Ktc00kVBMdNmMtlDFhTYGIVn1Wl6FkbIOskx5w70zp5p70F/5HLRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8pOr7Q1gSIgiKV1pEwEFbK+hzQcwHwYDVR0j BBgwFoAU5v6nzn9vpergXrvf2G/VPoT6dagwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTMxNTlmMi0wY2YwLTQzYzYtYjI4Mi1jNjlmYmExM2ExNGEvMC9FNkZFQTdDRTdG NkZBNUVBRTA1RUJCREZEODZGRDUzRTg0RkE3NUE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTZGRUE3Q0U3RjZGQTVFQUUwNUVCQkRGRDg2RkQ1M0U4NEZB NzVBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWUzMTU5ZjItMGNmMC00M2M2LWIy ODItYzY5ZmJhMTNhMTRhLzAvRTZGRUE3Q0U3RjZGQTVFQUUwNUVCQkRGRDg2RkQ1 M0U4NEZBNzVBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACcmK94ehl/waWsGG88SFZ4q3uf/ea/yTD+F 8B7kXYvy1ximJtwPXlnKx9S6zaHFvT8NgCJ0DKGWDnKN9ehsBP2BNAX1SvCuZx54 mUV7YAjBoVYkb12k+fiCktFhSd0atGlSSLv1p675jLjYQPN5q+V2rZw5QMHdXSn5 dCDevU7pS99+e4LimcchiLhM5f2jQFDfqmlR8+OshLw4sOmUMA66UNB38sNPz+ab HUeGJh9/ouZE05FQblt7Z+25GALONy9YGPICrfL57hDPr5cNJqiZbY4snyi8IYcU 4CEGSTTbCEZRQ+5UJDWwKBfvZ7fBF+eW+Keuv0S7NQOJ79Fble0= -----END CERTIFICATE-----Generated at Sun Jun 29 18:08:59 2025 by rpki-client