$ rpki-client -vvf repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft File: E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft (raw, json) Hash identifier: 1joxJsmv2c6AyBsCCO2gpBl+izMzqlmfVw5QZ3j6z38= Subject key identifier: 8B:F0:01:FB:71:E9:6F:D8:0C:AF:17:04:E0:BE:F0:D8:DF:FD:E9:18 Authority key identifier: E6:FE:A7:CE:7F:6F:A5:EA:E0:5E:BB:DF:D8:6F:D5:3E:84:FA:75:A8 Certificate issuer: /CN=E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8 Certificate serial: 4DD2C5044237F859745B1F2138D2A278A3307F2D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft Manifest number: AC Signing time: Thu 21 Aug 2025 20:20:45 +0000 Manifest this update: Thu 21 Aug 2025 20:15:45 +0000 Manifest next update: Mon 25 Aug 2025 00:42:45 +0000 Files and hashes: 1: E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl (hash: CpTFoI5k0PIPpM2/5jqIR8v2GDZGBI/poFPJZBJq19Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 00:42:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:d2:c5:04:42:37:f8:59:74:5b:1f:21:38:d2:a2:78:a3:30:7f:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8 Validity Not Before: Aug 21 20:15:45 2025 GMT Not After : Aug 25 00:42:45 2025 GMT Subject: CN=8BF001FB71E96FD80CAF1704E0BEF0D8DFFDE918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:92:70:06:5a:16:63:58:0a:42:ae:a1:f7:cf: 84:84:c7:2a:9f:8c:cd:aa:21:c4:67:b3:79:62:4b: 6b:07:cd:99:db:3b:7c:bc:82:b0:f2:55:35:1b:73: a8:68:95:58:20:6c:64:2a:21:d6:a5:47:d9:64:2a: 9a:d1:5a:90:ba:d1:e5:dc:a8:69:b3:5c:c8:72:ea: 8e:0e:17:d7:22:a9:65:f0:20:5b:d0:b8:f8:48:19: 57:5b:9a:c2:f0:df:c5:bd:b7:a1:41:af:96:72:d2: 0b:96:c5:c8:1f:c5:3d:f5:17:da:84:c8:3b:15:c2: e7:e9:a5:a9:7c:5e:6d:f7:3c:ea:44:d5:1f:12:b6: 59:be:3f:e1:7a:ca:af:e5:88:13:8b:09:ff:d2:84: e7:8c:84:78:b5:5f:8f:ae:7f:1f:ff:4e:4a:53:39: 84:a8:d9:5f:b1:b4:92:60:19:47:fc:eb:c2:1c:00: e7:f7:84:4f:ac:f2:44:72:3d:a4:47:08:55:95:82: 9e:ea:08:7c:6a:74:f1:2b:5e:ee:67:d3:19:7e:8c: b5:fa:ed:c2:d2:2d:28:86:1f:66:fa:2a:83:a5:d5: ff:bf:6b:3c:bd:ba:cc:2a:64:ed:49:ed:16:2d:0e: 97:9a:fc:18:6d:30:7e:97:2d:cd:35:ef:21:9c:99: 36:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:F0:01:FB:71:E9:6F:D8:0C:AF:17:04:E0:BE:F0:D8:DF:FD:E9:18 X509v3 Authority Key Identifier: keyid:E6:FE:A7:CE:7F:6F:A5:EA:E0:5E:BB:DF:D8:6F:D5:3E:84:FA:75:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:37:ad:b6:ee:4f:cc:40:46:a5:60:67:c3:5d:32:e1:a9:58: 8c:32:64:cd:82:7e:d7:79:c0:f5:13:39:0a:73:0e:b0:35:6f: 0a:35:4c:fc:80:7c:3b:9a:75:7c:0f:d3:16:3f:9b:f7:bf:85: c6:31:ba:4b:8d:f0:bc:a8:bb:fb:1d:5c:65:f8:01:e3:d8:fd: 91:28:10:7d:3a:f4:8f:a6:8d:40:1e:e9:d1:df:b8:80:f8:ba: dc:e5:33:68:f5:d3:86:4f:7d:72:4a:82:50:2a:55:a3:91:cd: bc:68:38:48:41:30:62:53:d4:58:18:f4:2f:39:06:e8:60:4e: 8c:1d:1d:17:9d:7b:d3:cd:e9:e1:6e:23:13:77:a6:83:6d:a4: 78:13:73:af:d8:94:ac:d4:6f:77:7d:a4:97:a0:cd:ca:0e:b1: 16:c6:57:9d:45:32:58:8e:58:f1:35:dc:89:1d:b7:6a:06:c9: 2b:6a:f9:2a:91:2f:96:72:09:c6:3f:1d:f3:66:13:53:bc:e4: 0a:cc:8e:32:e1:8a:ec:a8:8b:87:27:73:13:84:6f:79:5c:ae: ce:4a:8b:48:93:a1:cc:f7:56:70:9c:b0:6d:9d:fe:f5:8b:22: 58:4e:28:6e:75:d2:15:63:69:0e:30:a3:62:b8:91:3b:da:a3: dd:b2:b5:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTdLFBEI3+Fl0Wx8hONKieKMwfy0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTZGRUE3Q0U3RjZGQTVFQUUwNUVCQkRGRDg2RkQ1M0U4 NEZBNzVBODAeFw0yNTA4MjEyMDE1NDVaFw0yNTA4MjUwMDQyNDVaMDMxMTAvBgNV BAMTKDhCRjAwMUZCNzFFOTZGRDgwQ0FGMTcwNEUwQkVGMEQ4REZGREU5MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyknAGWhZjWApCrqH3z4SExyqf jM2qIcRns3liS2sHzZnbO3y8grDyVTUbc6holVggbGQqIdalR9lkKprRWpC60eXc qGmzXMhy6o4OF9ciqWXwIFvQuPhIGVdbmsLw38W9t6FBr5Zy0guWxcgfxT31F9qE yDsVwufppal8Xm33POpE1R8Stlm+P+F6yq/liBOLCf/ShOeMhHi1X4+ufx//TkpT OYSo2V+xtJJgGUf868IcAOf3hE+s8kRyPaRHCFWVgp7qCHxqdPErXu5n0xl+jLX6 7cLSLSiGH2b6KoOl1f+/azy9uswqZO1J7RYtDpea/BhtMH6XLc017yGcmTZ7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi/AB+3Hpb9gMrxcE4L7w2N/96RgwHwYDVR0j BBgwFoAU5v6nzn9vpergXrvf2G/VPoT6dagwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTMxNTlmMi0wY2YwLTQzYzYtYjI4Mi1jNjlmYmExM2ExNGEvMC9FNkZFQTdDRTdG NkZBNUVBRTA1RUJCREZEODZGRDUzRTg0RkE3NUE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTZGRUE3Q0U3RjZGQTVFQUUwNUVCQkRGRDg2RkQ1M0U4NEZB NzVBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWUzMTU5ZjItMGNmMC00M2M2LWIy ODItYzY5ZmJhMTNhMTRhLzAvRTZGRUE3Q0U3RjZGQTVFQUUwNUVCQkRGRDg2RkQ1 M0U4NEZBNzVBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD83rbbuT8xARqVgZ8NdMuGpWIwyZM2Cftd5 wPUTOQpzDrA1bwo1TPyAfDuadXwP0xY/m/e/hcYxukuN8Lyou/sdXGX4AePY/ZEo EH069I+mjUAe6dHfuID4utzlM2j104ZPfXJKglAqVaORzbxoOEhBMGJT1FgY9C85 BuhgTowdHRede9PN6eFuIxN3poNtpHgTc6/YlKzUb3d9pJegzcoOsRbGV51FMliO WPE13Ikdt2oGyStq+SqRL5ZyCcY/HfNmE1O85ArMjjLhiuyoi4cncxOEb3lcrs5K i0iTocz3VnCcsG2d/vWLIlhOKG510hVjaQ4wo2K4kTvao92ytcs= -----END CERTIFICATE-----Generated at Sat Aug 23 15:23:53 2025 by rpki-client