$ rpki-client -vvf repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft File: EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft (raw, json) Hash identifier: y8WyRpQgg4vw2ax8vM1OW/K2FmGkvYe0VuR5RcvXPMw= Subject key identifier: 12:65:ED:E1:37:70:D8:51:DB:1B:19:B8:10:92:CF:47:AA:78:3A:2C Authority key identifier: EE:C1:A7:BF:2D:95:D0:BA:FE:37:10:5E:4B:B1:BB:23:60:1D:D1:DB Certificate issuer: /CN=EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB Certificate serial: 5AF0EE3A2E53DA00B0D02A43565D0493BF92A004 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft Manifest number: B5 Signing time: Thu 21 Aug 2025 14:52:10 +0000 Manifest this update: Thu 21 Aug 2025 14:47:10 +0000 Manifest next update: Sun 24 Aug 2025 22:39:10 +0000 Files and hashes: 1: EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.crl (hash: 9WiI4eddj3oKO2o38WIrItox1DylLn8ZhpCw7GtUV8A=) 2: 3136302e32352e34352e302f32342d3234203d3e20313533303639.roa (hash: pjrXRUj5r2IszWCXojX+FWGkandw2VMiyslpGWMGbUA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.crl rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 22:39:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:f0:ee:3a:2e:53:da:00:b0:d0:2a:43:56:5d:04:93:bf:92:a0:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB Validity Not Before: Aug 21 14:47:10 2025 GMT Not After : Aug 24 22:39:10 2025 GMT Subject: CN=1265EDE13770D851DB1B19B81092CF47AA783A2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ca:0a:48:e1:89:e9:dd:17:17:fb:2c:78:3b: 98:9e:4f:64:d2:29:9d:40:8b:de:18:eb:18:c9:60: 13:b3:28:f5:31:68:5f:33:48:a0:e5:74:fb:d7:12: 58:46:6f:43:ce:5f:1b:dd:b9:85:30:d9:29:8f:50: dd:43:06:52:7b:b8:fe:27:1b:8e:8f:d0:5b:66:2b: 99:92:5e:7f:64:a1:39:51:3f:b1:55:f6:69:af:31: a2:97:1b:28:5f:fa:aa:1a:aa:61:e1:b4:38:91:fc: 71:36:02:45:a7:23:94:81:20:61:79:7f:dc:ba:42: 86:56:25:ed:27:f4:bf:2e:b8:e0:6a:68:af:69:ea: 27:85:2e:85:f9:e2:8e:cc:2e:b9:a0:00:ba:c6:0f: 52:7b:9d:8b:77:fb:cb:7e:5e:e8:b8:6c:67:02:dd: 86:d3:43:db:a8:52:b3:cd:4c:aa:1a:95:0e:05:20: 50:91:1d:d3:e7:1a:5b:7c:2d:7e:f4:41:7d:68:5c: 80:8c:6e:bd:d1:48:9c:3b:8e:78:b9:a6:99:75:a5: 48:41:c2:4a:b7:bc:17:b3:ae:9d:76:c8:88:12:dc: 29:77:22:5f:3d:02:f0:c2:9f:8b:4b:57:7d:7a:78: a5:54:5b:0b:26:d7:35:01:ef:dd:8d:4d:5d:8b:f2: 42:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:65:ED:E1:37:70:D8:51:DB:1B:19:B8:10:92:CF:47:AA:78:3A:2C X509v3 Authority Key Identifier: keyid:EE:C1:A7:BF:2D:95:D0:BA:FE:37:10:5E:4B:B1:BB:23:60:1D:D1:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:56:df:9d:65:8a:fb:47:2c:87:45:6d:1a:20:9d:80:fa:7c: ae:69:15:75:9a:9f:49:32:bd:94:1e:14:4a:fc:ea:47:af:05: f1:50:0f:38:a6:3b:bd:79:91:55:c9:d5:45:2c:b9:b2:8f:15: e1:dd:aa:f8:f7:03:f3:2c:56:98:57:75:de:8d:ce:48:fc:c5: 1c:16:54:4b:05:08:d6:c9:6b:a8:11:8d:e3:36:c3:31:ff:fc: 1c:10:38:15:c8:66:2c:9c:51:a4:ca:e9:a1:2b:dc:76:1d:ba: f4:eb:5b:54:f0:3d:30:72:03:63:0e:f2:44:df:b0:40:0e:2e: ae:06:81:be:de:e6:a0:75:00:55:98:44:f2:48:5a:87:a1:c1: 4a:34:69:bb:d9:50:28:38:48:f8:db:c8:7d:5e:f2:33:f4:fa: 21:79:0d:78:b4:95:b6:9f:0f:92:58:62:ec:9c:fa:ae:c9:ed: ee:4f:7e:3b:01:c8:fa:6e:45:26:21:65:c1:74:aa:22:4a:fc: e9:5a:0d:d3:f0:1d:74:81:fe:9c:7e:1f:d8:06:bb:8f:74:78: 3e:6d:dc:4c:7e:bb:45:0f:41:30:be:03:3b:39:76:75:00:d6: cb:4d:f3:b9:98:b8:40:b5:a5:a0:5f:d5:64:dc:c7:73:0b:3b: d5:16:40:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWvDuOi5T2gCw0CpDVl0Ek7+SoAQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVDMUE3QkYyRDk1RDBCQUZFMzcxMDVFNEJCMUJCMjM2 MDFERDFEQjAeFw0yNTA4MjExNDQ3MTBaFw0yNTA4MjQyMjM5MTBaMDMxMTAvBgNV BAMTKDEyNjVFREUxMzc3MEQ4NTFEQjFCMTlCODEwOTJDRjQ3QUE3ODNBMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTygpI4Ynp3RcX+yx4O5ieT2TS KZ1Ai94Y6xjJYBOzKPUxaF8zSKDldPvXElhGb0POXxvduYUw2SmPUN1DBlJ7uP4n G46P0FtmK5mSXn9koTlRP7FV9mmvMaKXGyhf+qoaqmHhtDiR/HE2AkWnI5SBIGF5 f9y6QoZWJe0n9L8uuOBqaK9p6ieFLoX54o7MLrmgALrGD1J7nYt3+8t+Xui4bGcC 3YbTQ9uoUrPNTKoalQ4FIFCRHdPnGlt8LX70QX1oXICMbr3RSJw7jni5ppl1pUhB wkq3vBezrp12yIgS3Cl3Il89AvDCn4tLV316eKVUWwsm1zUB792NTV2L8kKVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEmXt4Tdw2FHbGxm4EJLPR6p4OiwwHwYDVR0j BBgwFoAU7sGnvy2V0Lr+NxBeS7G7I2Ad0dswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzY1NjFkNC0yM2M4LTRjOWItODkwZS00ZjI2MzJlNTJjOTcvMC9FRUMxQTdCRjJE OTVEMEJBRkUzNzEwNUU0QkIxQkIyMzYwMUREMURCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRUVDMUE3QkYyRDk1RDBCQUZFMzcxMDVFNEJCMUJCMjM2MDFE RDFEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjM2NTYxZDQtMjNjOC00YzliLTg5 MGUtNGYyNjMyZTUyYzk3LzAvRUVDMUE3QkYyRDk1RDBCQUZFMzcxMDVFNEJCMUJC MjM2MDFERDFEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGlW351livtHLIdFbRognYD6fK5pFXWan0ky vZQeFEr86kevBfFQDzimO715kVXJ1UUsubKPFeHdqvj3A/MsVphXdd6Nzkj8xRwW VEsFCNbJa6gRjeM2wzH//BwQOBXIZiycUaTK6aEr3HYduvTrW1TwPTByA2MO8kTf sEAOLq4Ggb7e5qB1AFWYRPJIWoehwUo0abvZUCg4SPjbyH1e8jP0+iF5DXi0lbaf D5JYYuyc+q7J7e5PfjsByPpuRSYhZcF0qiJK/OlaDdPwHXSB/px+H9gGu490eD5t 3Ex+u0UPQTC+Azs5dnUA1stN87mYuEC1paBf1WTcx3MLO9UWQKg= -----END CERTIFICATE-----Generated at Sun Aug 24 00:23:59 2025 by rpki-client