$ rpki-client -vvf repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft File: EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft (raw, json) Hash identifier: BMVD8dwcsEGNFN96+SQ9HVyic48pb9FvGnoO2pqPDt8= Subject key identifier: E8:2A:CF:E0:44:79:44:09:62:D5:C7:CC:31:3F:A2:31:FC:27:38:14 Authority key identifier: EE:C1:A7:BF:2D:95:D0:BA:FE:37:10:5E:4B:B1:BB:23:60:1D:D1:DB Certificate issuer: /CN=EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB Certificate serial: 4DF36629874E13672A77A4FAE97910E221A20E9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft Manifest number: 87 Signing time: Mon 12 May 2025 03:52:10 +0000 Manifest this update: Mon 12 May 2025 03:47:10 +0000 Manifest next update: Thu 15 May 2025 12:43:10 +0000 Files and hashes: 1: EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.crl (hash: LiS0suMk8HpBDNBiEM+l278KQtO9sVd9acOj6VI3lFM=) 2: 3136302e32352e34352e302f32342d3234203d3e20313533303639.roa (hash: Avhk72sz/3yBdf7AZCi0I7kbmtzf0VVxahGQsUlTimg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.crl rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 12:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:f3:66:29:87:4e:13:67:2a:77:a4:fa:e9:79:10:e2:21:a2:0e:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB Validity Not Before: May 12 03:47:10 2025 GMT Not After : May 15 12:43:10 2025 GMT Subject: CN=E82ACFE04479440962D5C7CC313FA231FC273814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:de:22:b7:2a:a5:65:4a:95:14:26:a3:eb:71: bd:03:cd:0e:0f:21:9c:5d:0c:c9:f1:d6:cd:46:67: c3:69:ba:37:db:7a:ab:1c:8c:9b:c0:c2:9c:b6:99: 0b:c3:88:0f:d7:c3:4d:0c:5b:23:de:aa:a4:ce:1c: 67:94:2e:7e:5c:60:20:ac:36:3a:71:40:6e:a8:ac: 64:53:d7:24:24:17:2d:bd:e4:8f:0b:18:f6:9b:8a: 7e:3a:f8:ce:83:4d:fa:6c:da:19:56:19:13:ff:4e: 03:f4:c0:5e:9d:78:48:4d:79:e2:4f:ff:e8:f7:c2: a6:a1:74:a4:aa:71:e7:6b:9c:cc:80:da:3a:2b:24: 5c:e1:b9:62:4e:59:68:25:11:ed:af:d1:98:7f:23: d9:41:6d:a3:ba:2a:f0:a4:53:ea:bb:de:f5:2b:e2: c5:bb:07:c4:14:59:bc:a2:b5:25:ea:15:0b:bb:01: fe:fd:a1:38:98:99:0d:4b:8b:45:45:c0:c4:7b:7d: dc:d0:c0:b2:48:40:19:9e:83:21:1e:52:f3:c3:30: 5b:bb:4f:1f:29:a1:d4:f4:7d:6d:80:3a:71:fa:5f: fd:00:f8:57:dc:a3:f4:f3:4b:e1:91:9a:42:3f:6c: 7e:61:9a:d2:3c:ae:fc:44:c6:01:d1:42:45:d1:10: 16:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:2A:CF:E0:44:79:44:09:62:D5:C7:CC:31:3F:A2:31:FC:27:38:14 X509v3 Authority Key Identifier: keyid:EE:C1:A7:BF:2D:95:D0:BA:FE:37:10:5E:4B:B1:BB:23:60:1D:D1:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:b2:3e:dd:2f:3b:e0:4d:2c:ca:c3:69:cf:92:41:36:cf:5a: 03:8b:5e:72:20:52:60:fa:e4:c3:b1:17:a5:e1:d1:25:16:c0: 02:55:04:2a:e1:e9:b4:3f:54:e7:e5:a9:f2:b1:5c:cc:7a:d5: 84:70:54:9b:9f:ef:f8:63:49:40:76:6b:6e:7b:c3:03:f9:1b: 0d:94:49:20:52:71:a9:9b:67:bc:98:38:35:c8:e1:31:ec:af: 8b:dc:a8:26:81:f1:19:8c:5b:50:f7:d7:e7:13:7e:52:c4:44: 26:1d:82:ae:ad:05:4a:1a:b9:a7:4b:fe:6c:bc:6c:2c:70:ea: f3:0f:33:96:6b:04:56:61:a6:a2:61:c7:c5:d5:ad:c4:9e:3f: 78:f0:10:05:f9:9f:9d:dc:97:28:4c:e1:72:6a:15:57:2d:4c: 2e:15:21:18:89:a9:a3:f6:79:9b:f1:31:dd:cc:47:2a:a1:9c: 40:23:33:69:7d:ef:f1:f2:a1:a9:d1:14:8a:ee:63:b7:71:f4: d6:f9:d3:b6:3b:1f:9c:76:a8:d3:68:e9:6e:0b:e1:17:d5:b2: ad:c2:b0:7b:6e:33:16:85:8a:d1:6a:b9:8a:7d:48:05:a3:e6: 1e:41:cb:63:ee:2b:09:a8:6e:9e:cc:6b:dc:b9:cb:b5:15:09: 6b:0e:7c:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTfNmKYdOE2cqd6T66XkQ4iGiDp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVDMUE3QkYyRDk1RDBCQUZFMzcxMDVFNEJCMUJCMjM2 MDFERDFEQjAeFw0yNTA1MTIwMzQ3MTBaFw0yNTA1MTUxMjQzMTBaMDMxMTAvBgNV BAMTKEU4MkFDRkUwNDQ3OTQ0MDk2MkQ1QzdDQzMxM0ZBMjMxRkMyNzM4MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC33iK3KqVlSpUUJqPrcb0DzQ4P IZxdDMnx1s1GZ8NpujfbeqscjJvAwpy2mQvDiA/Xw00MWyPeqqTOHGeULn5cYCCs NjpxQG6orGRT1yQkFy295I8LGPabin46+M6DTfps2hlWGRP/TgP0wF6deEhNeeJP /+j3wqahdKSqcedrnMyA2jorJFzhuWJOWWglEe2v0Zh/I9lBbaO6KvCkU+q73vUr 4sW7B8QUWbyitSXqFQu7Af79oTiYmQ1Li0VFwMR7fdzQwLJIQBmegyEeUvPDMFu7 Tx8podT0fW2AOnH6X/0A+Ffco/TzS+GRmkI/bH5hmtI8rvxExgHRQkXREBZxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6CrP4ER5RAli1cfMMT+iMfwnOBQwHwYDVR0j BBgwFoAU7sGnvy2V0Lr+NxBeS7G7I2Ad0dswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzY1NjFkNC0yM2M4LTRjOWItODkwZS00ZjI2MzJlNTJjOTcvMC9FRUMxQTdCRjJE OTVEMEJBRkUzNzEwNUU0QkIxQkIyMzYwMUREMURCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRUVDMUE3QkYyRDk1RDBCQUZFMzcxMDVFNEJCMUJCMjM2MDFE RDFEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjM2NTYxZDQtMjNjOC00YzliLTg5 MGUtNGYyNjMyZTUyYzk3LzAvRUVDMUE3QkYyRDk1RDBCQUZFMzcxMDVFNEJCMUJC MjM2MDFERDFEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABCyPt0vO+BNLMrDac+SQTbPWgOLXnIgUmD6 5MOxF6Xh0SUWwAJVBCrh6bQ/VOflqfKxXMx61YRwVJuf7/hjSUB2a257wwP5Gw2U SSBScambZ7yYODXI4THsr4vcqCaB8RmMW1D31+cTflLERCYdgq6tBUoauadL/my8 bCxw6vMPM5ZrBFZhpqJhx8XVrcSeP3jwEAX5n53clyhM4XJqFVctTC4VIRiJqaP2 eZvxMd3MRyqhnEAjM2l97/HyoanRFIruY7dx9Nb507Y7H5x2qNNo6W4L4RfVsq3C sHtuMxaFitFquYp9SAWj5h5By2PuKwmobp7Ma9y5y7UVCWsOfCM= -----END CERTIFICATE-----Generated at Wed May 14 11:59:07 2025 by rpki-client