$ rpki-client -vvf repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft File: EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft (raw, json) Hash identifier: nFdFT39kUs2dJGTGeuYbq5cysT4U2c+xAHmoi5WkTQw= Subject key identifier: 18:A9:55:44:1F:4E:B1:66:F8:18:2D:5D:6D:4C:F6:1B:F2:F7:9E:35 Authority key identifier: EE:C1:A7:BF:2D:95:D0:BA:FE:37:10:5E:4B:B1:BB:23:60:1D:D1:DB Certificate issuer: /CN=EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB Certificate serial: 5E050AD16D7B2783DF246EDDF2E73E9EEBC4C3FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft Manifest number: D1 Signing time: Fri 24 Oct 2025 03:32:12 +0000 Manifest this update: Fri 24 Oct 2025 03:27:12 +0000 Manifest next update: Mon 27 Oct 2025 09:54:12 +0000 Files and hashes: 1: EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.crl (hash: Yuou8Fe6zqiguPj351ONeJfiAGD6Q+kwKlkriZiTKlI=) 2: 3136302e32352e34352e302f32342d3234203d3e20313533303639.roa (hash: pjrXRUj5r2IszWCXojX+FWGkandw2VMiyslpGWMGbUA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.crl rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 09:54:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:05:0a:d1:6d:7b:27:83:df:24:6e:dd:f2:e7:3e:9e:eb:c4:c3:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB Validity Not Before: Oct 24 03:27:12 2025 GMT Not After : Oct 27 09:54:12 2025 GMT Subject: CN=18A955441F4EB166F8182D5D6D4CF61BF2F79E35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:50:96:be:1e:95:01:3a:08:ac:5a:8a:bd:61: fe:5e:79:aa:9d:bb:d8:de:7e:86:5d:67:28:fa:4f: ad:0c:5c:20:f5:5b:b7:b6:92:23:7b:32:f7:0c:28: 12:38:41:4d:d4:a8:0d:80:52:db:89:c1:76:36:da: ae:5a:6e:b2:37:45:44:93:9a:17:28:1b:9c:c5:ac: 0d:cc:69:65:d5:e3:5c:d2:ff:a2:b4:4e:6e:8e:df: 52:ca:57:cb:ba:eb:cc:7e:76:74:79:3a:05:da:0c: da:16:dd:ba:3e:57:9c:84:f9:e4:5f:4f:c1:5d:40: 94:ab:85:3a:2e:e7:3b:b7:32:af:72:a8:38:70:93: c1:e7:bb:d4:4d:f2:39:e0:9c:07:7a:38:4e:32:dd: 4b:53:72:e6:5e:2d:76:88:a1:37:e8:cc:c7:a9:c1: 73:28:a0:4f:5e:3c:d8:31:c0:76:4f:1d:fa:a3:ec: 2f:11:db:65:3e:46:f8:d8:33:21:c8:c8:db:0b:23: 27:ab:cd:69:8d:b7:b4:db:df:c6:bc:a3:87:69:99: eb:2b:64:b4:e3:5f:c5:e3:e3:f2:81:f0:af:13:83: b1:08:83:19:9c:5a:3f:4e:3c:be:e5:32:fa:ab:0d: 8e:27:be:d0:d8:4f:b8:7c:cf:03:3e:3e:70:0d:13: ac:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:A9:55:44:1F:4E:B1:66:F8:18:2D:5D:6D:4C:F6:1B:F2:F7:9E:35 X509v3 Authority Key Identifier: keyid:EE:C1:A7:BF:2D:95:D0:BA:FE:37:10:5E:4B:B1:BB:23:60:1D:D1:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:a3:4a:7d:e1:51:02:21:ec:4a:4a:60:e0:b5:1b:a8:e9:19: 61:da:a5:e2:5c:db:77:41:31:a1:b9:fe:94:e4:dc:da:fb:dd: cc:3d:b5:ce:94:6b:6e:48:f2:23:21:d4:01:43:b4:58:d6:76: 8d:00:1c:cb:91:37:83:01:68:75:3f:cf:24:4a:63:a7:df:e2: c6:f0:92:e6:97:02:e7:41:de:a3:13:ce:65:c3:bf:51:bc:ab: 32:99:9c:d7:6a:c6:03:ad:98:7d:d9:d9:0e:b2:d7:18:44:60: 8b:93:52:cb:16:50:2d:23:ac:7e:bd:c9:33:39:98:ba:52:bd: 3f:91:63:67:f6:71:91:5a:1b:f9:59:4d:00:6c:c3:f9:87:9a: 2d:b6:60:44:17:29:c4:3b:67:f5:3b:b2:76:8e:e9:34:67:76: cd:e3:f0:31:3d:8a:e2:b3:bc:0a:f0:0b:82:4f:03:05:0c:b0: 68:5c:d7:c9:9b:33:eb:2a:b3:63:c2:f4:9f:84:18:c0:de:60: e2:fd:3a:61:7e:fc:21:5c:88:1c:b6:e7:b2:e6:1d:d0:85:63: 34:83:c2:6e:13:56:87:6c:62:ed:d9:8e:86:46:c8:3f:25:35: 6c:f6:74:e7:b5:78:5c:88:b9:7b:58:fb:57:ee:f9:78:90:60: db:59:de:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXgUK0W17J4PfJG7d8uc+nuvEw/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVDMUE3QkYyRDk1RDBCQUZFMzcxMDVFNEJCMUJCMjM2 MDFERDFEQjAeFw0yNTEwMjQwMzI3MTJaFw0yNTEwMjcwOTU0MTJaMDMxMTAvBgNV BAMTKDE4QTk1NTQ0MUY0RUIxNjZGODE4MkQ1RDZENENGNjFCRjJGNzlFMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzUJa+HpUBOgisWoq9Yf5eeaqd u9jefoZdZyj6T60MXCD1W7e2kiN7MvcMKBI4QU3UqA2AUtuJwXY22q5abrI3RUST mhcoG5zFrA3MaWXV41zS/6K0Tm6O31LKV8u668x+dnR5OgXaDNoW3bo+V5yE+eRf T8FdQJSrhTou5zu3Mq9yqDhwk8Hnu9RN8jngnAd6OE4y3UtTcuZeLXaIoTfozMep wXMooE9ePNgxwHZPHfqj7C8R22U+RvjYMyHIyNsLIyerzWmNt7Tb38a8o4dpmesr ZLTjX8Xj4/KB8K8Tg7EIgxmcWj9OPL7lMvqrDY4nvtDYT7h8zwM+PnANE6xdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGKlVRB9OsWb4GC1dbUz2G/L3njUwHwYDVR0j BBgwFoAU7sGnvy2V0Lr+NxBeS7G7I2Ad0dswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzY1NjFkNC0yM2M4LTRjOWItODkwZS00ZjI2MzJlNTJjOTcvMC9FRUMxQTdCRjJE OTVEMEJBRkUzNzEwNUU0QkIxQkIyMzYwMUREMURCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRUVDMUE3QkYyRDk1RDBCQUZFMzcxMDVFNEJCMUJCMjM2MDFE RDFEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjM2NTYxZDQtMjNjOC00YzliLTg5 MGUtNGYyNjMyZTUyYzk3LzAvRUVDMUE3QkYyRDk1RDBCQUZFMzcxMDVFNEJCMUJC MjM2MDFERDFEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAGjSn3hUQIh7EpKYOC1G6jpGWHapeJc23dB MaG5/pTk3Nr73cw9tc6Ua25I8iMh1AFDtFjWdo0AHMuRN4MBaHU/zyRKY6ff4sbw kuaXAudB3qMTzmXDv1G8qzKZnNdqxgOtmH3Z2Q6y1xhEYIuTUssWUC0jrH69yTM5 mLpSvT+RY2f2cZFaG/lZTQBsw/mHmi22YEQXKcQ7Z/U7snaO6TRnds3j8DE9iuKz vArwC4JPAwUMsGhc18mbM+sqs2PC9J+EGMDeYOL9OmF+/CFciBy257LmHdCFYzSD wm4TVodsYu3ZjoZGyD8lNWz2dOe1eFyIuXtY+1fu+XiQYNtZ3kw= -----END CERTIFICATE-----Generated at Fri Oct 24 10:46:10 2025 by rpki-client