$ rpki-client -vvf repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft File: EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft (raw, json) Hash identifier: AFeHy9RRyoDnPjnh7/2j6sckIwppkvG8nluzb7/Da2Y= Subject key identifier: EB:85:26:4A:B9:C7:D4:F1:6C:CB:8D:6F:68:45:FD:70:7F:96:93:51 Authority key identifier: EE:CC:4A:44:F0:95:94:EB:71:1E:A1:F6:F3:4B:95:8D:19:A3:B4:FD Certificate issuer: /CN=EECC4A44F09594EB711EA1F6F34B958D19A3B4FD Certificate serial: 25AAD295EBF9F96DBFBB5DFEB89689AAE74B1CB7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft Manifest number: 017C Signing time: Sun 29 Jun 2025 08:21:21 +0000 Manifest this update: Sun 29 Jun 2025 08:16:21 +0000 Manifest next update: Wed 02 Jul 2025 19:29:21 +0000 Files and hashes: 1: EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.crl (hash: 3N8XzNKg5iKU6ak+yYZYJCFV3c1RWNEElBjTLRWcvtQ=) 2: 3130332e3230342e31352e302f32342d3234203d3e20313530393230.roa (hash: 84mIKFs557T9blcI7/exXdbBapxr7Cu4g0VLqBjO/cg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.crl rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 19:29:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:aa:d2:95:eb:f9:f9:6d:bf:bb:5d:fe:b8:96:89:aa:e7:4b:1c:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EECC4A44F09594EB711EA1F6F34B958D19A3B4FD Validity Not Before: Jun 29 08:16:21 2025 GMT Not After : Jul 2 19:29:21 2025 GMT Subject: CN=EB85264AB9C7D4F16CCB8D6F6845FD707F969351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:37:79:5a:e0:0d:13:e1:37:e5:d1:15:b3:af: 20:cc:b7:5e:72:27:36:70:d8:60:56:b0:24:de:59: 78:15:24:3c:98:0a:dd:d4:00:2b:7e:c8:ee:a1:bf: 37:af:53:38:78:d7:b7:f2:1a:9f:44:e3:4c:9b:58: e8:b0:db:9f:0c:75:27:ec:2f:97:53:d5:5f:2a:e6: e8:96:66:7e:d2:d5:06:4e:14:d9:ca:c8:69:66:36: 3f:35:89:85:9c:34:b9:42:c6:85:ed:6b:b3:bf:71: 5f:c9:51:d9:3c:10:18:8f:98:ff:8e:b6:f1:1c:cb: e4:94:c8:0a:e0:4f:6b:74:89:5f:f6:ec:ae:38:b2: 3b:b7:e8:b3:6b:6e:f8:95:ba:de:1f:eb:03:96:3e: 4a:ba:ea:3d:7a:dd:a4:16:9b:b7:9c:c2:a3:c3:68: 3d:08:a7:e0:e6:49:ee:8d:43:62:68:36:56:7c:66: 3b:d7:95:e4:6d:1c:33:7a:d1:02:84:4f:bb:c0:cd: ad:34:87:41:63:35:22:8b:f5:06:b4:21:9b:ab:ba: ab:23:a7:9f:69:67:8f:f1:4f:84:d0:8d:77:cb:59: 8b:e3:41:8d:55:29:3a:07:88:cb:b1:7d:b7:1b:6c: 95:13:bc:d0:67:cf:1e:dc:f4:ca:8a:0a:d0:0a:01: 4b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:85:26:4A:B9:C7:D4:F1:6C:CB:8D:6F:68:45:FD:70:7F:96:93:51 X509v3 Authority Key Identifier: keyid:EE:CC:4A:44:F0:95:94:EB:71:1E:A1:F6:F3:4B:95:8D:19:A3:B4:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:6d:bf:c6:75:fb:2a:96:28:64:5b:93:f7:f6:8e:7c:7b:d8: f1:ad:55:f9:41:33:85:38:a7:4a:13:24:44:8c:43:7a:84:d1: 33:86:64:7e:6c:e2:34:e2:b4:33:82:4d:38:2e:b5:11:4b:42: b8:e5:b0:8b:62:5c:ce:26:31:4e:f7:fe:d6:7c:55:f9:63:05: 88:5f:12:ba:9a:a8:d2:7b:e1:9e:a8:99:89:1e:82:3c:54:22: 90:34:cb:b4:f0:f6:1e:1b:14:5f:30:92:3e:aa:21:6a:9a:7c: 4e:21:77:1c:2a:ee:50:60:c9:6f:8d:db:12:05:bd:cf:25:f5: dd:54:c8:3b:09:26:20:b4:7c:59:18:28:fc:42:0f:c5:f9:1d: 09:e8:3a:79:9c:a5:bc:b4:90:29:21:e1:54:0d:b6:80:12:b8: 84:41:ae:92:8a:b1:e6:d4:39:2a:c3:59:24:1a:37:54:ea:ad: 1c:79:2b:1d:37:cb:4d:fd:fc:36:42:84:1a:47:f7:05:02:06: 89:f8:08:7a:33:0c:2b:b2:b8:c4:30:40:ba:76:96:68:a3:86: 42:3d:3d:31:f0:df:32:0e:87:a0:1a:c6:e9:5b:1a:d1:36:54: c6:c5:b5:47:70:fc:6a:dc:fe:80:4a:4d:37:a4:c0:f7:02:cf: 91:39:3f:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJarSlev5+W2/u13+uJaJqudLHLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVDQzRBNDRGMDk1OTRFQjcxMUVBMUY2RjM0Qjk1OEQx OUEzQjRGRDAeFw0yNTA2MjkwODE2MjFaFw0yNTA3MDIxOTI5MjFaMDMxMTAvBgNV BAMTKEVCODUyNjRBQjlDN0Q0RjE2Q0NCOEQ2RjY4NDVGRDcwN0Y5NjkzNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlN3la4A0T4Tfl0RWzryDMt15y JzZw2GBWsCTeWXgVJDyYCt3UACt+yO6hvzevUzh417fyGp9E40ybWOiw258MdSfs L5dT1V8q5uiWZn7S1QZOFNnKyGlmNj81iYWcNLlCxoXta7O/cV/JUdk8EBiPmP+O tvEcy+SUyArgT2t0iV/27K44sju36LNrbviVut4f6wOWPkq66j163aQWm7ecwqPD aD0Ip+DmSe6NQ2JoNlZ8ZjvXleRtHDN60QKET7vAza00h0FjNSKL9Qa0IZuruqsj p59pZ4/xT4TQjXfLWYvjQY1VKToHiMuxfbcbbJUTvNBnzx7c9MqKCtAKAUuJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU64UmSrnH1PFsy41vaEX9cH+Wk1EwHwYDVR0j BBgwFoAU7sxKRPCVlOtxHqH280uVjRmjtP0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWZjOTk2Zi03MmNhLTRkNmItYTBlNy1mZjViYzQyYjA1ODkvMC9FRUNDNEE0NEYw OTU5NEVCNzExRUExRjZGMzRCOTU4RDE5QTNCNEZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUVDQzRBNDRGMDk1OTRFQjcxMUVBMUY2RjM0Qjk1OEQxOUEz QjRGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjlmYzk5NmYtNzJjYS00ZDZiLWEw ZTctZmY1YmM0MmIwNTg5LzAvRUVDQzRBNDRGMDk1OTRFQjcxMUVBMUY2RjM0Qjk1 OEQxOUEzQjRGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABNtv8Z1+yqWKGRbk/f2jnx72PGtVflBM4U4 p0oTJESMQ3qE0TOGZH5s4jTitDOCTTgutRFLQrjlsItiXM4mMU73/tZ8VfljBYhf ErqaqNJ74Z6omYkegjxUIpA0y7Tw9h4bFF8wkj6qIWqafE4hdxwq7lBgyW+N2xIF vc8l9d1UyDsJJiC0fFkYKPxCD8X5HQnoOnmcpby0kCkh4VQNtoASuIRBrpKKsebU OSrDWSQaN1TqrRx5Kx03y039/DZChBpH9wUCBon4CHozDCuyuMQwQLp2lmijhkI9 PTHw3zIOh6AaxulbGtE2VMbFtUdw/Grc/oBKTTekwPcCz5E5P58= -----END CERTIFICATE-----Generated at Mon Jun 30 10:31:09 2025 by rpki-client