$ rpki-client -vvf repo-rpki.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/EC1B9BE63137230F6756E222019318C640EBE42E.mft File: EC1B9BE63137230F6756E222019318C640EBE42E.mft (raw, json) Hash identifier: cTm8qquZ6TUKd+A3Gj3HdR5EpVTSM85s07k6+MGEv9w= Subject key identifier: 24:04:33:01:C3:3B:D2:F5:0A:7D:00:D9:16:72:D5:BC:B1:6F:CE:A2 Authority key identifier: EC:1B:9B:E6:31:37:23:0F:67:56:E2:22:01:93:18:C6:40:EB:E4:2E Certificate issuer: /CN=EC1B9BE63137230F6756E222019318C640EBE42E Certificate serial: 742B2B401D1A36B61A4664D9DE1CA6E0D3DE3941 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EC1B9BE63137230F6756E222019318C640EBE42E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/EC1B9BE63137230F6756E222019318C640EBE42E.mft Manifest number: F5 Signing time: Thu 21 Aug 2025 17:21:39 +0000 Manifest this update: Thu 21 Aug 2025 17:16:39 +0000 Manifest next update: Mon 25 Aug 2025 02:24:39 +0000 Files and hashes: 1: EC1B9BE63137230F6756E222019318C640EBE42E.crl (hash: 84e+H/pKkSFcL/RR2sZ01HQEe+6AsN3OeYk6L2z2pEk=) 2: 3135372e31352e3136362e302f32342d3234203d3e20313532333832.roa (hash: 5wOzKGDtK4zeM+14oVf5CebWsbPEoKuI00n5y47Z804=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/EC1B9BE63137230F6756E222019318C640EBE42E.crl rsync://repo-rpki.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/EC1B9BE63137230F6756E222019318C640EBE42E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EC1B9BE63137230F6756E222019318C640EBE42E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 02:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:2b:2b:40:1d:1a:36:b6:1a:46:64:d9:de:1c:a6:e0:d3:de:39:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC1B9BE63137230F6756E222019318C640EBE42E Validity Not Before: Aug 21 17:16:39 2025 GMT Not After : Aug 25 02:24:39 2025 GMT Subject: CN=24043301C33BD2F50A7D00D91672D5BCB16FCEA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c1:59:7a:4e:c5:12:eb:82:c7:9e:5c:1a:6b: c5:a5:67:4d:45:3c:a7:ef:c7:b1:bf:c0:e9:f3:86: d7:0e:ea:fa:4a:e5:4e:55:89:17:f6:60:02:69:dc: 8a:5d:9b:e5:61:e1:4c:aa:bb:6a:28:dc:8d:07:ba: a3:79:0e:5f:3f:16:00:45:d2:dd:86:e7:d3:e0:d2: 9b:93:15:0a:5f:77:98:f1:3a:39:2c:02:e8:69:7a: 38:fa:a3:60:ea:76:3e:0a:b6:c5:b6:68:e6:99:a2: 1c:92:2b:c7:d8:45:53:bf:c3:92:7e:ab:85:36:04: 32:dd:9b:25:16:31:5b:3f:8a:ee:56:f7:63:48:6e: 5d:b3:b1:3e:c3:fa:44:74:f0:8f:e7:4d:b1:5f:26: b5:fc:a3:77:dd:50:a2:60:46:81:e4:54:57:79:6b: 9a:c9:0e:6c:26:d9:bf:21:2c:a8:1a:77:2e:fd:f9: fc:56:48:ac:a0:25:f7:ce:fb:d3:70:05:6a:1a:1c: 67:4d:08:a3:60:04:cf:e4:52:6c:38:dd:83:32:10: e2:71:27:c8:c1:61:81:3b:71:13:c7:e9:e6:df:31: 5c:81:00:8a:7a:ad:2c:c7:fc:c8:b4:af:a4:c8:6f: 56:a1:1b:12:57:a6:11:58:84:18:71:c3:fe:87:aa: b5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:04:33:01:C3:3B:D2:F5:0A:7D:00:D9:16:72:D5:BC:B1:6F:CE:A2 X509v3 Authority Key Identifier: keyid:EC:1B:9B:E6:31:37:23:0F:67:56:E2:22:01:93:18:C6:40:EB:E4:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/EC1B9BE63137230F6756E222019318C640EBE42E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EC1B9BE63137230F6756E222019318C640EBE42E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/EC1B9BE63137230F6756E222019318C640EBE42E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:48:d6:8d:8c:3d:b4:d7:8a:df:b6:a0:99:a1:66:7b:1c:e5: 26:b1:f8:07:ce:f5:c7:e1:33:81:84:fd:fd:6a:85:1f:29:d9: 35:31:5d:9d:e2:c6:82:aa:b4:88:e4:6c:83:75:94:d8:82:44: f1:7a:61:ed:91:87:cc:9a:a1:44:00:33:60:7d:b2:26:e5:dd: c5:c1:cf:94:39:e9:de:2e:bb:3a:3a:4a:a0:df:f0:60:37:cc: 92:5d:ab:e7:5a:dd:bb:25:0b:d4:6d:64:23:12:5a:e6:f0:1c: 42:be:6b:24:7b:d5:65:91:d9:4a:dc:e1:4a:97:0a:b6:96:7d: a8:40:2b:1a:5d:ad:89:d4:78:2c:74:35:a8:1a:51:41:ce:c1: 0c:1a:69:71:89:76:ea:ca:24:77:97:b8:1b:a2:27:b7:7b:58: e5:51:08:3f:e5:40:97:49:2e:2f:8f:90:9b:eb:d3:0e:3c:a9: a0:0d:0d:f6:e3:f3:f8:c5:e7:fb:e9:6d:a4:dd:34:d0:c2:52: b1:7a:99:e9:1a:5e:2f:2f:57:d0:7f:8c:42:4e:b5:92:e9:a4: 28:92:d8:9a:f2:7d:5b:23:1c:93:a5:f9:ef:63:36:f6:8a:da: 25:70:f7:44:83:57:c9:fe:6e:54:a1:b7:da:0c:27:f0:f2:ec: d3:72:e0:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdCsrQB0aNrYaRmTZ3hym4NPeOUEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUMxQjlCRTYzMTM3MjMwRjY3NTZFMjIyMDE5MzE4QzY0 MEVCRTQyRTAeFw0yNTA4MjExNzE2MzlaFw0yNTA4MjUwMjI0MzlaMDMxMTAvBgNV BAMTKDI0MDQzMzAxQzMzQkQyRjUwQTdEMDBEOTE2NzJENUJDQjE2RkNFQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpwVl6TsUS64LHnlwaa8WlZ01F PKfvx7G/wOnzhtcO6vpK5U5ViRf2YAJp3Ipdm+Vh4Uyqu2oo3I0HuqN5Dl8/FgBF 0t2G59Pg0puTFQpfd5jxOjksAuhpejj6o2Dqdj4KtsW2aOaZohySK8fYRVO/w5J+ q4U2BDLdmyUWMVs/iu5W92NIbl2zsT7D+kR08I/nTbFfJrX8o3fdUKJgRoHkVFd5 a5rJDmwm2b8hLKgady79+fxWSKygJffO+9NwBWoaHGdNCKNgBM/kUmw43YMyEOJx J8jBYYE7cRPH6ebfMVyBAIp6rSzH/Mi0r6TIb1ahGxJXphFYhBhxw/6HqrU1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJAQzAcM70vUKfQDZFnLVvLFvzqIwHwYDVR0j BBgwFoAU7Bub5jE3Iw9nVuIiAZMYxkDr5C4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NTNhYzY2Ny00ZDllLTQ4ZDctYWZkNi04MmU5OGZhNzZjMWUvMC9FQzFCOUJFNjMx MzcyMzBGNjc1NkUyMjIwMTkzMThDNjQwRUJFNDJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRUMxQjlCRTYzMTM3MjMwRjY3NTZFMjIyMDE5MzE4QzY0MEVC RTQyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDUzYWM2NjctNGQ5ZS00OGQ3LWFm ZDYtODJlOThmYTc2YzFlLzAvRUMxQjlCRTYzMTM3MjMwRjY3NTZFMjIyMDE5MzE4 QzY0MEVCRTQyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGBI1o2MPbTXit+2oJmhZnsc5Sax+AfO9cfh M4GE/f1qhR8p2TUxXZ3ixoKqtIjkbIN1lNiCRPF6Ye2Rh8yaoUQAM2B9sibl3cXB z5Q56d4uuzo6SqDf8GA3zJJdq+da3bslC9RtZCMSWubwHEK+ayR71WWR2Urc4UqX CraWfahAKxpdrYnUeCx0NagaUUHOwQwaaXGJdurKJHeXuBuiJ7d7WOVRCD/lQJdJ Li+PkJvr0w48qaANDfbj8/jF5/vpbaTdNNDCUrF6mekaXi8vV9B/jEJOtZLppCiS 2JryfVsjHJOl+e9jNvaK2iVw90SDV8n+blSht9oMJ/Dy7NNy4Go= -----END CERTIFICATE-----Generated at Sat Aug 23 21:15:20 2025 by rpki-client