$ rpki-client -vvf repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft File: E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft (raw, json) Hash identifier: +H+pxct0TLxLM+bjX14cbaCtTNcVbtMLKKCrjK4jWaI= Subject key identifier: FE:E4:E5:D4:71:CE:14:98:EF:A8:73:EA:FA:2F:5F:5F:4A:29:37:51 Authority key identifier: E1:B7:08:FE:CC:3E:90:64:3F:33:B8:31:1E:29:F1:B4:6F:E9:2B:7F Certificate issuer: /CN=E1B708FECC3E90643F33B8311E29F1B46FE92B7F Certificate serial: 5A534C74D0DF3D4A3F9B3571602FC043B4D86C83 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft Manifest number: 0172 Signing time: Sun 29 Jun 2025 14:01:36 +0000 Manifest this update: Sun 29 Jun 2025 13:56:36 +0000 Manifest next update: Thu 03 Jul 2025 00:30:36 +0000 Files and hashes: 1: E1B708FECC3E90643F33B8311E29F1B46FE92B7F.crl (hash: Cvus5vKqP45fZznQk75IFF0stDijOL6358BOkGTvoGs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.crl rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:53:4c:74:d0:df:3d:4a:3f:9b:35:71:60:2f:c0:43:b4:d8:6c:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1B708FECC3E90643F33B8311E29F1B46FE92B7F Validity Not Before: Jun 29 13:56:36 2025 GMT Not After : Jul 3 00:30:36 2025 GMT Subject: CN=FEE4E5D471CE1498EFA873EAFA2F5F5F4A293751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:71:9d:a0:7d:cd:13:7b:57:5f:3b:73:7e:ec: 12:33:a8:2d:6a:55:ba:87:98:68:8a:27:6e:c6:2b: cf:ea:f4:fc:ce:e9:e5:35:e0:97:4b:0f:14:5b:0f: 27:23:df:d5:07:88:bd:e8:1c:4b:8b:fb:a0:3b:1d: b5:93:e1:57:75:64:b6:9c:cd:e0:36:11:ec:c5:5b: a4:71:2a:3e:b6:20:cb:f2:d6:ed:18:dc:4a:35:48: 73:cb:9f:a8:33:09:5b:aa:63:d7:3e:31:9a:93:17: db:a3:e5:0c:d5:c5:a5:3f:d2:39:70:92:a4:d7:f8: a7:4c:fa:22:f1:30:68:6b:c2:c2:3c:cc:6f:fb:92: 2c:37:98:82:9b:dc:0d:5f:06:2f:a2:7e:b9:ca:6e: 8d:82:6d:2d:69:15:06:c9:7a:f4:f6:58:60:a6:d1: 77:90:9f:fa:2c:56:fc:11:3e:b0:38:d9:a6:31:c9: 55:de:f6:4e:28:fa:ff:9f:6f:65:53:96:a9:a9:04: 0f:83:8c:7f:80:d7:87:d1:06:ec:a4:2f:2f:1a:69: a3:4a:ab:4d:af:f2:35:f1:b9:3e:5f:b6:03:93:89: 0c:fa:09:5c:ad:64:07:ad:8c:95:4d:59:3a:83:50: bf:f2:0f:25:00:b9:c0:9a:51:aa:b4:c6:be:2f:c7: a9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E4:E5:D4:71:CE:14:98:EF:A8:73:EA:FA:2F:5F:5F:4A:29:37:51 X509v3 Authority Key Identifier: keyid:E1:B7:08:FE:CC:3E:90:64:3F:33:B8:31:1E:29:F1:B4:6F:E9:2B:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:a9:3c:d4:ca:77:f1:98:8b:b6:1e:7c:90:af:6b:e2:48:69: 44:de:96:1a:4c:e4:dc:4e:fb:e2:20:03:13:63:6e:44:e4:7c: 69:c5:7c:dd:10:47:db:bf:b0:1f:90:40:22:c5:da:1d:4e:26: 54:00:82:f0:33:6e:82:f4:eb:08:cb:b4:c3:49:ee:02:b1:90: 62:6e:22:7e:74:49:96:2f:98:2f:ed:36:24:3f:7a:03:aa:6a: 3a:a0:4c:f0:0a:de:96:3e:64:43:2c:dc:4f:50:e6:9d:85:08: 02:8b:ec:60:0b:1e:6a:6a:61:fc:28:40:14:3c:03:09:ce:5d: b9:dd:4f:99:76:f9:91:24:d3:e5:d6:9a:14:f5:5f:e4:13:ea: de:8d:cc:4c:9c:3b:f8:6b:91:a2:dd:f1:4b:dc:c4:01:f4:cf: d8:dd:14:38:16:9e:dd:2c:89:ed:38:36:f5:9c:36:de:34:f7: 58:33:86:c6:90:52:14:1c:6d:46:04:c0:ab:b3:83:8c:f0:9b: a2:cf:1d:d0:8d:de:06:d6:7d:7f:f4:a2:cb:0d:64:19:d9:b4: 87:67:75:6b:de:9f:51:5e:ca:7a:7b:f8:ef:0b:ac:5b:0c:4c: 98:fe:29:3a:65:6f:03:5b:a7:7a:a8:b0:4f:4c:ff:ca:77:32: d0:d0:9c:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWlNMdNDfPUo/mzVxYC/AQ7TYbIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFCNzA4RkVDQzNFOTA2NDNGMzNCODMxMUUyOUYxQjQ2 RkU5MkI3RjAeFw0yNTA2MjkxMzU2MzZaFw0yNTA3MDMwMDMwMzZaMDMxMTAvBgNV BAMTKEZFRTRFNUQ0NzFDRTE0OThFRkE4NzNFQUZBMkY1RjVGNEEyOTM3NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRcZ2gfc0Te1dfO3N+7BIzqC1q VbqHmGiKJ27GK8/q9PzO6eU14JdLDxRbDycj39UHiL3oHEuL+6A7HbWT4Vd1ZLac zeA2EezFW6RxKj62IMvy1u0Y3Eo1SHPLn6gzCVuqY9c+MZqTF9uj5QzVxaU/0jlw kqTX+KdM+iLxMGhrwsI8zG/7kiw3mIKb3A1fBi+ifrnKbo2CbS1pFQbJevT2WGCm 0XeQn/osVvwRPrA42aYxyVXe9k4o+v+fb2VTlqmpBA+DjH+A14fRBuykLy8aaaNK q02v8jXxuT5ftgOTiQz6CVytZAetjJVNWTqDUL/yDyUAucCaUaq0xr4vx6lTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/uTl1HHOFJjvqHPq+i9fX0opN1EwHwYDVR0j BBgwFoAU4bcI/sw+kGQ/M7gxHinxtG/pK38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZjRkMWMzNi00YTMxLTQ4NTctOWUzNi0wZGRmM2Q2OTFlYjUvMC9FMUI3MDhGRUND M0U5MDY0M0YzM0I4MzExRTI5RjFCNDZGRTkyQjdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTFCNzA4RkVDQzNFOTA2NDNGMzNCODMxMUUyOUYxQjQ2RkU5 MkI3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmY0ZDFjMzYtNGEzMS00ODU3LTll MzYtMGRkZjNkNjkxZWI1LzAvRTFCNzA4RkVDQzNFOTA2NDNGMzNCODMxMUUyOUYx QjQ2RkU5MkI3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMOpPNTKd/GYi7YefJCva+JIaUTelhpM5NxO ++IgAxNjbkTkfGnFfN0QR9u/sB+QQCLF2h1OJlQAgvAzboL06wjLtMNJ7gKxkGJu In50SZYvmC/tNiQ/egOqajqgTPAK3pY+ZEMs3E9Q5p2FCAKL7GALHmpqYfwoQBQ8 AwnOXbndT5l2+ZEk0+XWmhT1X+QT6t6NzEycO/hrkaLd8UvcxAH0z9jdFDgWnt0s ie04NvWcNt4091gzhsaQUhQcbUYEwKuzg4zwm6LPHdCN3gbWfX/0ossNZBnZtIdn dWven1Feynp7+O8LrFsMTJj+KTplbwNbp3qosE9M/8p3MtDQnOA= -----END CERTIFICATE-----Generated at Sun Jun 29 23:31:44 2025 by rpki-client