$ rpki-client -vvf repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft File: E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft (raw, json) Hash identifier: Qmz3/5qcvS54VeF4FKXr8CbaEboSKaIFns03tfjhvlo= Subject key identifier: 04:42:7C:32:02:F2:B7:0D:66:08:CD:ED:A7:2C:9D:AB:62:C5:74:95 Authority key identifier: E1:B7:08:FE:CC:3E:90:64:3F:33:B8:31:1E:29:F1:B4:6F:E9:2B:7F Certificate issuer: /CN=E1B708FECC3E90643F33B8311E29F1B46FE92B7F Certificate serial: 66C3CD903CECCBABC2387A49CFED5AA353EDE5ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft Manifest number: 018A Signing time: Sat 23 Aug 2025 06:51:40 +0000 Manifest this update: Sat 23 Aug 2025 06:46:40 +0000 Manifest next update: Tue 26 Aug 2025 17:57:40 +0000 Files and hashes: 1: E1B708FECC3E90643F33B8311E29F1B46FE92B7F.crl (hash: YIZkEV8ZtYIKszzkD3SmZH3crn9goi5e4iBjC10XDzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.crl rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 17:57:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:c3:cd:90:3c:ec:cb:ab:c2:38:7a:49:cf:ed:5a:a3:53:ed:e5:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1B708FECC3E90643F33B8311E29F1B46FE92B7F Validity Not Before: Aug 23 06:46:40 2025 GMT Not After : Aug 26 17:57:40 2025 GMT Subject: CN=04427C3202F2B70D6608CDEDA72C9DAB62C57495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:44:5e:3c:ad:8a:10:59:2d:64:df:50:f7:03: ee:cd:19:f8:39:6a:50:e2:c5:3a:41:21:5d:ad:87: a8:13:ff:9a:1f:f0:de:7a:1b:37:0e:f2:5a:b1:8a: e1:17:e1:90:07:b3:b8:6b:b6:4c:80:73:43:4f:59: b2:e5:2e:87:94:f2:e3:6a:d7:d2:75:8a:6b:40:d1: 06:ba:5d:79:b6:af:11:a3:d0:5a:d7:95:d2:73:fd: 12:de:02:fe:d9:aa:56:9c:fd:4e:57:33:4d:b9:04: 4b:cc:65:25:2e:4f:44:0c:31:24:c6:c8:08:15:a8: ee:f4:5a:47:ca:08:6d:84:d3:a7:3e:de:e4:5f:a8: 72:a5:eb:83:43:5b:4c:81:c5:a9:8e:1c:61:55:1b: 93:64:18:c0:20:a4:cd:bb:2e:ec:7d:58:76:e5:80: 00:fe:ea:d4:00:65:1e:9b:72:e6:76:9d:6a:51:d0: ec:4c:7d:32:a4:4f:f8:cc:77:59:ea:98:07:13:5a: 38:65:9d:09:d3:87:7a:00:21:25:b8:d2:84:c5:ee: 69:1e:2a:a2:bc:87:24:48:6b:d8:2a:b4:dd:13:1a: eb:f9:2a:26:37:9e:02:b3:39:bf:f7:f6:0d:7c:7c: d9:b4:92:16:c0:a6:7a:15:f9:5c:9f:76:31:66:d4: 0a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:42:7C:32:02:F2:B7:0D:66:08:CD:ED:A7:2C:9D:AB:62:C5:74:95 X509v3 Authority Key Identifier: keyid:E1:B7:08:FE:CC:3E:90:64:3F:33:B8:31:1E:29:F1:B4:6F:E9:2B:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:f7:23:87:b4:38:72:33:ed:50:6c:fe:c5:4b:be:b3:ad:a9: a3:76:ef:f7:fb:91:3b:18:ea:71:7d:a5:4a:2d:40:9e:2c:ab: 1c:d2:ab:e3:6e:54:f1:33:e7:e1:0d:7f:af:74:7b:05:8a:e9: 55:30:9e:c1:7d:07:07:07:d0:29:26:72:bd:84:d5:8a:00:92: a9:e3:98:10:69:f2:ca:c3:61:e0:74:ac:29:8f:3f:70:02:81: 25:a7:0a:86:5c:2f:9a:e0:0c:53:bd:b5:75:a6:36:db:b1:fd: b7:db:fa:f7:b3:a0:36:04:20:36:37:0a:c1:62:a0:7b:ad:89: ca:e1:17:24:2d:e5:d5:c6:c6:9d:54:d3:af:a5:71:ea:60:a1: a0:61:7d:24:3b:70:16:b5:b0:4a:1e:e3:8b:12:42:51:8a:c2: 51:ff:bd:0b:3b:28:77:19:9a:73:2e:d8:04:38:c4:06:92:f6: d0:7f:52:e4:dc:0b:fc:d4:74:e8:b7:2c:f7:26:b3:1c:f5:66: 0a:fb:0b:33:af:92:a8:bb:16:89:b4:44:68:b5:59:68:ce:09: 2f:31:a6:fc:95:1b:21:5c:af:a1:9d:f2:68:21:88:67:ee:de: a4:7d:40:6b:a5:f6:bd:f8:ea:31:ab:70:d6:df:9f:c1:da:b7: 15:19:c2:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZsPNkDzsy6vCOHpJz+1ao1Pt5e0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFCNzA4RkVDQzNFOTA2NDNGMzNCODMxMUUyOUYxQjQ2 RkU5MkI3RjAeFw0yNTA4MjMwNjQ2NDBaFw0yNTA4MjYxNzU3NDBaMDMxMTAvBgNV BAMTKDA0NDI3QzMyMDJGMkI3MEQ2NjA4Q0RFREE3MkM5REFCNjJDNTc0OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyRF48rYoQWS1k31D3A+7NGfg5 alDixTpBIV2th6gT/5of8N56GzcO8lqxiuEX4ZAHs7hrtkyAc0NPWbLlLoeU8uNq 19J1imtA0Qa6XXm2rxGj0FrXldJz/RLeAv7Zqlac/U5XM025BEvMZSUuT0QMMSTG yAgVqO70WkfKCG2E06c+3uRfqHKl64NDW0yBxamOHGFVG5NkGMAgpM27Lux9WHbl gAD+6tQAZR6bcuZ2nWpR0OxMfTKkT/jMd1nqmAcTWjhlnQnTh3oAISW40oTF7mke KqK8hyRIa9gqtN0TGuv5KiY3ngKzOb/39g18fNm0khbApnoV+VyfdjFm1AphAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBEJ8MgLytw1mCM3tpyydq2LFdJUwHwYDVR0j BBgwFoAU4bcI/sw+kGQ/M7gxHinxtG/pK38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZjRkMWMzNi00YTMxLTQ4NTctOWUzNi0wZGRmM2Q2OTFlYjUvMC9FMUI3MDhGRUND M0U5MDY0M0YzM0I4MzExRTI5RjFCNDZGRTkyQjdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTFCNzA4RkVDQzNFOTA2NDNGMzNCODMxMUUyOUYxQjQ2RkU5 MkI3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmY0ZDFjMzYtNGEzMS00ODU3LTll MzYtMGRkZjNkNjkxZWI1LzAvRTFCNzA4RkVDQzNFOTA2NDNGMzNCODMxMUUyOUYx QjQ2RkU5MkI3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEP3I4e0OHIz7VBs/sVLvrOtqaN27/f7kTsY 6nF9pUotQJ4sqxzSq+NuVPEz5+ENf690ewWK6VUwnsF9BwcH0Ckmcr2E1YoAkqnj mBBp8srDYeB0rCmPP3ACgSWnCoZcL5rgDFO9tXWmNtux/bfb+vezoDYEIDY3CsFi oHuticrhFyQt5dXGxp1U06+lcepgoaBhfSQ7cBa1sEoe44sSQlGKwlH/vQs7KHcZ mnMu2AQ4xAaS9tB/UuTcC/zUdOi3LPcmsxz1Zgr7CzOvkqi7Fom0RGi1WWjOCS8x pvyVGyFcr6Gd8mghiGfu3qR9QGul9r346jGrcNbfn8HatxUZwmI= -----END CERTIFICATE-----Generated at Sat Aug 23 16:07:21 2025 by rpki-client