$ rpki-client -vvf repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft File: 01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft (raw, json) Hash identifier: C4Y2ev29m0N/EcULS4eAU3oYcwNBbnwgjk97hSkixrs= Subject key identifier: B4:DC:BE:D0:CB:D8:06:B5:84:0D:00:11:F4:85:3E:5B:8D:5B:5B:64 Authority key identifier: 01:E8:7E:DC:BE:90:1A:9A:E8:6C:F5:E4:1C:BA:8B:24:83:E9:B6:AC Certificate issuer: /CN=01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC Certificate serial: 504A0EA73B69386F063E4D4838CA7766C9C83A5A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft Manifest number: 18 Signing time: Sun 29 Jun 2025 11:42:12 +0000 Manifest this update: Sun 29 Jun 2025 11:37:12 +0000 Manifest next update: Wed 02 Jul 2025 14:47:12 +0000 Files and hashes: 1: 01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.crl (hash: sbO8wojmKiT7PGTuVK+Dj0C+2lEVGmP/vg8umNTVwmw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.crl rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 14:47:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:4a:0e:a7:3b:69:38:6f:06:3e:4d:48:38:ca:77:66:c9:c8:3a:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC Validity Not Before: Jun 29 11:37:12 2025 GMT Not After : Jul 2 14:47:12 2025 GMT Subject: CN=B4DCBED0CBD806B5840D0011F4853E5B8D5B5B64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b8:82:ad:84:6e:53:03:9a:54:7f:70:83:bb: 59:45:73:e2:4c:5c:92:f6:11:25:d4:59:51:a1:3f: 39:96:b5:38:c5:a3:27:b8:c8:c8:86:a8:32:86:f8: 9d:87:c8:c4:5d:42:c8:2b:d9:80:1a:a7:52:18:77: 2d:b2:f7:60:14:4a:2d:a8:97:af:26:39:9f:bc:1b: 87:8a:fa:10:69:ab:45:a2:5f:43:b5:35:99:04:25: c5:2e:0f:75:b3:7c:64:0e:1d:87:7b:37:fb:e0:29: b8:fc:94:19:cc:1e:80:14:2a:b6:75:f3:52:39:e2: 4f:cb:b9:33:d2:b4:e0:bf:2d:40:34:40:47:84:b8: a9:ea:3c:04:4b:9f:09:c0:cb:51:af:ac:5b:d8:cd: 3e:7d:2f:c9:d7:1d:3e:9d:a3:d3:2d:bc:d6:81:c7: 54:d5:d3:89:3e:11:ba:43:21:93:31:84:78:58:ff: e4:06:1b:78:4b:03:47:20:67:a2:ac:89:3f:5f:37: 9d:f0:5b:6a:ad:13:6c:56:2c:5a:8f:5e:f1:44:ed: 82:fd:bb:c6:aa:20:9c:5e:e8:58:19:f3:4a:3f:f0: c3:d9:c0:0f:eb:95:d8:4b:c6:60:b3:aa:ec:37:31: e2:81:18:75:26:94:b1:49:9a:86:40:84:4e:7a:f4: a5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:DC:BE:D0:CB:D8:06:B5:84:0D:00:11:F4:85:3E:5B:8D:5B:5B:64 X509v3 Authority Key Identifier: keyid:01:E8:7E:DC:BE:90:1A:9A:E8:6C:F5:E4:1C:BA:8B:24:83:E9:B6:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:10:13:ac:9a:48:43:a5:81:90:d9:f7:ec:cb:2e:bc:51:ff: 93:87:98:dc:70:1c:d7:ee:80:f8:95:df:af:6d:bd:b5:c1:b7: b0:0c:65:cd:f2:d8:7b:92:3d:2b:9d:79:36:17:69:b4:ab:e8: 33:66:8d:fc:43:f6:96:11:74:f5:9c:c3:6b:83:14:ee:33:84: 32:5f:c9:30:17:1e:17:ef:d2:5e:54:0c:61:9a:a5:5d:01:ce: 4b:5f:65:df:22:6e:d7:58:e5:f1:aa:19:2b:bc:fb:d2:83:1a: 13:c8:26:d3:48:8b:46:f9:27:51:f9:40:fe:12:46:fd:68:01: be:71:54:e6:c2:17:51:49:4e:0c:78:89:68:db:0f:fb:58:ef: db:79:ab:82:a1:7b:bc:a5:28:a5:51:6b:ef:0c:cf:ec:fd:79: 80:f0:2c:7f:a9:ff:f9:2b:ad:3c:a3:b4:51:0a:0b:a3:14:60: be:70:d7:1d:5f:33:22:66:09:3b:4c:98:5b:35:5f:35:04:4b: cb:03:6e:09:c0:f1:e5:63:a9:68:22:62:0b:93:55:49:68:12: ed:0b:c0:db:1d:23:88:29:00:19:1e:f6:3d:4d:0b:2f:bb:65: ef:09:dd:5f:ea:c0:0b:19:d8:7c:bb:33:31:a0:99:c6:3f:67: 57:fc:22:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUEoOpztpOG8GPk1IOMp3ZsnIOlowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFFODdFRENCRTkwMUE5QUU4NkNGNUU0MUNCQThCMjQ4 M0U5QjZBQzAeFw0yNTA2MjkxMTM3MTJaFw0yNTA3MDIxNDQ3MTJaMDMxMTAvBgNV BAMTKEI0RENCRUQwQ0JEODA2QjU4NDBEMDAxMUY0ODUzRTVCOEQ1QjVCNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6uIKthG5TA5pUf3CDu1lFc+JM XJL2ESXUWVGhPzmWtTjFoye4yMiGqDKG+J2HyMRdQsgr2YAap1IYdy2y92AUSi2o l68mOZ+8G4eK+hBpq0WiX0O1NZkEJcUuD3WzfGQOHYd7N/vgKbj8lBnMHoAUKrZ1 81I54k/LuTPStOC/LUA0QEeEuKnqPARLnwnAy1GvrFvYzT59L8nXHT6do9MtvNaB x1TV04k+EbpDIZMxhHhY/+QGG3hLA0cgZ6KsiT9fN53wW2qtE2xWLFqPXvFE7YL9 u8aqIJxe6FgZ80o/8MPZwA/rldhLxmCzquw3MeKBGHUmlLFJmoZAhE569KXVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtNy+0MvYBrWEDQAR9IU+W41bW2QwHwYDVR0j BBgwFoAUAeh+3L6QGprobPXkHLqLJIPptqwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTZiNTk5ZC03ZmJiLTQ0OTgtODZlZi0xODY0NWFlOThlM2QvMC8wMUU4N0VEQ0JF OTAxQTlBRTg2Q0Y1RTQxQ0JBOEIyNDgzRTlCNkFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDFFODdFRENCRTkwMUE5QUU4NkNGNUU0MUNCQThCMjQ4M0U5 QjZBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODE2YjU5OWQtN2ZiYi00NDk4LTg2 ZWYtMTg2NDVhZTk4ZTNkLzAvMDFFODdFRENCRTkwMUE5QUU4NkNGNUU0MUNCQThC MjQ4M0U5QjZBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACUQE6yaSEOlgZDZ9+zLLrxR/5OHmNxwHNfu gPiV369tvbXBt7AMZc3y2HuSPSudeTYXabSr6DNmjfxD9pYRdPWcw2uDFO4zhDJf yTAXHhfv0l5UDGGapV0BzktfZd8ibtdY5fGqGSu8+9KDGhPIJtNIi0b5J1H5QP4S Rv1oAb5xVObCF1FJTgx4iWjbD/tY79t5q4Khe7ylKKVRa+8Mz+z9eYDwLH+p//kr rTyjtFEKC6MUYL5w1x1fMyJmCTtMmFs1XzUES8sDbgnA8eVjqWgiYguTVUloEu0L wNsdI4gpABke9j1NCy+7Ze8J3V/qwAsZ2Hy7MzGgmcY/Z1f8Ilg= -----END CERTIFICATE-----Generated at Mon Jun 30 16:07:57 2025 by rpki-client