$ rpki-client -vvf repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft File: 01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft (raw, json) Hash identifier: TrZcU2gC6GuCfFOvvE2qB3UUlNiv1BX+2DfCDAsC/OA= Subject key identifier: A8:8F:F8:A1:11:29:5F:72:7A:33:C8:5E:D5:7D:36:66:24:17:00:49 Authority key identifier: 01:E8:7E:DC:BE:90:1A:9A:E8:6C:F5:E4:1C:BA:8B:24:83:E9:B6:AC Certificate issuer: /CN=01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC Certificate serial: 31E200CC28E039F679B66C6BAC82B9866DD57B8D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft Manifest number: 30 Signing time: Fri 22 Aug 2025 10:52:16 +0000 Manifest this update: Fri 22 Aug 2025 10:47:16 +0000 Manifest next update: Mon 25 Aug 2025 13:56:16 +0000 Files and hashes: 1: 01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.crl (hash: 4ERA/1J0nGzwjL6L0FKc3FVY+wdhOSiPb6ErIIfV4YY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.crl rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 13:56:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:e2:00:cc:28:e0:39:f6:79:b6:6c:6b:ac:82:b9:86:6d:d5:7b:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC Validity Not Before: Aug 22 10:47:16 2025 GMT Not After : Aug 25 13:56:16 2025 GMT Subject: CN=A88FF8A111295F727A33C85ED57D366624170049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b7:9f:d6:c8:40:60:25:f7:f3:4c:40:86:cf: e5:42:d6:c1:d2:eb:39:27:bf:e1:58:8e:46:3e:e6: 86:95:2d:94:3d:89:90:3f:13:0a:aa:7a:d6:03:1b: a3:ca:3d:39:83:43:4e:86:61:df:16:26:74:04:4b: 8a:af:d7:7c:47:e2:69:e8:73:d9:c6:63:41:c7:70: e6:f8:b2:94:c3:68:7b:ea:eb:60:98:2a:b9:85:c6: 88:32:02:79:c0:d3:50:5d:43:55:64:f9:55:e1:a7: 8f:5a:be:0c:03:83:b0:20:3b:63:13:7a:ed:63:be: 17:bf:e8:8c:72:55:85:5d:0b:9d:ba:bb:bf:e8:38: c6:33:cc:ba:ce:14:d2:3c:1a:a3:b7:39:5f:52:3d: 5d:69:e1:3b:91:00:9e:77:8c:02:89:c2:0b:d8:ef: 75:dc:5a:2a:36:2e:72:46:bc:36:d7:d5:c6:99:0c: 57:21:ec:f4:c8:36:50:11:79:1a:af:05:65:76:3d: 81:c9:a7:04:11:24:f2:80:cb:2b:c7:e3:26:c2:3f: 9a:e7:51:4b:92:16:b1:be:76:ab:17:73:dd:3f:28: f3:af:37:15:10:58:33:c6:af:af:0f:a6:cf:9d:d6: f4:65:40:1e:37:1c:2b:55:bf:23:56:a2:33:44:23: 30:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:8F:F8:A1:11:29:5F:72:7A:33:C8:5E:D5:7D:36:66:24:17:00:49 X509v3 Authority Key Identifier: keyid:01:E8:7E:DC:BE:90:1A:9A:E8:6C:F5:E4:1C:BA:8B:24:83:E9:B6:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:b5:f3:c1:18:7f:c0:35:0a:25:7a:07:30:4d:d9:40:e1:e7: 16:6b:31:f1:55:00:f3:5f:54:07:58:86:51:63:ae:ce:49:e5: fc:13:f5:fe:35:83:e6:c0:0e:f9:d6:79:f6:2b:da:f4:d9:64: b1:be:b3:11:9c:63:23:93:6f:c1:fe:8d:5b:be:e2:78:52:0c: e5:19:4a:69:40:92:85:c2:c2:9e:fb:28:9b:b4:c9:ba:96:bd: 1c:1b:c0:48:bd:12:15:c3:99:5d:c3:0e:3e:09:c0:35:4a:70: 5e:35:da:f4:20:c1:17:03:b1:bc:10:59:ab:63:3d:a3:e4:05: 9f:e4:aa:0a:43:5d:41:97:4f:6d:34:11:1d:a1:d6:39:32:7d: b1:d5:0c:ed:54:98:f6:d4:5b:b0:66:f3:5e:dc:42:ef:82:2b: 8e:0f:d0:14:24:d0:d0:a9:15:52:02:37:e4:e2:4b:de:2a:d2: 75:d5:24:f0:99:44:38:4e:95:71:fb:14:fb:89:f2:8d:0a:92: 6c:62:0a:b0:6d:25:38:2c:21:8d:bf:2b:49:28:bc:80:28:28: 3c:fa:b6:66:ea:34:59:c8:aa:5f:d5:d5:a1:b4:1f:57:96:bf: d0:a1:1a:9e:95:09:8a:ed:be:f9:c2:12:55:77:c7:d2:44:6c: 36:ae:1f:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMeIAzCjgOfZ5tmxrrIK5hm3Ve40wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFFODdFRENCRTkwMUE5QUU4NkNGNUU0MUNCQThCMjQ4 M0U5QjZBQzAeFw0yNTA4MjIxMDQ3MTZaFw0yNTA4MjUxMzU2MTZaMDMxMTAvBgNV BAMTKEE4OEZGOEExMTEyOTVGNzI3QTMzQzg1RUQ1N0QzNjY2MjQxNzAwNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8t5/WyEBgJffzTECGz+VC1sHS 6zknv+FYjkY+5oaVLZQ9iZA/EwqqetYDG6PKPTmDQ06GYd8WJnQES4qv13xH4mno c9nGY0HHcOb4spTDaHvq62CYKrmFxogyAnnA01BdQ1Vk+VXhp49avgwDg7AgO2MT eu1jvhe/6IxyVYVdC526u7/oOMYzzLrOFNI8GqO3OV9SPV1p4TuRAJ53jAKJwgvY 73XcWio2LnJGvDbX1caZDFch7PTINlAReRqvBWV2PYHJpwQRJPKAyyvH4ybCP5rn UUuSFrG+dqsXc90/KPOvNxUQWDPGr68Pps+d1vRlQB43HCtVvyNWojNEIzDZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqI/4oREpX3J6M8he1X02ZiQXAEkwHwYDVR0j BBgwFoAUAeh+3L6QGprobPXkHLqLJIPptqwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTZiNTk5ZC03ZmJiLTQ0OTgtODZlZi0xODY0NWFlOThlM2QvMC8wMUU4N0VEQ0JF OTAxQTlBRTg2Q0Y1RTQxQ0JBOEIyNDgzRTlCNkFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDFFODdFRENCRTkwMUE5QUU4NkNGNUU0MUNCQThCMjQ4M0U5 QjZBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODE2YjU5OWQtN2ZiYi00NDk4LTg2 ZWYtMTg2NDVhZTk4ZTNkLzAvMDFFODdFRENCRTkwMUE5QUU4NkNGNUU0MUNCQThC MjQ4M0U5QjZBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEy188EYf8A1CiV6BzBN2UDh5xZrMfFVAPNf VAdYhlFjrs5J5fwT9f41g+bADvnWefYr2vTZZLG+sxGcYyOTb8H+jVu+4nhSDOUZ SmlAkoXCwp77KJu0ybqWvRwbwEi9EhXDmV3DDj4JwDVKcF412vQgwRcDsbwQWatj PaPkBZ/kqgpDXUGXT200ER2h1jkyfbHVDO1UmPbUW7Bm817cQu+CK44P0BQk0NCp FVICN+TiS94q0nXVJPCZRDhOlXH7FPuJ8o0KkmxiCrBtJTgsIY2/K0kovIAoKDz6 tmbqNFnIql/V1aG0H1eWv9ChGp6VCYrtvvnCElV3x9JEbDauH38= -----END CERTIFICATE-----Generated at Sat Aug 23 10:35:40 2025 by rpki-client