$ rpki-client -vvf repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft File: E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft (raw, json) Hash identifier: jTgDkkLKiYGnOcqOLXwEa+gu6bmk2q4vqc0jAWnc45Q= Subject key identifier: D1:C9:1E:A8:76:B6:CB:3D:4D:D3:06:50:59:8A:17:D6:D7:41:35:50 Authority key identifier: E0:B3:E0:49:B0:31:30:8B:37:78:BB:68:5F:D3:D1:49:FA:69:DD:3B Certificate issuer: /CN=E0B3E049B031308B3778BB685FD3D149FA69DD3B Certificate serial: 6F4493CA6F5B3D13D863DA30C1D36B3D902305A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B3E049B031308B3778BB685FD3D149FA69DD3B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft Manifest number: 011E Signing time: Thu 21 Aug 2025 13:52:06 +0000 Manifest this update: Thu 21 Aug 2025 13:47:06 +0000 Manifest next update: Sun 24 Aug 2025 17:36:06 +0000 Files and hashes: 1: E0B3E049B031308B3778BB685FD3D149FA69DD3B.crl (hash: r5pjzx+44IjlKT7Jdui8+0yeEkmTRn6tENKi1GQDmoY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.crl rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B3E049B031308B3778BB685FD3D149FA69DD3B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:44:93:ca:6f:5b:3d:13:d8:63:da:30:c1:d3:6b:3d:90:23:05:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0B3E049B031308B3778BB685FD3D149FA69DD3B Validity Not Before: Aug 21 13:47:06 2025 GMT Not After : Aug 24 17:36:06 2025 GMT Subject: CN=D1C91EA876B6CB3D4DD30650598A17D6D7413550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4e:2b:22:db:01:7d:27:61:6f:2d:7c:2e:2f: 19:66:69:05:fc:3e:5c:b6:be:4e:98:6b:e5:4d:d2: ef:58:25:dc:6c:e5:b2:b0:eb:9d:78:eb:40:ba:67: 54:f5:9b:45:6a:20:e5:57:e9:2d:00:0a:88:30:94: e2:40:55:a8:94:dd:74:26:20:2e:18:f6:4a:40:bc: 41:33:32:3b:f1:3e:35:b0:05:35:be:af:af:0f:f1: 81:09:ca:d4:e6:9c:08:b7:8b:0b:cc:04:f2:af:22: a8:b9:a3:85:e2:3b:6a:2a:72:64:81:0b:16:a2:2d: 32:14:19:f9:3a:5c:54:28:45:ae:65:a6:42:c1:7a: e9:6b:41:c7:83:1a:82:fb:fd:7f:83:d2:0d:a6:1d: 77:0b:e3:59:e7:a5:50:20:61:07:76:b1:db:19:5a: da:12:05:b4:55:17:e5:5d:d6:76:6f:fd:ad:65:57: 10:0f:54:6f:2f:21:d9:d1:ca:19:34:e3:b2:e3:0e: b9:4f:4d:d3:91:f1:30:cc:35:9f:7f:31:e7:7d:bf: 97:7e:cd:c6:b8:02:ef:c9:4f:6d:8c:05:d0:09:07: 02:25:9e:7b:8a:42:20:45:c4:da:13:7f:06:1c:eb: 38:e3:f1:ea:85:b5:29:03:31:53:e8:6f:d0:73:e0: 5f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C9:1E:A8:76:B6:CB:3D:4D:D3:06:50:59:8A:17:D6:D7:41:35:50 X509v3 Authority Key Identifier: keyid:E0:B3:E0:49:B0:31:30:8B:37:78:BB:68:5F:D3:D1:49:FA:69:DD:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B3E049B031308B3778BB685FD3D149FA69DD3B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:d3:f1:1e:8f:f9:9d:35:c1:ae:76:df:6a:6b:7e:e0:f4:a1: e7:fd:5b:20:ce:0d:8c:bf:94:5a:af:c2:3c:cf:d8:81:c9:58: 0a:df:27:1e:64:ff:b6:88:69:c0:f7:c4:83:59:64:f2:b5:9a: e3:b9:cc:d8:99:32:96:98:03:fc:97:20:5e:33:39:38:d1:60: 30:50:66:92:24:d5:8d:4c:d7:18:68:d1:65:44:24:df:9b:b8: 31:21:e3:e5:01:ef:37:59:59:73:5b:6a:9f:e4:1f:4a:35:8b: ce:a9:b9:78:ac:2f:c9:59:69:23:c1:09:a4:ec:e4:4b:8a:41: c7:64:90:b8:53:12:06:2f:dd:b5:cd:72:ab:66:9d:55:0f:eb: fb:81:7b:12:63:a7:7d:1f:92:05:96:2f:7d:74:cb:eb:eb:5e: 3e:76:8a:39:08:29:48:b1:b2:bf:bf:bf:32:aa:51:f4:0f:46: ed:52:2e:d7:d8:d3:fb:9c:9b:59:58:f0:c7:27:13:e5:3d:d1: 80:26:db:ab:07:c8:3d:b2:78:01:2f:8b:90:b5:50:8a:eb:bd: 10:75:5c:f3:ca:98:9d:30:62:e9:5f:31:0c:e7:cb:bf:32:46: 4d:78:be:c6:c9:0b:92:cb:c8:a4:00:c9:46:e9:a3:67:61:21: a3:69:24:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb0STym9bPRPYY9owwdNrPZAjBakwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBCM0UwNDlCMDMxMzA4QjM3NzhCQjY4NUZEM0QxNDlG QTY5REQzQjAeFw0yNTA4MjExMzQ3MDZaFw0yNTA4MjQxNzM2MDZaMDMxMTAvBgNV BAMTKEQxQzkxRUE4NzZCNkNCM0Q0REQzMDY1MDU5OEExN0Q2RDc0MTM1NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDATisi2wF9J2FvLXwuLxlmaQX8 Ply2vk6Ya+VN0u9YJdxs5bKw651460C6Z1T1m0VqIOVX6S0ACogwlOJAVaiU3XQm IC4Y9kpAvEEzMjvxPjWwBTW+r68P8YEJytTmnAi3iwvMBPKvIqi5o4XiO2oqcmSB CxaiLTIUGfk6XFQoRa5lpkLBeulrQceDGoL7/X+D0g2mHXcL41nnpVAgYQd2sdsZ WtoSBbRVF+Vd1nZv/a1lVxAPVG8vIdnRyhk047LjDrlPTdOR8TDMNZ9/Med9v5d+ zca4Au/JT22MBdAJBwIlnnuKQiBFxNoTfwYc6zjj8eqFtSkDMVPob9Bz4F+HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0ckeqHa2yz1N0wZQWYoX1tdBNVAwHwYDVR0j BBgwFoAU4LPgSbAxMIs3eLtoX9PRSfpp3TswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MWM3ZTgzMy02YzU0LTRlMGItODMxYy0xYzFhNzEwY2U4ZTMvMC9FMEIzRTA0OUIw MzEzMDhCMzc3OEJCNjg1RkQzRDE0OUZBNjlERDNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTBCM0UwNDlCMDMxMzA4QjM3NzhCQjY4NUZEM0QxNDlGQTY5 REQzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjFjN2U4MzMtNmM1NC00ZTBiLTgz MWMtMWMxYTcxMGNlOGUzLzAvRTBCM0UwNDlCMDMxMzA4QjM3NzhCQjY4NUZEM0Qx NDlGQTY5REQzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIfT8R6P+Z01wa5232prfuD0oef9WyDODYy/ lFqvwjzP2IHJWArfJx5k/7aIacD3xINZZPK1muO5zNiZMpaYA/yXIF4zOTjRYDBQ ZpIk1Y1M1xho0WVEJN+buDEh4+UB7zdZWXNbap/kH0o1i86puXisL8lZaSPBCaTs 5EuKQcdkkLhTEgYv3bXNcqtmnVUP6/uBexJjp30fkgWWL310y+vrXj52ijkIKUix sr+/vzKqUfQPRu1SLtfY0/ucm1lY8McnE+U90YAm26sHyD2yeAEvi5C1UIrrvRB1 XPPKmJ0wYulfMQzny78yRk14vsbJC5LLyKQAyUbpo2dhIaNpJIE= -----END CERTIFICATE-----Generated at Sat Aug 23 10:39:52 2025 by rpki-client