$ rpki-client -vvf repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft File: 1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft (raw, json) Hash identifier: K4C50UNJPrF1ni3xvA4uf6nRGDdYFbKUs2NtRAm7dhc= Subject key identifier: 3D:6B:F8:E5:84:90:03:23:B6:36:93:55:94:C9:72:C3:70:C7:33:B0 Authority key identifier: 1E:AF:FD:F7:6C:26:1A:0C:98:01:D9:F2:B0:2D:5B:A1:49:67:F3:CD Certificate issuer: /CN=1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD Certificate serial: 13F24C108E87B30C7D7B507C93B14BDC596ADA8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft Manifest number: 0195 Signing time: Fri 22 Aug 2025 23:01:21 +0000 Manifest this update: Fri 22 Aug 2025 22:56:21 +0000 Manifest next update: Tue 26 Aug 2025 02:19:21 +0000 Files and hashes: 1: 1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.crl (hash: epktptf7UtdpdNxedekCMiyTJIeX5EqT//MaV5bkI+c=) 2: 3130332e3139302e39342e302f32342d3234203d3e20313530353531.roa (hash: ZLit+8UW98ngBL2LPf2rRbdHr7opbJkANqxKGJG/n4c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.crl rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 02:19:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:f2:4c:10:8e:87:b3:0c:7d:7b:50:7c:93:b1:4b:dc:59:6a:da:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD Validity Not Before: Aug 22 22:56:21 2025 GMT Not After : Aug 26 02:19:21 2025 GMT Subject: CN=3D6BF8E584900323B636935594C972C370C733B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c3:0d:85:e4:a9:c0:e5:35:94:99:40:49:c4: cc:0a:21:a4:5f:da:e8:47:2f:5f:2a:fd:4a:18:83: 89:2a:e0:06:a8:39:95:de:89:ff:14:03:d3:b9:97: a0:e6:8a:17:31:32:c3:3b:d2:df:f2:93:4e:dd:32: 13:71:0f:9d:44:5b:a1:a9:7e:2f:ad:8a:90:99:55: 31:68:6b:6e:f3:44:c8:c3:30:e2:f8:eb:86:41:6e: 21:80:7f:c8:25:c1:5a:0f:ae:0d:73:be:71:10:1e: 94:78:8a:14:19:2c:f8:f2:fd:a3:2f:dc:14:f1:6b: 7e:58:02:a0:c0:0e:e0:87:14:33:f5:7a:d3:80:8b: 6f:30:33:e3:43:91:6a:11:4f:79:ff:4e:43:5f:f1: 31:b2:b0:01:30:7e:bf:f3:70:d8:0c:02:7e:8d:e3: b2:5d:53:ec:6b:3a:75:40:81:bc:b6:e4:75:f2:95: e1:8f:45:9d:3a:e9:3a:d4:a8:36:40:08:d7:5b:d8: a4:64:79:6e:01:8b:b1:2b:46:bd:5f:10:8c:86:7f: bc:ba:f1:c0:3f:46:e7:de:40:9b:89:1a:0a:03:e1: 00:a3:53:43:1a:61:61:2d:05:ab:a8:d3:51:b4:89: 55:eb:55:fc:0f:83:79:db:79:1b:59:5f:8b:d0:48: 55:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:6B:F8:E5:84:90:03:23:B6:36:93:55:94:C9:72:C3:70:C7:33:B0 X509v3 Authority Key Identifier: keyid:1E:AF:FD:F7:6C:26:1A:0C:98:01:D9:F2:B0:2D:5B:A1:49:67:F3:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:cc:f6:86:d8:2f:55:39:18:11:a8:97:db:f8:5f:e9:3b:a5: 41:6e:a3:74:29:a1:0c:1f:c4:78:5a:32:13:9d:24:b0:c1:07: 63:b7:9e:f6:6d:e9:e4:4d:32:51:e0:ca:d4:fa:35:25:7e:e9: 50:f7:56:8c:ac:a5:4a:35:08:2d:3c:0a:64:de:7c:d5:d8:31: 2d:78:16:89:99:3a:44:78:64:e1:13:e1:50:8b:a5:2e:a2:69: cc:f3:5f:88:9e:45:4c:2d:96:d7:61:3a:a3:cb:80:f8:bf:94: 08:68:56:b2:06:77:9f:32:22:5b:a5:51:30:1d:fe:bf:e3:6e: 27:d3:b0:9b:ca:58:d8:e0:94:b9:d0:d9:21:a4:f1:61:d8:1f: 48:dc:d6:9d:97:12:4c:dd:d3:ec:22:56:29:14:2c:0b:90:9f: ae:05:be:10:aa:28:40:d1:0f:eb:69:6d:c3:3c:bd:9f:f7:54: 9b:0f:3a:8c:e9:6d:87:0a:32:60:39:e8:c9:8e:e4:86:bc:cf: 2d:03:89:97:51:f3:93:6e:00:ad:16:9d:0b:44:4e:24:cf:5c: 85:cc:5b:2f:a0:9c:5b:9c:6e:8d:3d:8d:48:40:cc:56:04:f5: f4:00:06:55:27:81:d9:7e:0f:b8:03:90:5e:8d:32:12:21:44: 66:5b:6a:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE/JMEI6Hswx9e1B8k7FL3Flq2o4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVBRkZERjc2QzI2MUEwQzk4MDFEOUYyQjAyRDVCQTE0 OTY3RjNDRDAeFw0yNTA4MjIyMjU2MjFaFw0yNTA4MjYwMjE5MjFaMDMxMTAvBgNV BAMTKDNENkJGOEU1ODQ5MDAzMjNCNjM2OTM1NTk0Qzk3MkMzNzBDNzMzQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsww2F5KnA5TWUmUBJxMwKIaRf 2uhHL18q/UoYg4kq4AaoOZXeif8UA9O5l6DmihcxMsM70t/yk07dMhNxD51EW6Gp fi+tipCZVTFoa27zRMjDMOL464ZBbiGAf8glwVoPrg1zvnEQHpR4ihQZLPjy/aMv 3BTxa35YAqDADuCHFDP1etOAi28wM+NDkWoRT3n/TkNf8TGysAEwfr/zcNgMAn6N 47JdU+xrOnVAgby25HXyleGPRZ066TrUqDZACNdb2KRkeW4Bi7ErRr1fEIyGf7y6 8cA/RufeQJuJGgoD4QCjU0MaYWEtBauo01G0iVXrVfwPg3nbeRtZX4vQSFX5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPWv45YSQAyO2NpNVlMlyw3DHM7AwHwYDVR0j BBgwFoAUHq/992wmGgyYAdnysC1boUln880wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Nzk4MDkxZS1jMWFlLTQwNDktOTZkMi1jNGNlMzdmZGMzNWIvMC8xRUFGRkRGNzZD MjYxQTBDOTgwMUQ5RjJCMDJENUJBMTQ5NjdGM0NELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUVBRkZERjc2QzI2MUEwQzk4MDFEOUYyQjAyRDVCQTE0OTY3 RjNDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc5ODA5MWUtYzFhZS00MDQ5LTk2 ZDItYzRjZTM3ZmRjMzViLzAvMUVBRkZERjc2QzI2MUEwQzk4MDFEOUYyQjAyRDVC QTE0OTY3RjNDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFfM9obYL1U5GBGol9v4X+k7pUFuo3QpoQwf xHhaMhOdJLDBB2O3nvZt6eRNMlHgytT6NSV+6VD3VoyspUo1CC08CmTefNXYMS14 FomZOkR4ZOET4VCLpS6iaczzX4ieRUwtltdhOqPLgPi/lAhoVrIGd58yIlulUTAd /r/jbifTsJvKWNjglLnQ2SGk8WHYH0jc1p2XEkzd0+wiVikULAuQn64FvhCqKEDR D+tpbcM8vZ/3VJsPOozpbYcKMmA56MmO5Ia8zy0DiZdR85NuAK0WnQtETiTPXIXM Wy+gnFucbo09jUhAzFYE9fQABlUngdl+D7gDkF6NMhIhRGZbalA= -----END CERTIFICATE-----Generated at Sat Aug 23 20:46:40 2025 by rpki-client