$ rpki-client -vvf repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.mft File: 1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.mft (raw, json) Hash identifier: D6p3ePgNj6vo0hbwpiNyH1zUUcyPq1vsAJm0Y6EFFcE= Subject key identifier: 00:FA:CF:6D:FB:C2:9A:47:BB:07:52:A8:BC:96:F2:C6:25:BB:32:47 Authority key identifier: 1E:EA:71:B4:C7:0A:47:D5:3B:E3:20:4F:E2:C4:8C:EF:92:7E:C7:31 Certificate issuer: /CN=1EEA71B4C70A47D53BE3204FE2C48CEF927EC731 Certificate serial: 661271CDD562778D2187EED8D3DB6CF33AF68338 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.mft Manifest number: 0157 Signing time: Tue 05 Aug 2025 06:01:59 +0000 Manifest this update: Tue 05 Aug 2025 05:56:59 +0000 Manifest next update: Fri 08 Aug 2025 14:13:59 +0000 Files and hashes: 1: 1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.crl (hash: MD8+no0m+lyhwY2Unkx1S3FjVSuMotgsnyV+SLslNtA=) 2: 3130332e31342e37352e302f32342d3234203d3e20313334363332.roa (hash: d03ba4w3/cMHa6YrFwbQZXYz0UgEChS2sqo8pZVU9h0=) 3: 3130332e31342e37342e302f32342d3234203d3e20313334363332.roa (hash: kRl6IfQghVcIhK14CpOe+4+3tl4P/DD5zma96SwY1Qw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.crl rsync://repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 14:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:12:71:cd:d5:62:77:8d:21:87:ee:d8:d3:db:6c:f3:3a:f6:83:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EEA71B4C70A47D53BE3204FE2C48CEF927EC731 Validity Not Before: Aug 5 05:56:59 2025 GMT Not After : Aug 8 14:13:59 2025 GMT Subject: CN=00FACF6DFBC29A47BB0752A8BC96F2C625BB3247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ed:74:02:c3:c8:8a:de:b0:67:9a:77:4d:ba: c8:5f:c4:0a:91:f2:55:ab:2b:4d:9a:8b:97:23:bf: aa:5d:ea:19:74:ff:a1:29:c3:5b:94:b7:4a:e9:98: d8:69:53:dd:80:7e:ae:61:05:89:4c:d4:3e:45:88: b3:88:49:59:58:fa:33:16:00:fc:52:b8:8f:ec:7a: a8:45:7c:4e:b8:b7:52:01:22:e3:00:e9:40:3f:0c: 3d:14:60:f3:30:54:af:d7:ed:45:97:16:2b:77:f9: 33:8c:64:54:4a:b2:0d:03:98:4a:67:d1:1c:fe:49: 6c:68:46:4b:b1:50:9f:6d:74:fb:64:7a:3b:04:c1: 85:c8:19:c4:35:ab:cf:67:85:cb:a3:db:26:9a:18: db:ae:31:3b:41:84:06:57:08:81:c0:e2:20:1c:38: 82:70:97:ed:24:dc:5c:12:aa:7c:ce:3d:90:69:12: 25:28:1c:27:12:70:d2:cf:f0:7a:4d:ac:0e:37:e5: b6:c8:51:78:be:a8:ab:e9:a5:93:b3:33:bb:ec:19: 2f:90:c7:ec:53:ba:8d:96:83:df:18:90:d0:d1:9d: 5e:ed:62:15:04:6d:e0:fd:31:08:a8:17:79:c0:86: cc:50:8e:52:bd:f1:e3:94:b9:79:5d:3a:6e:79:6a: c2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:FA:CF:6D:FB:C2:9A:47:BB:07:52:A8:BC:96:F2:C6:25:BB:32:47 X509v3 Authority Key Identifier: keyid:1E:EA:71:B4:C7:0A:47:D5:3B:E3:20:4F:E2:C4:8C:EF:92:7E:C7:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:60:a7:35:77:1d:9b:ee:40:99:2a:c6:6c:71:2f:77:8f:b8: e5:46:3e:47:d5:1f:28:26:29:49:b8:98:c1:57:f2:e8:95:d9: c0:29:46:50:a1:62:ec:00:b1:88:57:bb:80:c0:55:82:e4:ff: b5:47:0f:f4:b7:71:81:bc:26:66:6b:e2:9a:bc:5e:ab:23:05: 4a:bf:9f:49:02:34:de:e2:cc:f1:fd:83:cc:a4:89:fd:fd:13: 8c:28:a8:48:3d:75:eb:7a:36:45:7f:57:c0:07:f4:d9:ab:46: a4:18:bc:e2:d3:52:77:01:c3:e2:7f:2d:b5:85:fe:dc:3b:9a: f1:b9:23:5b:17:95:86:86:91:0a:e3:1f:a7:3a:01:cd:95:95: 65:95:0a:dc:1f:56:4d:b7:5c:a3:a7:86:d4:08:d4:fb:1a:84: 90:12:7c:b5:de:2e:b0:cf:45:ff:2a:c2:04:bf:f3:e3:a8:71: c6:7b:c0:3b:03:57:6d:59:5c:ed:af:92:bb:77:ef:7d:70:77: 65:8d:86:c2:a1:ff:69:fb:83:15:72:9f:05:a2:0c:54:30:ac: fd:4b:19:ab:bd:39:9b:62:9a:f1:29:08:08:32:e4:16:c7:e2: 24:34:d1:62:81:74:5d:eb:a3:b6:c5:0f:4e:43:55:2a:51:d9: e6:ad:39:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZhJxzdVid40hh+7Y09ts8zr2gzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVFQTcxQjRDNzBBNDdENTNCRTMyMDRGRTJDNDhDRUY5 MjdFQzczMTAeFw0yNTA4MDUwNTU2NTlaFw0yNTA4MDgxNDEzNTlaMDMxMTAvBgNV BAMTKDAwRkFDRjZERkJDMjlBNDdCQjA3NTJBOEJDOTZGMkM2MjVCQjMyNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU7XQCw8iK3rBnmndNushfxAqR 8lWrK02ai5cjv6pd6hl0/6Epw1uUt0rpmNhpU92Afq5hBYlM1D5FiLOISVlY+jMW APxSuI/seqhFfE64t1IBIuMA6UA/DD0UYPMwVK/X7UWXFit3+TOMZFRKsg0DmEpn 0Rz+SWxoRkuxUJ9tdPtkejsEwYXIGcQ1q89nhcuj2yaaGNuuMTtBhAZXCIHA4iAc OIJwl+0k3FwSqnzOPZBpEiUoHCcScNLP8HpNrA435bbIUXi+qKvppZOzM7vsGS+Q x+xTuo2Wg98YkNDRnV7tYhUEbeD9MQioF3nAhsxQjlK98eOUuXldOm55asIFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAPrPbfvCmke7B1KovJbyxiW7MkcwHwYDVR0j BBgwFoAUHupxtMcKR9U74yBP4sSM75J+xzEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MDAwZTIzZS1mNDRhLTRjZmMtYmY1Ni1kOTlhMDkyZDczMTQvMC8xRUVBNzFCNEM3 MEE0N0Q1M0JFMzIwNEZFMkM0OENFRjkyN0VDNzMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUVFQTcxQjRDNzBBNDdENTNCRTMyMDRGRTJDNDhDRUY5MjdF QzczMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTAwMGUyM2UtZjQ0YS00Y2ZjLWJm NTYtZDk5YTA5MmQ3MzE0LzAvMUVFQTcxQjRDNzBBNDdENTNCRTMyMDRGRTJDNDhD RUY5MjdFQzczMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGdgpzV3HZvuQJkqxmxxL3ePuOVGPkfVHygm KUm4mMFX8uiV2cApRlChYuwAsYhXu4DAVYLk/7VHD/S3cYG8JmZr4pq8XqsjBUq/ n0kCNN7izPH9g8ykif39E4woqEg9det6NkV/V8AH9NmrRqQYvOLTUncBw+J/LbWF /tw7mvG5I1sXlYaGkQrjH6c6Ac2VlWWVCtwfVk23XKOnhtQI1PsahJASfLXeLrDP Rf8qwgS/8+OoccZ7wDsDV21ZXO2vkrt3731wd2WNhsKh/2n7gxVynwWiDFQwrP1L Gau9OZtimvEpCAgy5BbH4iQ00WKBdF3ro7bFD05DVSpR2eatOXU= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:36 2025 by rpki-client