$ rpki-client -vvf repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft File: E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft (raw, json) Hash identifier: hdXHKu07nWBjk3/OSeAlNQH4xGrJeQ9gKPim5w+HPZc= Subject key identifier: AA:BD:A1:A4:7C:DE:F0:C3:A2:67:3C:7C:86:3F:0C:FD:37:5C:62:50 Authority key identifier: E6:FE:A7:CE:7F:6F:A5:EA:E0:5E:BB:DF:D8:6F:D5:3E:84:FA:75:A8 Certificate issuer: /CN=E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8 Certificate serial: 3BE90EB2869B53A75364090F7795156C58DB4794 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft Manifest number: A5 Signing time: Wed 06 Aug 2025 09:10:42 +0000 Manifest this update: Wed 06 Aug 2025 09:05:42 +0000 Manifest next update: Sat 09 Aug 2025 15:27:42 +0000 Files and hashes: 1: E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl (hash: xwWe9cY5rFqaB0itfKMwJ199YkA9wJRNxfjGWv5OyNU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 15:27:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:e9:0e:b2:86:9b:53:a7:53:64:09:0f:77:95:15:6c:58:db:47:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8 Validity Not Before: Aug 6 09:05:42 2025 GMT Not After : Aug 9 15:27:42 2025 GMT Subject: CN=AABDA1A47CDEF0C3A2673C7C863F0CFD375C6250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:fe:ff:97:6e:da:d8:07:7c:20:a7:83:9f:09: 03:62:a3:02:eb:d8:e8:a2:29:4b:4f:06:9c:a6:7b: 91:4d:29:1f:e2:01:0c:00:bb:5a:ff:ae:43:dc:4b: cc:c6:59:58:66:8b:25:25:08:74:8c:24:e2:73:f5: 48:8e:bc:03:ea:a9:b2:ee:5e:18:b3:fc:88:a6:c6: 24:55:14:90:4f:d3:95:6d:7d:75:48:03:1f:cf:1e: e1:59:03:cc:3f:8b:5d:38:ab:99:d1:e4:df:a6:1d: 57:f4:d7:10:f3:24:8f:44:85:96:62:3e:05:ac:d4: 3d:df:55:b5:6b:d2:e1:b5:72:2a:a1:20:69:a4:ca: 0a:08:ec:24:6f:27:59:ae:cc:ab:72:c1:a5:1c:26: 9a:4b:1d:1e:28:73:8e:72:54:1a:be:23:10:14:19: 8d:0a:9c:4f:88:d0:36:76:76:6f:bb:be:1c:25:63: a2:d7:69:ef:73:cc:75:d0:1f:36:8a:19:8c:4f:48: 66:3a:5c:47:f4:75:9d:7b:33:a0:ae:ce:d7:b3:ec: e5:da:35:e6:a4:85:5f:98:23:4f:92:c8:6f:a6:23: b8:9b:19:1d:0a:d8:b8:dc:d9:f2:c6:2f:1b:d6:cb: 78:0b:6b:f5:6a:01:6e:ef:6b:f8:fa:c5:b1:7a:98: 45:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:BD:A1:A4:7C:DE:F0:C3:A2:67:3C:7C:86:3F:0C:FD:37:5C:62:50 X509v3 Authority Key Identifier: keyid:E6:FE:A7:CE:7F:6F:A5:EA:E0:5E:BB:DF:D8:6F:D5:3E:84:FA:75:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/E6FEA7CE7F6FA5EAE05EBBDFD86FD53E84FA75A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:b8:09:5a:b5:0f:ab:3f:b8:3d:0d:73:36:4d:9c:69:93:52: b2:0e:0b:a1:ee:48:1a:ba:11:91:28:ee:30:2b:bf:21:b3:6f: b3:2a:73:30:99:4f:d9:e3:45:f5:bb:41:f3:c2:ff:58:13:2e: e7:9e:5e:10:b1:08:05:f2:ae:3b:ae:e1:05:aa:a0:0e:77:ce: da:95:b7:4b:6c:6e:1e:cc:9b:4d:35:9a:fe:2c:43:91:62:2d: af:3d:e9:22:a4:35:6c:19:43:85:5a:d9:e9:e0:1d:f7:2f:43: ee:0c:9f:a3:32:98:6f:07:5e:9d:33:6b:a6:4d:bf:de:9f:24: 26:90:63:92:2c:0c:c8:ce:6d:26:6f:be:0e:e1:f0:23:74:bb: 1c:d3:0f:4f:8c:49:61:ec:eb:6a:3c:32:26:b3:af:c8:81:40: 18:53:f0:c4:21:c0:fd:4d:9f:23:6b:f9:f5:d7:69:35:3b:d6: 83:dc:ed:9e:74:cd:d4:16:2a:87:5d:54:bb:37:0e:87:c7:3f: 97:9f:05:98:85:be:2f:f8:11:9a:c6:e7:3d:3e:7c:8c:f6:75: 85:25:5b:c3:f9:2b:46:17:c4:17:b6:80:16:2c:80:6b:77:00: 1a:aa:10:cb:eb:51:5d:21:61:75:dc:d9:f5:b9:70:fe:2f:0b: 1e:39:5b:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO+kOsoabU6dTZAkPd5UVbFjbR5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTZGRUE3Q0U3RjZGQTVFQUUwNUVCQkRGRDg2RkQ1M0U4 NEZBNzVBODAeFw0yNTA4MDYwOTA1NDJaFw0yNTA4MDkxNTI3NDJaMDMxMTAvBgNV BAMTKEFBQkRBMUE0N0NERUYwQzNBMjY3M0M3Qzg2M0YwQ0ZEMzc1QzYyNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6/v+XbtrYB3wgp4OfCQNiowLr 2OiiKUtPBpyme5FNKR/iAQwAu1r/rkPcS8zGWVhmiyUlCHSMJOJz9UiOvAPqqbLu Xhiz/IimxiRVFJBP05VtfXVIAx/PHuFZA8w/i104q5nR5N+mHVf01xDzJI9EhZZi PgWs1D3fVbVr0uG1ciqhIGmkygoI7CRvJ1muzKtywaUcJppLHR4oc45yVBq+IxAU GY0KnE+I0DZ2dm+7vhwlY6LXae9zzHXQHzaKGYxPSGY6XEf0dZ17M6Cuztez7OXa NeakhV+YI0+SyG+mI7ibGR0K2Ljc2fLGLxvWy3gLa/VqAW7va/j6xbF6mEXxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqr2hpHze8MOiZzx8hj8M/TdcYlAwHwYDVR0j BBgwFoAU5v6nzn9vpergXrvf2G/VPoT6dagwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTMxNTlmMi0wY2YwLTQzYzYtYjI4Mi1jNjlmYmExM2ExNGEvMC9FNkZFQTdDRTdG NkZBNUVBRTA1RUJCREZEODZGRDUzRTg0RkE3NUE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTZGRUE3Q0U3RjZGQTVFQUUwNUVCQkRGRDg2RkQ1M0U4NEZB NzVBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWUzMTU5ZjItMGNmMC00M2M2LWIy ODItYzY5ZmJhMTNhMTRhLzAvRTZGRUE3Q0U3RjZGQTVFQUUwNUVCQkRGRDg2RkQ1 M0U4NEZBNzVBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI64CVq1D6s/uD0NczZNnGmTUrIOC6HuSBq6 EZEo7jArvyGzb7MqczCZT9njRfW7QfPC/1gTLueeXhCxCAXyrjuu4QWqoA53ztqV t0tsbh7Mm001mv4sQ5FiLa896SKkNWwZQ4Va2engHfcvQ+4Mn6MymG8HXp0za6ZN v96fJCaQY5IsDMjObSZvvg7h8CN0uxzTD0+MSWHs62o8Miazr8iBQBhT8MQhwP1N nyNr+fXXaTU71oPc7Z50zdQWKoddVLs3DofHP5efBZiFvi/4EZrG5z0+fIz2dYUl W8P5K0YXxBe2gBYsgGt3ABqqEMvrUV0hYXXc2fW5cP4vCx45W5s= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:10 2025 by rpki-client