$ rpki-client -vvf repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft File: E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft (raw, json) Hash identifier: Yh6/56WtSh7NW5xuGpEEUN9zKOucUdQSI1nENJ92rHE= Subject key identifier: 51:4E:33:59:9C:A4:4C:70:5D:DC:D1:98:01:6C:9F:5C:02:8F:B9:73 Authority key identifier: E8:DA:87:F3:4A:55:0D:00:47:EE:C0:39:A2:0C:84:41:F0:66:EC:5B Certificate issuer: /CN=E8DA87F34A550D0047EEC039A20C8441F066EC5B Certificate serial: 1ADAFC5158D4C7834E0026CACF5EE3A7EBDF1060 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E8DA87F34A550D0047EEC039A20C8441F066EC5B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft Manifest number: 02FE Signing time: Thu 07 Aug 2025 23:41:15 +0000 Manifest this update: Thu 07 Aug 2025 23:36:15 +0000 Manifest next update: Mon 11 Aug 2025 08:11:15 +0000 Files and hashes: 1: E8DA87F34A550D0047EEC039A20C8441F066EC5B.crl (hash: 1Frsrd2gGJrtbOE5y2Vn03zr5J0M96qA2lcSrZ7sSTI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.crl rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E8DA87F34A550D0047EEC039A20C8441F066EC5B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 08:11:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:da:fc:51:58:d4:c7:83:4e:00:26:ca:cf:5e:e3:a7:eb:df:10:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E8DA87F34A550D0047EEC039A20C8441F066EC5B Validity Not Before: Aug 7 23:36:15 2025 GMT Not After : Aug 11 08:11:15 2025 GMT Subject: CN=514E33599CA44C705DDCD198016C9F5C028FB973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:da:5d:f0:43:7e:f4:be:a7:78:c4:ee:6c:10: b9:11:79:08:14:8b:0f:5e:42:bb:2b:fd:51:f0:4b: 0c:e0:22:80:ab:9b:93:52:1a:cb:4b:7f:c7:f6:e9: 96:e1:5f:f3:13:34:e3:6e:31:bc:a1:a1:19:f9:59: 05:eb:c0:bb:84:9c:e8:68:87:52:5d:30:2c:fe:a7: 05:7e:e2:c5:5a:4c:c2:5e:bc:a3:5b:f7:88:bc:32: d2:04:2d:62:d6:9a:f6:9f:11:5d:1b:50:a2:31:3f: 9c:73:b4:52:87:b2:27:71:d7:93:c8:32:66:41:d7: 44:1c:dd:0d:47:22:b5:78:10:31:50:92:1b:72:d4: db:25:42:12:01:0a:8b:8e:c9:a6:a1:40:65:37:5e: 22:f8:16:f2:5e:7c:ae:af:22:8e:44:f4:88:05:e5: dd:a7:fe:0e:75:e5:38:99:b0:7b:38:1b:ac:48:7f: 7e:64:24:e8:5a:0b:f8:1d:fd:79:bc:47:fb:74:d7: 69:01:d7:06:0e:9e:b6:c6:64:66:e2:80:4a:17:41: 73:0c:a7:42:84:25:ba:a0:fb:a5:0c:00:c1:e5:b4: 31:b0:87:39:e0:c3:13:51:73:98:41:0f:7b:c5:63: 98:7e:b7:95:ea:1f:7e:90:55:5a:f2:40:34:5d:46: f2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:4E:33:59:9C:A4:4C:70:5D:DC:D1:98:01:6C:9F:5C:02:8F:B9:73 X509v3 Authority Key Identifier: keyid:E8:DA:87:F3:4A:55:0D:00:47:EE:C0:39:A2:0C:84:41:F0:66:EC:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E8DA87F34A550D0047EEC039A20C8441F066EC5B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:db:df:28:b6:14:f7:1a:ce:38:1a:36:b2:83:c8:88:a7:f8: 2b:6b:3f:db:5c:08:63:f2:a0:7f:ff:55:aa:15:5f:9a:23:a6: e1:77:9f:17:a1:a6:95:3d:c2:bb:18:1d:4a:7a:e0:57:ef:1f: 85:17:45:42:f6:1a:6d:88:a5:1a:64:d9:c0:f8:eb:68:47:77: 32:d7:08:40:9f:2f:b7:f0:f7:dd:55:0f:7d:76:c3:2e:8e:a7: a4:f7:56:52:22:0d:42:4b:a1:f5:bf:22:c8:a0:79:e9:2a:e9: b0:d6:8d:b6:fa:ce:72:87:d1:c0:97:9b:02:8a:c1:0e:84:84: 39:df:5e:d1:56:6c:69:5e:52:14:ad:af:2d:af:e6:1d:cc:6a: 6b:95:43:02:71:4a:18:28:9d:ff:54:30:c9:da:b8:89:96:4f: 0c:e2:fd:eb:3e:0c:d4:47:30:37:fe:fc:c4:79:66:dd:65:5f: 67:c5:24:b9:5d:2d:6d:0d:81:3c:b3:19:a8:80:96:5d:ef:7b: c4:32:6a:67:6e:70:22:ec:7f:08:d2:ad:03:39:4e:f2:e8:c3: a0:d7:36:74:de:27:75:ca:83:db:d3:33:c9:52:64:49:29:69: 33:04:6e:8e:1d:1c:d9:71:d3:ab:4c:e1:f4:9f:35:1b:5f:6c: 20:c3:92:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGtr8UVjUx4NOACbKz17jp+vfEGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRThEQTg3RjM0QTU1MEQwMDQ3RUVDMDM5QTIwQzg0NDFG MDY2RUM1QjAeFw0yNTA4MDcyMzM2MTVaFw0yNTA4MTEwODExMTVaMDMxMTAvBgNV BAMTKDUxNEUzMzU5OUNBNDRDNzA1RERDRDE5ODAxNkM5RjVDMDI4RkI5NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF2l3wQ370vqd4xO5sELkReQgU iw9eQrsr/VHwSwzgIoCrm5NSGstLf8f26ZbhX/MTNONuMbyhoRn5WQXrwLuEnOho h1JdMCz+pwV+4sVaTMJevKNb94i8MtIELWLWmvafEV0bUKIxP5xztFKHsidx15PI MmZB10Qc3Q1HIrV4EDFQkhty1NslQhIBCouOyaahQGU3XiL4FvJefK6vIo5E9IgF 5d2n/g515TiZsHs4G6xIf35kJOhaC/gd/Xm8R/t012kB1wYOnrbGZGbigEoXQXMM p0KEJbqg+6UMAMHltDGwhzngwxNRc5hBD3vFY5h+t5XqH36QVVryQDRdRvKRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUU4zWZykTHBd3NGYAWyfXAKPuXMwHwYDVR0j BBgwFoAU6NqH80pVDQBH7sA5ogyEQfBm7FswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTQ2NzZjZC1kZTM5LTQ2OGEtYWQyNS02NzVlMWI5MTBmYWMvMC9FOERBODdGMzRB NTUwRDAwNDdFRUMwMzlBMjBDODQ0MUYwNjZFQzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRThEQTg3RjM0QTU1MEQwMDQ3RUVDMDM5QTIwQzg0NDFGMDY2 RUM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjE0Njc2Y2QtZGUzOS00NjhhLWFk MjUtNjc1ZTFiOTEwZmFjLzAvRThEQTg3RjM0QTU1MEQwMDQ3RUVDMDM5QTIwQzg0 NDFGMDY2RUM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHrb3yi2FPcazjgaNrKDyIin+CtrP9tcCGPy oH//VaoVX5ojpuF3nxehppU9wrsYHUp64FfvH4UXRUL2Gm2IpRpk2cD462hHdzLX CECfL7fw991VD312wy6Op6T3VlIiDUJLofW/Isigeekq6bDWjbb6znKH0cCXmwKK wQ6EhDnfXtFWbGleUhStry2v5h3MamuVQwJxShgonf9UMMnauImWTwzi/es+DNRH MDf+/MR5Zt1lX2fFJLldLW0NgTyzGaiAll3ve8QyamducCLsfwjSrQM5TvLow6DX NnTeJ3XKg9vTM8lSZEkpaTMEbo4dHNlx06tM4fSfNRtfbCDDkmQ= -----END CERTIFICATE-----Generated at Fri Aug 8 19:28:01 2025 by rpki-client