$ rpki-client -vvf repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft File: EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft (raw, json) Hash identifier: XxOm5R7spchFHcuhtZRTfwN+btBH89V6ykwmJE2EkBo= Subject key identifier: 84:E0:3A:83:89:01:7C:D4:28:48:74:81:53:7A:A3:86:D0:F9:B7:1E Authority key identifier: EE:C1:A7:BF:2D:95:D0:BA:FE:37:10:5E:4B:B1:BB:23:60:1D:D1:DB Certificate issuer: /CN=EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB Certificate serial: 517C503C39A60E5BCD7584068E6300D81CC82704 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft Manifest number: D6 Signing time: Tue 04 Nov 2025 04:22:11 +0000 Manifest this update: Tue 04 Nov 2025 04:17:11 +0000 Manifest next update: Fri 07 Nov 2025 12:15:11 +0000 Files and hashes: 1: EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.crl (hash: 6UP8YWPRnvTkN+s88umDdaE+MhOOi3ZuXACOtcA3OwM=) 2: 3136302e32352e34352e302f32342d3234203d3e20313533303639.roa (hash: pjrXRUj5r2IszWCXojX+FWGkandw2VMiyslpGWMGbUA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.crl rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:7c:50:3c:39:a6:0e:5b:cd:75:84:06:8e:63:00:d8:1c:c8:27:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB Validity Not Before: Nov 4 04:17:11 2025 GMT Not After : Nov 7 12:15:11 2025 GMT Subject: CN=84E03A8389017CD428487481537AA386D0F9B71E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f1:11:c9:6b:60:9d:8d:2f:ef:01:c5:a3:30: e2:01:5a:61:73:e0:6b:3c:f1:a3:56:bd:0a:e0:fb: 3c:bf:77:78:03:8f:df:f5:3e:21:9e:6c:2a:95:83: b8:86:2b:c9:9d:56:2d:2c:34:dc:4d:66:5e:a3:e5: 1a:65:8c:60:6e:b1:d6:27:96:32:62:4f:18:8c:4d: 30:76:6a:7a:34:6b:b2:1c:e2:2b:6b:17:23:8f:1a: fd:0c:2b:b7:b2:de:02:9a:21:73:16:b0:6f:15:63: 0f:81:8b:ad:34:44:4e:ee:7e:e2:ba:17:99:bc:35: 5f:1a:d5:bf:2f:e9:99:53:41:07:a5:35:4a:0f:74: 78:7f:19:1d:88:d5:a0:60:ee:fd:51:8b:24:f0:4c: cf:6b:b2:2b:6a:1a:2e:fd:b9:fb:a8:e6:95:74:ea: f7:42:3b:f6:76:69:d3:e0:4d:7b:ee:c9:d9:3b:9a: 8d:09:9d:bf:dd:8c:e0:05:e5:25:1a:16:fa:b8:db: 9c:6d:8c:fa:88:53:21:1a:0b:3f:43:12:9d:85:25: 4f:fe:5b:42:ec:a6:89:f3:3c:23:a3:26:e7:6c:ac: 9e:90:ae:14:e0:3d:25:8a:c9:23:36:bd:48:da:54: 79:80:1d:13:e2:db:75:3c:1d:66:f7:1f:dc:fb:8b: 43:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E0:3A:83:89:01:7C:D4:28:48:74:81:53:7A:A3:86:D0:F9:B7:1E X509v3 Authority Key Identifier: keyid:EE:C1:A7:BF:2D:95:D0:BA:FE:37:10:5E:4B:B1:BB:23:60:1D:D1:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/0/EEC1A7BF2D95D0BAFE37105E4BB1BB23601DD1DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:f9:e6:fb:c8:ca:5f:5f:72:ad:da:9c:6a:f4:c2:3f:e0:a0: eb:87:3d:99:15:c7:7a:8b:c2:d5:f1:57:3f:31:e7:fc:2b:61: ee:61:4a:60:f2:60:5f:89:19:86:12:ec:24:74:4f:62:7f:eb: 17:5d:e2:95:50:2b:e4:d2:fe:fa:b0:b5:b0:75:91:56:c7:a1: 84:1e:64:8b:34:72:cb:31:3e:ed:21:a9:89:29:72:3e:8c:a2: d9:ed:2d:2e:59:64:53:95:0e:ef:4b:bb:8c:94:2c:67:ad:fb: 73:9d:72:a4:cf:b8:f9:f4:9c:28:bb:c0:99:2a:21:14:43:64: 45:56:50:69:84:22:f1:60:b0:49:8f:b6:d7:c7:5e:9c:02:c0: 5c:46:62:9d:ab:b5:f1:52:d8:b1:06:91:50:aa:ff:b6:bf:5e: 13:e3:bf:6c:66:1d:69:2c:ee:75:0c:e4:f3:20:4f:15:c0:51: 57:ea:51:22:eb:7b:6c:54:17:3e:50:28:d8:2d:45:26:85:de: 14:4f:02:21:81:a6:fa:ed:42:d3:5c:4e:0f:1a:14:2d:6f:0b: a1:c3:5c:a2:96:d0:a1:6d:42:d5:99:4d:b8:71:36:95:43:ea: b1:e5:73:d9:fa:ae:da:0f:81:d2:46:ec:5f:c0:ad:13:2b:66: e8:73:72:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUXxQPDmmDlvNdYQGjmMA2BzIJwQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVDMUE3QkYyRDk1RDBCQUZFMzcxMDVFNEJCMUJCMjM2 MDFERDFEQjAeFw0yNTExMDQwNDE3MTFaFw0yNTExMDcxMjE1MTFaMDMxMTAvBgNV BAMTKDg0RTAzQTgzODkwMTdDRDQyODQ4NzQ4MTUzN0FBMzg2RDBGOUI3MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm8RHJa2CdjS/vAcWjMOIBWmFz 4Gs88aNWvQrg+zy/d3gDj9/1PiGebCqVg7iGK8mdVi0sNNxNZl6j5RpljGBusdYn ljJiTxiMTTB2ano0a7Ic4itrFyOPGv0MK7ey3gKaIXMWsG8VYw+Bi600RE7ufuK6 F5m8NV8a1b8v6ZlTQQelNUoPdHh/GR2I1aBg7v1RiyTwTM9rsitqGi79ufuo5pV0 6vdCO/Z2adPgTXvuydk7mo0Jnb/djOAF5SUaFvq425xtjPqIUyEaCz9DEp2FJU/+ W0LsponzPCOjJudsrJ6QrhTgPSWKySM2vUjaVHmAHRPi23U8HWb3H9z7i0OHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhOA6g4kBfNQoSHSBU3qjhtD5tx4wHwYDVR0j BBgwFoAU7sGnvy2V0Lr+NxBeS7G7I2Ad0dswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzY1NjFkNC0yM2M4LTRjOWItODkwZS00ZjI2MzJlNTJjOTcvMC9FRUMxQTdCRjJE OTVEMEJBRkUzNzEwNUU0QkIxQkIyMzYwMUREMURCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRUVDMUE3QkYyRDk1RDBCQUZFMzcxMDVFNEJCMUJCMjM2MDFE RDFEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjM2NTYxZDQtMjNjOC00YzliLTg5 MGUtNGYyNjMyZTUyYzk3LzAvRUVDMUE3QkYyRDk1RDBCQUZFMzcxMDVFNEJCMUJC MjM2MDFERDFEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIz55vvIyl9fcq3anGr0wj/goOuHPZkVx3qL wtXxVz8x5/wrYe5hSmDyYF+JGYYS7CR0T2J/6xdd4pVQK+TS/vqwtbB1kVbHoYQe ZIs0cssxPu0hqYkpcj6MotntLS5ZZFOVDu9Lu4yULGet+3OdcqTPuPn0nCi7wJkq IRRDZEVWUGmEIvFgsEmPttfHXpwCwFxGYp2rtfFS2LEGkVCq/7a/XhPjv2xmHWks 7nUM5PMgTxXAUVfqUSLre2xUFz5QKNgtRSaF3hRPAiGBpvrtQtNcTg8aFC1vC6HD XKKW0KFtQtWZTbhxNpVD6rHlc9n6rtoPgdJG7F/ArRMrZuhzcto= -----END CERTIFICATE-----Generated at Wed Nov 5 02:36:08 2025 by rpki-client