$ rpki-client -vvf repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft File: E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft (raw, json) Hash identifier: MpfEh07OzMzUferw/bjkd1ZQLiuHYcMCMac+KgXC77Q= Subject key identifier: 46:7D:6C:5F:81:4D:6D:1C:B2:A3:47:86:7A:C1:3B:45:BD:E0:55:33 Authority key identifier: E1:B7:08:FE:CC:3E:90:64:3F:33:B8:31:1E:29:F1:B4:6F:E9:2B:7F Certificate issuer: /CN=E1B708FECC3E90643F33B8311E29F1B46FE92B7F Certificate serial: 281F5B6070176D51C8C1659EF14A964F7CF005BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft Manifest number: 0183 Signing time: Thu 07 Aug 2025 00:11:39 +0000 Manifest this update: Thu 07 Aug 2025 00:06:39 +0000 Manifest next update: Sun 10 Aug 2025 06:43:39 +0000 Files and hashes: 1: E1B708FECC3E90643F33B8311E29F1B46FE92B7F.crl (hash: kCr5sRL2QwZN5E2404TLOOeHWf3DsmIT5zUfdwIwymY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.crl rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 06:43:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:1f:5b:60:70:17:6d:51:c8:c1:65:9e:f1:4a:96:4f:7c:f0:05:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1B708FECC3E90643F33B8311E29F1B46FE92B7F Validity Not Before: Aug 7 00:06:39 2025 GMT Not After : Aug 10 06:43:39 2025 GMT Subject: CN=467D6C5F814D6D1CB2A347867AC13B45BDE05533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:42:5b:77:f8:3b:fd:f4:0e:0b:d9:4b:e8:c6: 6a:0e:ef:3d:0d:ae:cb:62:52:3b:d3:be:96:fe:ee: 5b:65:ab:a8:6a:54:35:c1:87:6a:bd:db:8d:d3:82: 1b:c7:d1:98:ca:c2:e8:05:1f:17:e6:f0:81:a4:c2: 15:ac:f0:68:fb:17:ea:57:6e:f1:92:de:65:f8:e3: c4:62:9e:b8:73:09:63:94:b4:c6:90:2c:30:08:a5: 93:ea:4e:77:f0:d9:86:f5:09:17:a6:52:0d:99:98: 09:99:58:06:75:66:78:69:4d:24:65:60:63:4d:64: 80:96:4c:db:67:58:7f:02:25:73:64:cd:99:48:e6: ec:41:50:79:5e:2d:b2:48:eb:13:2a:6e:92:37:ca: 82:fc:0d:0d:6a:01:ba:2b:3a:06:16:37:c8:e7:d8: 53:cb:b3:9e:c1:09:c3:41:32:82:75:e4:79:70:c8: 86:ed:80:9e:4c:72:f1:f4:ae:f1:6c:7f:79:68:bf: a3:22:0b:d7:58:a1:a8:93:24:aa:50:ab:0d:9e:8e: 8b:a4:a2:13:54:87:98:b0:49:f7:bd:38:98:33:86: 44:41:68:7c:9a:a3:90:52:44:c1:ba:ac:bf:c0:c6: 1e:3c:f5:98:48:2e:55:dd:ad:09:1c:5f:f3:f1:6c: 75:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:7D:6C:5F:81:4D:6D:1C:B2:A3:47:86:7A:C1:3B:45:BD:E0:55:33 X509v3 Authority Key Identifier: keyid:E1:B7:08:FE:CC:3E:90:64:3F:33:B8:31:1E:29:F1:B4:6F:E9:2B:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:f2:1b:96:8d:fb:6a:ff:b3:f6:87:29:4f:39:83:79:8c:ff: fd:19:cc:f7:87:ca:82:2b:30:ba:1d:75:a1:f1:81:59:26:64: 99:f7:5f:54:3a:34:67:38:2e:77:f0:a4:a7:33:23:37:db:d8: f2:f3:65:fe:23:65:9d:e1:ef:cd:db:fd:d3:df:f0:9a:68:1d: 18:89:95:7c:b1:b8:39:0a:f9:62:ed:8e:d6:ae:47:b2:f0:9c: 21:62:b4:90:76:48:74:b9:14:53:19:52:d1:67:e5:de:37:71: 3a:f0:1e:30:47:41:92:4d:e7:af:62:d8:87:d9:36:5d:24:eb: 40:15:1a:5e:72:06:da:3a:99:ca:e5:4d:9a:dd:0b:d6:52:2f: f2:1e:e4:04:0d:5d:12:64:a2:cb:ab:31:93:8b:25:fb:3c:c5: da:dd:19:61:99:1f:9c:c3:d6:99:58:42:77:06:b4:6a:4c:3f: f5:b0:53:e6:9e:5b:b9:ae:3f:19:81:ba:7a:c4:15:b7:e3:dc: 69:58:3c:4c:52:f4:85:ab:0e:f8:f2:b4:8e:46:93:31:c9:84: 36:08:26:d8:6a:2c:16:ea:24:d9:ee:6f:43:0c:7f:c6:eb:6d: f9:76:53:97:da:f5:4f:0a:d7:15:36:b1:14:9d:a2:12:b9:0d: df:07:07:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKB9bYHAXbVHIwWWe8UqWT3zwBbowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFCNzA4RkVDQzNFOTA2NDNGMzNCODMxMUUyOUYxQjQ2 RkU5MkI3RjAeFw0yNTA4MDcwMDA2MzlaFw0yNTA4MTAwNjQzMzlaMDMxMTAvBgNV BAMTKDQ2N0Q2QzVGODE0RDZEMUNCMkEzNDc4NjdBQzEzQjQ1QkRFMDU1MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUQlt3+Dv99A4L2UvoxmoO7z0N rstiUjvTvpb+7ltlq6hqVDXBh2q9243TghvH0ZjKwugFHxfm8IGkwhWs8Gj7F+pX bvGS3mX448RinrhzCWOUtMaQLDAIpZPqTnfw2Yb1CRemUg2ZmAmZWAZ1ZnhpTSRl YGNNZICWTNtnWH8CJXNkzZlI5uxBUHleLbJI6xMqbpI3yoL8DQ1qAborOgYWN8jn 2FPLs57BCcNBMoJ15HlwyIbtgJ5McvH0rvFsf3lov6MiC9dYoaiTJKpQqw2ejouk ohNUh5iwSfe9OJgzhkRBaHyao5BSRMG6rL/Axh489ZhILlXdrQkcX/PxbHVrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURn1sX4FNbRyyo0eGesE7Rb3gVTMwHwYDVR0j BBgwFoAU4bcI/sw+kGQ/M7gxHinxtG/pK38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZjRkMWMzNi00YTMxLTQ4NTctOWUzNi0wZGRmM2Q2OTFlYjUvMC9FMUI3MDhGRUND M0U5MDY0M0YzM0I4MzExRTI5RjFCNDZGRTkyQjdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTFCNzA4RkVDQzNFOTA2NDNGMzNCODMxMUUyOUYxQjQ2RkU5 MkI3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmY0ZDFjMzYtNGEzMS00ODU3LTll MzYtMGRkZjNkNjkxZWI1LzAvRTFCNzA4RkVDQzNFOTA2NDNGMzNCODMxMUUyOUYx QjQ2RkU5MkI3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKXyG5aN+2r/s/aHKU85g3mM//0ZzPeHyoIr MLoddaHxgVkmZJn3X1Q6NGc4LnfwpKczIzfb2PLzZf4jZZ3h783b/dPf8JpoHRiJ lXyxuDkK+WLtjtauR7LwnCFitJB2SHS5FFMZUtFn5d43cTrwHjBHQZJN569i2IfZ Nl0k60AVGl5yBto6mcrlTZrdC9ZSL/Ie5AQNXRJkosurMZOLJfs8xdrdGWGZH5zD 1plYQncGtGpMP/WwU+aeW7muPxmBunrEFbfj3GlYPExS9IWrDvjytI5GkzHJhDYI JthqLBbqJNnub0MMf8brbfl2U5fa9U8K1xU2sRSdohK5Dd8HB2U= -----END CERTIFICATE-----Generated at Thu Aug 7 07:23:01 2025 by rpki-client