$ rpki-client -vvf repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft File: 01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft (raw, json) Hash identifier: FoeEjZYQ70kIme6/jo1GI1YBiDYW64d/wrlD972yFzQ= Subject key identifier: D2:BD:22:4D:B2:DA:7C:8F:21:AC:A1:AD:D6:27:72:6D:91:92:CC:33 Authority key identifier: 01:E8:7E:DC:BE:90:1A:9A:E8:6C:F5:E4:1C:BA:8B:24:83:E9:B6:AC Certificate issuer: /CN=01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC Certificate serial: 636EDE7142E59D7C827423CBAF10B47B906F058B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft Manifest number: 29 Signing time: Wed 06 Aug 2025 02:23:17 +0000 Manifest this update: Wed 06 Aug 2025 02:18:17 +0000 Manifest next update: Sat 09 Aug 2025 10:48:17 +0000 Files and hashes: 1: 01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.crl (hash: yg8JBKzk3RHMxZqinpaH6FxRgn4I1aJO8mBZbsV22ek=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.crl rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 10:48:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:6e:de:71:42:e5:9d:7c:82:74:23:cb:af:10:b4:7b:90:6f:05:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC Validity Not Before: Aug 6 02:18:17 2025 GMT Not After : Aug 9 10:48:17 2025 GMT Subject: CN=D2BD224DB2DA7C8F21ACA1ADD627726D9192CC33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:5f:ae:3e:ec:aa:e4:ea:b1:05:44:42:37:da: 75:f2:7f:41:da:5a:68:c1:f7:15:f7:0f:80:ee:25: 0a:75:07:14:7e:8b:a9:5b:c4:20:ce:71:0a:42:31: 91:92:13:22:c2:19:f2:6d:e4:16:28:ed:9b:cd:db: 43:be:53:bb:a4:f9:ba:37:71:a0:18:58:3a:d5:e1: 01:0d:1c:b8:67:8b:37:71:1e:fd:07:c0:7c:73:92: c2:78:49:50:11:6f:fc:87:9d:bd:00:80:32:7b:3f: 35:cd:90:58:1e:25:e4:62:89:16:4c:f2:b2:33:1b: e3:c0:c0:1a:d4:a0:b2:40:bb:06:62:ed:0f:84:e2: 82:ae:29:21:76:b8:65:84:a9:57:1a:eb:0d:fc:5e: a0:b8:28:f6:45:47:d3:0d:b8:97:67:2d:fe:41:44: 26:4c:6b:c2:a4:5e:70:dc:62:87:0c:da:7b:4d:6c: 01:c5:71:f4:e9:28:ad:44:21:62:fb:59:8c:4b:4e: f0:ba:a0:d2:28:41:cb:22:80:d7:80:4f:82:7d:28: 20:3b:f4:e4:da:9a:52:7e:6e:a2:48:9d:de:16:02: 43:2f:b7:a2:f2:f5:48:44:cf:66:b8:de:9b:51:49: 05:d6:08:1f:3e:a1:38:6f:87:31:3c:12:6b:a3:39: 32:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:BD:22:4D:B2:DA:7C:8F:21:AC:A1:AD:D6:27:72:6D:91:92:CC:33 X509v3 Authority Key Identifier: keyid:01:E8:7E:DC:BE:90:1A:9A:E8:6C:F5:E4:1C:BA:8B:24:83:E9:B6:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:65:92:88:48:49:69:ac:fd:88:f1:e0:e7:05:43:8d:9b:d3: 3a:f4:ec:44:00:71:d2:6c:0d:e6:61:96:1d:e4:66:8b:17:60: 2c:56:e2:09:20:3d:45:19:e2:ea:d4:e5:a0:5d:23:da:f0:f6: 56:56:f6:41:f6:4a:26:d9:96:ed:95:00:ac:f6:fe:f2:31:31: 2d:e1:59:75:ea:f1:8b:b8:95:7d:9f:b9:e7:55:76:23:5a:c3: 45:aa:c2:41:97:fb:ae:29:e6:fc:11:5e:39:47:19:43:b6:01: dc:eb:7a:71:d4:79:5a:f2:39:59:28:3b:75:8b:1d:85:19:a1: 0c:c4:bc:a9:12:20:ba:88:0a:42:c2:43:b9:88:2d:7c:bc:e8: f1:61:15:51:1a:6e:42:27:f8:09:e3:02:0f:55:f3:20:a6:f7: a4:7d:65:eb:45:3a:40:d1:24:79:01:9b:90:ae:93:c2:2b:6b: cc:0a:99:9e:88:9e:9f:a5:83:f1:ce:52:dd:f0:02:a5:b4:7e: 5a:59:39:0d:dc:82:e6:c9:15:fe:db:fc:7a:01:c8:e5:76:77: 56:66:f4:07:89:46:95:2a:f5:bb:f0:62:a2:39:5a:50:99:63: 7f:8c:a5:c7:2b:51:b4:c2:81:56:fa:e3:1e:88:aa:38:a1:d2: f8:b9:bd:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY27ecULlnXyCdCPLrxC0e5BvBYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFFODdFRENCRTkwMUE5QUU4NkNGNUU0MUNCQThCMjQ4 M0U5QjZBQzAeFw0yNTA4MDYwMjE4MTdaFw0yNTA4MDkxMDQ4MTdaMDMxMTAvBgNV BAMTKEQyQkQyMjREQjJEQTdDOEYyMUFDQTFBREQ2Mjc3MjZEOTE5MkNDMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxX64+7Krk6rEFREI32nXyf0Ha WmjB9xX3D4DuJQp1BxR+i6lbxCDOcQpCMZGSEyLCGfJt5BYo7ZvN20O+U7uk+bo3 caAYWDrV4QENHLhnizdxHv0HwHxzksJ4SVARb/yHnb0AgDJ7PzXNkFgeJeRiiRZM 8rIzG+PAwBrUoLJAuwZi7Q+E4oKuKSF2uGWEqVca6w38XqC4KPZFR9MNuJdnLf5B RCZMa8KkXnDcYocM2ntNbAHFcfTpKK1EIWL7WYxLTvC6oNIoQcsigNeAT4J9KCA7 9OTamlJ+bqJInd4WAkMvt6Ly9UhEz2a43ptRSQXWCB8+oThvhzE8EmujOTKhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0r0iTbLafI8hrKGt1idybZGSzDMwHwYDVR0j BBgwFoAUAeh+3L6QGprobPXkHLqLJIPptqwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTZiNTk5ZC03ZmJiLTQ0OTgtODZlZi0xODY0NWFlOThlM2QvMC8wMUU4N0VEQ0JF OTAxQTlBRTg2Q0Y1RTQxQ0JBOEIyNDgzRTlCNkFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDFFODdFRENCRTkwMUE5QUU4NkNGNUU0MUNCQThCMjQ4M0U5 QjZBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODE2YjU5OWQtN2ZiYi00NDk4LTg2 ZWYtMTg2NDVhZTk4ZTNkLzAvMDFFODdFRENCRTkwMUE5QUU4NkNGNUU0MUNCQThC MjQ4M0U5QjZBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKRlkohISWms/Yjx4OcFQ42b0zr07EQAcdJs DeZhlh3kZosXYCxW4gkgPUUZ4urU5aBdI9rw9lZW9kH2SibZlu2VAKz2/vIxMS3h WXXq8Yu4lX2fuedVdiNaw0WqwkGX+64p5vwRXjlHGUO2AdzrenHUeVryOVkoO3WL HYUZoQzEvKkSILqICkLCQ7mILXy86PFhFVEabkIn+AnjAg9V8yCm96R9ZetFOkDR JHkBm5Cuk8Ira8wKmZ6Inp+lg/HOUt3wAqW0flpZOQ3cgubJFf7b/HoByOV2d1Zm 9AeJRpUq9bvwYqI5WlCZY3+MpccrUbTCgVb64x6Iqjih0vi5vfA= -----END CERTIFICATE-----Generated at Thu Aug 7 03:28:55 2025 by rpki-client