$ rpki-client -vvf repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft File: E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft (raw, json) Hash identifier: gLPjucXAdDmItloyhv+p2OX4aC1pY83n2Q8Z6yUbmcc= Subject key identifier: B8:27:38:79:F0:6F:57:B8:37:53:60:39:72:1C:AF:03:25:16:97:97 Authority key identifier: E0:B3:E0:49:B0:31:30:8B:37:78:BB:68:5F:D3:D1:49:FA:69:DD:3B Certificate issuer: /CN=E0B3E049B031308B3778BB685FD3D149FA69DD3B Certificate serial: E422BE3481AE23580617E0493641AC26D986B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B3E049B031308B3778BB685FD3D149FA69DD3B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft Manifest number: 0119 Signing time: Sun 10 Aug 2025 08:02:07 +0000 Manifest this update: Sun 10 Aug 2025 07:57:07 +0000 Manifest next update: Wed 13 Aug 2025 15:12:07 +0000 Files and hashes: 1: E0B3E049B031308B3778BB685FD3D149FA69DD3B.crl (hash: jfvDdv0VlPPWsvKh01iOrLKF9XJ4ikFGlLhdslZX9wI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.crl rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B3E049B031308B3778BB685FD3D149FA69DD3B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 15:12:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: e4:22:be:34:81:ae:23:58:06:17:e0:49:36:41:ac:26:d9:86:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0B3E049B031308B3778BB685FD3D149FA69DD3B Validity Not Before: Aug 10 07:57:07 2025 GMT Not After : Aug 13 15:12:07 2025 GMT Subject: CN=B8273879F06F57B837536039721CAF0325169797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:15:be:99:2c:b1:4b:22:0b:cd:20:08:38:1a: 63:9e:06:00:78:fb:98:e7:6e:bc:81:a1:be:44:ea: bc:3a:ef:64:74:a6:0a:42:90:6b:9e:b8:2a:5a:8e: 83:46:5c:a7:0e:b0:cd:97:33:f6:cd:13:f2:d8:a7: dc:c4:ad:34:3e:52:70:78:f4:27:8c:5d:01:6b:ff: fe:7c:9c:e5:2e:fd:a3:43:64:fd:ca:eb:42:7e:b0: 50:38:eb:07:c2:83:69:dd:2b:0d:2c:33:1a:70:59: 36:0f:79:3c:d9:3d:dc:4c:e7:af:16:44:8f:31:27: 78:b1:e9:3d:bb:c8:75:3d:76:a0:68:ce:cb:ee:a2: d5:98:4d:a3:67:6e:0d:7f:b1:b5:9a:be:3e:8a:21: ed:0c:c4:ab:38:42:07:4d:dd:47:32:bb:93:a4:6a: 7f:56:9b:f3:4c:76:cc:c2:1f:5a:69:87:fe:fa:2a: 6e:bd:99:c3:f9:ca:c8:91:ca:16:27:13:df:6d:e8: b4:43:6b:44:1f:0b:63:49:78:99:13:36:2e:16:1d: df:3b:01:5e:f6:52:e5:a6:a0:35:89:b2:d9:66:1a: 77:3d:b4:b5:8a:07:36:b9:73:18:c0:4d:02:33:8b: 15:ae:01:c0:ca:3f:34:be:5b:6c:8a:c8:5d:2d:90: b8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:27:38:79:F0:6F:57:B8:37:53:60:39:72:1C:AF:03:25:16:97:97 X509v3 Authority Key Identifier: keyid:E0:B3:E0:49:B0:31:30:8B:37:78:BB:68:5F:D3:D1:49:FA:69:DD:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B3E049B031308B3778BB685FD3D149FA69DD3B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:65:3e:ac:8c:4f:44:ef:14:c5:e3:61:97:36:21:8b:a1:65: 9f:b6:6b:24:c7:e4:88:be:27:a4:9a:54:be:0a:3d:7b:7a:a8: de:4a:b7:f4:f7:58:0a:15:26:b1:b7:e4:0b:37:4f:3c:33:43: 58:62:b0:63:03:11:3c:77:d5:b5:42:a8:80:79:dc:3f:41:88: 54:7a:d0:cf:f0:6b:7a:7a:a9:91:7e:bf:ed:80:e9:be:3d:fa: d7:b5:ca:96:69:b6:b0:a5:d7:89:53:c8:61:6f:30:49:50:6a: dc:89:10:4d:a5:00:0f:4e:a0:38:e8:e2:3f:fa:0a:12:78:0b: 17:d8:67:ba:ef:d2:86:48:5d:35:6d:44:8d:b4:e8:01:f0:78: 69:f9:fc:69:fd:e0:50:b8:4b:5a:bc:d7:a7:e2:9c:a6:65:a9: 27:71:da:47:20:e0:92:c7:34:82:ea:d4:c6:2a:2f:8a:a0:30: b5:54:4b:dd:d1:ac:d3:9c:46:64:e2:34:4f:6b:91:17:0c:c5: 39:a1:8f:69:52:18:43:48:b3:1c:56:7f:23:0f:a8:61:b3:24: fc:f3:22:54:ef:97:24:f7:f0:1f:b5:6b:46:7d:a5:eb:27:37: 66:d6:20:58:8f:58:b2:c8:c0:e2:e8:f2:bc:46:34:76:25:ee: 88:76:cd:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAOQivjSBriNYBhfgSTZBrCbZhrYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBCM0UwNDlCMDMxMzA4QjM3NzhCQjY4NUZEM0QxNDlG QTY5REQzQjAeFw0yNTA4MTAwNzU3MDdaFw0yNTA4MTMxNTEyMDdaMDMxMTAvBgNV BAMTKEI4MjczODc5RjA2RjU3QjgzNzUzNjAzOTcyMUNBRjAzMjUxNjk3OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeFb6ZLLFLIgvNIAg4GmOeBgB4 +5jnbryBob5E6rw672R0pgpCkGueuCpajoNGXKcOsM2XM/bNE/LYp9zErTQ+UnB4 9CeMXQFr//58nOUu/aNDZP3K60J+sFA46wfCg2ndKw0sMxpwWTYPeTzZPdxM568W RI8xJ3ix6T27yHU9dqBozsvuotWYTaNnbg1/sbWavj6KIe0MxKs4QgdN3Ucyu5Ok an9Wm/NMdszCH1pph/76Km69mcP5ysiRyhYnE99t6LRDa0QfC2NJeJkTNi4WHd87 AV72UuWmoDWJstlmGnc9tLWKBza5cxjATQIzixWuAcDKPzS+W2yKyF0tkLjpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuCc4efBvV7g3U2A5chyvAyUWl5cwHwYDVR0j BBgwFoAU4LPgSbAxMIs3eLtoX9PRSfpp3TswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MWM3ZTgzMy02YzU0LTRlMGItODMxYy0xYzFhNzEwY2U4ZTMvMC9FMEIzRTA0OUIw MzEzMDhCMzc3OEJCNjg1RkQzRDE0OUZBNjlERDNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTBCM0UwNDlCMDMxMzA4QjM3NzhCQjY4NUZEM0QxNDlGQTY5 REQzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjFjN2U4MzMtNmM1NC00ZTBiLTgz MWMtMWMxYTcxMGNlOGUzLzAvRTBCM0UwNDlCMDMxMzA4QjM3NzhCQjY4NUZEM0Qx NDlGQTY5REQzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGVlPqyMT0TvFMXjYZc2IYuhZZ+2ayTH5Ii+ J6SaVL4KPXt6qN5Kt/T3WAoVJrG35As3TzwzQ1hisGMDETx31bVCqIB53D9BiFR6 0M/wa3p6qZF+v+2A6b49+te1ypZptrCl14lTyGFvMElQatyJEE2lAA9OoDjo4j/6 ChJ4CxfYZ7rv0oZIXTVtRI206AHweGn5/Gn94FC4S1q816finKZlqSdx2kcg4JLH NILq1MYqL4qgMLVUS93RrNOcRmTiNE9rkRcMxTmhj2lSGENIsxxWfyMPqGGzJPzz IlTvlyT38B+1a0Z9pesnN2bWIFiPWLLIwOLo8rxGNHYl7oh2zUs= -----END CERTIFICATE-----Generated at Mon Aug 11 10:31:03 2025 by rpki-client