$ rpki-client -vvf repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft File: 1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft (raw, json) Hash identifier: oGxWiAoYOtt6oa8yoHR1sIfRb9sKOF+4yxB0+n/Y9+A= Subject key identifier: 14:0D:7C:AB:B3:50:6A:2F:F1:84:C5:BF:66:D7:6D:3D:5C:2F:9F:95 Authority key identifier: 1E:AF:FD:F7:6C:26:1A:0C:98:01:D9:F2:B0:2D:5B:A1:49:67:F3:CD Certificate issuer: /CN=1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD Certificate serial: 0310D350405E6373265FDB5933B14CEC1FB9A1FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft Manifest number: 018E Signing time: Wed 06 Aug 2025 15:41:21 +0000 Manifest this update: Wed 06 Aug 2025 15:36:21 +0000 Manifest next update: Sun 10 Aug 2025 01:15:21 +0000 Files and hashes: 1: 1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.crl (hash: L/UbIbc9JOwch0ZUA3NC8Re/fuVRrY+eC+6rfEFlIrE=) 2: 3130332e3139302e39342e302f32342d3234203d3e20313530353531.roa (hash: ZLit+8UW98ngBL2LPf2rRbdHr7opbJkANqxKGJG/n4c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.crl rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 01:15:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:10:d3:50:40:5e:63:73:26:5f:db:59:33:b1:4c:ec:1f:b9:a1:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD Validity Not Before: Aug 6 15:36:21 2025 GMT Not After : Aug 10 01:15:21 2025 GMT Subject: CN=140D7CABB3506A2FF184C5BF66D76D3D5C2F9F95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c3:24:7f:1f:7a:98:06:11:4d:af:cd:7d:f7: 8f:3b:f5:08:6b:d6:44:a4:43:ae:6a:a6:8a:23:41: 4d:5a:7d:01:ff:56:a3:c7:b0:73:4f:d9:d7:b8:6d: 9a:d7:93:49:25:c4:e7:11:6c:42:c2:7d:af:d3:4f: d6:d0:0c:a3:35:5c:16:92:58:28:3f:0c:9b:e7:40: c6:1f:03:a6:22:ef:c9:f2:32:a7:5a:29:a6:77:fa: 79:a6:2a:35:a8:51:f2:34:db:1b:24:49:ff:30:7e: 8d:94:e6:d0:4d:21:4e:35:27:ed:ba:e4:13:fd:75: b0:28:bb:f8:f8:18:7e:33:5c:6a:f0:14:b6:bb:48: 6a:2b:35:4c:48:9f:ba:83:76:ed:18:8b:ac:d6:1f: 9b:9f:a2:cf:8d:aa:6f:b9:4a:cc:37:70:73:d8:c9: 9f:77:87:ba:f8:f9:d8:ac:5e:58:73:02:fc:de:7b: 07:11:ac:f7:b5:45:a5:1f:7f:12:36:d0:e5:8e:37: 25:bd:18:42:0f:95:ed:af:a5:92:9d:fa:0d:35:fe: ac:af:2e:ba:99:42:86:d4:d0:38:43:79:fe:12:58: 52:d4:e9:9b:22:40:c1:7b:ac:a9:20:e1:a5:76:9a: 3d:46:b9:20:7e:ea:8a:0a:33:40:e6:7d:c9:bf:a2: 05:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:0D:7C:AB:B3:50:6A:2F:F1:84:C5:BF:66:D7:6D:3D:5C:2F:9F:95 X509v3 Authority Key Identifier: keyid:1E:AF:FD:F7:6C:26:1A:0C:98:01:D9:F2:B0:2D:5B:A1:49:67:F3:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:d5:04:eb:66:92:26:f0:35:ab:75:a5:72:d1:b5:4e:ac:b8: 22:29:d0:d3:31:ee:59:66:cc:ec:15:28:b9:c8:82:b8:f1:b7: a0:c4:f6:be:35:9d:9a:2c:24:ea:bc:88:d2:8b:cc:e1:b4:01: 35:03:50:8f:b8:74:1e:ab:b5:b4:8c:4f:0e:42:e6:4e:66:94: 67:72:41:97:ae:97:9d:d4:ca:0f:3b:01:08:c6:ef:83:b0:f0: 0a:62:64:4d:36:4e:93:57:d2:e7:d9:0c:9e:41:53:6a:e1:96: ef:0e:82:ad:d0:f2:86:3a:1c:83:ef:ab:74:ee:16:d1:64:53: d4:f8:0b:07:f5:8e:6a:ae:4b:5d:47:6e:37:c4:dd:12:53:46: 66:1b:9b:c1:4c:22:27:ef:35:ca:25:a7:53:8e:7f:0a:b9:4b: 03:ff:68:09:06:8c:d2:fc:a7:b4:56:9a:d2:e0:40:70:29:d7: 51:08:03:e4:21:f5:13:9b:44:a1:8f:3a:57:53:0e:9b:5d:3f: ec:06:ad:e7:52:68:44:8c:d6:54:79:8b:cb:23:25:2e:80:56: 9e:4a:7a:b3:9e:d1:75:11:5c:01:6a:99:44:a6:05:72:7c:c5: ea:81:7e:82:07:06:f2:9a:d4:a4:6e:7a:c2:1a:57:71:7a:5c: 70:4c:2a:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAxDTUEBeY3MmX9tZM7FM7B+5of0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVBRkZERjc2QzI2MUEwQzk4MDFEOUYyQjAyRDVCQTE0 OTY3RjNDRDAeFw0yNTA4MDYxNTM2MjFaFw0yNTA4MTAwMTE1MjFaMDMxMTAvBgNV BAMTKDE0MEQ3Q0FCQjM1MDZBMkZGMTg0QzVCRjY2RDc2RDNENUMyRjlGOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjwyR/H3qYBhFNr81994879Qhr 1kSkQ65qpoojQU1afQH/VqPHsHNP2de4bZrXk0klxOcRbELCfa/TT9bQDKM1XBaS WCg/DJvnQMYfA6Yi78nyMqdaKaZ3+nmmKjWoUfI02xskSf8wfo2U5tBNIU41J+26 5BP9dbAou/j4GH4zXGrwFLa7SGorNUxIn7qDdu0Yi6zWH5ufos+Nqm+5Ssw3cHPY yZ93h7r4+disXlhzAvzeewcRrPe1RaUffxI20OWONyW9GEIPle2vpZKd+g01/qyv LrqZQobU0DhDef4SWFLU6ZsiQMF7rKkg4aV2mj1GuSB+6ooKM0Dmfcm/ogUFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFA18q7NQai/xhMW/ZtdtPVwvn5UwHwYDVR0j BBgwFoAUHq/992wmGgyYAdnysC1boUln880wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Nzk4MDkxZS1jMWFlLTQwNDktOTZkMi1jNGNlMzdmZGMzNWIvMC8xRUFGRkRGNzZD MjYxQTBDOTgwMUQ5RjJCMDJENUJBMTQ5NjdGM0NELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUVBRkZERjc2QzI2MUEwQzk4MDFEOUYyQjAyRDVCQTE0OTY3 RjNDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc5ODA5MWUtYzFhZS00MDQ5LTk2 ZDItYzRjZTM3ZmRjMzViLzAvMUVBRkZERjc2QzI2MUEwQzk4MDFEOUYyQjAyRDVC QTE0OTY3RjNDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADvVBOtmkibwNat1pXLRtU6suCIp0NMx7llm zOwVKLnIgrjxt6DE9r41nZosJOq8iNKLzOG0ATUDUI+4dB6rtbSMTw5C5k5mlGdy QZeul53Uyg87AQjG74Ow8ApiZE02TpNX0ufZDJ5BU2rhlu8Ogq3Q8oY6HIPvq3Tu FtFkU9T4Cwf1jmquS11HbjfE3RJTRmYbm8FMIifvNcolp1OOfwq5SwP/aAkGjNL8 p7RWmtLgQHAp11EIA+Qh9RObRKGPOldTDptdP+wGredSaESM1lR5i8sjJS6AVp5K erOe0XURXAFqmUSmBXJ8xeqBfoIHBvKa1KRuesIaV3F6XHBMKuQ= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:06 2025 by rpki-client