$ rpki-client -vvf repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft File: 1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft (raw, json) Hash identifier: CSkhX83sJHrZ7IPn8y1AgM/+KfHSbIQ+gjKhfhKLN8g= Subject key identifier: D9:09:E4:04:81:38:37:C3:6F:8E:D1:E3:5B:BC:D7:96:89:B1:50:E0 Authority key identifier: 1E:8E:85:3B:D0:B0:EC:8B:2C:02:0B:97:5B:20:5A:55:6C:14:E8:E9 Certificate issuer: /CN=1E8E853BD0B0EC8B2C020B975B205A556C14E8E9 Certificate serial: 752D272011CBDEC6DCF72DAD085E3F7C5A445F67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft Manifest number: 0177 Signing time: Sun 10 Aug 2025 06:51:40 +0000 Manifest this update: Sun 10 Aug 2025 06:46:40 +0000 Manifest next update: Wed 13 Aug 2025 15:59:40 +0000 Files and hashes: 1: 1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.crl (hash: eeHfEK1KMuqg98X8IIdUtLliv8s2feeFornEJu4+SGI=) 2: 3130332e3136352e3235322e302f32342d3234203d3e20313531353231.roa (hash: ea9xX+sjo0TrPI9LqLlWLLsF36pbdmxUxQfCCeXAHFc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.crl rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 15:59:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:2d:27:20:11:cb:de:c6:dc:f7:2d:ad:08:5e:3f:7c:5a:44:5f:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E8E853BD0B0EC8B2C020B975B205A556C14E8E9 Validity Not Before: Aug 10 06:46:40 2025 GMT Not After : Aug 13 15:59:40 2025 GMT Subject: CN=D909E404813837C36F8ED1E35BBCD79689B150E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:53:e0:1f:9b:e0:b1:04:c8:09:a7:07:b5:61: f7:8d:b3:6d:ca:4f:60:8e:53:86:11:53:99:7d:e7: 83:8b:8d:a1:40:0d:c6:0b:1b:03:b5:03:66:ad:8f: 39:1d:c2:bb:24:48:d5:cd:44:86:b4:ed:30:d2:b2: f0:4f:9f:7e:78:fe:5d:38:8b:be:82:ee:3d:61:91: b6:d6:85:25:b4:8c:c4:57:15:f4:ce:0b:bf:8d:91: f4:3c:61:3a:6f:f9:63:0e:b9:72:ab:19:7e:22:a0: 95:3c:7e:04:95:f9:30:46:81:57:ff:a1:9a:f2:f2: 56:06:50:af:38:7e:d5:30:9b:bc:37:91:64:fc:46: db:d8:71:bb:17:2a:e2:b0:cc:20:97:10:3f:5c:09: 8c:4d:79:6c:6c:8e:4d:32:e8:ea:89:57:11:69:10: cb:d1:e0:8c:13:57:ab:2d:14:e4:92:8e:16:c9:e9: ed:4d:fc:92:9d:89:31:cc:44:46:b6:24:84:75:78: 78:d1:c0:5a:f6:67:bd:12:1f:c5:8a:c5:0c:e8:5a: f4:30:1f:1a:f4:b3:57:8e:0d:32:91:46:22:b8:9a: c0:a8:33:13:e2:27:32:15:ad:a2:25:cf:f8:ad:e5: de:14:f4:8f:e5:48:aa:23:0f:35:bd:d4:62:ff:1c: 33:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:09:E4:04:81:38:37:C3:6F:8E:D1:E3:5B:BC:D7:96:89:B1:50:E0 X509v3 Authority Key Identifier: keyid:1E:8E:85:3B:D0:B0:EC:8B:2C:02:0B:97:5B:20:5A:55:6C:14:E8:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:a7:16:ef:0b:a9:ad:6d:a6:9b:15:19:25:8c:df:51:7e:8e: a5:62:e2:b2:d8:20:85:b4:53:99:10:b5:eb:7e:f4:4d:51:a3: d4:bf:67:79:d3:8a:b8:7b:d8:71:4a:b4:66:99:d3:ac:ff:ab: e3:2d:c0:26:90:a4:61:a2:61:be:36:11:8b:43:02:e2:29:89: b1:47:1f:f8:c4:c3:27:ce:3d:03:60:0e:06:4e:80:73:e4:e7: 54:33:a2:ab:c2:c2:59:bd:3e:fa:ee:8c:e6:10:72:bd:25:a3: 47:5b:3f:0e:cf:fd:c5:04:d0:27:98:f7:5c:61:e3:cd:b7:77: 73:5a:4c:d1:e6:d8:2a:22:ae:04:78:fe:d1:fe:8b:1b:f0:6d: 6b:2b:ed:f1:04:7c:92:63:5a:e5:ac:7b:a8:e2:fe:7a:88:27: a1:68:2b:ba:5f:53:4a:90:f9:3d:43:9c:c2:e8:ec:cf:03:63: bf:3f:27:71:af:3f:4d:34:37:02:de:d0:0a:e0:73:be:6f:e8: 0f:73:4a:3b:b0:dd:1f:2e:e6:e2:31:98:6e:74:86:2e:33:cc: 11:64:1e:7f:c2:83:c7:d4:63:e8:00:17:1c:2a:fa:f5:81:f9: 7e:b1:3b:b2:de:eb:9c:b7:6f:e3:d6:5c:68:6a:7f:48:13:3b: 48:b1:8c:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdS0nIBHL3sbc9y2tCF4/fFpEX2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU4RTg1M0JEMEIwRUM4QjJDMDIwQjk3NUIyMDVBNTU2 QzE0RThFOTAeFw0yNTA4MTAwNjQ2NDBaFw0yNTA4MTMxNTU5NDBaMDMxMTAvBgNV BAMTKEQ5MDlFNDA0ODEzODM3QzM2RjhFRDFFMzVCQkNENzk2ODlCMTUwRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRU+Afm+CxBMgJpwe1YfeNs23K T2COU4YRU5l954OLjaFADcYLGwO1A2atjzkdwrskSNXNRIa07TDSsvBPn354/l04 i76C7j1hkbbWhSW0jMRXFfTOC7+NkfQ8YTpv+WMOuXKrGX4ioJU8fgSV+TBGgVf/ oZry8lYGUK84ftUwm7w3kWT8RtvYcbsXKuKwzCCXED9cCYxNeWxsjk0y6OqJVxFp EMvR4IwTV6stFOSSjhbJ6e1N/JKdiTHMREa2JIR1eHjRwFr2Z70SH8WKxQzoWvQw Hxr0s1eODTKRRiK4msCoMxPiJzIVraIlz/it5d4U9I/lSKojDzW91GL/HDMHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2QnkBIE4N8NvjtHjW7zXlomxUOAwHwYDVR0j BBgwFoAUHo6FO9Cw7IssAguXWyBaVWwU6OkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTBiZGNjNS00Y2Q5LTQ2YjAtOWQ3Yi1kMjMxYTllNTdiNTAvMC8xRThFODUzQkQw QjBFQzhCMkMwMjBCOTc1QjIwNUE1NTZDMTRFOEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUU4RTg1M0JEMEIwRUM4QjJDMDIwQjk3NUIyMDVBNTU2QzE0 RThFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWEwYmRjYzUtNGNkOS00NmIwLTlk N2ItZDIzMWE5ZTU3YjUwLzAvMUU4RTg1M0JEMEIwRUM4QjJDMDIwQjk3NUIyMDVB NTU2QzE0RThFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEKnFu8Lqa1tppsVGSWM31F+jqVi4rLYIIW0 U5kQtet+9E1Ro9S/Z3nTirh72HFKtGaZ06z/q+MtwCaQpGGiYb42EYtDAuIpibFH H/jEwyfOPQNgDgZOgHPk51QzoqvCwlm9PvrujOYQcr0lo0dbPw7P/cUE0CeY91xh 4823d3NaTNHm2CoirgR4/tH+ixvwbWsr7fEEfJJjWuWse6ji/nqIJ6FoK7pfU0qQ +T1DnMLo7M8DY78/J3GvP000NwLe0Argc75v6A9zSjuw3R8u5uIxmG50hi4zzBFk Hn/Cg8fUY+gAFxwq+vWB+X6xO7Le65y3b+PWXGhqf0gTO0ixjGA= -----END CERTIFICATE-----Generated at Sun Aug 10 18:26:13 2025 by rpki-client