$ rpki-client -vvf repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft File: EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft (raw, json) Hash identifier: UTiTCsY0IJKLkkvTbEqS1Jc48ZIgNZN11dVtYmjuXFM= Subject key identifier: 89:CF:ED:8D:13:A8:4C:0D:EE:2F:73:91:06:8D:7A:14:D3:37:CC:1C Authority key identifier: EA:01:C9:15:11:C5:E3:47:C7:C1:1E:A4:64:9B:0F:04:1A:5D:05:20 Certificate issuer: /CN=EA01C91511C5E347C7C11EA4649B0F041A5D0520 Certificate serial: 5590186FEBBF26F69F7065B8E709F69FAEECD6C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft Manifest number: 0199 Signing time: Mon 21 Jul 2025 00:00:02 +0000 Manifest this update: Sun 20 Jul 2025 23:55:02 +0000 Manifest next update: Thu 24 Jul 2025 01:48:02 +0000 Files and hashes: 1: EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl (hash: dKLbqZO+u1fNaNiDm+U4/fNv9rn/D9UsUwnxsillsw4=) 2: 3130332e3137392e38322e302f32342d3234203d3e20313338303832.roa (hash: /cdl8KopWWEAVSKHGwwN7jQvT8+haRS7g+4C1ytM8Dg=) 3: 3130332e3132302e3231382e302f32342d3234203d3e20313338303832.roa (hash: A8O4HhKJBUpQAVtG9F/HuVJZcjl2PJnz2blEINGnJlw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:90:18:6f:eb:bf:26:f6:9f:70:65:b8:e7:09:f6:9f:ae:ec:d6:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA01C91511C5E347C7C11EA4649B0F041A5D0520 Validity Not Before: Jul 20 23:55:02 2025 GMT Not After : Jul 24 01:48:02 2025 GMT Subject: CN=89CFED8D13A84C0DEE2F7391068D7A14D337CC1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f6:9f:4d:f5:c2:32:03:e9:af:2e:49:c9:ab: eb:35:3c:de:8c:d0:05:5c:46:c6:6b:f5:3e:62:7d: 2e:d7:ea:c3:ed:1f:c2:7b:72:0a:a9:6b:70:69:14: fc:02:71:99:04:cd:db:75:2f:28:ff:40:75:d4:80: 07:c5:5f:c4:00:f9:88:84:eb:68:24:6a:b6:16:16: 76:6f:fa:c4:21:e7:24:e2:a9:0d:f9:b9:97:b9:67: 23:4e:0b:54:b0:01:22:63:7a:5b:31:4f:12:c0:6b: 67:e7:65:24:44:c9:9a:fd:27:2a:cf:75:75:ad:ed: 29:23:47:f5:61:b0:7f:44:6f:a1:35:97:b7:c2:09: a6:9e:b8:5e:1b:27:b5:e1:90:1b:95:ef:13:f0:6a: fc:a5:63:3b:56:7e:fe:34:73:d9:f8:0c:9f:ce:02: 44:79:fa:5c:57:b2:11:dd:b8:ad:75:e9:8b:7f:29: fd:b5:d6:b8:65:7d:d9:f3:90:3b:76:36:5c:69:60: 65:b0:bf:b5:db:05:4b:ca:85:43:35:19:df:7e:f4: 07:a6:7e:82:e3:58:95:92:67:73:30:15:8d:a2:ea: 20:c8:dd:92:c8:d6:79:47:4a:d7:cb:22:91:9a:1d: b3:32:50:4b:5f:06:00:b4:ff:75:87:04:17:ad:ea: 78:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:CF:ED:8D:13:A8:4C:0D:EE:2F:73:91:06:8D:7A:14:D3:37:CC:1C X509v3 Authority Key Identifier: keyid:EA:01:C9:15:11:C5:E3:47:C7:C1:1E:A4:64:9B:0F:04:1A:5D:05:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:be:3e:78:36:86:66:cb:a2:40:97:73:fe:4b:da:c5:69:dd: 93:ea:cc:e9:14:23:b0:14:db:0b:d2:44:06:0b:e6:1b:cb:e6: 22:0a:9b:45:28:c5:6d:5c:51:6d:94:bb:89:7e:8e:4e:88:54: 0f:70:d3:89:d7:2a:7d:d2:e2:6a:09:26:cb:2f:e7:d9:b3:77: a4:54:3e:d6:ad:8a:dd:45:1b:08:e8:f9:b8:ba:0b:3b:a2:b5: 5a:5d:75:78:37:65:c4:87:f3:73:7b:bf:27:22:d2:74:28:78: d1:e4:aa:5e:f3:48:5f:69:43:39:88:73:f9:e0:86:81:83:cd: 6e:f6:e5:22:fb:a4:71:a5:1f:44:a8:52:70:ef:fd:b4:64:c1: 01:dc:ee:9c:cf:4c:d6:df:95:b8:05:72:cd:1d:e0:a8:a8:47: 06:36:fb:11:ef:79:22:1c:94:cb:79:db:db:ec:38:7a:5c:1b: 0a:88:ac:a3:55:e4:85:fe:65:e0:71:b1:33:39:dd:ad:d2:2a: 8f:b0:47:b3:75:3e:25:a5:ad:e5:6c:0e:a1:7f:30:cd:b8:88: 2b:33:d5:c7:89:f5:a6:67:7f:a5:0c:fe:4d:1f:0d:60:10:d8: 95:6f:8d:76:f8:5a:2f:e8:5d:06:66:f3:19:0b:39:cf:0f:e9: ec:d0:b3:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVZAYb+u/JvafcGW45wn2n67s1sEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBGMDQx QTVEMDUyMDAeFw0yNTA3MjAyMzU1MDJaFw0yNTA3MjQwMTQ4MDJaMDMxMTAvBgNV BAMTKDg5Q0ZFRDhEMTNBODRDMERFRTJGNzM5MTA2OEQ3QTE0RDMzN0NDMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM9p9N9cIyA+mvLknJq+s1PN6M 0AVcRsZr9T5ifS7X6sPtH8J7cgqpa3BpFPwCcZkEzdt1Lyj/QHXUgAfFX8QA+YiE 62gkarYWFnZv+sQh5yTiqQ35uZe5ZyNOC1SwASJjelsxTxLAa2fnZSREyZr9JyrP dXWt7SkjR/VhsH9Eb6E1l7fCCaaeuF4bJ7XhkBuV7xPwavylYztWfv40c9n4DJ/O AkR5+lxXshHduK116Yt/Kf211rhlfdnzkDt2NlxpYGWwv7XbBUvKhUM1Gd9+9Aem foLjWJWSZ3MwFY2i6iDI3ZLI1nlHStfLIpGaHbMyUEtfBgC0/3WHBBet6ngHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUic/tjROoTA3uL3ORBo16FNM3zBwwHwYDVR0j BBgwFoAU6gHJFRHF40fHwR6kZJsPBBpdBSAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Y2QyNGU4Mi1mMzA2LTQ0MDAtYjAwYS1kNTliNDFlMjg2YmIvMC9FQTAxQzkxNTEx QzVFMzQ3QzdDMTFFQTQ2NDlCMEYwNDFBNUQwNTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBGMDQxQTVE MDUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGNkMjRlODItZjMwNi00NDAwLWIw MGEtZDU5YjQxZTI4NmJiLzAvRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBG MDQxQTVEMDUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHy+Png2hmbLokCXc/5L2sVp3ZPqzOkUI7AU 2wvSRAYL5hvL5iIKm0UoxW1cUW2Uu4l+jk6IVA9w04nXKn3S4moJJssv59mzd6RU Ptatit1FGwjo+bi6CzuitVpddXg3ZcSH83N7vyci0nQoeNHkql7zSF9pQzmIc/ng hoGDzW725SL7pHGlH0SoUnDv/bRkwQHc7pzPTNbflbgFcs0d4KioRwY2+xHveSIc lMt529vsOHpcGwqIrKNV5IX+ZeBxsTM53a3SKo+wR7N1PiWlreVsDqF/MM24iCsz 1ceJ9aZnf6UM/k0fDWAQ2JVvjXb4Wi/oXQZm8xkLOc8P6ezQs6Y= -----END CERTIFICATE-----Generated at Mon Jul 21 02:05:42 2025 by rpki-client