$ rpki-client -vvf repo-rpki.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/EA581458C8710B7F2862361DF5BE327D72423B7F.mft File: EA581458C8710B7F2862361DF5BE327D72423B7F.mft (raw, json) Hash identifier: zcOX4CwZ3G/xV1o8jX28KFeTmpjn40gi0I51lVc0z20= Subject key identifier: 88:AB:2B:B9:C0:6D:3B:EB:9B:7A:E2:42:24:64:7D:14:EA:CE:33:C5 Authority key identifier: EA:58:14:58:C8:71:0B:7F:28:62:36:1D:F5:BE:32:7D:72:42:3B:7F Certificate issuer: /CN=EA581458C8710B7F2862361DF5BE327D72423B7F Certificate serial: 3F5C74BC5817BDFD1ECA6F74937609E8CAB5B099 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA581458C8710B7F2862361DF5BE327D72423B7F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/EA581458C8710B7F2862361DF5BE327D72423B7F.mft Manifest number: 021C Signing time: Mon 21 Jul 2025 06:40:01 +0000 Manifest this update: Mon 21 Jul 2025 06:35:01 +0000 Manifest next update: Thu 24 Jul 2025 09:16:01 +0000 Files and hashes: 1: 3130332e3138352e33382e302f32332d3234203d3e20313339343536.roa (hash: 17GkwMI8n2+iBGNp+2muXCL7ItlUGULiv1HjDHqDmB0=) 2: EA581458C8710B7F2862361DF5BE327D72423B7F.crl (hash: EQxkzIcfA+RVoAzcznsOrIVwYSBPG53jNebPOT9VhRQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/EA581458C8710B7F2862361DF5BE327D72423B7F.crl rsync://repo-rpki.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/EA581458C8710B7F2862361DF5BE327D72423B7F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA581458C8710B7F2862361DF5BE327D72423B7F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 09:16:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:5c:74:bc:58:17:bd:fd:1e:ca:6f:74:93:76:09:e8:ca:b5:b0:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA581458C8710B7F2862361DF5BE327D72423B7F Validity Not Before: Jul 21 06:35:01 2025 GMT Not After : Jul 24 09:16:01 2025 GMT Subject: CN=88AB2BB9C06D3BEB9B7AE24224647D14EACE33C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:67:52:c1:3f:a1:a7:92:2e:f7:0a:24:1c:bd: 8a:89:36:4b:5a:9d:f0:9b:58:be:2a:4a:4a:ee:b0: 93:d2:c6:06:96:03:38:b0:f6:88:7e:3c:53:15:7d: 0f:08:e6:3e:8d:17:ce:21:ef:4d:06:a0:ae:1e:70: 7e:47:3a:0b:f8:d4:aa:34:f8:2f:35:46:47:c4:df: ab:5f:bc:b2:47:3f:39:5a:eb:02:2a:89:ce:8a:6d: f1:63:6a:85:8f:d2:78:06:4b:35:51:ad:c4:75:ac: e3:60:d1:1c:78:bb:78:1b:08:ea:90:a3:e2:f4:40: 8e:f3:dd:df:c4:d4:e4:c7:ee:cc:e3:bf:a8:f6:42: ea:77:15:f7:90:f8:84:e6:9b:b1:0d:d6:8a:a3:c7: 2a:b1:6c:99:00:3b:3d:5a:c0:f7:05:af:02:97:f5: ef:01:2b:8b:fd:e6:58:bb:8a:e7:18:1b:5d:94:1c: 85:79:fa:8b:90:8b:20:55:af:77:73:f4:30:3a:98: bd:37:62:b3:b2:83:d6:68:c9:91:6c:10:e3:6f:71: 21:38:d6:c4:7c:82:ee:3a:39:aa:e3:f3:2a:c6:db: d5:5e:ef:0d:40:5d:81:f8:86:a1:2e:7c:25:5b:a2: dc:bb:ee:fa:0f:e9:55:ff:46:dd:e1:de:07:8d:43: 06:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:AB:2B:B9:C0:6D:3B:EB:9B:7A:E2:42:24:64:7D:14:EA:CE:33:C5 X509v3 Authority Key Identifier: keyid:EA:58:14:58:C8:71:0B:7F:28:62:36:1D:F5:BE:32:7D:72:42:3B:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/EA581458C8710B7F2862361DF5BE327D72423B7F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA581458C8710B7F2862361DF5BE327D72423B7F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e05ab66-66af-40a4-89a5-8069402839a9/0/EA581458C8710B7F2862361DF5BE327D72423B7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:6f:59:72:79:45:9b:a0:6e:2f:e7:39:8c:61:3f:72:98:ed: 91:58:34:f8:7a:ac:03:99:42:a6:d6:eb:3e:5b:f6:20:9f:1a: 3f:da:67:ae:bd:db:e8:f8:dd:66:58:5e:35:76:19:05:a9:e1: b2:ce:b6:44:6d:30:6b:6d:b7:72:d0:7b:cc:10:41:54:07:74: c7:81:f0:a6:cd:9f:6d:36:ea:7e:10:86:c9:16:81:0d:f3:85: 4a:ec:2c:62:8a:0c:c5:f2:23:85:27:6c:7d:c3:c2:af:b0:27: 12:28:ef:55:30:f7:77:22:73:bc:f1:67:9a:11:eb:e7:de:95: 6e:bd:38:43:f9:16:6c:d2:76:bf:00:43:f8:a4:5f:41:b8:aa: d9:30:61:fa:46:a6:09:6b:48:4f:95:45:e3:4d:9a:3f:ca:ee: 18:0a:84:66:6b:7c:84:31:10:c8:6c:eb:94:b3:35:43:12:ff: 07:45:ad:c2:80:63:8d:e6:ea:e8:29:9c:9d:a2:4d:5b:a3:fd: c5:ed:f9:c9:e4:cf:ac:20:39:6d:c0:0e:a2:1f:55:37:55:ba: 0e:66:54:d9:41:ed:7b:fe:8c:9c:36:88:5d:4f:8c:b7:fd:17: 56:d7:84:c6:b2:0f:e3:c2:2e:07:78:21:3f:5f:f6:d0:63:d4: 44:94:7a:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP1x0vFgXvf0eym90k3YJ6Mq1sJkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUE1ODE0NThDODcxMEI3RjI4NjIzNjFERjVCRTMyN0Q3 MjQyM0I3RjAeFw0yNTA3MjEwNjM1MDFaFw0yNTA3MjQwOTE2MDFaMDMxMTAvBgNV BAMTKDg4QUIyQkI5QzA2RDNCRUI5QjdBRTI0MjI0NjQ3RDE0RUFDRTMzQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEZ1LBP6Gnki73CiQcvYqJNkta nfCbWL4qSkrusJPSxgaWAziw9oh+PFMVfQ8I5j6NF84h700GoK4ecH5HOgv41Ko0 +C81RkfE36tfvLJHPzla6wIqic6KbfFjaoWP0ngGSzVRrcR1rONg0Rx4u3gbCOqQ o+L0QI7z3d/E1OTH7szjv6j2Qup3FfeQ+ITmm7EN1oqjxyqxbJkAOz1awPcFrwKX 9e8BK4v95li7iucYG12UHIV5+ouQiyBVr3dz9DA6mL03YrOyg9ZoyZFsEONvcSE4 1sR8gu46Oarj8yrG29Ve7w1AXYH4hqEufCVboty77voP6VX/Rt3h3geNQwZfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiKsrucBtO+ubeuJCJGR9FOrOM8UwHwYDVR0j BBgwFoAU6lgUWMhxC38oYjYd9b4yfXJCO38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZTA1YWI2Ni02NmFmLTQwYTQtODlhNS04MDY5NDAyODM5YTkvMC9FQTU4MTQ1OEM4 NzEwQjdGMjg2MjM2MURGNUJFMzI3RDcyNDIzQjdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUE1ODE0NThDODcxMEI3RjI4NjIzNjFERjVCRTMyN0Q3MjQy M0I3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmUwNWFiNjYtNjZhZi00MGE0LTg5 YTUtODA2OTQwMjgzOWE5LzAvRUE1ODE0NThDODcxMEI3RjI4NjIzNjFERjVCRTMy N0Q3MjQyM0I3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKZvWXJ5RZugbi/nOYxhP3KY7ZFYNPh6rAOZ QqbW6z5b9iCfGj/aZ6692+j43WZYXjV2GQWp4bLOtkRtMGttt3LQe8wQQVQHdMeB 8KbNn2026n4QhskWgQ3zhUrsLGKKDMXyI4UnbH3Dwq+wJxIo71Uw93cic7zxZ5oR 6+felW69OEP5FmzSdr8AQ/ikX0G4qtkwYfpGpglrSE+VReNNmj/K7hgKhGZrfIQx EMhs65SzNUMS/wdFrcKAY43m6ugpnJ2iTVuj/cXt+cnkz6wgOW3ADqIfVTdVug5m VNlB7Xv+jJw2iF1PjLf9F1bXhMayD+PCLgd4IT9f9tBj1ESUelw= -----END CERTIFICATE-----Generated at Wed Jul 23 02:02:13 2025 by rpki-client