$ rpki-client -vvf repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft File: EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft (raw, json) Hash identifier: 9c5p3bJvcy8PS14tawluJlsmybKRUNEZfFcsbGxv6JY= Subject key identifier: 08:22:E2:DE:72:57:99:BA:D6:D3:A5:6F:51:EC:8E:03:16:63:AF:C0 Authority key identifier: EA:5E:33:0B:F8:DC:FF:6D:09:DF:49:07:4B:46:B2:2E:BD:FB:D4:54 Certificate issuer: /CN=EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454 Certificate serial: 3D1A46D4DDFD3519E1356B9434393911CA64C3B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft Manifest number: 01A4 Signing time: Sat 19 Jul 2025 22:31:24 +0000 Manifest this update: Sat 19 Jul 2025 22:26:24 +0000 Manifest next update: Wed 23 Jul 2025 06:01:24 +0000 Files and hashes: 1: 3230322e34372e39322e302f32332d3234203d3e203137393935.roa (hash: BiJ73L794WTIFVs+3dlt1Nu1TwuPunFJpDTHrxt8w6o=) 2: EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl (hash: +8og+/vgeBXJxBk+uMuydo/Bb1qP04+8G1y6SdzU+D8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 06:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:1a:46:d4:dd:fd:35:19:e1:35:6b:94:34:39:39:11:ca:64:c3:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454 Validity Not Before: Jul 19 22:26:24 2025 GMT Not After : Jul 23 06:01:24 2025 GMT Subject: CN=0822E2DE725799BAD6D3A56F51EC8E031663AFC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:1a:76:2e:88:9b:26:81:ab:79:9b:82:37:dc: 5f:45:8c:cb:02:fa:17:4f:d9:a9:a7:eb:5b:51:e2: 3b:b5:ac:55:49:dd:b6:28:10:19:2c:1b:df:fd:aa: 3d:73:42:b9:a3:56:3e:39:6c:f2:98:18:73:47:7a: 7b:76:38:33:84:c6:91:d5:07:da:d4:b8:01:17:4c: 1f:f4:32:09:05:66:0a:08:01:ed:3e:1b:19:b5:cb: 18:90:58:6c:dc:4c:bc:29:79:bf:0e:4f:e1:1a:01: 4d:9b:af:cb:9b:c7:61:fc:7c:34:7c:17:45:fc:30: 0e:26:fb:69:9e:3a:56:2c:b6:c1:a9:3b:ee:5c:16: fa:b6:72:78:dd:cb:0a:95:c9:c6:58:5b:a9:51:66: 70:39:7a:6e:1e:56:d5:b9:dd:a4:68:43:93:a9:58: 8e:52:03:95:9c:48:75:ab:9b:ed:0e:be:5b:86:9e: 64:65:ae:99:b7:12:65:93:4a:98:20:16:23:1c:1d: 7c:a4:ad:19:e9:0f:48:72:09:92:1e:f2:9b:b9:e4: 0f:98:28:5a:16:c7:e5:24:e4:b6:94:16:2c:44:97: c6:9f:6f:70:e3:b0:24:e7:e6:26:c9:ea:d9:f8:dc: ec:58:db:81:0f:d3:6f:a5:9a:03:1d:c0:32:b0:4e: 80:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:22:E2:DE:72:57:99:BA:D6:D3:A5:6F:51:EC:8E:03:16:63:AF:C0 X509v3 Authority Key Identifier: keyid:EA:5E:33:0B:F8:DC:FF:6D:09:DF:49:07:4B:46:B2:2E:BD:FB:D4:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:e1:db:10:49:8f:73:6d:e4:83:64:31:9b:de:2f:fb:b5:08: 67:67:5b:f0:ca:56:29:59:3d:9b:af:47:6b:f2:29:ba:06:89: d2:c3:71:8f:6e:9a:81:c9:a3:98:08:f6:c3:8f:79:23:44:fd: d8:f6:83:2b:df:30:00:d7:70:51:32:50:04:36:b3:63:ab:26: fa:97:d5:20:7f:30:c1:b9:3b:48:16:d1:af:c0:35:82:b2:b7: 52:d7:b3:dd:cd:41:42:46:81:cc:6f:e0:68:de:84:e0:da:92: 9e:4f:ce:02:b4:e1:67:be:29:3b:9e:ee:09:ad:5c:4d:9d:a0: b9:41:db:90:13:01:0d:cd:fd:20:a2:f2:f0:9b:cf:4c:2a:4e: 8f:31:d0:60:15:b7:78:b8:cd:18:a1:34:ee:75:40:a7:e1:16: 24:b2:14:99:46:2c:69:27:43:11:d0:a4:e3:78:95:af:e6:4d: bd:72:be:67:48:d6:41:26:66:18:af:c2:2f:41:60:fb:49:18: 3a:14:a7:70:b5:91:95:43:e7:f0:f9:84:48:10:36:11:58:d2: 20:69:fb:7a:b9:f9:89:6a:50:b8:b8:62:b7:d2:a0:a2:5c:3e: 47:26:35:d3:84:f4:da:eb:b4:6d:b7:a0:a8:39:b5:12:c3:0f: 0e:c1:dd:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPRpG1N39NRnhNWuUNDk5Ecpkw7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUE1RTMzMEJGOERDRkY2RDA5REY0OTA3NEI0NkIyMkVC REZCRDQ1NDAeFw0yNTA3MTkyMjI2MjRaFw0yNTA3MjMwNjAxMjRaMDMxMTAvBgNV BAMTKDA4MjJFMkRFNzI1Nzk5QkFENkQzQTU2RjUxRUM4RTAzMTY2M0FGQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3GnYuiJsmgat5m4I33F9FjMsC +hdP2amn61tR4ju1rFVJ3bYoEBksG9/9qj1zQrmjVj45bPKYGHNHent2ODOExpHV B9rUuAEXTB/0MgkFZgoIAe0+Gxm1yxiQWGzcTLwpeb8OT+EaAU2br8ubx2H8fDR8 F0X8MA4m+2meOlYstsGpO+5cFvq2cnjdywqVycZYW6lRZnA5em4eVtW53aRoQ5Op WI5SA5WcSHWrm+0OvluGnmRlrpm3EmWTSpggFiMcHXykrRnpD0hyCZIe8pu55A+Y KFoWx+Uk5LaUFixEl8afb3DjsCTn5ibJ6tn43OxY24EP02+lmgMdwDKwToCFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCCLi3nJXmbrW06VvUeyOAxZjr8AwHwYDVR0j BBgwFoAU6l4zC/jc/20J30kHS0ayLr371FQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzcxZGI5Yi03YzQwLTQ5NjYtOTkxYi01MTM4YjM2OTMyNDYvMC9FQTVFMzMwQkY4 RENGRjZEMDlERjQ5MDc0QjQ2QjIyRUJERkJENDU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUE1RTMzMEJGOERDRkY2RDA5REY0OTA3NEI0NkIyMkVCREZC RDQ1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM3MWRiOWItN2M0MC00OTY2LTk5 MWItNTEzOGIzNjkzMjQ2LzAvRUE1RTMzMEJGOERDRkY2RDA5REY0OTA3NEI0NkIy MkVCREZCRDQ1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAELh2xBJj3Nt5INkMZveL/u1CGdnW/DKVilZ PZuvR2vyKboGidLDcY9umoHJo5gI9sOPeSNE/dj2gyvfMADXcFEyUAQ2s2OrJvqX 1SB/MMG5O0gW0a/ANYKyt1LXs93NQUJGgcxv4GjehODakp5PzgK04We+KTue7gmt XE2doLlB25ATAQ3N/SCi8vCbz0wqTo8x0GAVt3i4zRihNO51QKfhFiSyFJlGLGkn QxHQpON4la/mTb1yvmdI1kEmZhivwi9BYPtJGDoUp3C1kZVD5/D5hEgQNhFY0iBp +3q5+YlqULi4YrfSoKJcPkcmNdOE9NrrtG23oKg5tRLDDw7B3XU= -----END CERTIFICATE-----Generated at Mon Jul 21 10:35:34 2025 by rpki-client