$ rpki-client -vvf repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft File: EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft (raw, json) Hash identifier: 772bmyYc7tCTDTlfE552WEi4FYJWT/gn2QzDDTgJ79E= Subject key identifier: 72:1C:1E:59:51:09:22:DD:3C:4D:83:B5:41:2B:7B:55:F8:E9:6C:85 Authority key identifier: EA:DA:0A:EE:51:F3:91:0B:50:A0:65:D5:7D:94:6E:3E:AF:A8:BD:11 Certificate issuer: /CN=EADA0AEE51F3910B50A065D57D946E3EAFA8BD11 Certificate serial: 4372432E4E8E304DB80CA948F36E7EDF5E1C80CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft Manifest number: 04FB Signing time: Mon 21 Jul 2025 08:11:31 +0000 Manifest this update: Mon 21 Jul 2025 08:06:31 +0000 Manifest next update: Thu 24 Jul 2025 11:51:31 +0000 Files and hashes: 1: 3130332e3131342e35332e302f32342d3234203d3e20313337333439.roa (hash: L0aGyUwEYHJDyRetS6plSaGHfNVoM/NqZGtNJzzztcc=) 2: 3130332e3131342e35322e302f32342d3234203d3e20313337333439.roa (hash: PbzUEe0UQr8XKfElcqOIqamd3OJjVX7VfL4ViGWOAc4=) 3: 3130332e3131342e35322e302f32332d3234203d3e20313337333439.roa (hash: IHRMKls6bDo6efJZc4SPr2h5Nej24aqy+WpwVULn5ZQ=) 4: 323030313a6466343a663330303a3a2f34382d3438203d3e20313337333439.roa (hash: bM2bCiWvvR67fLAxEBLdbaa9UVbcM3IM7NopO4JRa9U=) 5: EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.crl (hash: e4elrT4bucUgsT4GUyj4DeeM/kz7vrUbJ28V2m+5nI4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.crl rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 11:51:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:72:43:2e:4e:8e:30:4d:b8:0c:a9:48:f3:6e:7e:df:5e:1c:80:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EADA0AEE51F3910B50A065D57D946E3EAFA8BD11 Validity Not Before: Jul 21 08:06:31 2025 GMT Not After : Jul 24 11:51:31 2025 GMT Subject: CN=721C1E59510922DD3C4D83B5412B7B55F8E96C85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8f:1f:87:79:69:b3:16:75:b4:2c:30:15:74: c3:57:4d:c4:85:01:3e:d5:ab:92:6c:54:9c:35:94: ca:a6:3b:07:50:94:6a:62:ab:8c:d5:0d:3f:cc:61: 81:9b:b1:76:79:b6:cc:e0:c5:9d:49:ad:55:d4:0b: 4a:72:b6:2b:05:a6:5c:96:0d:18:d1:11:f9:41:57: 00:62:57:a6:0f:72:33:d2:84:c3:53:07:f8:ec:80: c1:95:79:17:de:84:6f:5e:f8:04:fc:a6:b8:6c:8e: a5:35:c1:27:45:de:56:74:bc:13:e0:46:4e:aa:9e: 44:d1:45:b3:22:48:53:7f:1e:25:d7:a8:7e:e3:23: c0:6a:77:3b:95:82:dd:a3:f0:03:53:f5:db:3e:ef: c5:0f:2e:71:2b:0b:99:d4:b9:da:f9:6b:9f:09:1e: 96:bf:d6:a4:88:cc:a4:91:94:07:e8:99:94:ab:61: a2:3f:41:94:f4:0f:07:76:bb:e9:a3:00:cd:62:0b: 2d:40:84:be:30:34:04:7a:ff:ef:a6:22:88:cc:92: 7e:38:71:77:ef:3f:f6:33:7b:d8:16:7b:fd:38:1e: e4:a4:c3:3c:76:3b:d8:45:41:45:51:d9:06:68:8e: a6:82:ba:37:9c:8b:dd:f5:9d:58:d3:5a:ec:25:c0: 47:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:1C:1E:59:51:09:22:DD:3C:4D:83:B5:41:2B:7B:55:F8:E9:6C:85 X509v3 Authority Key Identifier: keyid:EA:DA:0A:EE:51:F3:91:0B:50:A0:65:D5:7D:94:6E:3E:AF:A8:BD:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:1a:de:cb:fc:83:fd:52:ba:3c:39:d5:9b:da:5d:0b:54:79: 10:7f:33:7c:8a:b0:52:95:8a:66:2b:6c:7a:9a:e8:39:f4:60: 31:16:ea:16:00:f3:b2:c5:7a:97:0d:14:1f:1a:e1:6b:92:6d: 6e:58:d3:af:fb:14:fe:25:71:ff:8d:fd:01:0b:c5:f7:e8:44: d7:50:e4:f1:a9:35:d5:ed:43:dd:22:7e:57:71:68:f9:92:69: a4:31:e2:a4:48:b4:03:08:c9:98:ef:43:1c:2a:a4:23:36:03: 67:f0:af:ed:25:0e:22:1f:43:98:e5:bf:9b:e6:e0:5c:f5:3b: 03:8f:15:16:80:f9:6c:c8:30:e7:37:38:35:3f:76:5a:c3:fc: 84:08:5c:5b:56:dc:0b:fe:1d:0d:73:97:07:fc:ae:bf:37:7b: 6f:32:6f:f9:45:6b:c8:2e:87:c1:a3:dd:33:f1:e6:07:d6:f4: 8f:b9:5f:30:3a:04:4f:9f:81:3c:16:ec:8a:95:ab:af:4d:b7: 01:74:b4:f0:28:02:72:2f:5a:1b:90:a7:2f:e2:de:24:fc:da: a4:58:66:e2:64:3a:bf:72:ac:94:58:18:bb:de:5a:aa:d7:6f: 75:0a:78:87:51:57:92:66:b7:76:6a:82:9f:90:0e:69:bf:e5: b4:95:b5:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ3JDLk6OME24DKlI825+314cgM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFEQTBBRUU1MUYzOTEwQjUwQTA2NUQ1N0Q5NDZFM0VB RkE4QkQxMTAeFw0yNTA3MjEwODA2MzFaFw0yNTA3MjQxMTUxMzFaMDMxMTAvBgNV BAMTKDcyMUMxRTU5NTEwOTIyREQzQzREODNCNTQxMkI3QjU1RjhFOTZDODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRjx+HeWmzFnW0LDAVdMNXTcSF AT7Vq5JsVJw1lMqmOwdQlGpiq4zVDT/MYYGbsXZ5tszgxZ1JrVXUC0pytisFplyW DRjREflBVwBiV6YPcjPShMNTB/jsgMGVeRfehG9e+AT8prhsjqU1wSdF3lZ0vBPg Rk6qnkTRRbMiSFN/HiXXqH7jI8BqdzuVgt2j8ANT9ds+78UPLnErC5nUudr5a58J Hpa/1qSIzKSRlAfomZSrYaI/QZT0Dwd2u+mjAM1iCy1AhL4wNAR6/++mIojMkn44 cXfvP/Yze9gWe/04HuSkwzx2O9hFQUVR2QZojqaCujeci931nVjTWuwlwEdlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUchweWVEJIt08TYO1QSt7VfjpbIUwHwYDVR0j BBgwFoAU6toK7lHzkQtQoGXVfZRuPq+ovREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDk2MmM2ZS01OTVhLTQ3YzQtYWE3Yy1lZjhlNzdjYWU2NDIvMC9FQURBMEFFRTUx RjM5MTBCNTBBMDY1RDU3RDk0NkUzRUFGQThCRDExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUFEQTBBRUU1MUYzOTEwQjUwQTA2NUQ1N0Q5NDZFM0VBRkE4 QkQxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA5NjJjNmUtNTk1YS00N2M0LWFh N2MtZWY4ZTc3Y2FlNjQyLzAvRUFEQTBBRUU1MUYzOTEwQjUwQTA2NUQ1N0Q5NDZF M0VBRkE4QkQxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAYa3sv8g/1Sujw51ZvaXQtUeRB/M3yKsFKV imYrbHqa6Dn0YDEW6hYA87LFepcNFB8a4WuSbW5Y06/7FP4lcf+N/QELxffoRNdQ 5PGpNdXtQ90ifldxaPmSaaQx4qRItAMIyZjvQxwqpCM2A2fwr+0lDiIfQ5jlv5vm 4Fz1OwOPFRaA+WzIMOc3ODU/dlrD/IQIXFtW3Av+HQ1zlwf8rr83e28yb/lFa8gu h8Gj3TPx5gfW9I+5XzA6BE+fgTwW7IqVq69NtwF0tPAoAnIvWhuQpy/i3iT82qRY ZuJkOr9yrJRYGLveWqrXb3UKeIdRV5Jmt3Zqgp+QDmm/5bSVtUE= -----END CERTIFICATE-----Generated at Mon Jul 21 18:08:41 2025 by rpki-client