$ rpki-client -vvf repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft File: EAAF14D74C27E1502835CCF1541D5D92498C8427.mft (raw, json) Hash identifier: wSGhH4QQHjm50Er2dkzsuhuOZlg5gtMlKWRqCW644ds= Subject key identifier: 20:9F:39:18:F5:6C:C3:5B:47:7D:FC:5E:AB:EC:23:04:30:20:A2:18 Authority key identifier: EA:AF:14:D7:4C:27:E1:50:28:35:CC:F1:54:1D:5D:92:49:8C:84:27 Certificate issuer: /CN=EAAF14D74C27E1502835CCF1541D5D92498C8427 Certificate serial: 6C34472131CEFBD6B0142AC904F6CFC3641736D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft Manifest number: D7 Signing time: Sun 20 Jul 2025 08:41:48 +0000 Manifest this update: Sun 20 Jul 2025 08:36:48 +0000 Manifest next update: Wed 23 Jul 2025 10:01:48 +0000 Files and hashes: 1: 323030313a6466333a393263303a3a2f34382d3438203d3e20313532343231.roa (hash: sF0+Hzy6oJxlj5HSJzIfCoHVtQeeL/eSjk9uB3se86E=) 2: EAAF14D74C27E1502835CCF1541D5D92498C8427.crl (hash: gyAAQOZpXZIIxEjDPq4JpoQPOJEgj0qAEopBGk/TXI8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.crl rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 10:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:34:47:21:31:ce:fb:d6:b0:14:2a:c9:04:f6:cf:c3:64:17:36:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAAF14D74C27E1502835CCF1541D5D92498C8427 Validity Not Before: Jul 20 08:36:48 2025 GMT Not After : Jul 23 10:01:48 2025 GMT Subject: CN=209F3918F56CC35B477DFC5EABEC23043020A218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1d:3f:97:aa:fc:a3:af:c1:51:79:a9:db:45: 7e:35:33:a5:d1:42:56:12:8f:a2:76:48:b3:ce:8e: 29:65:c3:f9:7a:14:40:8b:77:5a:4e:a3:6d:aa:2c: 90:7e:aa:33:1e:b3:f4:70:c8:0c:12:d9:31:80:de: e1:1d:93:37:b9:09:93:35:f9:a3:4e:c5:27:c7:52: 6f:aa:77:fc:71:84:a5:f1:a4:fa:7d:c6:b2:dc:55: 1e:1b:bc:86:46:40:86:5f:27:8f:fa:05:23:10:19: 04:29:22:fd:84:b8:a1:09:d8:ec:d4:81:99:c4:8a: c5:0b:df:34:61:5e:e3:ce:a4:3d:e3:b4:41:a8:be: 7a:6b:65:0c:96:5d:b2:7f:74:3d:59:51:1e:f5:0e: 01:9f:b0:54:3e:db:6d:b1:70:dd:bf:2e:f9:67:1e: 8d:b9:81:dc:45:0f:6e:9f:1e:4d:b5:e2:00:26:92: 8e:83:56:a3:70:b0:a1:77:dd:91:58:13:bb:1d:a9: 5d:74:64:09:f9:c9:34:4c:a1:64:0e:8e:8f:14:9b: 3a:88:09:64:9b:77:8c:3f:69:3b:ee:d2:16:4f:28: fb:20:84:1e:7a:19:13:52:ff:6b:88:12:5e:35:4c: a6:63:26:af:5c:24:30:52:22:f1:9b:38:19:fc:d4: dd:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:9F:39:18:F5:6C:C3:5B:47:7D:FC:5E:AB:EC:23:04:30:20:A2:18 X509v3 Authority Key Identifier: keyid:EA:AF:14:D7:4C:27:E1:50:28:35:CC:F1:54:1D:5D:92:49:8C:84:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:6a:40:6d:13:4c:2e:a2:36:f2:fc:d3:82:e8:c8:91:3f:3e: 1b:5b:c3:58:b2:8c:b1:3c:75:0c:35:d2:5b:b0:d2:f4:2f:8b: 0c:60:1a:85:e2:a6:a0:a3:b0:2e:f2:37:7a:03:b2:43:a3:38: 49:18:29:b2:0d:f6:3d:f2:0d:a3:da:8a:f4:86:84:62:4f:ed: c4:08:43:ec:5f:36:1f:d1:7c:20:4b:8c:40:cc:d2:b7:b9:b2: da:6e:ef:a2:58:33:67:09:6d:ab:9d:d8:8d:ba:b0:0f:be:30: f8:8c:fa:65:7d:33:05:c3:01:73:08:82:83:03:3b:bf:c1:3e: 98:92:1b:ec:ef:d3:1b:46:16:d6:bf:c7:17:ab:b7:14:53:8b: 85:13:09:c8:5f:ec:d9:ee:c6:6d:6a:fc:92:72:64:fd:2c:35: a8:a8:1d:40:22:cd:22:d8:57:24:74:c1:14:4e:32:87:7b:2c: 01:07:98:d4:7e:d9:52:88:c3:69:a9:ff:3b:10:9e:d3:63:2c: 62:30:03:f6:7c:38:25:1b:1c:8c:89:bf:31:d1:7a:33:d7:3a: 10:7b:e4:10:a5:e8:2b:bd:e2:ef:8b:c9:af:c8:5e:76:fb:c2: 6e:9a:24:a0:f2:2d:fb:fb:bb:f9:6d:d4:4f:c2:60:26:8d:0a: 51:5b:3a:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbDRHITHO+9awFCrJBPbPw2QXNtUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVEOTI0 OThDODQyNzAeFw0yNTA3MjAwODM2NDhaFw0yNTA3MjMxMDAxNDhaMDMxMTAvBgNV BAMTKDIwOUYzOTE4RjU2Q0MzNUI0NzdERkM1RUFCRUMyMzA0MzAyMEEyMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4HT+Xqvyjr8FReanbRX41M6XR QlYSj6J2SLPOjillw/l6FECLd1pOo22qLJB+qjMes/RwyAwS2TGA3uEdkze5CZM1 +aNOxSfHUm+qd/xxhKXxpPp9xrLcVR4bvIZGQIZfJ4/6BSMQGQQpIv2EuKEJ2OzU gZnEisUL3zRhXuPOpD3jtEGovnprZQyWXbJ/dD1ZUR71DgGfsFQ+222xcN2/Lvln Ho25gdxFD26fHk214gAmko6DVqNwsKF33ZFYE7sdqV10ZAn5yTRMoWQOjo8UmzqI CWSbd4w/aTvu0hZPKPsghB56GRNS/2uIEl41TKZjJq9cJDBSIvGbOBn81N3VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIJ85GPVsw1tHffxeq+wjBDAgohgwHwYDVR0j BBgwFoAU6q8U10wn4VAoNczxVB1dkkmMhCcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTRmNzkzNC1jZGM3LTQwODItODNmYi1kZjdkNGY4MjE5YWYvMS9FQUFGMTRENzRD MjdFMTUwMjgzNUNDRjE1NDFENUQ5MjQ5OEM4NDI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVEOTI0OThD ODQyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE0Zjc5MzQtY2RjNy00MDgyLTgz ZmItZGY3ZDRmODIxOWFmLzEvRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVE OTI0OThDODQyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAlqQG0TTC6iNvL804LoyJE/Phtbw1iyjLE8 dQw10luw0vQviwxgGoXipqCjsC7yN3oDskOjOEkYKbIN9j3yDaPaivSGhGJP7cQI Q+xfNh/RfCBLjEDM0re5stpu76JYM2cJbaud2I26sA++MPiM+mV9MwXDAXMIgoMD O7/BPpiSG+zv0xtGFta/xxertxRTi4UTCchf7Nnuxm1q/JJyZP0sNaioHUAizSLY VyR0wRROMod7LAEHmNR+2VKIw2mp/zsQntNjLGIwA/Z8OCUbHIyJvzHRejPXOhB7 5BCl6Cu94u+Lya/IXnb7wm6aJKDyLfv7u/lt1E/CYCaNClFbOrM= -----END CERTIFICATE-----Generated at Mon Jul 21 23:32:14 2025 by rpki-client