$ rpki-client -vvf repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft File: EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft (raw, json) Hash identifier: dK39iPkCxlAUrtNtxShb/gvQgFA4LOAiBpgTQG0znWE= Subject key identifier: AD:95:FA:24:38:13:63:32:44:02:C9:FA:C0:D3:AF:8A:DE:6F:B3:76 Authority key identifier: EA:01:C9:15:11:C5:E3:47:C7:C1:1E:A4:64:9B:0F:04:1A:5D:05:20 Certificate issuer: /CN=EA01C91511C5E347C7C11EA4649B0F041A5D0520 Certificate serial: 3BACA75A5BF86521084759A801EB84D8171B12B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft Manifest number: 01AD Signing time: Wed 03 Sep 2025 13:10:02 +0000 Manifest this update: Wed 03 Sep 2025 13:05:02 +0000 Manifest next update: Sat 06 Sep 2025 17:44:02 +0000 Files and hashes: 1: 3130332e3137392e38322e302f32342d3234203d3e20313338303832.roa (hash: /cdl8KopWWEAVSKHGwwN7jQvT8+haRS7g+4C1ytM8Dg=) 2: 3130332e3132302e3231382e302f32342d3234203d3e20313338303832.roa (hash: A8O4HhKJBUpQAVtG9F/HuVJZcjl2PJnz2blEINGnJlw=) 3: EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl (hash: 3Ru4hxQuj1CR/oJAV9BQU71pCuTfmMiRntMkJ9/txdE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 17:44:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:ac:a7:5a:5b:f8:65:21:08:47:59:a8:01:eb:84:d8:17:1b:12:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA01C91511C5E347C7C11EA4649B0F041A5D0520 Validity Not Before: Sep 3 13:05:02 2025 GMT Not After : Sep 6 17:44:02 2025 GMT Subject: CN=AD95FA24381363324402C9FAC0D3AF8ADE6FB376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6c:cd:e3:b5:3e:b4:f1:d0:47:8b:31:fc:a7: 59:38:c3:68:71:54:96:56:ca:52:1f:a2:1e:46:a0: b0:b9:b0:62:11:3f:a9:25:cc:be:f8:58:65:d5:c0: b3:02:96:77:a4:8e:d4:9b:25:78:4e:cd:cf:d0:e3: 57:6d:77:56:ce:29:f1:af:1e:01:ca:91:89:a8:2b: b3:78:94:08:a3:35:6f:65:a8:23:6d:6d:38:78:73: 95:b4:c2:d2:b6:69:f3:2f:5f:5f:a4:79:4c:bb:88: 74:ea:24:9c:77:a1:cf:a2:af:72:3b:3b:be:15:50: e4:62:c0:3d:93:0f:ff:a4:d1:7a:bf:ed:8d:d3:4b: 47:02:7c:33:cf:03:cd:09:7c:df:ea:3e:2d:fb:83: 9a:bd:cf:08:de:9b:bb:02:e3:82:5c:7f:a1:62:c9: 05:16:4c:0c:ba:07:a9:dd:cc:bf:e0:fb:ac:58:26: 17:b6:40:94:bf:df:ec:71:1e:c3:3f:9f:7f:4b:b4: 4f:13:21:f3:6d:47:93:7a:a2:17:ca:09:b0:5d:c7: a8:5f:8a:82:47:da:a2:13:6e:de:54:79:5a:a7:5e: b6:5d:f7:49:f7:dc:42:19:8d:d9:82:87:27:41:2a: e4:76:a3:e5:58:99:be:48:84:1b:a7:2c:25:e5:26: b7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:95:FA:24:38:13:63:32:44:02:C9:FA:C0:D3:AF:8A:DE:6F:B3:76 X509v3 Authority Key Identifier: keyid:EA:01:C9:15:11:C5:E3:47:C7:C1:1E:A4:64:9B:0F:04:1A:5D:05:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:ad:92:cf:bc:34:50:bd:92:50:bc:2e:ac:08:4e:b1:12:54: 9c:c5:12:ea:f6:16:8b:c0:50:5f:83:f5:c3:30:64:3b:b1:d3: 8e:8f:4c:1a:d8:11:7f:43:c6:f0:bb:00:0c:80:78:cf:8f:61: b8:6e:2c:3d:44:91:bf:68:a9:7d:94:94:06:29:1d:f7:5c:0c: 42:69:7b:02:82:07:c1:1e:92:74:b6:80:a5:3d:7c:f5:2d:76: d5:cb:58:8f:59:2f:bd:87:6d:3b:d9:ee:95:82:d4:07:64:9c: ac:52:60:06:8a:22:25:93:b2:29:d4:e3:e3:92:43:b2:77:03: 04:2e:56:9f:75:c1:0e:cc:22:b6:ed:e2:18:ed:0c:df:92:fe: b2:6a:a8:09:fb:85:99:78:f7:5d:3b:89:a3:52:95:e7:54:02: d1:3d:74:8f:49:02:36:e0:c4:26:a7:fc:d1:ac:86:b0:21:60: 9b:75:a8:db:47:eb:4d:19:0f:1d:f5:b3:bd:98:bf:29:ce:0e: da:6c:32:bf:8a:bf:38:bf:7f:66:db:41:8e:7a:3a:6b:ed:2b: 13:12:9a:83:95:9b:10:b7:45:11:b6:aa:10:71:6f:8d:b0:ae: 02:2f:2f:e9:3d:29:a7:24:6b:6c:29:ee:1a:e2:a7:e9:1f:52: a3:a2:e3:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO6ynWlv4ZSEIR1moAeuE2BcbErMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBGMDQx QTVEMDUyMDAeFw0yNTA5MDMxMzA1MDJaFw0yNTA5MDYxNzQ0MDJaMDMxMTAvBgNV BAMTKEFEOTVGQTI0MzgxMzYzMzI0NDAyQzlGQUMwRDNBRjhBREU2RkIzNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/bM3jtT608dBHizH8p1k4w2hx VJZWylIfoh5GoLC5sGIRP6klzL74WGXVwLMClnekjtSbJXhOzc/Q41dtd1bOKfGv HgHKkYmoK7N4lAijNW9lqCNtbTh4c5W0wtK2afMvX1+keUy7iHTqJJx3oc+ir3I7 O74VUORiwD2TD/+k0Xq/7Y3TS0cCfDPPA80JfN/qPi37g5q9zwjem7sC44Jcf6Fi yQUWTAy6B6ndzL/g+6xYJhe2QJS/3+xxHsM/n39LtE8TIfNtR5N6ohfKCbBdx6hf ioJH2qITbt5UeVqnXrZd90n33EIZjdmChydBKuR2o+VYmb5IhBunLCXlJrfXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrZX6JDgTYzJEAsn6wNOvit5vs3YwHwYDVR0j BBgwFoAU6gHJFRHF40fHwR6kZJsPBBpdBSAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Y2QyNGU4Mi1mMzA2LTQ0MDAtYjAwYS1kNTliNDFlMjg2YmIvMC9FQTAxQzkxNTEx QzVFMzQ3QzdDMTFFQTQ2NDlCMEYwNDFBNUQwNTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBGMDQxQTVE MDUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGNkMjRlODItZjMwNi00NDAwLWIw MGEtZDU5YjQxZTI4NmJiLzAvRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBG MDQxQTVEMDUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALGtks+8NFC9klC8LqwITrESVJzFEur2FovA UF+D9cMwZDux046PTBrYEX9DxvC7AAyAeM+PYbhuLD1Ekb9oqX2UlAYpHfdcDEJp ewKCB8EeknS2gKU9fPUtdtXLWI9ZL72HbTvZ7pWC1AdknKxSYAaKIiWTsinU4+OS Q7J3AwQuVp91wQ7MIrbt4hjtDN+S/rJqqAn7hZl49107iaNSledUAtE9dI9JAjbg xCan/NGshrAhYJt1qNtH600ZDx31s72YvynODtpsMr+Kvzi/f2bbQY56OmvtKxMS moOVmxC3RRG2qhBxb42wrgIvL+k9Kacka2wp7hrip+kfUqOi4x8= -----END CERTIFICATE-----Generated at Fri Sep 5 10:18:40 2025 by rpki-client