$ rpki-client -vvf repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.mft File: EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.mft (raw, json) Hash identifier: bOELd8j0ibWBJZDVYw2dCQzz2YBWplti+BF3rXAYNck= Subject key identifier: 82:FB:B7:10:BB:C6:12:80:01:61:32:C8:8D:76:70:6F:39:A3:D4:39 Authority key identifier: EA:EA:2F:2F:07:FF:F3:43:40:77:7B:3B:BD:7D:1D:18:6F:4E:C1:CB Certificate issuer: /CN=EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB Certificate serial: 708B26F4C5026AF3077220529BE97DE306BFE79E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.mft Manifest number: 01D4 Signing time: Wed 04 Jun 2025 14:01:33 +0000 Manifest this update: Wed 04 Jun 2025 13:56:33 +0000 Manifest next update: Sat 07 Jun 2025 20:14:33 +0000 Files and hashes: 1: 3130332e3139312e3135302e302f32332d3234203d3e20313439393337.roa (hash: i80S93LcbuzfKOEUZo9C4vjXTfLHmrCj4n9ypSMTwBE=) 2: EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.crl (hash: KpAsik+B5DKynreQxQgSUbI47WlqDTIx08JMBJrsn1A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.crl rsync://repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:14:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:8b:26:f4:c5:02:6a:f3:07:72:20:52:9b:e9:7d:e3:06:bf:e7:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB Validity Not Before: Jun 4 13:56:33 2025 GMT Not After : Jun 7 20:14:33 2025 GMT Subject: CN=82FBB710BBC61280016132C88D76706F39A3D439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:52:7a:d3:d9:44:5a:85:a8:1c:e5:67:4d:1d: 7e:12:f4:bc:da:2b:d4:67:9b:87:23:7b:ed:65:79: b3:aa:7d:dd:44:e0:48:52:09:c0:6b:bb:31:72:92: c9:42:c0:ad:32:99:de:24:20:b4:57:f2:a0:44:7f: 74:37:e2:da:01:f6:10:ed:9c:23:ba:28:57:be:01: da:53:8f:78:13:08:03:78:58:3e:73:67:da:e3:1e: b8:ea:15:cd:f3:ce:71:bd:a9:82:b0:69:4d:51:7a: 05:b5:c9:ec:66:c5:66:d9:57:61:1c:33:21:a6:b9: 1d:5c:74:7a:1f:ec:fb:81:0a:c5:d4:9c:42:98:73: ea:fc:d3:39:09:75:23:40:50:f9:b2:fc:12:b9:02: 80:a1:bc:c0:33:6b:a8:e7:cf:b7:cc:2c:7a:cc:c7: 28:fe:d0:05:f8:ab:a3:f4:5e:59:ee:ab:09:17:1f: 56:36:87:cf:3a:8d:63:29:4f:30:28:d5:9c:cb:8e: 38:fc:fc:a9:45:0a:3b:13:dd:0e:5e:25:f2:25:ea: 1d:10:a1:5e:83:b9:19:30:0b:2b:3b:30:ce:95:81: 5e:43:01:3a:66:43:2d:82:b4:90:87:d4:6d:bf:ec: d2:9a:07:f2:14:eb:42:b5:02:04:5b:12:45:84:92: cb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:FB:B7:10:BB:C6:12:80:01:61:32:C8:8D:76:70:6F:39:A3:D4:39 X509v3 Authority Key Identifier: keyid:EA:EA:2F:2F:07:FF:F3:43:40:77:7B:3B:BD:7D:1D:18:6F:4E:C1:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:a1:2e:0a:e7:8f:12:bc:25:ac:db:8b:df:46:9e:17:0b:83: 07:67:91:1f:70:51:52:55:83:24:75:53:be:50:ee:fd:af:be: 2c:28:f4:bb:96:f4:8e:2d:2b:c4:b5:a9:38:aa:24:4e:81:7c: 56:88:52:16:e0:a6:5b:45:3c:b4:6f:44:19:95:d8:6a:ac:b4: dc:62:5f:24:29:f6:05:22:d6:0c:bc:0c:b6:dd:d7:55:94:d4: 6d:97:f3:94:e3:c5:ff:41:66:a9:dc:a1:b1:a4:cd:ef:c2:81: d6:e1:bd:47:fe:ac:46:7c:e4:13:86:6f:85:3c:ed:7d:c5:c9: 59:7b:f2:03:87:ea:df:ad:fa:45:5a:a9:2c:b0:68:fd:2e:e3: 02:40:c4:1b:43:7b:37:a4:bb:ab:0f:2e:68:d5:34:45:9f:1d: 6e:26:39:cb:c1:8e:ea:ce:53:f5:9d:c3:04:d9:1b:46:5e:be: e0:9e:57:f9:bc:84:6d:8a:75:fc:22:4e:0e:e2:f0:29:2c:f9: 8c:49:6c:6f:3d:11:21:a4:f7:68:97:c7:c7:42:25:ab:d9:b5: 22:2b:fa:81:17:ce:1d:3e:cd:0f:23:68:7e:8a:57:bf:79:be: 9e:43:c0:60:4a:3a:25:ae:3d:ec:d8:03:08:c3:48:c5:db:83: e4:de:a9:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcIsm9MUCavMHciBSm+l94wa/554wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFFQTJGMkYwN0ZGRjM0MzQwNzc3QjNCQkQ3RDFEMTg2 RjRFQzFDQjAeFw0yNTA2MDQxMzU2MzNaFw0yNTA2MDcyMDE0MzNaMDMxMTAvBgNV BAMTKDgyRkJCNzEwQkJDNjEyODAwMTYxMzJDODhENzY3MDZGMzlBM0Q0MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtUnrT2URahagc5WdNHX4S9Lza K9Rnm4cje+1lebOqfd1E4EhSCcBruzFykslCwK0ymd4kILRX8qBEf3Q34toB9hDt nCO6KFe+AdpTj3gTCAN4WD5zZ9rjHrjqFc3zznG9qYKwaU1RegW1yexmxWbZV2Ec MyGmuR1cdHof7PuBCsXUnEKYc+r80zkJdSNAUPmy/BK5AoChvMAza6jnz7fMLHrM xyj+0AX4q6P0XlnuqwkXH1Y2h886jWMpTzAo1ZzLjjj8/KlFCjsT3Q5eJfIl6h0Q oV6DuRkwCys7MM6VgV5DATpmQy2CtJCH1G2/7NKaB/IU60K1AgRbEkWEksuxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgvu3ELvGEoABYTLIjXZwbzmj1DkwHwYDVR0j BBgwFoAU6uovLwf/80NAd3s7vX0dGG9OwcswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OGI0MjQyMC01NmQwLTQ1MWEtYTI5ZC01ZjlkNjIzMGUyMjcvMC9FQUVBMkYyRjA3 RkZGMzQzNDA3NzdCM0JCRDdEMUQxODZGNEVDMUNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUFFQTJGMkYwN0ZGRjM0MzQwNzc3QjNCQkQ3RDFEMTg2RjRF QzFDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMThiNDI0MjAtNTZkMC00NTFhLWEy OWQtNWY5ZDYyMzBlMjI3LzAvRUFFQTJGMkYwN0ZGRjM0MzQwNzc3QjNCQkQ3RDFE MTg2RjRFQzFDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAehLgrnjxK8Jazbi99GnhcLgwdnkR9wUVJV gyR1U75Q7v2vviwo9LuW9I4tK8S1qTiqJE6BfFaIUhbgpltFPLRvRBmV2GqstNxi XyQp9gUi1gy8DLbd11WU1G2X85Tjxf9BZqncobGkze/CgdbhvUf+rEZ85BOGb4U8 7X3FyVl78gOH6t+t+kVaqSywaP0u4wJAxBtDezeku6sPLmjVNEWfHW4mOcvBjurO U/WdwwTZG0ZevuCeV/m8hG2KdfwiTg7i8Cks+YxJbG89ESGk92iXx8dCJavZtSIr +oEXzh0+zQ8jaH6KV795vp5DwGBKOiWuPezYAwjDSMXbg+TeqdI= -----END CERTIFICATE-----Generated at Fri Jun 6 17:03:07 2025 by rpki-client