$ rpki-client -vvf repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.mft File: EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.mft (raw, json) Hash identifier: 1xFxwEZFyCXwMdjTKaDu0cWF8TziMf4wVKwGi9HS0ac= Subject key identifier: 98:07:42:C5:77:B6:46:A9:BB:19:6E:BC:90:DA:3D:09:E1:56:E3:67 Authority key identifier: EA:EA:2F:2F:07:FF:F3:43:40:77:7B:3B:BD:7D:1D:18:6F:4E:C1:CB Certificate issuer: /CN=EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB Certificate serial: 3F03724936CECDBBB03FC7595F759B17D192536D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.mft Manifest number: 01FC Signing time: Wed 03 Sep 2025 07:11:32 +0000 Manifest this update: Wed 03 Sep 2025 07:06:32 +0000 Manifest next update: Sat 06 Sep 2025 12:58:32 +0000 Files and hashes: 1: EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.crl (hash: 0Gd1nWJmaV/jxowDUiBtKmJjLAjzVXF1qtLaEgRjXHk=) 2: 3130332e3139312e3135302e302f32332d3234203d3e20313439393337.roa (hash: i80S93LcbuzfKOEUZo9C4vjXTfLHmrCj4n9ypSMTwBE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.crl rsync://repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 12:58:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:03:72:49:36:ce:cd:bb:b0:3f:c7:59:5f:75:9b:17:d1:92:53:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB Validity Not Before: Sep 3 07:06:32 2025 GMT Not After : Sep 6 12:58:32 2025 GMT Subject: CN=980742C577B646A9BB196EBC90DA3D09E156E367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6b:6f:73:16:72:22:f9:e3:1b:1c:c4:39:94: 97:5b:7e:12:ee:97:97:39:6e:58:3a:d9:2a:f6:94: 69:9d:d9:34:7a:70:58:02:ba:a4:71:f7:76:1f:a6: b9:97:ca:a6:ce:82:6c:0c:87:fa:c1:a1:93:a7:83: 6b:d5:b9:2f:8d:c4:78:04:0d:b0:b9:7d:d8:00:49: 36:14:70:f4:db:94:62:4d:ee:88:22:9d:b8:6b:5c: 53:56:39:54:17:1c:2a:56:b1:78:35:57:2b:4d:22: 13:10:fd:e9:75:b7:96:b4:62:30:ef:ba:dc:7c:ab: fe:f2:74:1c:ae:3f:3a:75:59:14:7b:95:5a:41:67: 91:48:6d:27:32:e8:31:93:e0:22:65:e6:fd:f7:26: c7:71:fd:b9:b8:71:16:7b:1b:c3:77:21:1d:be:de: b2:31:31:ea:48:61:34:c7:0f:92:e7:fc:5d:9c:0d: 05:f8:90:94:0b:06:db:d5:a6:9e:47:47:8a:28:a2: d0:d5:7b:82:82:54:f5:a3:45:94:88:03:2a:48:4d: 3a:66:60:da:84:4a:b4:be:ae:44:52:1b:1b:ad:0b: 49:b4:8a:52:93:25:5f:c9:2d:82:34:d0:83:b4:e4: 57:9f:5a:73:59:37:db:9e:ef:93:e2:b8:44:65:af: 54:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:07:42:C5:77:B6:46:A9:BB:19:6E:BC:90:DA:3D:09:E1:56:E3:67 X509v3 Authority Key Identifier: keyid:EA:EA:2F:2F:07:FF:F3:43:40:77:7B:3B:BD:7D:1D:18:6F:4E:C1:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:80:35:a1:0e:5a:64:3d:ff:aa:08:4e:32:ce:20:d2:f7:bd: a1:53:76:ff:bd:2f:5c:85:ba:6a:25:1f:fe:53:e3:94:b3:9a: 6e:f2:83:0a:4b:b8:eb:e4:9b:14:bb:cb:cb:26:b7:a9:53:4b: 85:62:27:22:2b:7c:7b:f2:ff:60:a0:10:41:e4:73:d8:99:a4: b3:15:24:07:78:e4:ad:6d:11:f3:88:a2:0c:af:e2:e0:66:0c: 8d:b3:0b:9b:d5:f1:9a:f7:ff:51:7d:3f:60:0a:20:b3:dc:69: 5f:c9:38:6b:f3:87:72:3c:c8:8c:0d:c3:37:6e:02:91:87:34: 44:45:29:fa:62:2d:b1:97:8a:85:2b:db:5d:f5:14:04:1a:e8: 09:ad:2e:b8:db:19:d5:18:c4:b6:bf:a7:43:e6:70:15:be:83: 8a:c4:83:b9:b0:3c:44:b4:f3:da:84:9d:6d:83:26:86:66:68: 48:4d:90:c6:33:a1:4e:c9:31:20:da:d0:17:31:b1:25:5d:4c: f4:e1:3a:92:4b:5b:e6:91:8b:f0:b5:8c:c0:1a:cb:15:f7:5f: 61:86:ad:fc:56:74:5c:aa:7a:08:2a:70:3d:7a:f8:a7:c1:5a: 20:78:1a:ff:15:c6:33:b0:ad:84:c0:42:d5:fb:36:ef:63:59: 49:65:25:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPwNySTbOzbuwP8dZX3WbF9GSU20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFFQTJGMkYwN0ZGRjM0MzQwNzc3QjNCQkQ3RDFEMTg2 RjRFQzFDQjAeFw0yNTA5MDMwNzA2MzJaFw0yNTA5MDYxMjU4MzJaMDMxMTAvBgNV BAMTKDk4MDc0MkM1NzdCNjQ2QTlCQjE5NkVCQzkwREEzRDA5RTE1NkUzNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCya29zFnIi+eMbHMQ5lJdbfhLu l5c5blg62Sr2lGmd2TR6cFgCuqRx93YfprmXyqbOgmwMh/rBoZOng2vVuS+NxHgE DbC5fdgASTYUcPTblGJN7oginbhrXFNWOVQXHCpWsXg1VytNIhMQ/el1t5a0YjDv utx8q/7ydByuPzp1WRR7lVpBZ5FIbScy6DGT4CJl5v33Jsdx/bm4cRZ7G8N3IR2+ 3rIxMepIYTTHD5Ln/F2cDQX4kJQLBtvVpp5HR4oootDVe4KCVPWjRZSIAypITTpm YNqESrS+rkRSGxutC0m0ilKTJV/JLYI00IO05FefWnNZN9ue75PiuERlr1R9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmAdCxXe2Rqm7GW68kNo9CeFW42cwHwYDVR0j BBgwFoAU6uovLwf/80NAd3s7vX0dGG9OwcswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OGI0MjQyMC01NmQwLTQ1MWEtYTI5ZC01ZjlkNjIzMGUyMjcvMC9FQUVBMkYyRjA3 RkZGMzQzNDA3NzdCM0JCRDdEMUQxODZGNEVDMUNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUFFQTJGMkYwN0ZGRjM0MzQwNzc3QjNCQkQ3RDFEMTg2RjRF QzFDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMThiNDI0MjAtNTZkMC00NTFhLWEy OWQtNWY5ZDYyMzBlMjI3LzAvRUFFQTJGMkYwN0ZGRjM0MzQwNzc3QjNCQkQ3RDFE MTg2RjRFQzFDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAECANaEOWmQ9/6oITjLOINL3vaFTdv+9L1yF umolH/5T45Szmm7ygwpLuOvkmxS7y8smt6lTS4ViJyIrfHvy/2CgEEHkc9iZpLMV JAd45K1tEfOIogyv4uBmDI2zC5vV8Zr3/1F9P2AKILPcaV/JOGvzh3I8yIwNwzdu ApGHNERFKfpiLbGXioUr2131FAQa6AmtLrjbGdUYxLa/p0PmcBW+g4rEg7mwPES0 89qEnW2DJoZmaEhNkMYzoU7JMSDa0BcxsSVdTPThOpJLW+aRi/C1jMAayxX3X2GG rfxWdFyqeggqcD16+KfBWiB4Gv8VxjOwrYTAQtX7Nu9jWUllJfY= -----END CERTIFICATE-----Generated at Fri Sep 5 10:36:21 2025 by rpki-client