$ rpki-client -vvf repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft File: EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft (raw, json) Hash identifier: faeVL65VFgqOk21WLZ5y1dUNRyGzdKBqgP+XRkoic9A= Subject key identifier: 9B:25:09:6E:11:60:C6:93:70:BF:38:B2:F7:E2:80:13:D0:0C:A8:7E Authority key identifier: EA:5E:33:0B:F8:DC:FF:6D:09:DF:49:07:4B:46:B2:2E:BD:FB:D4:54 Certificate issuer: /CN=EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454 Certificate serial: 4557D72EDD0BD8EB792A82FF85E584299A1723DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft Manifest number: 0190 Signing time: Tue 03 Jun 2025 12:02:51 +0000 Manifest this update: Tue 03 Jun 2025 11:57:51 +0000 Manifest next update: Fri 06 Jun 2025 20:15:51 +0000 Files and hashes: 1: EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl (hash: MeR8aT6lm5huGwksSyr41Nq9i2B/iIlNOmgKrRlixK8=) 2: 3230322e34372e39322e302f32332d3234203d3e203137393935.roa (hash: BiJ73L794WTIFVs+3dlt1Nu1TwuPunFJpDTHrxt8w6o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:15:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:57:d7:2e:dd:0b:d8:eb:79:2a:82:ff:85:e5:84:29:9a:17:23:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454 Validity Not Before: Jun 3 11:57:51 2025 GMT Not After : Jun 6 20:15:51 2025 GMT Subject: CN=9B25096E1160C69370BF38B2F7E28013D00CA87E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b0:1a:ae:c2:17:4f:0b:5e:e6:af:37:65:1a: f3:7d:b2:a2:f6:2b:b9:e5:dd:b3:c4:8e:bf:6b:0c: 0a:79:b5:8e:cb:9f:69:bf:1d:eb:56:06:12:b4:18: 1e:be:1d:8f:f4:7f:ec:88:76:b0:5a:a7:01:94:2f: ea:c8:bc:3e:d4:2a:cb:8a:ea:f9:82:a4:aa:db:8a: 0c:be:08:66:e6:d6:e8:b1:24:0c:95:ad:88:6f:27: 77:cc:91:1d:30:bf:2a:8c:aa:de:3d:68:fe:f2:dc: e8:d8:4e:af:40:82:6a:4d:ee:6d:b4:d2:40:15:41: c4:d7:d6:8a:1f:67:04:00:2a:2a:f9:97:50:e2:d5: 85:b9:ac:a0:d4:03:3f:1a:bf:bf:a0:f8:5d:80:89: 88:14:f6:91:8f:1d:46:b2:35:6f:d8:0d:0d:bd:a5: ac:4c:f0:99:5a:a3:95:b3:00:67:47:f1:9e:9e:f6: 9d:b9:ea:05:77:f1:17:f8:c1:0d:4c:5e:bc:da:20: 8f:f5:df:ca:06:44:27:af:d9:94:05:fd:f7:70:a9: 43:c3:0d:d2:75:ab:38:be:98:fb:0d:17:5e:7e:1e: 6d:28:60:40:8b:3f:31:f4:05:31:e4:49:90:02:5a: b9:6f:11:66:56:14:f2:3e:0a:95:2b:e8:cb:19:2d: 55:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:25:09:6E:11:60:C6:93:70:BF:38:B2:F7:E2:80:13:D0:0C:A8:7E X509v3 Authority Key Identifier: keyid:EA:5E:33:0B:F8:DC:FF:6D:09:DF:49:07:4B:46:B2:2E:BD:FB:D4:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:d7:94:82:a8:8f:2c:4e:ee:29:4a:37:dd:bd:c2:64:3a:3c: b8:d6:f7:40:26:6f:a0:b5:c0:fe:c5:af:6b:77:70:dd:d3:44: ad:98:05:d1:88:6e:ae:cf:1a:99:b1:c3:84:22:e5:f1:52:4b: 87:27:14:31:55:2c:f7:83:fc:9f:cf:c4:09:fc:27:fa:a6:27: 16:73:e7:38:12:5d:33:3f:f2:45:26:80:90:ad:a0:b9:5f:0b: 96:11:66:24:83:d3:7d:9a:98:68:3b:a0:c7:b4:b0:da:89:e3: 5e:e2:c2:79:3b:93:f4:a7:bb:4b:e6:d6:b9:ff:f7:ec:e1:44: 0c:41:12:3f:bb:56:44:1b:d9:bc:f5:25:c0:67:89:5e:5b:e5: b8:8a:c6:0a:a9:22:7e:9a:ed:d2:fd:7d:3d:bb:8e:19:9e:f6: be:b2:07:b9:6f:80:b4:83:40:18:d0:d5:3b:7f:da:3d:d0:94: c6:5b:f7:7e:67:a5:d3:5d:15:2c:09:9d:8f:98:ee:29:e5:75: bf:d5:f5:d1:73:1e:42:b9:e3:c4:fc:ae:25:d4:f5:e3:a4:85: 55:2a:51:e6:6e:c3:ab:10:36:55:b0:1d:de:d9:ea:87:57:dd: cb:39:02:fc:fc:ad:b6:2a:69:3f:9d:2d:96:47:54:23:f3:03: 1d:4e:f2:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURVfXLt0L2Ot5KoL/heWEKZoXI9swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUE1RTMzMEJGOERDRkY2RDA5REY0OTA3NEI0NkIyMkVC REZCRDQ1NDAeFw0yNTA2MDMxMTU3NTFaFw0yNTA2MDYyMDE1NTFaMDMxMTAvBgNV BAMTKDlCMjUwOTZFMTE2MEM2OTM3MEJGMzhCMkY3RTI4MDEzRDAwQ0E4N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3sBquwhdPC17mrzdlGvN9sqL2 K7nl3bPEjr9rDAp5tY7Ln2m/HetWBhK0GB6+HY/0f+yIdrBapwGUL+rIvD7UKsuK 6vmCpKrbigy+CGbm1uixJAyVrYhvJ3fMkR0wvyqMqt49aP7y3OjYTq9AgmpN7m20 0kAVQcTX1oofZwQAKir5l1Di1YW5rKDUAz8av7+g+F2AiYgU9pGPHUayNW/YDQ29 paxM8Jlao5WzAGdH8Z6e9p256gV38Rf4wQ1MXrzaII/138oGRCev2ZQF/fdwqUPD DdJ1qzi+mPsNF15+Hm0oYECLPzH0BTHkSZACWrlvEWZWFPI+CpUr6MsZLVWPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmyUJbhFgxpNwvziy9+KAE9AMqH4wHwYDVR0j BBgwFoAU6l4zC/jc/20J30kHS0ayLr371FQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzcxZGI5Yi03YzQwLTQ5NjYtOTkxYi01MTM4YjM2OTMyNDYvMC9FQTVFMzMwQkY4 RENGRjZEMDlERjQ5MDc0QjQ2QjIyRUJERkJENDU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUE1RTMzMEJGOERDRkY2RDA5REY0OTA3NEI0NkIyMkVCREZC RDQ1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM3MWRiOWItN2M0MC00OTY2LTk5 MWItNTEzOGIzNjkzMjQ2LzAvRUE1RTMzMEJGOERDRkY2RDA5REY0OTA3NEI0NkIy MkVCREZCRDQ1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALXlIKojyxO7ilKN929wmQ6PLjW90Amb6C1 wP7Fr2t3cN3TRK2YBdGIbq7PGpmxw4Qi5fFSS4cnFDFVLPeD/J/PxAn8J/qmJxZz 5zgSXTM/8kUmgJCtoLlfC5YRZiSD032amGg7oMe0sNqJ417iwnk7k/Snu0vm1rn/ 9+zhRAxBEj+7VkQb2bz1JcBniV5b5biKxgqpIn6a7dL9fT27jhme9r6yB7lvgLSD QBjQ1Tt/2j3QlMZb935npdNdFSwJnY+Y7inldb/V9dFzHkK548T8riXU9eOkhVUq UeZuw6sQNlWwHd7Z6odX3cs5Avz8rbYqaT+dLZZHVCPzAx1O8po= -----END CERTIFICATE-----Generated at Thu Jun 5 18:18:26 2025 by rpki-client