$ rpki-client -vvf repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft File: EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft (raw, json) Hash identifier: 8bwhdjopSGbOoiZP+xWqgGvoMcB3qRDTuFReD/eET7w= Subject key identifier: 3A:96:5F:46:F1:3E:6D:15:35:79:41:54:46:8A:58:72:06:7F:32:FB Authority key identifier: EA:DA:0A:EE:51:F3:91:0B:50:A0:65:D5:7D:94:6E:3E:AF:A8:BD:11 Certificate issuer: /CN=EADA0AEE51F3910B50A065D57D946E3EAFA8BD11 Certificate serial: 1A1DC12D597B1565B936D7FAD17CCB801DEBB7E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft Manifest number: 050F Signing time: Wed 03 Sep 2025 23:41:32 +0000 Manifest this update: Wed 03 Sep 2025 23:36:32 +0000 Manifest next update: Sun 07 Sep 2025 08:12:32 +0000 Files and hashes: 1: EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.crl (hash: k3CPsfNDKt82ZS8ZY950BNZ32jKXhZiul2tui4SfpeU=) 2: 3130332e3131342e35322e302f32342d3234203d3e20313337333439.roa (hash: PbzUEe0UQr8XKfElcqOIqamd3OJjVX7VfL4ViGWOAc4=) 3: 3130332e3131342e35322e302f32332d3234203d3e20313337333439.roa (hash: IHRMKls6bDo6efJZc4SPr2h5Nej24aqy+WpwVULn5ZQ=) 4: 323030313a6466343a663330303a3a2f34382d3438203d3e20313337333439.roa (hash: bM2bCiWvvR67fLAxEBLdbaa9UVbcM3IM7NopO4JRa9U=) 5: 3130332e3131342e35332e302f32342d3234203d3e20313337333439.roa (hash: L0aGyUwEYHJDyRetS6plSaGHfNVoM/NqZGtNJzzztcc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.crl rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 08:12:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:1d:c1:2d:59:7b:15:65:b9:36:d7:fa:d1:7c:cb:80:1d:eb:b7:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EADA0AEE51F3910B50A065D57D946E3EAFA8BD11 Validity Not Before: Sep 3 23:36:32 2025 GMT Not After : Sep 7 08:12:32 2025 GMT Subject: CN=3A965F46F13E6D1535794154468A5872067F32FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9a:b6:01:67:40:56:c0:1c:60:7a:e8:de:08: 8a:bd:d2:30:e6:0a:0c:a0:97:fc:45:c1:0a:b2:97: 45:a8:3b:2e:eb:49:9b:c0:b5:d3:87:f4:53:e4:7b: a2:c5:c4:c5:29:76:f6:71:b6:fc:fd:91:26:a6:2f: c6:86:89:a1:ad:e6:02:cb:a1:27:27:d8:11:6b:b5: 3c:8a:b8:d7:44:f8:47:20:56:4d:9b:ae:8c:e5:59: 1a:e9:ec:80:96:9a:11:4e:30:e4:70:64:01:c3:c1: 12:fc:a5:cb:51:e2:3d:47:61:17:8b:d1:03:7f:c3: f8:b8:64:0b:3c:31:26:64:e2:f0:65:31:87:34:33: a3:97:fa:50:c1:f7:70:ab:b6:d1:e7:98:19:64:bb: c3:60:5b:69:5d:63:af:c6:2c:3e:ad:cf:2c:7f:cf: d6:53:a8:a1:9b:3c:a5:6a:2b:d6:af:f2:cc:b4:91: e9:d2:05:99:6f:ce:50:78:9e:ad:98:46:f6:58:60: 6f:8f:a9:d3:cd:cf:13:17:33:5b:42:34:cd:b7:0b: e4:8d:2a:a9:d8:a9:d8:68:4f:bf:94:a2:ad:ca:86: c7:71:f9:89:63:87:d5:8d:aa:32:a6:1c:88:6c:56: 2f:d0:1d:d3:43:f1:64:db:78:2c:53:08:94:9b:5d: 83:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:96:5F:46:F1:3E:6D:15:35:79:41:54:46:8A:58:72:06:7F:32:FB X509v3 Authority Key Identifier: keyid:EA:DA:0A:EE:51:F3:91:0B:50:A0:65:D5:7D:94:6E:3E:AF:A8:BD:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:8f:e9:71:7b:9c:e3:98:45:bd:1b:a6:84:b9:91:6e:4c:7e: b5:25:07:cd:80:a6:dc:df:ce:78:a5:3d:e2:26:ae:e7:32:91: 2f:d7:8e:2e:78:33:fd:bf:ac:df:da:5e:da:e0:03:d3:cd:22: a7:47:b2:69:c7:f4:07:ef:06:c9:3d:77:ea:56:22:be:1e:fb: 07:11:8c:97:c4:ad:26:03:eb:82:f3:d9:79:0a:e6:bf:25:9b: 05:91:1f:41:46:3b:e1:0e:99:2e:fb:1e:aa:44:6a:f8:78:4f: 65:56:92:d3:59:f1:cc:f2:ff:09:dc:40:4c:83:16:72:95:85: 11:40:fb:e0:12:95:af:b2:57:b1:53:91:6a:93:9e:db:45:59: e6:0a:92:50:b0:b2:bf:14:80:36:ec:95:99:08:b4:9f:3e:b5: 4f:b3:37:04:f7:cb:25:80:0e:dd:c9:0e:d5:49:4f:2e:9d:a2: e5:6c:e6:8e:cf:5b:00:8e:56:7d:fe:50:45:92:34:43:67:b5: b5:01:4c:c4:bd:6f:94:ce:5b:25:d4:90:da:f3:25:c6:e0:7a: 9a:a3:4d:c0:74:19:32:da:12:a7:de:8c:e8:78:13:24:31:c0: 4f:37:6d:8d:30:72:1c:fd:df:0c:b7:6f:c3:13:80:75:9f:82: fc:83:a1:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGh3BLVl7FWW5Ntf60XzLgB3rt+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFEQTBBRUU1MUYzOTEwQjUwQTA2NUQ1N0Q5NDZFM0VB RkE4QkQxMTAeFw0yNTA5MDMyMzM2MzJaFw0yNTA5MDcwODEyMzJaMDMxMTAvBgNV BAMTKDNBOTY1RjQ2RjEzRTZEMTUzNTc5NDE1NDQ2OEE1ODcyMDY3RjMyRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFmrYBZ0BWwBxgeujeCIq90jDm Cgygl/xFwQqyl0WoOy7rSZvAtdOH9FPke6LFxMUpdvZxtvz9kSamL8aGiaGt5gLL oScn2BFrtTyKuNdE+EcgVk2brozlWRrp7ICWmhFOMORwZAHDwRL8pctR4j1HYReL 0QN/w/i4ZAs8MSZk4vBlMYc0M6OX+lDB93CrttHnmBlku8NgW2ldY6/GLD6tzyx/ z9ZTqKGbPKVqK9av8sy0kenSBZlvzlB4nq2YRvZYYG+PqdPNzxMXM1tCNM23C+SN KqnYqdhoT7+Uoq3Khsdx+Yljh9WNqjKmHIhsVi/QHdND8WTbeCxTCJSbXYOzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOpZfRvE+bRU1eUFURopYcgZ/MvswHwYDVR0j BBgwFoAU6toK7lHzkQtQoGXVfZRuPq+ovREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDk2MmM2ZS01OTVhLTQ3YzQtYWE3Yy1lZjhlNzdjYWU2NDIvMC9FQURBMEFFRTUx RjM5MTBCNTBBMDY1RDU3RDk0NkUzRUFGQThCRDExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUFEQTBBRUU1MUYzOTEwQjUwQTA2NUQ1N0Q5NDZFM0VBRkE4 QkQxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA5NjJjNmUtNTk1YS00N2M0LWFh N2MtZWY4ZTc3Y2FlNjQyLzAvRUFEQTBBRUU1MUYzOTEwQjUwQTA2NUQ1N0Q5NDZF M0VBRkE4QkQxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHyP6XF7nOOYRb0bpoS5kW5MfrUlB82Aptzf znilPeImrucykS/Xji54M/2/rN/aXtrgA9PNIqdHsmnH9AfvBsk9d+pWIr4e+wcR jJfErSYD64Lz2XkK5r8lmwWRH0FGO+EOmS77HqpEavh4T2VWktNZ8czy/wncQEyD FnKVhRFA++ASla+yV7FTkWqTnttFWeYKklCwsr8UgDbslZkItJ8+tU+zNwT3yyWA Dt3JDtVJTy6douVs5o7PWwCOVn3+UEWSNENntbUBTMS9b5TOWyXUkNrzJcbgepqj TcB0GTLaEqfejOh4EyQxwE83bY0wchz93wy3b8MTgHWfgvyDoX4= -----END CERTIFICATE-----Generated at Fri Sep 5 12:47:02 2025 by rpki-client