$ rpki-client -vvf repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft File: EAAF14D74C27E1502835CCF1541D5D92498C8427.mft (raw, json) Hash identifier: GQ/LOXghgYboPszFfGjECpLsqmu4F9x+mo9faSItGjk= Subject key identifier: 4F:DC:ED:A4:28:B7:D2:1D:09:04:A0:3B:D0:16:0A:55:63:07:98:D4 Authority key identifier: EA:AF:14:D7:4C:27:E1:50:28:35:CC:F1:54:1D:5D:92:49:8C:84:27 Certificate issuer: /CN=EAAF14D74C27E1502835CCF1541D5D92498C8427 Certificate serial: 4B1B902E2E8E670E1813672B523FD4ADA6D23081 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft Manifest number: C3 Signing time: Wed 04 Jun 2025 10:01:51 +0000 Manifest this update: Wed 04 Jun 2025 09:56:51 +0000 Manifest next update: Sat 07 Jun 2025 17:03:51 +0000 Files and hashes: 1: EAAF14D74C27E1502835CCF1541D5D92498C8427.crl (hash: 3VTw4CImXYVNSF7jS1CMVLlGGcksStCsURNGManBdyQ=) 2: 323030313a6466333a393263303a3a2f34382d3438203d3e20313532343231.roa (hash: sF0+Hzy6oJxlj5HSJzIfCoHVtQeeL/eSjk9uB3se86E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.crl rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 17:03:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:1b:90:2e:2e:8e:67:0e:18:13:67:2b:52:3f:d4:ad:a6:d2:30:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAAF14D74C27E1502835CCF1541D5D92498C8427 Validity Not Before: Jun 4 09:56:51 2025 GMT Not After : Jun 7 17:03:51 2025 GMT Subject: CN=4FDCEDA428B7D21D0904A03BD0160A55630798D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f8:54:e6:de:99:ff:3f:f6:87:21:18:f3:52: bb:e9:96:e1:fe:f4:19:9c:76:b8:e3:b0:cf:a5:91: e5:74:c5:9b:63:f2:54:ea:52:ab:4f:13:c0:19:37: 99:d5:de:0d:dd:2d:b6:39:18:56:90:65:51:8e:46: c6:54:71:23:63:8d:23:86:29:f0:37:e3:67:49:c6: 52:4d:b9:3e:33:b6:86:d9:c2:11:10:f5:38:1a:db: fb:12:a3:37:0e:df:61:2c:4b:d7:06:df:0d:9c:e6: d4:ae:73:b5:71:43:42:37:a8:78:9e:a9:62:20:50: 05:c4:8e:f2:90:52:c9:a0:09:24:48:30:98:1b:65: 98:02:cf:bd:ad:c8:ea:c4:ed:54:07:7e:59:a4:34: 82:ba:e9:c1:27:ad:8a:88:54:23:fe:e3:62:9a:d3: 81:3e:0c:fa:85:32:0a:c9:9e:48:f8:77:e6:3b:7e: 0a:32:a1:fe:76:5d:4c:e9:f6:88:58:18:96:69:4c: 33:4a:da:79:a9:bf:7a:21:a5:3f:5f:69:33:f2:79: fc:9f:5d:cb:1b:6a:8c:c6:2d:da:48:6c:26:34:85: 9e:47:b4:7c:9c:ea:fa:df:2f:57:6a:eb:87:fb:47: d0:ef:a2:e4:26:e1:7d:b9:1f:a7:11:e0:f1:75:eb: 00:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:DC:ED:A4:28:B7:D2:1D:09:04:A0:3B:D0:16:0A:55:63:07:98:D4 X509v3 Authority Key Identifier: keyid:EA:AF:14:D7:4C:27:E1:50:28:35:CC:F1:54:1D:5D:92:49:8C:84:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:73:1e:aa:1c:1d:b3:57:82:41:8c:11:32:b9:66:b4:79:de: b0:4a:ea:18:53:92:1d:2c:fc:67:55:d8:8e:c3:ec:c1:e1:1b: 8d:f9:48:08:00:49:c8:b4:b2:13:2d:4b:59:59:a8:91:99:bb: 4a:b7:83:60:5f:fa:c8:63:c4:7c:bc:bd:7b:92:f0:0c:7d:a5: b7:5b:91:03:ba:db:12:1a:6a:94:ec:fc:bb:7b:1f:94:87:be: a5:1a:92:dd:72:db:6f:44:c0:a7:a5:37:88:74:f8:26:66:b5: 91:03:39:09:0b:27:ac:e8:36:5b:47:8e:9a:c1:2b:97:fb:0b: 23:e8:a3:5e:2a:54:bd:63:a0:00:e1:b9:fc:dc:bd:d3:b1:5c: 49:d7:96:af:94:b9:f7:e9:9c:a2:b5:5c:43:ab:18:dc:d9:2d: 78:6f:1e:c5:89:09:e7:2f:33:cb:01:9e:0f:86:0d:40:85:0a: b8:3f:1d:27:a1:56:2b:72:28:22:b6:7d:68:2e:a8:a5:ba:22: cd:05:18:31:4b:5c:2c:2b:4e:16:f8:d2:e7:9c:0c:90:95:f6: 5a:47:d0:de:f8:c7:a5:9e:da:5e:a6:73:9c:70:45:62:9f:ba: d5:e4:88:38:5a:86:02:65:c5:59:f8:e5:7c:34:95:62:fc:29: 80:3a:13:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSxuQLi6OZw4YE2crUj/UrabSMIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVEOTI0 OThDODQyNzAeFw0yNTA2MDQwOTU2NTFaFw0yNTA2MDcxNzAzNTFaMDMxMTAvBgNV BAMTKDRGRENFREE0MjhCN0QyMUQwOTA0QTAzQkQwMTYwQTU1NjMwNzk4RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz+FTm3pn/P/aHIRjzUrvpluH+ 9BmcdrjjsM+lkeV0xZtj8lTqUqtPE8AZN5nV3g3dLbY5GFaQZVGORsZUcSNjjSOG KfA342dJxlJNuT4ztobZwhEQ9Tga2/sSozcO32EsS9cG3w2c5tSuc7VxQ0I3qHie qWIgUAXEjvKQUsmgCSRIMJgbZZgCz72tyOrE7VQHflmkNIK66cEnrYqIVCP+42Ka 04E+DPqFMgrJnkj4d+Y7fgoyof52XUzp9ohYGJZpTDNK2nmpv3ohpT9faTPyefyf XcsbaozGLdpIbCY0hZ5HtHyc6vrfL1dq64f7R9DvouQm4X25H6cR4PF16wCnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT9ztpCi30h0JBKA70BYKVWMHmNQwHwYDVR0j BBgwFoAU6q8U10wn4VAoNczxVB1dkkmMhCcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTRmNzkzNC1jZGM3LTQwODItODNmYi1kZjdkNGY4MjE5YWYvMS9FQUFGMTRENzRD MjdFMTUwMjgzNUNDRjE1NDFENUQ5MjQ5OEM4NDI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVEOTI0OThD ODQyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE0Zjc5MzQtY2RjNy00MDgyLTgz ZmItZGY3ZDRmODIxOWFmLzEvRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVE OTI0OThDODQyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAENzHqocHbNXgkGMETK5ZrR53rBK6hhTkh0s /GdV2I7D7MHhG435SAgASci0shMtS1lZqJGZu0q3g2Bf+shjxHy8vXuS8Ax9pbdb kQO62xIaapTs/Lt7H5SHvqUakt1y229EwKelN4h0+CZmtZEDOQkLJ6zoNltHjprB K5f7CyPoo14qVL1joADhufzcvdOxXEnXlq+UuffpnKK1XEOrGNzZLXhvHsWJCecv M8sBng+GDUCFCrg/HSehVityKCK2fWguqKW6Is0FGDFLXCwrThb40uecDJCV9lpH 0N74x6We2l6mc5xwRWKfutXkiDhahgJlxVn45Xw0lWL8KYA6E1I= -----END CERTIFICATE-----Generated at Thu Jun 5 18:12:00 2025 by rpki-client