$ rpki-client -vvf repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft File: EAAF14D74C27E1502835CCF1541D5D92498C8427.mft (raw, json) Hash identifier: 1UnbDefRfC5rhqkOtYG6/iogaIURcQsoqfQxnOs1mYk= Subject key identifier: 26:C4:4F:B3:6D:94:8A:BC:49:F9:C5:83:DB:40:E4:79:BA:F2:15:46 Authority key identifier: EA:AF:14:D7:4C:27:E1:50:28:35:CC:F1:54:1D:5D:92:49:8C:84:27 Certificate issuer: /CN=EAAF14D74C27E1502835CCF1541D5D92498C8427 Certificate serial: 6F159CE26F15BBEFA92E77339AA06D4EF32D5D23 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft Manifest number: EC Signing time: Fri 05 Sep 2025 03:21:54 +0000 Manifest this update: Fri 05 Sep 2025 03:16:54 +0000 Manifest next update: Mon 08 Sep 2025 10:56:54 +0000 Files and hashes: 1: 323030313a6466333a393263303a3a2f34382d3438203d3e20313532343231.roa (hash: sF0+Hzy6oJxlj5HSJzIfCoHVtQeeL/eSjk9uB3se86E=) 2: EAAF14D74C27E1502835CCF1541D5D92498C8427.crl (hash: V5n/qWy4ToYiidpbkKGd30zB2I8d1t9lOJsyHHg1SB8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.crl rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 10:56:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:15:9c:e2:6f:15:bb:ef:a9:2e:77:33:9a:a0:6d:4e:f3:2d:5d:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAAF14D74C27E1502835CCF1541D5D92498C8427 Validity Not Before: Sep 5 03:16:54 2025 GMT Not After : Sep 8 10:56:54 2025 GMT Subject: CN=26C44FB36D948ABC49F9C583DB40E479BAF21546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6e:4d:d8:6d:3f:1d:fd:b8:ca:b6:a6:25:58: d7:c2:e7:ac:da:54:31:6b:bc:ba:6c:5c:d1:c7:d2: 9c:f3:25:9e:13:dc:d4:b9:3a:23:1e:82:7f:24:09: 38:f7:24:d1:06:1a:8d:3c:24:a3:aa:f5:bc:ca:05: d9:71:ea:56:6b:72:83:88:36:5f:f1:a6:7a:83:d3: 06:c1:13:6c:08:25:04:0b:c6:67:71:1c:8c:8d:99: 3e:d6:8e:92:66:e0:64:32:f8:d7:72:40:48:60:28: 76:15:8e:69:b7:87:a5:4b:a8:3e:3c:3e:e1:a4:a9: b3:3c:42:ad:c4:87:be:e8:de:5c:41:15:bb:fc:12: 09:cb:9a:4b:5b:eb:e6:5a:8b:13:92:9a:82:7a:fa: 6e:f6:b1:37:40:51:dd:c9:b6:96:37:04:45:72:6d: dd:6a:89:1a:ed:be:af:7c:20:a0:5a:80:86:d3:9f: 34:71:12:04:0b:09:ca:9a:7f:3e:36:71:ce:67:4b: fe:7f:b6:4d:9d:ad:ed:1b:d5:92:17:af:27:a6:de: 18:78:24:32:22:91:d3:e5:88:c8:78:76:aa:fb:66: 19:41:94:ce:85:07:17:62:fa:41:0d:17:b7:a4:28: 33:dd:df:27:a7:6d:db:87:6a:6e:32:67:17:be:1d: 63:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:C4:4F:B3:6D:94:8A:BC:49:F9:C5:83:DB:40:E4:79:BA:F2:15:46 X509v3 Authority Key Identifier: keyid:EA:AF:14:D7:4C:27:E1:50:28:35:CC:F1:54:1D:5D:92:49:8C:84:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:8e:df:46:1a:44:53:33:e2:3f:28:9a:57:df:3d:a8:40:a9: d3:c6:79:1f:43:35:d7:1d:bf:e1:fd:0d:8f:e7:d6:fb:52:59: 0f:c7:cd:02:a8:a5:2b:01:a8:70:10:97:6a:03:81:09:49:94: aa:3a:0c:f5:56:cd:d0:59:aa:b4:05:fa:c8:ea:eb:52:92:3a: 9f:92:0e:ce:51:76:24:2c:3b:55:1a:90:5a:19:c9:2b:d9:4f: 5c:83:22:7a:a8:6d:1e:ae:29:1a:5b:fe:15:74:fc:00:cd:c5: 7d:57:80:12:bf:ab:1d:39:81:1b:0a:cd:6d:35:36:c2:98:19: fa:0e:38:93:51:76:37:79:46:b1:be:ce:54:83:ac:53:9f:39: fa:ee:d7:c6:a5:46:33:7e:ef:4a:f0:ef:c0:c9:78:d8:2f:d0: 55:cf:64:e5:4f:ca:10:c1:e3:9c:f0:86:b6:40:99:f5:41:61: 3e:16:73:f7:72:59:e3:28:93:95:db:de:44:06:b5:8a:61:18: da:a3:ed:07:c4:e7:2a:03:c9:29:5a:03:23:d0:a7:14:4b:8b: 31:65:03:2c:79:a3:a0:d1:b6:61:44:fa:42:37:ee:ac:d3:33: 45:b1:de:38:fa:50:82:4e:e1:5b:44:13:96:af:3d:e7:7a:98: 52:eb:9f:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbxWc4m8Vu++pLnczmqBtTvMtXSMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVEOTI0 OThDODQyNzAeFw0yNTA5MDUwMzE2NTRaFw0yNTA5MDgxMDU2NTRaMDMxMTAvBgNV BAMTKDI2QzQ0RkIzNkQ5NDhBQkM0OUY5QzU4M0RCNDBFNDc5QkFGMjE1NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGbk3YbT8d/bjKtqYlWNfC56za VDFrvLpsXNHH0pzzJZ4T3NS5OiMegn8kCTj3JNEGGo08JKOq9bzKBdlx6lZrcoOI Nl/xpnqD0wbBE2wIJQQLxmdxHIyNmT7WjpJm4GQy+NdyQEhgKHYVjmm3h6VLqD48 PuGkqbM8Qq3Eh77o3lxBFbv8EgnLmktb6+ZaixOSmoJ6+m72sTdAUd3JtpY3BEVy bd1qiRrtvq98IKBagIbTnzRxEgQLCcqafz42cc5nS/5/tk2dre0b1ZIXryem3hh4 JDIikdPliMh4dqr7ZhlBlM6FBxdi+kENF7ekKDPd3yenbduHam4yZxe+HWPFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJsRPs22UirxJ+cWD20DkebryFUYwHwYDVR0j BBgwFoAU6q8U10wn4VAoNczxVB1dkkmMhCcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTRmNzkzNC1jZGM3LTQwODItODNmYi1kZjdkNGY4MjE5YWYvMS9FQUFGMTRENzRD MjdFMTUwMjgzNUNDRjE1NDFENUQ5MjQ5OEM4NDI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVEOTI0OThD ODQyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE0Zjc5MzQtY2RjNy00MDgyLTgz ZmItZGY3ZDRmODIxOWFmLzEvRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVE OTI0OThDODQyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2O30YaRFMz4j8omlffPahAqdPGeR9DNdcd v+H9DY/n1vtSWQ/HzQKopSsBqHAQl2oDgQlJlKo6DPVWzdBZqrQF+sjq61KSOp+S Ds5RdiQsO1UakFoZySvZT1yDInqobR6uKRpb/hV0/ADNxX1XgBK/qx05gRsKzW01 NsKYGfoOOJNRdjd5RrG+zlSDrFOfOfru18alRjN+70rw78DJeNgv0FXPZOVPyhDB 45zwhrZAmfVBYT4Wc/dyWeMok5Xb3kQGtYphGNqj7QfE5yoDySlaAyPQpxRLizFl Ayx5o6DRtmFE+kI37qzTM0Wx3jj6UIJO4VtEE5avPed6mFLrn+Q= -----END CERTIFICATE-----Generated at Fri Sep 5 16:37:46 2025 by rpki-client