$ rpki-client -vvf repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft File: EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft (raw, json) Hash identifier: sKSK3Ux2wMVcHgq4S1Y0OwFAdsbOd+9BFhcfkMCtjwU= Subject key identifier: 06:46:16:46:1F:E0:A4:4A:57:67:BD:13:55:02:92:C5:30:CD:B1:8D Authority key identifier: EA:01:C9:15:11:C5:E3:47:C7:C1:1E:A4:64:9B:0F:04:1A:5D:05:20 Certificate issuer: /CN=EA01C91511C5E347C7C11EA4649B0F041A5D0520 Certificate serial: 20B3C85E70271D1C15EB056375F129F7F932FEDE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft Manifest number: 01A1 Signing time: Thu 07 Aug 2025 11:00:02 +0000 Manifest this update: Thu 07 Aug 2025 10:55:02 +0000 Manifest next update: Sun 10 Aug 2025 21:31:02 +0000 Files and hashes: 1: 3130332e3132302e3231382e302f32342d3234203d3e20313338303832.roa (hash: A8O4HhKJBUpQAVtG9F/HuVJZcjl2PJnz2blEINGnJlw=) 2: 3130332e3137392e38322e302f32342d3234203d3e20313338303832.roa (hash: /cdl8KopWWEAVSKHGwwN7jQvT8+haRS7g+4C1ytM8Dg=) 3: EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl (hash: ix9z0W9rfnlTfyPzlLYlTb+IFX2Qcw3rk85xJAOQHXQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 21:31:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:b3:c8:5e:70:27:1d:1c:15:eb:05:63:75:f1:29:f7:f9:32:fe:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA01C91511C5E347C7C11EA4649B0F041A5D0520 Validity Not Before: Aug 7 10:55:02 2025 GMT Not After : Aug 10 21:31:02 2025 GMT Subject: CN=064616461FE0A44A5767BD13550292C530CDB18D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:37:92:5a:6a:a7:5c:b8:c3:d3:33:f7:fa:20: 02:d0:f8:cc:04:91:4e:2d:c1:c6:2d:d9:5f:ca:ba: 93:af:0b:33:3d:aa:d3:98:db:84:b2:58:29:0f:57: 92:43:4c:62:3c:4b:3e:43:87:a6:5c:bb:7a:6d:0e: c4:7f:b9:a3:16:55:c5:e8:c0:d1:db:a9:e4:c3:a3: e7:13:6b:cb:4e:1d:a9:e8:77:3b:29:8e:43:ee:c2: e1:be:15:2c:45:ff:fc:a0:7b:33:05:2b:ff:8b:ce: b2:08:dc:d7:9a:78:f7:e6:cf:26:b0:63:b3:e8:ae: ac:fa:f0:e2:74:e0:db:83:55:f4:7c:1e:50:63:7c: 3d:17:97:f1:91:fc:dc:90:85:6f:3f:97:e2:85:a3: cd:b8:c8:85:de:96:f9:a2:d5:29:d4:8f:18:8d:7b: 37:7e:f2:3c:75:f0:10:8f:4a:bb:2f:34:c8:a7:cf: 24:bf:c2:a7:6a:82:3a:49:c8:2b:34:fb:d0:33:13: f6:da:23:ef:76:a6:54:13:66:a1:b1:f6:a3:17:56: 4c:71:66:af:25:22:e1:12:42:32:fd:cd:77:20:4f: e8:29:4d:c5:2f:29:7a:67:89:df:2d:fb:64:43:5d: a7:44:a6:87:1a:8e:55:fa:01:7c:4a:c2:89:f4:51: 93:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:46:16:46:1F:E0:A4:4A:57:67:BD:13:55:02:92:C5:30:CD:B1:8D X509v3 Authority Key Identifier: keyid:EA:01:C9:15:11:C5:E3:47:C7:C1:1E:A4:64:9B:0F:04:1A:5D:05:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:10:32:ee:9f:7d:1d:e4:0a:01:d8:5a:4a:89:56:c0:55:9c: 21:d2:7e:1c:e8:78:34:f2:e4:f9:38:19:b7:fa:35:cc:7b:c2: a5:b0:32:ff:8d:4a:4b:74:29:bd:bb:ab:62:52:51:8c:19:7f: 58:d7:7a:04:d7:1e:30:07:1b:15:df:e6:2f:cc:c1:05:e0:43: 47:ea:e2:1f:61:14:91:a2:a6:c0:9d:8c:09:68:79:58:66:d1: 67:c0:db:e5:e9:e9:9a:69:69:d4:aa:94:e3:e3:ef:61:e1:10: eb:34:6e:3f:e5:ba:a4:81:ae:ac:06:f4:89:94:a3:4b:e0:3a: 2a:05:cd:84:d5:75:48:94:23:fd:31:78:5d:43:9c:fc:d5:4f: 20:e4:7e:ae:00:78:43:f0:a5:24:25:a4:89:f6:74:c0:27:c1: d9:ec:a7:10:f9:f2:ed:83:cc:be:a6:0c:31:df:e1:4b:70:0f: 0f:ed:20:a0:21:a5:e8:d7:2b:bd:14:1a:8f:66:67:51:e5:51: 25:a9:85:e2:74:aa:70:f5:02:73:5d:d9:a0:c8:5d:4f:1b:63: 41:57:7d:61:1f:c8:c9:1c:92:71:ca:27:c6:6e:06:81:67:59: c8:9f:69:66:52:cf:09:78:24:58:d9:70:a7:03:fa:47:e4:59: 38:08:93:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUILPIXnAnHRwV6wVjdfEp9/ky/t4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBGMDQx QTVEMDUyMDAeFw0yNTA4MDcxMDU1MDJaFw0yNTA4MTAyMTMxMDJaMDMxMTAvBgNV BAMTKDA2NDYxNjQ2MUZFMEE0NEE1NzY3QkQxMzU1MDI5MkM1MzBDREIxOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdN5JaaqdcuMPTM/f6IALQ+MwE kU4twcYt2V/KupOvCzM9qtOY24SyWCkPV5JDTGI8Sz5Dh6Zcu3ptDsR/uaMWVcXo wNHbqeTDo+cTa8tOHanodzspjkPuwuG+FSxF//ygezMFK/+LzrII3NeaePfmzyaw Y7Porqz68OJ04NuDVfR8HlBjfD0Xl/GR/NyQhW8/l+KFo824yIXelvmi1SnUjxiN ezd+8jx18BCPSrsvNMinzyS/wqdqgjpJyCs0+9AzE/baI+92plQTZqGx9qMXVkxx Zq8lIuESQjL9zXcgT+gpTcUvKXpnid8t+2RDXadEpocajlX6AXxKwon0UZNZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBkYWRh/gpEpXZ70TVQKSxTDNsY0wHwYDVR0j BBgwFoAU6gHJFRHF40fHwR6kZJsPBBpdBSAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Y2QyNGU4Mi1mMzA2LTQ0MDAtYjAwYS1kNTliNDFlMjg2YmIvMC9FQTAxQzkxNTEx QzVFMzQ3QzdDMTFFQTQ2NDlCMEYwNDFBNUQwNTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBGMDQxQTVE MDUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGNkMjRlODItZjMwNi00NDAwLWIw MGEtZDU5YjQxZTI4NmJiLzAvRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBG MDQxQTVEMDUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAsQMu6ffR3kCgHYWkqJVsBVnCHSfhzoeDTy 5Pk4Gbf6Ncx7wqWwMv+NSkt0Kb27q2JSUYwZf1jXegTXHjAHGxXf5i/MwQXgQ0fq 4h9hFJGipsCdjAloeVhm0WfA2+Xp6ZppadSqlOPj72HhEOs0bj/luqSBrqwG9ImU o0vgOioFzYTVdUiUI/0xeF1DnPzVTyDkfq4AeEPwpSQlpIn2dMAnwdnspxD58u2D zL6mDDHf4UtwDw/tIKAhpejXK70UGo9mZ1HlUSWpheJ0qnD1AnNd2aDIXU8bY0FX fWEfyMkcknHKJ8ZuBoFnWcifaWZSzwl4JFjZcKcD+kfkWTgIk08= -----END CERTIFICATE-----Generated at Sat Aug 9 20:34:51 2025 by rpki-client