$ rpki-client -vvf repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.mft File: EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.mft (raw, json) Hash identifier: zl9g510Pvg8KXiKb3BOZf29DcqCPfEZ/nAbVlCZ3uFA= Subject key identifier: C7:71:B9:1E:82:90:DF:75:60:E0:32:A4:7F:A1:5D:6B:8D:6D:0A:BB Authority key identifier: EA:EA:2F:2F:07:FF:F3:43:40:77:7B:3B:BD:7D:1D:18:6F:4E:C1:CB Certificate issuer: /CN=EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB Certificate serial: 585EB6FAFC0D5502A086A04178CE7ABA74F952C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.mft Manifest number: 0218 Signing time: Tue 04 Nov 2025 11:01:35 +0000 Manifest this update: Tue 04 Nov 2025 10:56:35 +0000 Manifest next update: Fri 07 Nov 2025 17:46:35 +0000 Files and hashes: 1: EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.crl (hash: 722u7A0ot4VMZam4V37GMxtfXeT8XtIBwe3LHfMeqv8=) 2: 3130332e3139312e3135302e302f32332d3234203d3e20313439393337.roa (hash: i80S93LcbuzfKOEUZo9C4vjXTfLHmrCj4n9ypSMTwBE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.crl rsync://repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:5e:b6:fa:fc:0d:55:02:a0:86:a0:41:78:ce:7a:ba:74:f9:52:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB Validity Not Before: Nov 4 10:56:35 2025 GMT Not After : Nov 7 17:46:35 2025 GMT Subject: CN=C771B91E8290DF7560E032A47FA15D6B8D6D0ABB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4d:d2:86:0b:67:69:df:57:77:3a:b1:dd:b0: 45:c1:f7:0c:9e:0f:85:d1:23:37:df:d8:36:be:9d: d0:f7:09:85:e7:b7:ce:29:b5:0b:53:79:f7:c7:5d: 5f:6c:08:b6:1d:dc:ff:6d:0c:68:8c:26:f1:e6:14: 4d:a1:35:7b:76:0f:02:ce:5f:8d:15:52:1d:55:70: 3a:19:30:95:5a:bf:82:13:ef:83:73:f0:04:2e:ca: 84:d8:58:93:c3:fc:ea:b4:b1:a8:97:e4:58:62:11: 0f:c9:85:63:57:af:67:bf:cc:c6:b2:de:21:d8:42: 1c:d6:f3:99:2d:de:7e:3f:2e:a8:38:a3:a1:23:ea: f8:64:82:93:61:31:f7:2d:a7:f5:48:18:f7:7d:9e: 1c:ed:1a:1d:1e:c0:88:51:3f:00:47:47:ca:9d:2f: bc:61:1a:c9:dc:df:e7:85:98:e1:d7:5e:f7:ed:9f: fb:9c:3e:b5:15:f9:94:f9:a4:d7:08:1b:78:7b:93: 6d:4c:51:06:6c:2b:36:06:af:38:bf:bc:2d:79:d0: 89:65:3b:82:92:a2:24:c5:60:8b:ab:d7:10:88:dd: b4:6a:e7:0c:70:ba:d6:15:3b:72:05:00:73:76:12: 66:82:99:67:b8:08:83:4d:3f:12:c4:a5:ca:ef:5c: ae:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:71:B9:1E:82:90:DF:75:60:E0:32:A4:7F:A1:5D:6B:8D:6D:0A:BB X509v3 Authority Key Identifier: keyid:EA:EA:2F:2F:07:FF:F3:43:40:77:7B:3B:BD:7D:1D:18:6F:4E:C1:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:43:1f:88:05:ee:a8:ef:31:7c:49:e4:3c:f0:f5:d0:a0:6b: 62:05:0c:a3:90:c9:a0:20:3d:3a:8c:e3:67:74:25:e4:a6:c5: 74:e9:46:53:33:d3:d4:60:c7:65:2b:6a:08:5e:ff:6e:9d:2d: 5f:82:96:d9:98:b3:8d:ec:99:58:19:0a:06:a9:f1:d2:38:c4: f2:0d:51:9f:41:e1:f9:49:bf:aa:00:a3:72:24:11:52:2a:17: 00:d8:95:cf:5c:ef:3c:a1:27:f1:be:04:82:cf:74:d2:e6:b5: 1e:a6:79:9c:d3:0e:8f:38:1a:9f:94:3d:82:e4:1f:48:bf:79: 23:af:f5:c2:1c:66:c7:27:e3:93:f1:cb:68:1c:5f:96:23:59: dc:7f:6d:96:1a:fa:dc:cc:5a:c3:1d:5c:a4:4f:a0:78:eb:b3: 83:1e:71:2d:7e:41:21:d4:d2:4d:41:d7:da:f3:9f:b7:95:f2: bd:f9:28:d0:28:e0:4a:cc:48:47:80:7b:8b:70:09:f5:6b:7a: b3:42:f0:b5:7b:7a:b2:41:4e:61:fb:68:00:8c:44:5a:0f:b8: d0:67:dc:5c:e5:68:ee:3d:04:a8:bf:cc:1d:32:1d:f9:93:3a: eb:cd:0e:4b:c0:fd:ff:ef:0d:da:b7:62:35:fc:42:d7:f0:2a: 93:e3:9a:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWF62+vwNVQKghqBBeM56unT5UsQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFFQTJGMkYwN0ZGRjM0MzQwNzc3QjNCQkQ3RDFEMTg2 RjRFQzFDQjAeFw0yNTExMDQxMDU2MzVaFw0yNTExMDcxNzQ2MzVaMDMxMTAvBgNV BAMTKEM3NzFCOTFFODI5MERGNzU2MEUwMzJBNDdGQTE1RDZCOEQ2RDBBQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTTdKGC2dp31d3OrHdsEXB9wye D4XRIzff2Da+ndD3CYXnt84ptQtTeffHXV9sCLYd3P9tDGiMJvHmFE2hNXt2DwLO X40VUh1VcDoZMJVav4IT74Nz8AQuyoTYWJPD/Oq0saiX5FhiEQ/JhWNXr2e/zMay 3iHYQhzW85kt3n4/Lqg4o6Ej6vhkgpNhMfctp/VIGPd9nhztGh0ewIhRPwBHR8qd L7xhGsnc3+eFmOHXXvftn/ucPrUV+ZT5pNcIG3h7k21MUQZsKzYGrzi/vC150Ill O4KSoiTFYIur1xCI3bRq5wxwutYVO3IFAHN2EmaCmWe4CINNPxLEpcrvXK5dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx3G5HoKQ33Vg4DKkf6Fda41tCrswHwYDVR0j BBgwFoAU6uovLwf/80NAd3s7vX0dGG9OwcswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OGI0MjQyMC01NmQwLTQ1MWEtYTI5ZC01ZjlkNjIzMGUyMjcvMC9FQUVBMkYyRjA3 RkZGMzQzNDA3NzdCM0JCRDdEMUQxODZGNEVDMUNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUFFQTJGMkYwN0ZGRjM0MzQwNzc3QjNCQkQ3RDFEMTg2RjRF QzFDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMThiNDI0MjAtNTZkMC00NTFhLWEy OWQtNWY5ZDYyMzBlMjI3LzAvRUFFQTJGMkYwN0ZGRjM0MzQwNzc3QjNCQkQ3RDFE MTg2RjRFQzFDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxDH4gF7qjvMXxJ5Dzw9dCga2IFDKOQyaAg PTqM42d0JeSmxXTpRlMz09Rgx2Uraghe/26dLV+CltmYs43smVgZCgap8dI4xPIN UZ9B4flJv6oAo3IkEVIqFwDYlc9c7zyhJ/G+BILPdNLmtR6meZzTDo84Gp+UPYLk H0i/eSOv9cIcZscn45Pxy2gcX5YjWdx/bZYa+tzMWsMdXKRPoHjrs4MecS1+QSHU 0k1B19rzn7eV8r35KNAo4ErMSEeAe4twCfVrerNC8LV7erJBTmH7aACMRFoPuNBn 3FzlaO49BKi/zB0yHfmTOuvNDkvA/f/vDdq3YjX8QtfwKpPjmhQ= -----END CERTIFICATE-----Generated at Tue Nov 4 16:31:50 2025 by rpki-client