$ rpki-client -vvf repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.mft File: EA1FF21834CE2546B93FF7ABD7A24231492E6157.mft (raw, json) Hash identifier: memn5xQxSnyaSaVFDeqTrtqrBeLCc4wE6EyT7k3oVkM= Subject key identifier: 4B:E8:BF:DF:B0:42:2A:C4:C5:28:4A:AA:61:0C:3E:61:F7:96:41:25 Authority key identifier: EA:1F:F2:18:34:CE:25:46:B9:3F:F7:AB:D7:A2:42:31:49:2E:61:57 Certificate issuer: /CN=EA1FF21834CE2546B93FF7ABD7A24231492E6157 Certificate serial: 56DB9F906E26F9EA461465925CB64999BAA2F07F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA1FF21834CE2546B93FF7ABD7A24231492E6157.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.mft Manifest number: 046D Signing time: Tue 17 Jun 2025 03:11:57 +0000 Manifest this update: Tue 17 Jun 2025 03:06:57 +0000 Manifest next update: Fri 20 Jun 2025 10:07:57 +0000 Files and hashes: 1: 3130332e3136312e3134392e302f32342d3234203d3e20313431363137.roa (hash: cPKbD0ckaDFSEpc9RQvjdQXKBtAJPiLm9+lhR0E/cUk=) 2: EA1FF21834CE2546B93FF7ABD7A24231492E6157.crl (hash: YP0D5uMVvWYvGy2lVtnXz3vlCyBZv8uj7pxsmcYtBs0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.crl rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA1FF21834CE2546B93FF7ABD7A24231492E6157.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 10:07:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:db:9f:90:6e:26:f9:ea:46:14:65:92:5c:b6:49:99:ba:a2:f0:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA1FF21834CE2546B93FF7ABD7A24231492E6157 Validity Not Before: Jun 17 03:06:57 2025 GMT Not After : Jun 20 10:07:57 2025 GMT Subject: CN=4BE8BFDFB0422AC4C5284AAA610C3E61F7964125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a1:17:70:6a:6a:44:8e:6a:3b:5e:62:61:ed: db:52:23:cc:a4:de:fe:fa:51:97:73:ed:3f:37:e3: 38:41:46:e4:53:46:7f:ee:51:a4:c3:bb:1e:67:dd: 1d:6b:cc:1d:28:9c:a3:21:91:c3:c8:e7:ec:f4:06: 1c:4d:bd:e1:67:89:80:33:69:2e:c5:8a:6a:53:8a: 83:52:b3:79:15:3f:d9:d7:69:03:f0:d1:88:98:79: 59:53:2d:1a:04:44:f3:50:76:5c:74:5e:69:cc:19: ba:4f:ce:3b:ef:3f:25:13:a5:98:c4:0a:3f:16:8d: 69:cc:c0:af:ba:ac:43:aa:43:7a:98:9c:bc:7c:48: a3:fc:36:a0:3b:02:cb:6a:94:86:35:65:f6:94:8e: cc:2d:03:94:b9:72:67:30:0f:90:b8:a1:79:2c:eb: 4a:80:ac:a4:53:82:c3:cd:57:bf:97:5a:c9:1e:b8: ee:63:c2:62:56:cf:a0:a0:00:1b:33:94:42:b3:8e: 9b:e8:be:54:21:3f:13:77:15:22:b3:29:70:5a:d2: 9b:17:42:d5:ef:68:e9:f4:ad:ec:e4:27:f2:37:6d: eb:24:25:37:25:95:da:0b:1b:b7:31:a3:ed:cb:45: ce:4e:da:3b:e8:f7:6f:e1:a7:db:85:d8:81:33:fa: 2f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:E8:BF:DF:B0:42:2A:C4:C5:28:4A:AA:61:0C:3E:61:F7:96:41:25 X509v3 Authority Key Identifier: keyid:EA:1F:F2:18:34:CE:25:46:B9:3F:F7:AB:D7:A2:42:31:49:2E:61:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA1FF21834CE2546B93FF7ABD7A24231492E6157.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:20:74:b4:63:a7:00:11:ee:27:ac:87:5e:0b:07:6c:f6:dc: e4:59:1b:1e:9d:c3:52:c0:75:76:0e:ae:57:36:2c:11:85:c1: 03:f8:3f:7c:ed:11:3c:da:7f:59:7a:a9:8c:35:db:f3:17:6c: 4c:d1:44:63:ed:53:12:12:04:98:23:50:0b:3d:79:28:02:71: de:5a:99:33:6e:d5:18:18:08:4d:a3:6a:79:bc:69:e1:ee:c5: d9:06:2d:ff:10:3f:38:50:d0:71:eb:59:c3:04:e5:4a:a3:43: 5f:2e:c3:56:62:45:0f:32:42:95:bb:6f:20:a4:91:d3:ef:b1: 20:dd:02:9c:3d:29:00:e0:57:12:7a:aa:ae:fd:ab:fc:a6:f7: ad:b5:1b:fa:63:e6:3b:73:00:44:1b:59:a0:87:c3:07:ec:9c: 34:a6:c1:63:c9:b5:84:5d:72:41:bd:39:a7:a6:7b:94:86:f1: ee:79:6e:99:fd:db:77:02:e1:fd:1b:1e:74:1d:63:05:95:37: eb:b8:19:20:cc:20:c3:98:45:f1:49:f3:ec:3c:33:fd:16:80: ea:ce:f0:61:4e:84:92:c9:6f:2e:ee:7c:21:5c:91:fa:88:b5: d5:e8:a7:b3:80:ee:93:45:8b:e7:85:92:b7:b7:a2:21:37:29: d7:58:c9:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVtufkG4m+epGFGWSXLZJmbqi8H8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUExRkYyMTgzNENFMjU0NkI5M0ZGN0FCRDdBMjQyMzE0 OTJFNjE1NzAeFw0yNTA2MTcwMzA2NTdaFw0yNTA2MjAxMDA3NTdaMDMxMTAvBgNV BAMTKDRCRThCRkRGQjA0MjJBQzRDNTI4NEFBQTYxMEMzRTYxRjc5NjQxMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMoRdwampEjmo7XmJh7dtSI8yk 3v76UZdz7T834zhBRuRTRn/uUaTDux5n3R1rzB0onKMhkcPI5+z0BhxNveFniYAz aS7FimpTioNSs3kVP9nXaQPw0YiYeVlTLRoERPNQdlx0XmnMGbpPzjvvPyUTpZjE Cj8WjWnMwK+6rEOqQ3qYnLx8SKP8NqA7AstqlIY1ZfaUjswtA5S5cmcwD5C4oXks 60qArKRTgsPNV7+XWskeuO5jwmJWz6CgABszlEKzjpvovlQhPxN3FSKzKXBa0psX QtXvaOn0rezkJ/I3beskJTclldoLG7cxo+3LRc5O2jvo92/hp9uF2IEz+i9BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS+i/37BCKsTFKEqqYQw+YfeWQSUwHwYDVR0j BBgwFoAU6h/yGDTOJUa5P/er16JCMUkuYVcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjExOGYyYi05Zjk0LTQxOTktYTI0MS04ZmM1MWQxN2UwYzUvMC9FQTFGRjIxODM0 Q0UyNTQ2QjkzRkY3QUJEN0EyNDIzMTQ5MkU2MTU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUExRkYyMTgzNENFMjU0NkI5M0ZGN0FCRDdBMjQyMzE0OTJF NjE1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDYxMThmMmItOWY5NC00MTk5LWEy NDEtOGZjNTFkMTdlMGM1LzAvRUExRkYyMTgzNENFMjU0NkI5M0ZGN0FCRDdBMjQy MzE0OTJFNjE1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHMgdLRjpwAR7iesh14LB2z23ORZGx6dw1LA dXYOrlc2LBGFwQP4P3ztETzaf1l6qYw12/MXbEzRRGPtUxISBJgjUAs9eSgCcd5a mTNu1RgYCE2janm8aeHuxdkGLf8QPzhQ0HHrWcME5UqjQ18uw1ZiRQ8yQpW7byCk kdPvsSDdApw9KQDgVxJ6qq79q/ym9621G/pj5jtzAEQbWaCHwwfsnDSmwWPJtYRd ckG9Oaeme5SG8e55bpn923cC4f0bHnQdYwWVN+u4GSDMIMOYRfFJ8+w8M/0WgOrO 8GFOhJLJby7ufCFckfqItdXop7OA7pNFi+eFkre3oiE3KddYybY= -----END CERTIFICATE-----Generated at Tue Jun 17 19:35:50 2025 by rpki-client