$ rpki-client -vvf repo-rpki.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/EED8A9475E4020DA0F2BEF589D15102EB06B658F.mft File: EED8A9475E4020DA0F2BEF589D15102EB06B658F.mft (raw, json) Hash identifier: X9Sch1EoaZfO+pO9FjIdKRSNW4EEQDzErumwImHYf+g= Subject key identifier: 0F:D2:67:5E:BD:9B:1F:71:02:BF:FD:0C:EE:5E:56:81:59:B3:DA:AF Authority key identifier: EE:D8:A9:47:5E:40:20:DA:0F:2B:EF:58:9D:15:10:2E:B0:6B:65:8F Certificate issuer: /CN=EED8A9475E4020DA0F2BEF589D15102EB06B658F Certificate serial: 6B4D45F890644F73761F586C48FD465B985C6FBC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EED8A9475E4020DA0F2BEF589D15102EB06B658F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/EED8A9475E4020DA0F2BEF589D15102EB06B658F.mft Manifest number: 04F8 Signing time: Sat 09 Aug 2025 04:50:44 +0000 Manifest this update: Sat 09 Aug 2025 04:45:44 +0000 Manifest next update: Tue 12 Aug 2025 06:52:44 +0000 Files and hashes: 1: 3130332e37392e39312e302f32342d3234203d3e203634333035.roa (hash: mguZPFd0yEF7BbBBd2+SDugjtQLZV2wjK9kQOQsORjM=) 2: EED8A9475E4020DA0F2BEF589D15102EB06B658F.crl (hash: oTWazdKIQ2vDwa6GiKSFbffq/RLMokzNT17ubKtW4Jk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/EED8A9475E4020DA0F2BEF589D15102EB06B658F.crl rsync://repo-rpki.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/EED8A9475E4020DA0F2BEF589D15102EB06B658F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EED8A9475E4020DA0F2BEF589D15102EB06B658F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 06:52:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:4d:45:f8:90:64:4f:73:76:1f:58:6c:48:fd:46:5b:98:5c:6f:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EED8A9475E4020DA0F2BEF589D15102EB06B658F Validity Not Before: Aug 9 04:45:44 2025 GMT Not After : Aug 12 06:52:44 2025 GMT Subject: CN=0FD2675EBD9B1F7102BFFD0CEE5E568159B3DAAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:e5:aa:65:56:30:4f:74:5e:03:61:23:86:25: e4:b0:b8:58:04:11:e1:1d:d1:b9:24:fe:05:7a:80: 15:4e:f4:d9:a2:de:eb:08:7d:c0:cd:b4:8d:a6:a4: 9f:fc:37:f1:92:a2:09:8c:3b:20:f3:da:52:cf:34: 86:52:69:d1:37:5c:1c:a0:91:0c:e7:91:88:a8:99: 04:6e:ea:d4:cb:09:f4:c8:a0:44:9b:41:50:15:bd: cd:19:f1:60:e8:f1:b4:4e:63:23:b5:42:16:fa:97: 2f:3e:1e:18:6f:7f:09:a7:42:7c:a6:83:23:f4:0c: 2f:3e:49:c2:20:62:4d:2d:2d:23:41:95:a2:c5:6b: 37:fb:da:2b:53:43:1b:70:ea:14:05:17:f0:db:9f: 52:a3:81:5d:60:7f:4e:c5:45:56:58:8d:fd:c3:e5: 67:72:cb:1f:da:9e:62:31:9d:1e:d3:93:11:1f:b0: e1:4a:4c:1d:1f:5f:6e:53:65:fc:c3:66:c7:8a:48: dc:f4:53:ab:51:13:22:6e:19:d9:d6:cb:83:e0:e9: 41:7a:bb:d4:49:fc:7a:2e:d7:30:5d:46:d4:2f:85: ae:5f:2b:d8:9a:38:9e:cd:99:dd:bb:26:b2:20:75: f7:c4:af:e9:0a:8c:a5:90:df:e2:ac:e8:04:44:15: ea:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D2:67:5E:BD:9B:1F:71:02:BF:FD:0C:EE:5E:56:81:59:B3:DA:AF X509v3 Authority Key Identifier: keyid:EE:D8:A9:47:5E:40:20:DA:0F:2B:EF:58:9D:15:10:2E:B0:6B:65:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/EED8A9475E4020DA0F2BEF589D15102EB06B658F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EED8A9475E4020DA0F2BEF589D15102EB06B658F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/EED8A9475E4020DA0F2BEF589D15102EB06B658F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:77:75:3a:db:0e:10:5b:19:64:f1:c6:d8:ab:d3:8d:24:40: 12:43:d4:54:c9:5e:5c:ca:42:52:33:71:4b:a7:59:1d:15:70: 10:d1:98:2c:8b:b6:86:1f:57:9b:75:ba:97:bc:68:69:b8:17: 91:a5:19:bf:57:c3:16:ad:53:09:fb:05:0b:be:7e:37:45:61: 57:f6:e7:00:87:89:d0:25:e4:5f:ec:dc:d9:03:7c:75:57:63: 28:17:a9:31:45:05:db:b8:77:35:f3:3e:e8:6f:6e:28:09:b5: 2c:b9:20:0b:62:82:b5:d2:0f:50:b2:1e:c1:9a:80:12:e2:24: d4:57:0e:ff:74:29:8d:13:72:51:50:d2:75:18:f6:e7:db:68: e4:8a:4c:7f:4c:02:c3:74:11:1b:5f:78:98:5f:a8:4a:aa:57: 8a:d4:64:98:80:5f:cf:fa:c6:b9:c9:91:1c:4e:96:4d:3e:09: 99:9e:2f:60:96:a9:69:e8:da:49:89:2a:68:b6:bf:64:e9:69: 98:ef:1d:e4:20:c2:19:16:4a:c0:92:49:60:84:ef:7c:cc:dd: 79:68:f9:00:a7:40:d4:6d:0f:8a:30:12:06:bf:d4:af:e9:df: 7a:71:4f:03:72:59:ce:3a:92:67:20:7f:67:18:dd:4b:60:9a: f1:e9:b8:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa01F+JBkT3N2H1hsSP1GW5hcb7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVEOEE5NDc1RTQwMjBEQTBGMkJFRjU4OUQxNTEwMkVC MDZCNjU4RjAeFw0yNTA4MDkwNDQ1NDRaFw0yNTA4MTIwNjUyNDRaMDMxMTAvBgNV BAMTKDBGRDI2NzVFQkQ5QjFGNzEwMkJGRkQwQ0VFNUU1NjgxNTlCM0RBQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD85aplVjBPdF4DYSOGJeSwuFgE EeEd0bkk/gV6gBVO9Nmi3usIfcDNtI2mpJ/8N/GSogmMOyDz2lLPNIZSadE3XByg kQznkYiomQRu6tTLCfTIoESbQVAVvc0Z8WDo8bROYyO1Qhb6ly8+HhhvfwmnQnym gyP0DC8+ScIgYk0tLSNBlaLFazf72itTQxtw6hQFF/Dbn1KjgV1gf07FRVZYjf3D 5Wdyyx/anmIxnR7TkxEfsOFKTB0fX25TZfzDZseKSNz0U6tREyJuGdnWy4Pg6UF6 u9RJ/Hou1zBdRtQvha5fK9iaOJ7Nmd27JrIgdffEr+kKjKWQ3+Ks6AREFeq5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD9JnXr2bH3ECv/0M7l5WgVmz2q8wHwYDVR0j BBgwFoAU7tipR15AINoPK+9YnRUQLrBrZY8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NjAzMWZkMC01ODQwLTRhYzEtYmZiMS0zNWY3MWZkMjQwNGMvMC9FRUQ4QTk0NzVF NDAyMERBMEYyQkVGNTg5RDE1MTAyRUIwNkI2NThGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUVEOEE5NDc1RTQwMjBEQTBGMkJFRjU4OUQxNTEwMkVCMDZC NjU4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTYwMzFmZDAtNTg0MC00YWMxLWJm YjEtMzVmNzFmZDI0MDRjLzAvRUVEOEE5NDc1RTQwMjBEQTBGMkJFRjU4OUQxNTEw MkVCMDZCNjU4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG13dTrbDhBbGWTxxtir040kQBJD1FTJXlzK QlIzcUunWR0VcBDRmCyLtoYfV5t1upe8aGm4F5GlGb9XwxatUwn7BQu+fjdFYVf2 5wCHidAl5F/s3NkDfHVXYygXqTFFBdu4dzXzPuhvbigJtSy5IAtigrXSD1CyHsGa gBLiJNRXDv90KY0TclFQ0nUY9ufbaOSKTH9MAsN0ERtfeJhfqEqqV4rUZJiAX8/6 xrnJkRxOlk0+CZmeL2CWqWno2kmJKmi2v2TpaZjvHeQgwhkWSsCSSWCE73zM3Xlo +QCnQNRtD4owEga/1K/p33pxTwNyWc46kmcgf2cY3UtgmvHpuEs= -----END CERTIFICATE-----Generated at Mon Aug 11 04:10:32 2025 by rpki-client