$ rpki-client -vvf repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft File: EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft (raw, json) Hash identifier: 6g5k1H/dcyrqAmmAXsBx+PnNT9xf0ytBonJJoG/RWfU= Subject key identifier: BD:0C:1E:3C:44:E1:EC:01:67:F7:B1:28:1E:A6:1C:BD:A6:B9:16:28 Authority key identifier: EA:5E:33:0B:F8:DC:FF:6D:09:DF:49:07:4B:46:B2:2E:BD:FB:D4:54 Certificate issuer: /CN=EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454 Certificate serial: 69564DD2F1ED2B8F408B2ACDC60F4764043A224D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft Manifest number: 01D3 Signing time: Sun 02 Nov 2025 19:11:26 +0000 Manifest this update: Sun 02 Nov 2025 19:06:26 +0000 Manifest next update: Wed 05 Nov 2025 22:30:26 +0000 Files and hashes: 1: EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl (hash: N3hmwMOoM9YhhNaYkIElqPZt46G3Hi1/gruJMaYWZVA=) 2: 3230322e34372e39322e302f32332d3234203d3e203137393935.roa (hash: 80MS0ZuTW+5iQNzQYBDQPZfjWsQsANAR7yyCgQ7zGBU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 22:30:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:56:4d:d2:f1:ed:2b:8f:40:8b:2a:cd:c6:0f:47:64:04:3a:22:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454 Validity Not Before: Nov 2 19:06:26 2025 GMT Not After : Nov 5 22:30:26 2025 GMT Subject: CN=BD0C1E3C44E1EC0167F7B1281EA61CBDA6B91628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c7:4b:55:c0:73:aa:2b:27:a7:e7:e6:17:17: 20:ce:bc:95:fb:9c:81:8f:5d:2b:21:88:73:b4:70: fb:f4:1b:6e:d0:2e:32:c8:51:4f:42:7e:86:50:52: 96:00:0b:ca:ff:ba:85:1e:43:2a:9f:42:35:57:ce: fc:03:e5:7c:bd:99:cd:6d:07:8b:5a:2f:c6:e5:cc: 58:4a:f8:7c:00:71:21:d0:1e:1b:c9:6e:ed:0c:e5: 09:91:1a:d0:94:9a:55:87:6a:fe:5c:e0:e9:bb:36: e2:72:49:0c:2f:67:11:cf:e3:fd:0e:5c:10:00:f3: 2a:37:f4:bc:ea:59:42:2f:ea:0b:e9:39:a9:97:72: 28:7c:ad:79:e7:55:3c:cd:4f:07:a5:e7:76:ee:bc: 92:d1:1e:29:c1:ea:b3:cf:62:ae:4e:24:97:c6:98: 80:04:4f:93:8b:32:b5:22:21:57:28:ef:7c:e7:c7: 24:63:6d:34:81:c9:cb:5d:88:fb:4d:cc:9d:00:46: 10:c7:8b:e7:30:42:37:8a:fe:7b:e6:e6:d6:5a:83: 81:32:36:3c:ef:40:e6:a1:26:5c:78:e8:10:5d:e4: 06:44:72:5e:1b:cc:06:a6:c2:9c:8f:19:01:2e:b8: ff:b1:cb:36:25:9b:19:79:31:be:e6:8c:76:61:cb: 41:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:0C:1E:3C:44:E1:EC:01:67:F7:B1:28:1E:A6:1C:BD:A6:B9:16:28 X509v3 Authority Key Identifier: keyid:EA:5E:33:0B:F8:DC:FF:6D:09:DF:49:07:4B:46:B2:2E:BD:FB:D4:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:ed:37:d4:7e:51:9e:db:6d:aa:20:43:04:a2:e1:f4:af:a5: 34:18:4f:9d:88:bc:72:0a:05:44:1a:37:ed:b7:df:b9:e4:98: fa:c6:d0:d1:d6:23:d8:53:47:08:11:bb:66:64:f8:62:4f:d0: cd:66:67:96:ec:a3:4c:06:49:f7:0c:00:82:43:a1:52:5d:08: 0b:6a:d8:ca:51:d4:e5:87:5f:dd:d7:17:69:ec:28:7f:29:49: 94:cd:df:3d:a0:f8:8d:56:00:66:4b:f4:a1:2e:bf:3c:6c:2e: f4:8c:14:75:c1:6c:e2:b7:7d:36:0d:4f:a6:28:6b:51:6a:29: d9:fc:a6:c7:16:0f:60:85:b6:b3:d1:ab:50:7f:23:28:09:0c: d8:20:e5:e7:de:28:18:80:a2:89:70:c0:4e:4d:df:0a:98:e4: fa:bd:1a:f6:19:35:66:9b:0d:a1:c0:cb:f7:6d:52:54:70:04: 09:af:59:c0:73:12:3e:26:f2:35:d5:5a:b0:09:fb:58:80:1b: 5e:8b:8a:ac:07:40:c2:59:b5:08:3d:96:4c:3b:d2:5d:90:18: 18:d7:08:c8:06:22:d7:98:51:61:5f:7a:6e:c1:b4:43:ad:c2: 4d:71:a2:b2:9c:18:2d:9f:2f:48:a1:fa:62:0e:20:23:3a:ea: 81:46:95:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaVZN0vHtK49AiyrNxg9HZAQ6Ik0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUE1RTMzMEJGOERDRkY2RDA5REY0OTA3NEI0NkIyMkVC REZCRDQ1NDAeFw0yNTExMDIxOTA2MjZaFw0yNTExMDUyMjMwMjZaMDMxMTAvBgNV BAMTKEJEMEMxRTNDNDRFMUVDMDE2N0Y3QjEyODFFQTYxQ0JEQTZCOTE2MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkx0tVwHOqKyen5+YXFyDOvJX7 nIGPXSshiHO0cPv0G27QLjLIUU9CfoZQUpYAC8r/uoUeQyqfQjVXzvwD5Xy9mc1t B4taL8blzFhK+HwAcSHQHhvJbu0M5QmRGtCUmlWHav5c4Om7NuJySQwvZxHP4/0O XBAA8yo39LzqWUIv6gvpOamXcih8rXnnVTzNTwel53buvJLRHinB6rPPYq5OJJfG mIAET5OLMrUiIVco73znxyRjbTSByctdiPtNzJ0ARhDHi+cwQjeK/nvm5tZag4Ey NjzvQOahJlx46BBd5AZEcl4bzAamwpyPGQEuuP+xyzYlmxl5Mb7mjHZhy0HNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvQwePETh7AFn97EoHqYcvaa5FigwHwYDVR0j BBgwFoAU6l4zC/jc/20J30kHS0ayLr371FQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzcxZGI5Yi03YzQwLTQ5NjYtOTkxYi01MTM4YjM2OTMyNDYvMC9FQTVFMzMwQkY4 RENGRjZEMDlERjQ5MDc0QjQ2QjIyRUJERkJENDU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUE1RTMzMEJGOERDRkY2RDA5REY0OTA3NEI0NkIyMkVCREZC RDQ1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM3MWRiOWItN2M0MC00OTY2LTk5 MWItNTEzOGIzNjkzMjQ2LzAvRUE1RTMzMEJGOERDRkY2RDA5REY0OTA3NEI0NkIy MkVCREZCRDQ1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABntN9R+UZ7bbaogQwSi4fSvpTQYT52IvHIK BUQaN+2337nkmPrG0NHWI9hTRwgRu2Zk+GJP0M1mZ5bso0wGSfcMAIJDoVJdCAtq 2MpR1OWHX93XF2nsKH8pSZTN3z2g+I1WAGZL9KEuvzxsLvSMFHXBbOK3fTYNT6Yo a1FqKdn8pscWD2CFtrPRq1B/IygJDNgg5efeKBiAoolwwE5N3wqY5Pq9GvYZNWab DaHAy/dtUlRwBAmvWcBzEj4m8jXVWrAJ+1iAG16LiqwHQMJZtQg9lkw70l2QGBjX CMgGIteYUWFfem7BtEOtwk1xorKcGC2fL0ih+mIOICM66oFGlVc= -----END CERTIFICATE-----Generated at Tue Nov 4 01:58:34 2025 by rpki-client