$ rpki-client -vvf repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft File: EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft (raw, json) Hash identifier: 1eiznD5wkF3eHpgDBSeF5tee/hG8eqcGd6fpfbBy59U= Subject key identifier: C0:4F:34:01:8C:16:4C:67:76:7B:21:6A:E0:C6:E4:93:45:03:C6:BD Authority key identifier: EA:5E:33:0B:F8:DC:FF:6D:09:DF:49:07:4B:46:B2:2E:BD:FB:D4:54 Certificate issuer: /CN=EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454 Certificate serial: 6C954047E86F2735A1ACAD83F3821F6508D7FFB1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft Manifest number: 01AB Signing time: Mon 04 Aug 2025 15:21:28 +0000 Manifest this update: Mon 04 Aug 2025 15:16:28 +0000 Manifest next update: Thu 07 Aug 2025 22:32:28 +0000 Files and hashes: 1: EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl (hash: 5TsgnLWhRw7EVOkvljcsQigVa3Dm2r9LU9E7sHdXcDw=) 2: 3230322e34372e39322e302f32332d3234203d3e203137393935.roa (hash: BiJ73L794WTIFVs+3dlt1Nu1TwuPunFJpDTHrxt8w6o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 22:32:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:95:40:47:e8:6f:27:35:a1:ac:ad:83:f3:82:1f:65:08:d7:ff:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454 Validity Not Before: Aug 4 15:16:28 2025 GMT Not After : Aug 7 22:32:28 2025 GMT Subject: CN=C04F34018C164C67767B216AE0C6E4934503C6BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d1:20:8e:84:40:f3:27:24:04:fd:63:ed:b2: e6:92:27:2e:f7:ea:4c:7b:e8:21:2a:5e:d4:71:1d: ab:25:80:e5:4e:ba:ff:3c:68:73:9b:dc:fa:20:05: 8d:8e:b7:3b:10:2e:63:4c:23:3a:79:45:5a:cf:94: 83:94:cb:41:83:32:78:d7:3b:a7:76:d4:3d:0f:eb: 6b:6b:3f:f9:9e:a8:b8:ad:60:be:bd:d3:fc:e1:af: 08:2d:8f:a2:8b:de:31:2e:c5:44:43:32:53:be:e1: c4:7c:cf:6c:c8:1c:55:8a:49:21:77:ca:71:cf:2a: 9c:55:a3:4a:df:ee:48:95:33:02:43:04:26:75:eb: e3:c9:03:e7:7c:25:49:46:a7:74:af:d7:29:56:37: 62:80:a4:a5:69:43:22:11:47:8b:8c:e1:22:a0:02: ab:6f:d9:85:a1:5a:f8:35:53:c1:d7:e1:ee:97:2a: 21:71:44:cd:18:29:b7:fb:f8:24:96:0d:7e:d6:43: 09:b1:1e:59:af:e9:21:84:61:98:13:e5:11:22:17: fe:79:d0:4e:34:85:9e:ea:1e:ac:fd:34:ed:fa:64: 15:7d:eb:42:cd:9e:83:93:ec:91:77:07:bf:81:f0: 90:a1:fa:36:94:b2:80:02:3b:58:2f:46:b3:bd:8c: 07:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:4F:34:01:8C:16:4C:67:76:7B:21:6A:E0:C6:E4:93:45:03:C6:BD X509v3 Authority Key Identifier: keyid:EA:5E:33:0B:F8:DC:FF:6D:09:DF:49:07:4B:46:B2:2E:BD:FB:D4:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:10:bf:42:15:58:b4:12:9f:6d:ea:6a:d9:91:21:23:e6:50: ce:f9:3c:82:ab:99:54:eb:70:b8:49:fd:2d:d8:bd:c5:d2:e9: 0f:99:c6:69:d9:7e:51:82:22:6e:47:12:80:ab:d1:18:af:32: 4d:24:ec:b4:d6:61:58:01:c7:d6:5e:4a:3f:81:42:7a:9d:8e: 64:69:96:ea:c5:0d:58:85:cc:c6:18:ee:c5:82:12:a4:4b:af: 93:bb:14:f3:0e:91:f1:6c:13:59:b6:58:03:08:ea:fe:34:a4: 40:ae:7d:29:49:34:7d:42:ed:b8:85:04:36:14:b6:53:92:78: 0f:13:51:ba:0c:7c:46:01:01:ed:30:ff:55:51:2c:a8:1d:9b: 99:ea:30:0f:0a:49:18:2e:cd:06:3b:ed:78:cf:e7:d3:ca:14: ed:d8:9a:88:35:58:bd:b7:7e:6a:22:86:0b:ba:26:9b:81:81: 0f:f4:66:f7:b3:64:2f:5b:51:1f:0f:f8:20:95:5f:d0:89:c5: 88:ba:5c:85:11:8e:5c:0f:36:87:53:55:3c:89:3b:1e:f5:bf: 0c:4d:75:55:26:07:ca:e6:c5:d9:93:ef:46:7f:84:ba:87:2d: 08:b5:46:55:52:e0:90:0f:c9:79:33:3b:c8:e9:57:27:c0:13: 77:7b:15:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbJVAR+hvJzWhrK2D84IfZQjX/7EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUE1RTMzMEJGOERDRkY2RDA5REY0OTA3NEI0NkIyMkVC REZCRDQ1NDAeFw0yNTA4MDQxNTE2MjhaFw0yNTA4MDcyMjMyMjhaMDMxMTAvBgNV BAMTKEMwNEYzNDAxOEMxNjRDNjc3NjdCMjE2QUUwQzZFNDkzNDUwM0M2QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF0SCOhEDzJyQE/WPtsuaSJy73 6kx76CEqXtRxHaslgOVOuv88aHOb3PogBY2OtzsQLmNMIzp5RVrPlIOUy0GDMnjX O6d21D0P62trP/meqLitYL690/zhrwgtj6KL3jEuxURDMlO+4cR8z2zIHFWKSSF3 ynHPKpxVo0rf7kiVMwJDBCZ16+PJA+d8JUlGp3Sv1ylWN2KApKVpQyIRR4uM4SKg Aqtv2YWhWvg1U8HX4e6XKiFxRM0YKbf7+CSWDX7WQwmxHlmv6SGEYZgT5REiF/55 0E40hZ7qHqz9NO36ZBV960LNnoOT7JF3B7+B8JCh+jaUsoACO1gvRrO9jAdTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwE80AYwWTGd2eyFq4Mbkk0UDxr0wHwYDVR0j BBgwFoAU6l4zC/jc/20J30kHS0ayLr371FQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzcxZGI5Yi03YzQwLTQ5NjYtOTkxYi01MTM4YjM2OTMyNDYvMC9FQTVFMzMwQkY4 RENGRjZEMDlERjQ5MDc0QjQ2QjIyRUJERkJENDU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUE1RTMzMEJGOERDRkY2RDA5REY0OTA3NEI0NkIyMkVCREZC RDQ1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM3MWRiOWItN2M0MC00OTY2LTk5 MWItNTEzOGIzNjkzMjQ2LzAvRUE1RTMzMEJGOERDRkY2RDA5REY0OTA3NEI0NkIy MkVCREZCRDQ1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABYQv0IVWLQSn23qatmRISPmUM75PIKrmVTr cLhJ/S3YvcXS6Q+ZxmnZflGCIm5HEoCr0RivMk0k7LTWYVgBx9ZeSj+BQnqdjmRp lurFDViFzMYY7sWCEqRLr5O7FPMOkfFsE1m2WAMI6v40pECufSlJNH1C7biFBDYU tlOSeA8TUboMfEYBAe0w/1VRLKgdm5nqMA8KSRguzQY77XjP59PKFO3Ymog1WL23 fmoihgu6JpuBgQ/0ZvezZC9bUR8P+CCVX9CJxYi6XIURjlwPNodTVTyJOx71vwxN dVUmB8rmxdmT70Z/hLqHLQi1RlVS4JAPyXkzO8jpVyfAE3d7FUQ= -----END CERTIFICATE-----Generated at Wed Aug 6 12:29:41 2025 by rpki-client