$ rpki-client -vvf repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft File: EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft (raw, json) Hash identifier: xALcEAFPE1OcQq/uQOJJ0loaHhwu2fbrYWmAVSeeBBU= Subject key identifier: 12:AB:7C:59:2B:40:12:C4:13:E2:77:F4:F0:0A:07:7B:B4:44:D3:1D Authority key identifier: EA:DA:0A:EE:51:F3:91:0B:50:A0:65:D5:7D:94:6E:3E:AF:A8:BD:11 Certificate issuer: /CN=EADA0AEE51F3910B50A065D57D946E3EAFA8BD11 Certificate serial: 65B50281C705EC2F044906D1C44DB6246A44D29A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft Manifest number: 04D6 Signing time: Wed 30 Apr 2025 19:01:37 +0000 Manifest this update: Wed 30 Apr 2025 18:56:37 +0000 Manifest next update: Sat 03 May 2025 20:35:37 +0000 Files and hashes: 1: 3130332e3131342e35322e302f32332d3234203d3e20313337333439.roa (hash: IHRMKls6bDo6efJZc4SPr2h5Nej24aqy+WpwVULn5ZQ=) 2: 3130332e3131342e35332e302f32342d3234203d3e20313337333439.roa (hash: L0aGyUwEYHJDyRetS6plSaGHfNVoM/NqZGtNJzzztcc=) 3: 3130332e3131342e35322e302f32342d3234203d3e20313337333439.roa (hash: PbzUEe0UQr8XKfElcqOIqamd3OJjVX7VfL4ViGWOAc4=) 4: 323030313a6466343a663330303a3a2f34382d3438203d3e20313337333439.roa (hash: 8FPgLGtfyDAEpIxK5OqOfu3zjvn4uiTV9+bBUUTfjTg=) 5: EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.crl (hash: OAHZirKcPCDbadA2MDCHVK6UyEmF7k3yZvNFSSNDo5E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.crl rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 16:59:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:b5:02:81:c7:05:ec:2f:04:49:06:d1:c4:4d:b6:24:6a:44:d2:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EADA0AEE51F3910B50A065D57D946E3EAFA8BD11 Validity Not Before: Apr 30 18:56:37 2025 GMT Not After : May 3 20:35:37 2025 GMT Subject: CN=12AB7C592B4012C413E277F4F00A077BB444D31D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:07:33:47:f1:bb:c6:81:a8:ca:9a:4a:e4:bf: 07:f0:d5:90:b1:b5:9c:e9:c1:a2:52:92:ec:91:05: 7e:ec:1a:ee:f7:3b:49:46:a6:fe:1b:13:d8:d2:32: 69:de:58:61:8f:78:5f:68:75:55:fb:02:ba:75:b3: 3d:95:8f:0a:f3:77:63:3d:56:1e:fd:b3:7f:f3:fa: 30:e4:23:a8:ee:e5:fc:1f:b5:ff:ef:37:88:de:91: bb:8d:10:c5:24:3b:b7:c2:35:db:3b:07:f7:69:26: 0b:46:8b:f9:f3:18:43:5a:2a:dd:6a:a7:8d:c3:52: fe:f8:d8:18:bd:f9:f8:3f:b6:41:21:d4:5e:97:51: 0e:c7:13:a6:5e:81:3f:1e:6e:f0:8d:19:c5:f0:e5: 30:1d:ba:2d:a9:a7:ea:3b:be:29:84:b5:ac:ae:d1: 36:2c:9f:61:33:cf:a2:bd:62:4e:a2:df:b3:7d:a1: 9e:4b:ae:6a:36:63:db:2e:5b:6d:49:3b:46:6c:3c: 6f:a6:6e:f3:96:0f:86:31:b9:7b:dc:f2:d4:20:68: 77:70:a9:8c:e8:66:8a:34:10:c0:bb:08:c2:a1:71: c6:0d:64:8c:c7:1f:57:5a:60:9e:43:78:34:8f:9b: db:95:6f:0e:9f:1f:bb:25:a1:62:20:41:9e:eb:0f: 74:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:AB:7C:59:2B:40:12:C4:13:E2:77:F4:F0:0A:07:7B:B4:44:D3:1D X509v3 Authority Key Identifier: keyid:EA:DA:0A:EE:51:F3:91:0B:50:A0:65:D5:7D:94:6E:3E:AF:A8:BD:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:dd:f7:0d:e8:0c:6b:ed:fe:63:23:f3:59:5b:84:05:fa:01: d5:e7:e2:bd:19:fa:a8:2b:c6:b8:4f:ec:4d:7c:3e:a7:14:28: 55:4e:9e:5a:e5:e3:9e:8a:d7:ee:db:d1:e5:ab:34:31:a2:e9: c4:a4:d3:0c:aa:d1:7f:f5:c8:d7:9e:00:ff:02:61:94:22:dc: db:85:7c:c8:fc:af:41:20:a5:b9:e2:6e:39:a2:d1:46:04:8f: 16:20:20:20:19:7e:05:b4:0b:fd:6f:04:6f:fa:6f:1e:ea:aa: b4:d7:80:33:e4:eb:c9:b4:f1:f6:cb:c1:fd:bb:bb:35:97:08: f8:ea:b5:79:36:74:73:57:23:4f:17:36:14:a5:7a:dd:e4:52: 38:cd:63:fe:b1:9f:cb:6a:ac:01:d9:6a:96:01:38:bc:12:f1: 9e:e4:cd:ae:65:96:e5:5a:34:2e:38:70:1a:eb:75:29:61:5d: 92:a1:92:58:a0:83:17:74:2c:67:47:8b:f1:ed:c3:77:b7:41: ff:c2:a3:52:a1:98:f2:8f:85:f1:7c:32:5b:67:99:91:1c:25: 1d:ca:f1:fe:f3:5a:b4:42:ef:88:6d:62:33:38:51:30:3c:fb: a6:95:f2:9b:f1:a2:5b:73:85:9a:52:21:92:61:cb:ae:87:31: 55:bb:4b:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZbUCgccF7C8ESQbRxE22JGpE0powDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFEQTBBRUU1MUYzOTEwQjUwQTA2NUQ1N0Q5NDZFM0VB RkE4QkQxMTAeFw0yNTA0MzAxODU2MzdaFw0yNTA1MDMyMDM1MzdaMDMxMTAvBgNV BAMTKDEyQUI3QzU5MkI0MDEyQzQxM0UyNzdGNEYwMEEwNzdCQjQ0NEQzMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0BzNH8bvGgajKmkrkvwfw1ZCx tZzpwaJSkuyRBX7sGu73O0lGpv4bE9jSMmneWGGPeF9odVX7Arp1sz2Vjwrzd2M9 Vh79s3/z+jDkI6ju5fwftf/vN4jekbuNEMUkO7fCNds7B/dpJgtGi/nzGENaKt1q p43DUv742Bi9+fg/tkEh1F6XUQ7HE6ZegT8ebvCNGcXw5TAdui2pp+o7vimEtayu 0TYsn2Ezz6K9Yk6i37N9oZ5Lrmo2Y9suW21JO0ZsPG+mbvOWD4YxuXvc8tQgaHdw qYzoZoo0EMC7CMKhccYNZIzHH1daYJ5DeDSPm9uVbw6fH7sloWIgQZ7rD3SjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEqt8WStAEsQT4nf08AoHe7RE0x0wHwYDVR0j BBgwFoAU6toK7lHzkQtQoGXVfZRuPq+ovREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDk2MmM2ZS01OTVhLTQ3YzQtYWE3Yy1lZjhlNzdjYWU2NDIvMC9FQURBMEFFRTUx RjM5MTBCNTBBMDY1RDU3RDk0NkUzRUFGQThCRDExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUFEQTBBRUU1MUYzOTEwQjUwQTA2NUQ1N0Q5NDZFM0VBRkE4 QkQxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA5NjJjNmUtNTk1YS00N2M0LWFh N2MtZWY4ZTc3Y2FlNjQyLzAvRUFEQTBBRUU1MUYzOTEwQjUwQTA2NUQ1N0Q5NDZF M0VBRkE4QkQxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFDd9w3oDGvt/mMj81lbhAX6AdXn4r0Z+qgr xrhP7E18PqcUKFVOnlrl456K1+7b0eWrNDGi6cSk0wyq0X/1yNeeAP8CYZQi3NuF fMj8r0Egpbnibjmi0UYEjxYgICAZfgW0C/1vBG/6bx7qqrTXgDPk68m08fbLwf27 uzWXCPjqtXk2dHNXI08XNhSlet3kUjjNY/6xn8tqrAHZapYBOLwS8Z7kza5lluVa NC44cBrrdSlhXZKhkliggxd0LGdHi/Htw3e3Qf/Co1KhmPKPhfF8MltnmZEcJR3K 8f7zWrRC74htYjM4UTA8+6aV8pvxoltzhZpSIZJhy66HMVW7SwA= -----END CERTIFICATE-----Generated at Wed Apr 30 21:26:48 2025 by rpki-client