$ rpki-client -vvf repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft File: EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft (raw, json) Hash identifier: XB1ScJLyBz0Uc1Izr/A2Z7lorNkKCbedLIkjn7Cynbc= Subject key identifier: FB:52:B4:12:BD:99:FA:12:BC:84:B7:D1:8A:6A:69:33:67:E7:E7:02 Authority key identifier: EA:DA:0A:EE:51:F3:91:0B:50:A0:65:D5:7D:94:6E:3E:AF:A8:BD:11 Certificate issuer: /CN=EADA0AEE51F3910B50A065D57D946E3EAFA8BD11 Certificate serial: 77D1170A88C11350185E3108C117FBEA344C47E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft Manifest number: 04EC Signing time: Tue 17 Jun 2025 13:11:32 +0000 Manifest this update: Tue 17 Jun 2025 13:06:32 +0000 Manifest next update: Fri 20 Jun 2025 14:45:32 +0000 Files and hashes: 1: 323030313a6466343a663330303a3a2f34382d3438203d3e20313337333439.roa (hash: bM2bCiWvvR67fLAxEBLdbaa9UVbcM3IM7NopO4JRa9U=) 2: 3130332e3131342e35322e302f32342d3234203d3e20313337333439.roa (hash: PbzUEe0UQr8XKfElcqOIqamd3OJjVX7VfL4ViGWOAc4=) 3: 3130332e3131342e35322e302f32332d3234203d3e20313337333439.roa (hash: IHRMKls6bDo6efJZc4SPr2h5Nej24aqy+WpwVULn5ZQ=) 4: 3130332e3131342e35332e302f32342d3234203d3e20313337333439.roa (hash: L0aGyUwEYHJDyRetS6plSaGHfNVoM/NqZGtNJzzztcc=) 5: EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.crl (hash: HYD5ONADdgJVt54GMr/LBlWqBVXwHUtm4gjF82X3sEU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.crl rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 14:45:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:d1:17:0a:88:c1:13:50:18:5e:31:08:c1:17:fb:ea:34:4c:47:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EADA0AEE51F3910B50A065D57D946E3EAFA8BD11 Validity Not Before: Jun 17 13:06:32 2025 GMT Not After : Jun 20 14:45:32 2025 GMT Subject: CN=FB52B412BD99FA12BC84B7D18A6A693367E7E702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:45:89:4d:8f:f8:74:31:e7:85:26:31:74:d7: 1d:10:91:df:37:74:e5:58:03:c1:3c:e9:02:fb:a1: a4:7d:20:58:2f:30:f1:b6:27:81:fa:93:cf:4a:3a: 50:16:a9:8a:f9:fa:0c:9c:25:a2:bf:94:8d:7c:8b: 43:32:d6:8e:e7:08:f8:c2:14:79:2c:0d:68:af:95: 25:47:cc:78:4f:6d:20:62:d0:53:14:38:fa:21:6b: b0:41:fd:28:b6:6c:b6:ad:a5:92:3e:ee:d5:60:10: 08:57:70:43:25:9f:b7:0e:9d:80:b7:eb:81:03:db: 2a:2d:ea:33:26:fc:a8:73:1c:67:f5:0f:19:00:96: 31:44:ee:e8:d8:93:38:14:e5:a1:26:c4:3a:4d:b3: 8a:f5:5e:3a:5c:71:e5:23:a8:c2:db:80:6c:86:c8: c4:aa:7f:7f:5a:38:00:fd:75:04:ec:2a:c7:1d:a2: 47:83:2f:7e:60:3a:bb:09:6f:12:5b:34:78:aa:75: dd:54:39:48:96:ef:09:5f:24:ec:ce:5d:42:d0:fb: 6d:41:f0:25:af:47:4c:46:3a:f8:43:05:7c:ff:80: b3:ce:70:6a:d5:63:53:ba:f8:00:f9:96:5d:a9:fc: 78:8c:bd:db:bb:89:bf:79:59:15:92:2b:ca:bf:15: 5a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:52:B4:12:BD:99:FA:12:BC:84:B7:D1:8A:6A:69:33:67:E7:E7:02 X509v3 Authority Key Identifier: keyid:EA:DA:0A:EE:51:F3:91:0B:50:A0:65:D5:7D:94:6E:3E:AF:A8:BD:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:98:aa:3e:a7:f2:a0:a8:b0:d0:e5:63:d7:33:71:0c:14:44: cd:32:eb:e8:d3:9d:5b:a9:c7:48:96:1d:93:f4:0f:90:93:91: 28:98:0d:01:95:c1:f1:52:d0:55:11:ef:01:aa:19:b9:2e:d9: d2:ef:d2:e9:8b:c6:d3:33:8a:b3:77:10:18:f8:15:f4:6d:2b: 82:f2:eb:6f:7f:46:a4:4b:0b:96:ce:0b:bc:a1:cc:c2:65:16: f7:ed:e4:4f:e3:0f:82:fa:50:db:5c:f6:e2:d5:55:63:ad:02: 04:92:63:9b:31:af:c6:c4:9b:25:90:1e:1b:56:89:d4:03:c9: 72:eb:b8:dd:67:af:7b:8b:f2:b7:48:9a:ff:64:d2:37:8f:64: b8:85:82:81:fc:4d:ec:c3:cb:e7:32:2a:2c:95:7d:ce:68:fe: cb:ca:22:36:e8:b6:61:49:54:1a:a5:c2:fd:da:15:43:b9:21: b0:8d:90:d9:36:01:f3:85:bc:3d:b3:f6:1b:c0:3d:9a:5e:b3: e3:22:b9:57:2a:25:3e:75:f7:a7:a2:f2:7c:67:18:87:28:b4: 0a:65:9f:a8:e9:0a:f6:02:5f:d9:dc:7f:56:f4:e2:74:c4:15: 51:67:20:87:e3:5b:b6:1c:54:74:d0:17:29:56:58:86:19:91: b8:7a:cf:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd9EXCojBE1AYXjEIwRf76jRMR+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFEQTBBRUU1MUYzOTEwQjUwQTA2NUQ1N0Q5NDZFM0VB RkE4QkQxMTAeFw0yNTA2MTcxMzA2MzJaFw0yNTA2MjAxNDQ1MzJaMDMxMTAvBgNV BAMTKEZCNTJCNDEyQkQ5OUZBMTJCQzg0QjdEMThBNkE2OTMzNjdFN0U3MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJRYlNj/h0MeeFJjF01x0Qkd83 dOVYA8E86QL7oaR9IFgvMPG2J4H6k89KOlAWqYr5+gycJaK/lI18i0My1o7nCPjC FHksDWivlSVHzHhPbSBi0FMUOPoha7BB/Si2bLatpZI+7tVgEAhXcEMln7cOnYC3 64ED2yot6jMm/KhzHGf1DxkAljFE7ujYkzgU5aEmxDpNs4r1XjpcceUjqMLbgGyG yMSqf39aOAD9dQTsKscdokeDL35gOrsJbxJbNHiqdd1UOUiW7wlfJOzOXULQ+21B 8CWvR0xGOvhDBXz/gLPOcGrVY1O6+AD5ll2p/HiMvdu7ib95WRWSK8q/FVq5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+1K0Er2Z+hK8hLfRimppM2fn5wIwHwYDVR0j BBgwFoAU6toK7lHzkQtQoGXVfZRuPq+ovREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDk2MmM2ZS01OTVhLTQ3YzQtYWE3Yy1lZjhlNzdjYWU2NDIvMC9FQURBMEFFRTUx RjM5MTBCNTBBMDY1RDU3RDk0NkUzRUFGQThCRDExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUFEQTBBRUU1MUYzOTEwQjUwQTA2NUQ1N0Q5NDZFM0VBRkE4 QkQxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA5NjJjNmUtNTk1YS00N2M0LWFh N2MtZWY4ZTc3Y2FlNjQyLzAvRUFEQTBBRUU1MUYzOTEwQjUwQTA2NUQ1N0Q5NDZF M0VBRkE4QkQxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKyYqj6n8qCosNDlY9czcQwURM0y6+jTnVup x0iWHZP0D5CTkSiYDQGVwfFS0FUR7wGqGbku2dLv0umLxtMzirN3EBj4FfRtK4Ly 629/RqRLC5bOC7yhzMJlFvft5E/jD4L6UNtc9uLVVWOtAgSSY5sxr8bEmyWQHhtW idQDyXLruN1nr3uL8rdImv9k0jePZLiFgoH8TezDy+cyKiyVfc5o/svKIjbotmFJ VBqlwv3aFUO5IbCNkNk2AfOFvD2z9hvAPZpes+MiuVcqJT5196ei8nxnGIcotApl n6jpCvYCX9ncf1b04nTEFVFnIIfjW7YcVHTQFylWWIYZkbh6z0M= -----END CERTIFICATE-----Generated at Wed Jun 18 08:57:01 2025 by rpki-client