$ rpki-client -vvf repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft File: EAAF14D74C27E1502835CCF1541D5D92498C8427.mft (raw, json) Hash identifier: WMvWYrz5D6iQql4gf4T2m3ybDkmg8+78gwXSMtRKGMk= Subject key identifier: 99:2E:21:5A:07:75:CC:4B:80:FB:E2:B1:BE:04:8E:D5:45:A4:67:5A Authority key identifier: EA:AF:14:D7:4C:27:E1:50:28:35:CC:F1:54:1D:5D:92:49:8C:84:27 Certificate issuer: /CN=EAAF14D74C27E1502835CCF1541D5D92498C8427 Certificate serial: 2089268678077802C1366FE1946CF867C22ABDEB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft Manifest number: C7 Signing time: Fri 13 Jun 2025 20:41:54 +0000 Manifest this update: Fri 13 Jun 2025 20:36:54 +0000 Manifest next update: Tue 17 Jun 2025 08:32:54 +0000 Files and hashes: 1: EAAF14D74C27E1502835CCF1541D5D92498C8427.crl (hash: Pv1iG85UlkozqbGkACua4gwf30WQJoIL8mW1kzxWEyw=) 2: 323030313a6466333a393263303a3a2f34382d3438203d3e20313532343231.roa (hash: sF0+Hzy6oJxlj5HSJzIfCoHVtQeeL/eSjk9uB3se86E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.crl rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 08:32:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:89:26:86:78:07:78:02:c1:36:6f:e1:94:6c:f8:67:c2:2a:bd:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAAF14D74C27E1502835CCF1541D5D92498C8427 Validity Not Before: Jun 13 20:36:54 2025 GMT Not After : Jun 17 08:32:54 2025 GMT Subject: CN=992E215A0775CC4B80FBE2B1BE048ED545A4675A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:24:43:e3:df:8f:76:d0:95:e4:e8:26:70:0f: 32:b0:6f:ac:2f:d3:d3:b4:11:34:a2:55:31:10:fa: b3:2a:59:dd:a5:13:14:93:8d:c5:76:9d:d4:09:08: 54:6e:d6:9a:3b:97:28:8f:d5:45:96:28:f1:cb:f2: e8:67:76:73:ba:31:01:07:f9:7b:94:d3:2d:0d:1c: e7:62:40:52:bb:d2:e0:c1:c7:48:a7:7a:aa:2c:12: a8:e8:f7:23:da:d8:3d:6d:71:1a:b2:f6:cd:68:21: db:4e:d1:95:29:58:92:bc:3a:87:27:ed:79:f3:f8: 5b:c6:bf:10:1d:32:7e:43:47:0f:b3:28:0a:24:f6: a0:ba:af:8a:08:07:74:e6:14:e9:a8:e7:40:81:3b: 59:16:a1:ff:ac:03:ce:29:d9:66:e7:e4:03:47:bf: 05:fe:2a:6b:af:58:96:33:2c:ed:42:b0:f6:91:51: a2:e3:a2:3a:d1:a5:f8:40:c4:1d:79:a4:7f:ff:15: 94:c3:dd:c2:0e:f6:72:79:3f:36:d6:08:07:e4:fb: 97:cd:8b:84:cb:12:7a:a7:3e:92:d2:5e:da:9d:66: 37:fb:82:cc:03:a2:7e:bf:87:4f:f5:75:ce:52:83: d8:ca:46:5b:7e:71:3e:93:eb:fc:8c:89:d6:ce:85: 1e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:2E:21:5A:07:75:CC:4B:80:FB:E2:B1:BE:04:8E:D5:45:A4:67:5A X509v3 Authority Key Identifier: keyid:EA:AF:14:D7:4C:27:E1:50:28:35:CC:F1:54:1D:5D:92:49:8C:84:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:f6:36:cf:f5:34:1f:28:a3:78:87:34:fb:c4:f0:12:6a:eb: ee:b0:95:2d:31:22:69:e5:f4:14:9e:1c:52:d7:2b:b5:ee:04: db:1a:2b:4c:52:67:65:4d:b2:57:24:62:f6:ba:22:90:80:70: 0c:42:13:d3:51:cb:ed:51:64:2c:5b:fc:0e:05:d0:b1:0a:23: bd:d9:33:41:05:2b:e8:10:0b:23:78:f4:c6:bd:5a:92:76:bb: 5f:97:43:f2:4c:f8:89:94:a4:45:40:5e:72:7d:54:82:9b:29: a4:f7:5d:12:5f:18:54:43:86:2a:8e:98:79:c2:05:8c:9d:13: 29:f1:27:de:22:63:e4:1b:4f:81:23:f6:17:49:ee:61:c9:a8: 60:63:5c:c1:3c:2e:0a:b0:22:0f:c1:0e:75:0f:6d:c3:ee:1b: 47:85:4b:04:58:f3:81:86:48:d6:9b:3e:ee:5f:da:ce:fb:7b: a4:b4:86:5f:ab:56:58:e9:8d:14:32:45:68:3f:e2:b1:a2:3d: 47:a7:52:93:e4:5d:76:22:98:dc:7a:18:a4:75:28:ae:de:5f: ee:d4:5f:5a:bd:20:62:9b:68:b4:f5:af:78:27:0d:32:ba:c5: 0e:50:21:f1:c1:5d:f8:5b:0f:2d:f0:b1:45:93:53:a4:cd:49: b0:62:a3:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIIkmhngHeALBNm/hlGz4Z8IqveswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVEOTI0 OThDODQyNzAeFw0yNTA2MTMyMDM2NTRaFw0yNTA2MTcwODMyNTRaMDMxMTAvBgNV BAMTKDk5MkUyMTVBMDc3NUNDNEI4MEZCRTJCMUJFMDQ4RUQ1NDVBNDY3NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzJEPj34920JXk6CZwDzKwb6wv 09O0ETSiVTEQ+rMqWd2lExSTjcV2ndQJCFRu1po7lyiP1UWWKPHL8uhndnO6MQEH +XuU0y0NHOdiQFK70uDBx0ineqosEqjo9yPa2D1tcRqy9s1oIdtO0ZUpWJK8Oocn 7Xnz+FvGvxAdMn5DRw+zKAok9qC6r4oIB3TmFOmo50CBO1kWof+sA84p2Wbn5ANH vwX+KmuvWJYzLO1CsPaRUaLjojrRpfhAxB15pH//FZTD3cIO9nJ5PzbWCAfk+5fN i4TLEnqnPpLSXtqdZjf7gswDon6/h0/1dc5Sg9jKRlt+cT6T6/yMidbOhR5XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmS4hWgd1zEuA++KxvgSO1UWkZ1owHwYDVR0j BBgwFoAU6q8U10wn4VAoNczxVB1dkkmMhCcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTRmNzkzNC1jZGM3LTQwODItODNmYi1kZjdkNGY4MjE5YWYvMS9FQUFGMTRENzRD MjdFMTUwMjgzNUNDRjE1NDFENUQ5MjQ5OEM4NDI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVEOTI0OThD ODQyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE0Zjc5MzQtY2RjNy00MDgyLTgz ZmItZGY3ZDRmODIxOWFmLzEvRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVE OTI0OThDODQyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALb2Ns/1NB8oo3iHNPvE8BJq6+6wlS0xImnl 9BSeHFLXK7XuBNsaK0xSZ2VNslckYva6IpCAcAxCE9NRy+1RZCxb/A4F0LEKI73Z M0EFK+gQCyN49Ma9WpJ2u1+XQ/JM+ImUpEVAXnJ9VIKbKaT3XRJfGFRDhiqOmHnC BYydEynxJ94iY+QbT4Ej9hdJ7mHJqGBjXME8LgqwIg/BDnUPbcPuG0eFSwRY84GG SNabPu5f2s77e6S0hl+rVljpjRQyRWg/4rGiPUenUpPkXXYimNx6GKR1KK7eX+7U X1q9IGKbaLT1r3gnDTK6xQ5QIfHBXfhbDy3wsUWTU6TNSbBio5Q= -----END CERTIFICATE-----Generated at Mon Jun 16 01:30:11 2025 by rpki-client