$ rpki-client -vvf repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft File: EAAF14D74C27E1502835CCF1541D5D92498C8427.mft (raw, json) Hash identifier: EncxVQBsHfCjwdxYv8yc0XtLiPN24KX3/oMoRLXl//k= Subject key identifier: 3C:9D:B6:A4:4C:E3:0C:63:0B:82:98:5A:5E:DE:92:8F:53:D8:B5:D8 Authority key identifier: EA:AF:14:D7:4C:27:E1:50:28:35:CC:F1:54:1D:5D:92:49:8C:84:27 Certificate issuer: /CN=EAAF14D74C27E1502835CCF1541D5D92498C8427 Certificate serial: 4DDF9936B1F7A60885D0417131BFDD69F10805FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft Manifest number: DE Signing time: Tue 05 Aug 2025 01:51:53 +0000 Manifest this update: Tue 05 Aug 2025 01:46:53 +0000 Manifest next update: Fri 08 Aug 2025 07:38:53 +0000 Files and hashes: 1: 323030313a6466333a393263303a3a2f34382d3438203d3e20313532343231.roa (hash: sF0+Hzy6oJxlj5HSJzIfCoHVtQeeL/eSjk9uB3se86E=) 2: EAAF14D74C27E1502835CCF1541D5D92498C8427.crl (hash: UmwwGjK5Te4S6g3oUI1JSozPTBj/brWUh5dTjPxDs38=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.crl rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 07:38:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:df:99:36:b1:f7:a6:08:85:d0:41:71:31:bf:dd:69:f1:08:05:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAAF14D74C27E1502835CCF1541D5D92498C8427 Validity Not Before: Aug 5 01:46:53 2025 GMT Not After : Aug 8 07:38:53 2025 GMT Subject: CN=3C9DB6A44CE30C630B82985A5EDE928F53D8B5D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d6:86:9e:33:ac:a4:b9:26:59:e2:62:c0:43: 63:53:a1:ed:da:b4:9d:a4:88:c7:9c:5b:c8:c8:8e: 20:ad:e0:28:7a:82:20:bb:3c:40:f1:e0:98:d4:9e: c0:c0:d3:e2:a6:90:31:57:4e:85:df:26:30:81:1e: 80:99:52:b8:33:c3:1a:4a:51:bf:d4:b9:40:19:96: bb:e5:ba:9c:c2:5c:27:aa:7a:8b:83:41:9f:c7:74: f5:39:3f:0a:0e:f0:05:f3:44:ee:14:47:50:c6:bc: 10:90:e4:90:8b:ac:a8:aa:01:20:f0:f5:c5:a5:db: 90:bd:12:97:36:c1:ce:c8:cf:a2:7d:de:fc:e3:01: d3:c9:24:bf:8c:75:dc:9f:84:73:27:ae:da:f4:3e: 8d:1d:c6:4c:c4:6a:04:79:1e:4a:55:e4:04:01:63: c2:63:02:93:6a:43:3b:27:74:5a:c0:70:e8:84:bd: fc:2a:ee:48:eb:6c:6c:c3:48:6a:b3:55:92:f4:f0: 11:51:63:13:28:70:ef:bf:7c:56:e0:6a:84:1f:2f: 91:a4:0f:1a:bb:fe:5a:69:b4:3a:b9:26:ed:f2:ae: 3c:39:33:a9:2d:f4:75:2a:d6:d9:59:45:17:68:87: a4:fd:e3:e1:76:e9:2a:92:b4:92:d1:a3:8b:62:e2: ca:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:9D:B6:A4:4C:E3:0C:63:0B:82:98:5A:5E:DE:92:8F:53:D8:B5:D8 X509v3 Authority Key Identifier: keyid:EA:AF:14:D7:4C:27:E1:50:28:35:CC:F1:54:1D:5D:92:49:8C:84:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:fd:e1:66:2f:b2:9f:39:9e:60:9e:f5:87:db:dd:c0:ef:31: fd:4e:c5:c7:04:14:59:99:69:fc:10:7f:80:c2:d0:30:90:e2: 83:4a:14:7a:9e:c9:bf:56:a1:7e:9e:27:65:bc:9f:5d:cf:4e: 91:5c:1a:43:9e:e9:99:cc:1d:20:d5:d2:41:db:43:ac:6f:7c: 9b:de:ac:8a:2c:5f:af:93:f7:12:5d:ab:18:df:88:c3:a2:c5: 29:5c:5d:79:87:57:95:ef:81:e3:40:23:1d:2a:ec:50:c2:e4: c3:5a:c5:24:a4:bb:96:77:ec:b1:b9:b7:f9:3e:5d:b1:fb:ba: e8:b2:d6:bd:d4:ab:4d:8a:94:63:d5:02:80:12:52:02:cc:c5: 82:30:9f:7a:18:e5:a5:14:81:47:fb:da:f5:a3:8c:72:45:74: 31:d2:4c:7a:18:d3:bd:1a:f5:26:73:54:4e:4b:f0:2b:6a:62: 3e:8e:5a:ed:10:72:d4:2d:4f:e4:79:b3:af:ef:47:14:83:df: 1c:58:6f:9e:34:e4:9c:7f:3f:de:23:e4:80:63:c6:5c:3e:d1: af:94:cf:d4:37:14:5d:79:b9:47:43:ee:37:3e:e6:e8:fd:be: 22:b6:5c:9b:7e:aa:3c:d7:2b:6a:25:44:1f:24:84:6f:44:d1: 05:23:1a:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTd+ZNrH3pgiF0EFxMb/dafEIBf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVEOTI0 OThDODQyNzAeFw0yNTA4MDUwMTQ2NTNaFw0yNTA4MDgwNzM4NTNaMDMxMTAvBgNV BAMTKDNDOURCNkE0NENFMzBDNjMwQjgyOTg1QTVFREU5MjhGNTNEOEI1RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG1oaeM6ykuSZZ4mLAQ2NToe3a tJ2kiMecW8jIjiCt4Ch6giC7PEDx4JjUnsDA0+KmkDFXToXfJjCBHoCZUrgzwxpK Ub/UuUAZlrvlupzCXCeqeouDQZ/HdPU5PwoO8AXzRO4UR1DGvBCQ5JCLrKiqASDw 9cWl25C9Epc2wc7Iz6J93vzjAdPJJL+MddyfhHMnrtr0Po0dxkzEagR5HkpV5AQB Y8JjApNqQzsndFrAcOiEvfwq7kjrbGzDSGqzVZL08BFRYxMocO+/fFbgaoQfL5Gk Dxq7/lpptDq5Ju3yrjw5M6kt9HUq1tlZRRdoh6T94+F26SqStJLRo4ti4sofAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPJ22pEzjDGMLgphaXt6Sj1PYtdgwHwYDVR0j BBgwFoAU6q8U10wn4VAoNczxVB1dkkmMhCcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTRmNzkzNC1jZGM3LTQwODItODNmYi1kZjdkNGY4MjE5YWYvMS9FQUFGMTRENzRD MjdFMTUwMjgzNUNDRjE1NDFENUQ5MjQ5OEM4NDI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVEOTI0OThD ODQyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE0Zjc5MzQtY2RjNy00MDgyLTgz ZmItZGY3ZDRmODIxOWFmLzEvRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVE OTI0OThDODQyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAj94WYvsp85nmCe9Yfb3cDvMf1OxccEFFmZ afwQf4DC0DCQ4oNKFHqeyb9WoX6eJ2W8n13PTpFcGkOe6ZnMHSDV0kHbQ6xvfJve rIosX6+T9xJdqxjfiMOixSlcXXmHV5XvgeNAIx0q7FDC5MNaxSSku5Z37LG5t/k+ XbH7uuiy1r3Uq02KlGPVAoASUgLMxYIwn3oY5aUUgUf72vWjjHJFdDHSTHoY070a 9SZzVE5L8CtqYj6OWu0QctQtT+R5s6/vRxSD3xxYb5405Jx/P94j5IBjxlw+0a+U z9Q3FF15uUdD7jc+5uj9viK2XJt+qjzXK2olRB8khG9E0QUjGrY= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:46 2025 by rpki-client