$ rpki-client -vvf repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft File: EAAF14D74C27E1502835CCF1541D5D92498C8427.mft (raw, json) Hash identifier: o8Be3aLrS9xzGx3WxV7AR2HpHxhLaGxtFVDP0lI00CY= Subject key identifier: AE:61:D2:3E:50:54:B7:FD:DA:EE:37:28:F1:9A:28:83:1A:51:B9:F4 Authority key identifier: EA:AF:14:D7:4C:27:E1:50:28:35:CC:F1:54:1D:5D:92:49:8C:84:27 Certificate issuer: /CN=EAAF14D74C27E1502835CCF1541D5D92498C8427 Certificate serial: 457F32CE825DD50CA238A763C318E7294F856D29 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft Manifest number: 0107 Signing time: Tue 04 Nov 2025 07:01:54 +0000 Manifest this update: Tue 04 Nov 2025 06:56:54 +0000 Manifest next update: Fri 07 Nov 2025 08:37:54 +0000 Files and hashes: 1: 323030313a6466333a393263303a3a2f34382d3438203d3e20313532343231.roa (hash: sF0+Hzy6oJxlj5HSJzIfCoHVtQeeL/eSjk9uB3se86E=) 2: EAAF14D74C27E1502835CCF1541D5D92498C8427.crl (hash: e1PgXE2/lWWnPhBbL2TYSXXemS/F8Kx1pVQF2Am8fxQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.crl rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 08:37:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:7f:32:ce:82:5d:d5:0c:a2:38:a7:63:c3:18:e7:29:4f:85:6d:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAAF14D74C27E1502835CCF1541D5D92498C8427 Validity Not Before: Nov 4 06:56:54 2025 GMT Not After : Nov 7 08:37:54 2025 GMT Subject: CN=AE61D23E5054B7FDDAEE3728F19A28831A51B9F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:03:c4:27:6a:5f:40:34:6b:ad:24:93:7b:39: ef:fb:27:60:b3:b7:97:38:b5:53:62:db:2b:74:51: 42:35:26:70:e1:35:63:af:86:aa:f7:7d:e1:32:f1: 45:10:97:7b:05:17:14:9d:56:0b:69:64:86:28:bb: ec:2a:1a:65:d5:7c:f5:d0:3c:fb:a1:cc:6c:dd:45: 07:9c:4a:75:c2:50:61:d1:0c:6e:9f:6d:3d:02:4b: c4:87:0a:91:87:1c:b7:ec:b9:56:77:79:b0:3d:6b: be:26:e9:49:9c:eb:cb:d1:fb:4c:df:87:60:ca:f9: 46:89:c3:5d:c8:0f:e3:6d:99:d0:7d:78:dc:6f:1b: 57:c4:89:5b:31:4d:50:25:10:36:91:51:8f:7f:24: a8:e3:d6:fe:12:a5:c5:e0:9d:fa:9c:d5:af:4d:7b: 82:9b:86:2c:c7:60:8a:16:c9:d0:f0:c8:25:98:f4: 10:86:43:d1:ea:3b:c7:f5:0e:09:5e:81:27:45:e6: de:3f:2a:fd:84:76:1e:1b:d0:2e:02:3f:c5:2a:ae: 90:a9:ba:0e:6f:53:8c:aa:d5:02:12:ed:be:99:64: 80:ff:bc:05:88:71:5b:a5:18:a9:b1:ee:aa:5f:ee: ba:8f:fe:1a:cc:d7:9b:c3:6e:3f:4c:be:34:50:ad: 52:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:61:D2:3E:50:54:B7:FD:DA:EE:37:28:F1:9A:28:83:1A:51:B9:F4 X509v3 Authority Key Identifier: keyid:EA:AF:14:D7:4C:27:E1:50:28:35:CC:F1:54:1D:5D:92:49:8C:84:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:a8:b1:a1:d5:28:26:5b:65:5f:0c:29:79:a5:23:14:7f:b1: b6:31:c7:cf:11:e9:5d:d6:e2:60:ea:e1:e8:9a:de:2c:94:1b: ad:9f:97:21:51:b1:99:db:0b:7b:1f:af:80:8a:ae:30:ca:b5: de:b2:49:3d:ec:7a:d9:05:9e:1c:f5:e1:37:ef:eb:37:4e:ba: 3f:9d:6c:53:04:c4:15:b9:22:b7:ff:05:c4:cc:f6:23:e1:5b: 95:ef:b5:eb:96:1d:7a:02:7a:6d:cd:76:10:02:23:a5:91:cb: 37:73:dc:28:b9:a2:df:35:da:14:6a:d6:0a:75:2b:8a:5f:0d: 4a:88:48:c5:88:d4:7c:d6:7f:5f:75:11:ca:6c:88:63:d3:74: 52:7b:2d:9a:8f:24:67:59:da:f2:1f:70:b8:9e:bd:01:b3:a2: e0:09:34:83:21:ce:1c:d2:3b:57:e8:e9:8e:fb:e9:64:72:53: 91:fc:fc:a9:90:e0:ce:b6:eb:34:a0:ff:6e:55:5e:1e:5b:ca: 2b:c4:42:d9:4e:90:4b:5a:77:6d:03:a9:e2:27:e7:50:8d:b4: 4c:e9:4e:f9:aa:36:0c:d5:eb:fc:b8:98:7b:44:50:36:2a:72: 25:07:fe:23:bd:1b:0e:e8:03:ab:0c:c4:83:5f:9b:c5:b2:59: 63:ec:7a:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURX8yzoJd1QyiOKdjwxjnKU+FbSkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVEOTI0 OThDODQyNzAeFw0yNTExMDQwNjU2NTRaFw0yNTExMDcwODM3NTRaMDMxMTAvBgNV BAMTKEFFNjFEMjNFNTA1NEI3RkREQUVFMzcyOEYxOUEyODgzMUE1MUI5RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWA8Qnal9ANGutJJN7Oe/7J2Cz t5c4tVNi2yt0UUI1JnDhNWOvhqr3feEy8UUQl3sFFxSdVgtpZIYou+wqGmXVfPXQ PPuhzGzdRQecSnXCUGHRDG6fbT0CS8SHCpGHHLfsuVZ3ebA9a74m6Umc68vR+0zf h2DK+UaJw13ID+NtmdB9eNxvG1fEiVsxTVAlEDaRUY9/JKjj1v4SpcXgnfqc1a9N e4KbhizHYIoWydDwyCWY9BCGQ9HqO8f1DglegSdF5t4/Kv2Edh4b0C4CP8UqrpCp ug5vU4yq1QIS7b6ZZID/vAWIcVulGKmx7qpf7rqP/hrM15vDbj9MvjRQrVJnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrmHSPlBUt/3a7jco8ZoogxpRufQwHwYDVR0j BBgwFoAU6q8U10wn4VAoNczxVB1dkkmMhCcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTRmNzkzNC1jZGM3LTQwODItODNmYi1kZjdkNGY4MjE5YWYvMS9FQUFGMTRENzRD MjdFMTUwMjgzNUNDRjE1NDFENUQ5MjQ5OEM4NDI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVEOTI0OThD ODQyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE0Zjc5MzQtY2RjNy00MDgyLTgz ZmItZGY3ZDRmODIxOWFmLzEvRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVE OTI0OThDODQyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABOosaHVKCZbZV8MKXmlIxR/sbYxx88R6V3W 4mDq4eia3iyUG62flyFRsZnbC3sfr4CKrjDKtd6yST3setkFnhz14Tfv6zdOuj+d bFMExBW5Irf/BcTM9iPhW5XvteuWHXoCem3NdhACI6WRyzdz3Ci5ot812hRq1gp1 K4pfDUqISMWI1HzWf191EcpsiGPTdFJ7LZqPJGdZ2vIfcLievQGzouAJNIMhzhzS O1fo6Y776WRyU5H8/KmQ4M626zSg/25VXh5byivEQtlOkEtad20DqeIn51CNtEzp TvmqNgzV6/y4mHtEUDYqciUH/iO9Gw7oA6sMxINfm8WyWWPseqE= -----END CERTIFICATE-----Generated at Thu Nov 6 00:04:29 2025 by rpki-client