$ rpki-client -vvf repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft File: EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft (raw, json) Hash identifier: cfv/621hqVRk6kqWhYo0torXcpJwJvfx84ZYKWn3zpo= Subject key identifier: CE:DA:63:E2:FB:CB:00:3A:4E:1E:26:EB:F8:6B:3F:24:DA:0B:E1:52 Authority key identifier: EA:01:C9:15:11:C5:E3:47:C7:C1:1E:A4:64:9B:0F:04:1A:5D:05:20 Certificate issuer: /CN=EA01C91511C5E347C7C11EA4649B0F041A5D0520 Certificate serial: 0F8996F0D236F35EC2C050E27B9DE2F68C62B894 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft Manifest number: 01A8 Signing time: Sat 23 Aug 2025 03:20:02 +0000 Manifest this update: Sat 23 Aug 2025 03:15:02 +0000 Manifest next update: Tue 26 Aug 2025 07:33:02 +0000 Files and hashes: 1: 3130332e3132302e3231382e302f32342d3234203d3e20313338303832.roa (hash: A8O4HhKJBUpQAVtG9F/HuVJZcjl2PJnz2blEINGnJlw=) 2: EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl (hash: WSHjdEvuSSTSHPhZAnQl7Bpt3YL6Wr/bvOtwHhteo3s=) 3: 3130332e3137392e38322e302f32342d3234203d3e20313338303832.roa (hash: /cdl8KopWWEAVSKHGwwN7jQvT8+haRS7g+4C1ytM8Dg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 07:33:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:89:96:f0:d2:36:f3:5e:c2:c0:50:e2:7b:9d:e2:f6:8c:62:b8:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA01C91511C5E347C7C11EA4649B0F041A5D0520 Validity Not Before: Aug 23 03:15:02 2025 GMT Not After : Aug 26 07:33:02 2025 GMT Subject: CN=CEDA63E2FBCB003A4E1E26EBF86B3F24DA0BE152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:02:ea:9c:de:33:18:40:2c:7a:5c:34:0b:63: 74:76:1e:5f:ee:4e:40:d1:be:22:eb:e3:43:59:4c: 1a:73:45:9a:a3:73:22:4b:a0:72:b4:e4:71:d9:09: ed:02:2f:86:5d:81:68:9e:38:dd:c5:5e:5f:52:3b: 7b:79:17:7b:27:67:af:bc:d2:fd:2d:c5:5e:5f:d3: cc:d9:dd:60:76:a3:8a:d4:29:bb:6a:5e:16:cd:23: 0a:99:ea:dd:20:4d:ed:78:ea:be:d7:f4:a6:f2:f5: bb:78:37:7c:7f:f9:29:01:ad:59:c6:26:25:82:b9: 73:5d:3a:c2:ed:14:7f:e3:7e:98:e5:97:e6:97:86: e0:7f:b9:f4:6d:c3:a7:61:3b:e3:59:e3:67:06:24: d6:eb:49:b8:9b:a7:ef:bb:7f:d2:6e:fe:72:65:13: ea:e6:ef:af:36:a6:4e:dc:21:f0:6c:13:13:c7:b9: e1:4e:bd:49:d7:3a:83:ac:1e:81:d7:9c:04:1c:38: cb:28:01:58:b2:ca:4b:82:c9:ba:b1:ea:81:7f:b6: d6:f0:fd:13:1a:cd:94:35:91:db:6f:ee:5a:c8:4a: 82:37:c2:ba:5f:90:96:8e:56:39:b4:d4:f2:70:80: 95:2f:53:e9:76:7e:a7:23:17:69:dd:f2:1d:37:af: 39:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:DA:63:E2:FB:CB:00:3A:4E:1E:26:EB:F8:6B:3F:24:DA:0B:E1:52 X509v3 Authority Key Identifier: keyid:EA:01:C9:15:11:C5:E3:47:C7:C1:1E:A4:64:9B:0F:04:1A:5D:05:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:9f:54:ba:cf:60:07:22:07:50:ef:df:7e:67:c4:44:42:1b: 46:ee:a8:8a:79:34:3c:b7:05:21:57:4e:b9:6d:2c:53:cc:a5: b2:49:23:d8:5f:7b:74:50:59:c7:05:b4:49:ef:e1:28:b7:f5: a4:ee:1e:ff:1d:6c:0b:b1:9a:18:47:d8:bf:3f:3e:65:25:0b: 55:90:a6:2f:1c:8d:72:4b:03:66:af:9b:d7:10:2f:ed:43:f5: ad:b2:d0:e3:be:7c:d0:56:6c:14:fa:6c:00:ec:90:c3:72:60: 32:7c:e8:ad:cf:08:2a:35:a8:ed:ab:24:2a:bf:44:2a:0d:7f: b6:47:33:45:40:ef:79:05:ea:8c:41:00:98:9c:6d:80:b3:01: cf:1f:a3:23:67:ae:1d:bc:21:86:9b:89:cc:3b:b9:fe:07:ee: cf:ce:26:17:1f:93:74:20:78:1d:45:1a:b0:e5:36:95:9b:7a: d9:86:86:83:f1:f2:e9:0c:3f:ed:7b:a6:6c:3a:5f:66:ba:1d: 7c:ff:fb:ab:83:bd:52:05:07:0c:f1:5f:45:8a:48:e1:0a:21: 8a:fc:ab:87:36:7b:de:b8:0b:90:d5:c0:dc:e1:ad:d4:e7:ee: d1:53:1b:e3:47:43:ad:33:95:5f:63:ee:0e:53:d0:5a:e9:76: 34:81:92:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD4mW8NI2817CwFDie53i9oxiuJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBGMDQx QTVEMDUyMDAeFw0yNTA4MjMwMzE1MDJaFw0yNTA4MjYwNzMzMDJaMDMxMTAvBgNV BAMTKENFREE2M0UyRkJDQjAwM0E0RTFFMjZFQkY4NkIzRjI0REEwQkUxNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrAuqc3jMYQCx6XDQLY3R2Hl/u TkDRviLr40NZTBpzRZqjcyJLoHK05HHZCe0CL4ZdgWieON3FXl9SO3t5F3snZ6+8 0v0txV5f08zZ3WB2o4rUKbtqXhbNIwqZ6t0gTe146r7X9Kby9bt4N3x/+SkBrVnG JiWCuXNdOsLtFH/jfpjll+aXhuB/ufRtw6dhO+NZ42cGJNbrSbibp++7f9Ju/nJl E+rm7682pk7cIfBsExPHueFOvUnXOoOsHoHXnAQcOMsoAViyykuCybqx6oF/ttbw /RMazZQ1kdtv7lrISoI3wrpfkJaOVjm01PJwgJUvU+l2fqcjF2nd8h03rzmVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUztpj4vvLADpOHibr+Gs/JNoL4VIwHwYDVR0j BBgwFoAU6gHJFRHF40fHwR6kZJsPBBpdBSAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Y2QyNGU4Mi1mMzA2LTQ0MDAtYjAwYS1kNTliNDFlMjg2YmIvMC9FQTAxQzkxNTEx QzVFMzQ3QzdDMTFFQTQ2NDlCMEYwNDFBNUQwNTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBGMDQxQTVE MDUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGNkMjRlODItZjMwNi00NDAwLWIw MGEtZDU5YjQxZTI4NmJiLzAvRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBG MDQxQTVEMDUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACCfVLrPYAciB1Dv335nxERCG0buqIp5NDy3 BSFXTrltLFPMpbJJI9hfe3RQWccFtEnv4Si39aTuHv8dbAuxmhhH2L8/PmUlC1WQ pi8cjXJLA2avm9cQL+1D9a2y0OO+fNBWbBT6bADskMNyYDJ86K3PCCo1qO2rJCq/ RCoNf7ZHM0VA73kF6oxBAJicbYCzAc8foyNnrh28IYabicw7uf4H7s/OJhcfk3Qg eB1FGrDlNpWbetmGhoPx8ukMP+17pmw6X2a6HXz/+6uDvVIFBwzxX0WKSOEKIYr8 q4c2e964C5DVwNzhrdTn7tFTG+NHQ60zlV9j7g5T0FrpdjSBkj8= -----END CERTIFICATE-----Generated at Sat Aug 23 12:15:58 2025 by rpki-client