$ rpki-client -vvf repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft File: EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft (raw, json) Hash identifier: Ge0mf9QD3MvMGP3bIL/eNbKCAR6emWBeW878KWsSdrk= Subject key identifier: A2:4B:FE:37:7A:14:40:95:2E:6F:9B:E6:19:83:2C:C9:47:83:09:06 Authority key identifier: EA:01:C9:15:11:C5:E3:47:C7:C1:1E:A4:64:9B:0F:04:1A:5D:05:20 Certificate issuer: /CN=EA01C91511C5E347C7C11EA4649B0F041A5D0520 Certificate serial: 24B3DFB7ABBFF697282979B09B24EF8E1DB00842 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft Manifest number: 0190 Signing time: Mon 30 Jun 2025 18:50:02 +0000 Manifest this update: Mon 30 Jun 2025 18:45:02 +0000 Manifest next update: Fri 04 Jul 2025 02:10:02 +0000 Files and hashes: 1: EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl (hash: vDdaOV7nndJI+VNpJvyja9A8LHfgrmNFlO9btFFXHGM=) 2: 3130332e3137392e38322e302f32342d3234203d3e20313338303832.roa (hash: /cdl8KopWWEAVSKHGwwN7jQvT8+haRS7g+4C1ytM8Dg=) 3: 3130332e3132302e3231382e302f32342d3234203d3e20313338303832.roa (hash: A8O4HhKJBUpQAVtG9F/HuVJZcjl2PJnz2blEINGnJlw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 02:10:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:b3:df:b7:ab:bf:f6:97:28:29:79:b0:9b:24:ef:8e:1d:b0:08:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA01C91511C5E347C7C11EA4649B0F041A5D0520 Validity Not Before: Jun 30 18:45:02 2025 GMT Not After : Jul 4 02:10:02 2025 GMT Subject: CN=A24BFE377A1440952E6F9BE619832CC947830906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:ee:dd:a9:20:f2:f5:7e:13:b2:4c:b3:a9:8b: 0b:a3:72:14:6e:ef:7c:e3:39:70:51:71:f5:37:4f: 2e:53:fd:71:d0:d9:a2:f1:4b:97:cb:a8:cb:52:24: 2a:bc:10:03:c3:06:07:e5:85:41:34:d2:90:85:77: cb:1f:13:5b:9d:f0:7e:c3:1a:f7:9f:c5:04:a6:e0: 88:c6:5b:97:ee:6c:f9:de:e1:b5:52:31:65:60:29: dc:a6:d1:a6:7a:49:e9:7c:42:76:2f:3d:c0:3a:c3: cb:d8:8f:2d:cc:8f:cf:89:4d:c8:d6:f1:01:cd:d2: 66:e8:f4:d3:1f:95:aa:bc:58:5f:43:3a:ac:31:a8: 14:c6:f5:c2:0e:5a:13:e0:3b:c0:4e:05:94:95:90: 07:c3:3d:c2:f3:ff:3a:ee:40:d2:59:08:75:61:c2: c9:06:29:50:08:b2:03:64:ca:4f:75:f9:ab:09:50: 7f:19:ba:eb:1f:e3:d7:0b:00:83:d1:90:22:b7:45: 1b:95:1a:e9:15:d4:ee:50:1d:6f:46:45:b1:22:0c: 51:66:59:38:86:ff:d2:ee:05:88:a5:a0:58:52:02: cf:c1:d5:ec:72:d0:8f:30:90:ac:ed:1d:6c:19:b4: 39:5c:8f:aa:6e:41:65:ed:d3:ff:f4:87:3f:49:df: 18:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:4B:FE:37:7A:14:40:95:2E:6F:9B:E6:19:83:2C:C9:47:83:09:06 X509v3 Authority Key Identifier: keyid:EA:01:C9:15:11:C5:E3:47:C7:C1:1E:A4:64:9B:0F:04:1A:5D:05:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:2c:6f:55:ee:31:14:57:b6:1d:3c:88:fb:7a:b5:65:ee:e6: 34:d6:59:9e:9b:03:0e:88:9d:e6:d7:ec:e6:f0:6a:42:48:c5: a5:6a:be:38:4b:1e:b9:d3:bf:76:3e:db:5d:22:41:bc:26:39: 9c:47:b2:3a:f9:98:45:b7:a0:ae:7c:bf:f1:dd:c7:8b:f2:d7: 2d:9c:d9:b5:ed:07:80:db:b8:1a:a0:0a:f1:8c:05:f7:df:8b: 94:e2:de:76:7d:51:63:e1:31:29:f6:41:99:a2:7d:e5:30:c8: 81:a5:e4:85:ec:23:fe:91:71:0e:26:3b:92:96:4c:e2:f6:50: 17:72:21:96:2c:7b:1e:45:bc:3b:92:ef:a1:b8:cc:d5:67:bb: ec:05:e7:39:d1:87:24:6d:b1:f9:62:fd:8f:16:d8:33:80:48: ba:e6:6f:1e:ce:b4:88:8c:f6:11:e5:99:ea:81:44:5f:e0:9e: d5:a4:45:8e:14:03:a6:5f:98:3b:93:a2:dc:72:46:f1:e3:e0: a0:64:12:6a:5f:5f:2e:69:56:0a:6e:40:b7:de:03:9d:52:a8: ee:1a:86:29:e6:40:29:9e:8f:2b:b7:56:db:76:32:c5:d9:af: 86:a1:08:e7:1c:d4:7a:a6:05:7a:a2:a3:d5:28:e8:0d:28:14: 9f:b4:fa:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJLPft6u/9pcoKXmwmyTvjh2wCEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBGMDQx QTVEMDUyMDAeFw0yNTA2MzAxODQ1MDJaFw0yNTA3MDQwMjEwMDJaMDMxMTAvBgNV BAMTKEEyNEJGRTM3N0ExNDQwOTUyRTZGOUJFNjE5ODMyQ0M5NDc4MzA5MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv7t2pIPL1fhOyTLOpiwujchRu 73zjOXBRcfU3Ty5T/XHQ2aLxS5fLqMtSJCq8EAPDBgflhUE00pCFd8sfE1ud8H7D GvefxQSm4IjGW5fubPne4bVSMWVgKdym0aZ6Sel8QnYvPcA6w8vYjy3Mj8+JTcjW 8QHN0mbo9NMflaq8WF9DOqwxqBTG9cIOWhPgO8BOBZSVkAfDPcLz/zruQNJZCHVh wskGKVAIsgNkyk91+asJUH8Zuusf49cLAIPRkCK3RRuVGukV1O5QHW9GRbEiDFFm WTiG/9LuBYiloFhSAs/B1exy0I8wkKztHWwZtDlcj6puQWXt0//0hz9J3xgHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUokv+N3oUQJUub5vmGYMsyUeDCQYwHwYDVR0j BBgwFoAU6gHJFRHF40fHwR6kZJsPBBpdBSAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Y2QyNGU4Mi1mMzA2LTQ0MDAtYjAwYS1kNTliNDFlMjg2YmIvMC9FQTAxQzkxNTEx QzVFMzQ3QzdDMTFFQTQ2NDlCMEYwNDFBNUQwNTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBGMDQxQTVE MDUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGNkMjRlODItZjMwNi00NDAwLWIw MGEtZDU5YjQxZTI4NmJiLzAvRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBG MDQxQTVEMDUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ0sb1XuMRRXth08iPt6tWXu5jTWWZ6bAw6I nebX7ObwakJIxaVqvjhLHrnTv3Y+210iQbwmOZxHsjr5mEW3oK58v/Hdx4vy1y2c 2bXtB4DbuBqgCvGMBfffi5Ti3nZ9UWPhMSn2QZmifeUwyIGl5IXsI/6RcQ4mO5KW TOL2UBdyIZYsex5FvDuS76G4zNVnu+wF5znRhyRtsfli/Y8W2DOASLrmbx7OtIiM 9hHlmeqBRF/gntWkRY4UA6ZfmDuTotxyRvHj4KBkEmpfXy5pVgpuQLfeA51SqO4a hinmQCmejyu3Vtt2MsXZr4ahCOcc1HqmBXqio9Uo6A0oFJ+0+kE= -----END CERTIFICATE-----Generated at Tue Jul 1 11:43:16 2025 by rpki-client