$ rpki-client -vvf repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.mft File: EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.mft (raw, json) Hash identifier: HrjyHYx54wxVQR62srZ9hIbGYLqXpnSBUGZ4PDazCbs= Subject key identifier: 5C:E5:B4:82:EF:E3:58:0B:21:CD:07:E7:7E:A4:A4:5C:AA:86:59:EA Authority key identifier: EA:EA:2F:2F:07:FF:F3:43:40:77:7B:3B:BD:7D:1D:18:6F:4E:C1:CB Certificate issuer: /CN=EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB Certificate serial: 57504B15A422912D9D020949E39F8F756ED8AA6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.mft Manifest number: 01E0 Signing time: Wed 02 Jul 2025 07:41:33 +0000 Manifest this update: Wed 02 Jul 2025 07:36:33 +0000 Manifest next update: Sat 05 Jul 2025 13:08:33 +0000 Files and hashes: 1: 3130332e3139312e3135302e302f32332d3234203d3e20313439393337.roa (hash: i80S93LcbuzfKOEUZo9C4vjXTfLHmrCj4n9ypSMTwBE=) 2: EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.crl (hash: pzPKqNVNEfBljhtRO2nJAcSWwZ+qCfo2s2Lgc3dlpuI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.crl rsync://repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 08:33:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:50:4b:15:a4:22:91:2d:9d:02:09:49:e3:9f:8f:75:6e:d8:aa:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB Validity Not Before: Jul 2 07:36:33 2025 GMT Not After : Jul 5 13:08:33 2025 GMT Subject: CN=5CE5B482EFE3580B21CD07E77EA4A45CAA8659EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:21:33:27:a3:b4:d5:20:39:0c:cf:05:c2:03: 15:29:c3:5c:14:6d:28:23:09:9a:34:ba:ec:3a:9e: 6a:35:6e:1c:5b:8c:45:20:63:65:24:6c:5e:7e:4e: d0:30:b3:dc:fe:eb:a9:32:f8:e2:f6:eb:69:1e:6b: 42:42:ee:49:19:b8:21:8a:7c:a6:44:65:e7:26:b9: 4d:26:35:22:aa:12:92:3b:a1:e9:ba:41:14:cb:26: 08:5f:3a:6e:fc:50:80:62:21:40:a9:b6:2c:19:7c: fb:d2:bb:6c:4c:cf:4b:2d:23:5d:5f:f3:fb:e2:cf: 6f:62:3e:cb:a9:1b:82:0a:b1:8a:03:68:5f:c1:b6: d2:f0:6d:21:2b:37:a5:81:5c:d2:b6:61:99:b9:e4: 09:95:86:d4:c3:ea:b1:0b:63:c5:c3:fb:f3:69:23: 50:d0:96:7a:36:d7:36:b6:3a:1e:04:45:9f:d9:80: c4:40:b2:0e:d0:e3:36:ba:95:c7:49:71:0b:27:40: 50:2e:6f:57:5b:42:8b:63:26:ba:85:54:6c:c8:b0: 00:ec:40:11:0c:7d:c1:b8:44:68:f2:97:54:ed:eb: 24:30:6e:7e:5b:dc:34:05:c3:0b:07:13:c7:60:e7: bc:0a:63:2e:8e:25:75:0b:d4:ae:25:89:c6:0c:95: ee:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E5:B4:82:EF:E3:58:0B:21:CD:07:E7:7E:A4:A4:5C:AA:86:59:EA X509v3 Authority Key Identifier: keyid:EA:EA:2F:2F:07:FF:F3:43:40:77:7B:3B:BD:7D:1D:18:6F:4E:C1:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:11:c2:2d:82:8c:50:9b:a3:0f:4a:ed:97:2b:71:8a:58:ef: d7:77:85:b9:4a:4c:88:0b:fc:0e:c9:7f:4b:c3:62:b6:7b:1a: fe:60:3f:3e:2c:12:e6:52:28:8d:e1:3c:01:20:9f:6b:34:90: 6e:06:5a:0c:5e:19:69:ef:30:ac:ca:39:ca:29:69:bf:57:05: f8:a5:87:b7:c4:f2:be:4c:97:d4:25:e7:41:21:5e:82:1c:6f: 37:c6:fa:d7:be:0d:ed:e8:15:71:a8:cc:61:6f:70:84:3d:3d: 9f:0d:66:5a:4f:e1:d8:47:ee:e2:d6:93:b0:b4:b8:9b:a9:1c: 0c:5f:04:96:65:fa:28:98:d9:0c:18:67:f3:d6:5d:0b:58:4b: a4:e5:37:1b:45:39:64:29:73:98:d1:d9:1c:06:39:78:98:0e: a5:dc:07:23:6b:3a:b4:44:5f:00:40:0f:49:62:13:5d:7e:38: 08:0b:6b:cb:58:ce:da:43:25:b4:e8:5b:31:c3:3c:81:08:ec: 9d:fe:d6:7c:4e:ac:0f:a4:8e:ee:e9:f8:5a:4d:c7:8c:d7:5b: 30:2b:44:a5:79:34:c4:21:dc:7d:cb:70:25:fa:b6:e1:6d:a4: 0a:34:97:e7:a3:5c:cd:ad:fc:39:8b:fa:95:a7:be:d1:3f:c2: d7:bf:ec:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV1BLFaQikS2dAglJ45+PdW7Yqm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFFQTJGMkYwN0ZGRjM0MzQwNzc3QjNCQkQ3RDFEMTg2 RjRFQzFDQjAeFw0yNTA3MDIwNzM2MzNaFw0yNTA3MDUxMzA4MzNaMDMxMTAvBgNV BAMTKDVDRTVCNDgyRUZFMzU4MEIyMUNEMDdFNzdFQTRBNDVDQUE4NjU5RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiITMno7TVIDkMzwXCAxUpw1wU bSgjCZo0uuw6nmo1bhxbjEUgY2UkbF5+TtAws9z+66ky+OL262kea0JC7kkZuCGK fKZEZecmuU0mNSKqEpI7oem6QRTLJghfOm78UIBiIUCptiwZfPvSu2xMz0stI11f 8/viz29iPsupG4IKsYoDaF/BttLwbSErN6WBXNK2YZm55AmVhtTD6rELY8XD+/Np I1DQlno21za2Oh4ERZ/ZgMRAsg7Q4za6lcdJcQsnQFAub1dbQotjJrqFVGzIsADs QBEMfcG4RGjyl1Tt6yQwbn5b3DQFwwsHE8dg57wKYy6OJXUL1K4licYMle4RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXOW0gu/jWAshzQfnfqSkXKqGWeowHwYDVR0j BBgwFoAU6uovLwf/80NAd3s7vX0dGG9OwcswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OGI0MjQyMC01NmQwLTQ1MWEtYTI5ZC01ZjlkNjIzMGUyMjcvMC9FQUVBMkYyRjA3 RkZGMzQzNDA3NzdCM0JCRDdEMUQxODZGNEVDMUNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUFFQTJGMkYwN0ZGRjM0MzQwNzc3QjNCQkQ3RDFEMTg2RjRF QzFDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMThiNDI0MjAtNTZkMC00NTFhLWEy OWQtNWY5ZDYyMzBlMjI3LzAvRUFFQTJGMkYwN0ZGRjM0MzQwNzc3QjNCQkQ3RDFE MTg2RjRFQzFDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKsRwi2CjFCbow9K7ZcrcYpY79d3hblKTIgL /A7Jf0vDYrZ7Gv5gPz4sEuZSKI3hPAEgn2s0kG4GWgxeGWnvMKzKOcopab9XBfil h7fE8r5Ml9Ql50EhXoIcbzfG+te+De3oFXGozGFvcIQ9PZ8NZlpP4dhH7uLWk7C0 uJupHAxfBJZl+iiY2QwYZ/PWXQtYS6TlNxtFOWQpc5jR2RwGOXiYDqXcByNrOrRE XwBAD0liE11+OAgLa8tYztpDJbToWzHDPIEI7J3+1nxOrA+kju7p+FpNx4zXWzAr RKV5NMQh3H3LcCX6tuFtpAo0l+ejXM2t/DmL+pWnvtE/wte/7AM= -----END CERTIFICATE-----Generated at Wed Jul 2 11:33:19 2025 by rpki-client