$ rpki-client -vvf repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.mft File: EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.mft (raw, json) Hash identifier: 23TxtU7CJwUR6IquJs5vr8E1PL9Mx48ekTaYq8VZxdc= Subject key identifier: 02:83:04:C1:AC:B8:D6:CD:72:7E:99:08:57:2E:09:CA:7F:15:7B:F5 Authority key identifier: EA:EA:2F:2F:07:FF:F3:43:40:77:7B:3B:BD:7D:1D:18:6F:4E:C1:CB Certificate issuer: /CN=EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB Certificate serial: 2EBE7921587186CB7894B9125550782E7AC29D10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.mft Manifest number: 01C9 Signing time: Sun 11 May 2025 02:31:31 +0000 Manifest this update: Sun 11 May 2025 02:26:31 +0000 Manifest next update: Wed 14 May 2025 04:22:31 +0000 Files and hashes: 1: EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.crl (hash: jcrU9ucMDwiZAg049PaTek0PGxtstckqhjIEKHtLqXo=) 2: 3130332e3139312e3135302e302f32332d3234203d3e20313439393337.roa (hash: d+J4junLJdCE2sxvmRjUwB+FBBupoMTN/w0qbdtED1k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.crl rsync://repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 04:22:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:be:79:21:58:71:86:cb:78:94:b9:12:55:50:78:2e:7a:c2:9d:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB Validity Not Before: May 11 02:26:31 2025 GMT Not After : May 14 04:22:31 2025 GMT Subject: CN=028304C1ACB8D6CD727E9908572E09CA7F157BF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6f:36:ff:af:c6:a8:f6:30:c1:0f:bb:0a:0f: b9:ef:79:5b:66:94:0e:d6:b8:b6:89:5a:28:2e:cd: 9b:f4:60:c7:40:1b:93:31:f1:53:09:da:8d:a2:15: e8:2f:b2:da:aa:7e:ec:ef:07:52:54:24:b1:1c:58: 98:98:66:fa:4d:69:fa:40:47:e9:d8:b7:9f:d7:36: 5c:a5:65:cf:54:28:80:fb:64:39:d6:56:6b:3b:65: 7e:76:c1:84:db:25:3a:82:be:d1:5d:1c:51:9a:bd: 4d:ee:e2:6f:a0:ef:ff:04:82:74:1e:cb:05:66:97: 91:3e:62:ee:70:21:01:2c:7f:86:14:de:db:66:cd: c1:d6:32:07:53:9f:e6:11:fc:55:65:c4:de:40:57: 0c:06:a3:42:90:fc:21:20:1d:1b:32:28:b3:f3:ba: 99:9b:09:0f:a7:0c:a7:c2:3c:5b:d4:2a:d2:8d:51: 00:7a:5e:b4:2e:bf:c3:84:8b:dd:84:e1:76:68:34: c9:4b:57:f2:fa:a5:86:92:07:60:3f:57:f8:3b:43: fa:50:19:8c:27:e2:d2:64:2a:6a:45:27:cd:f1:8e: 1d:26:27:03:b7:84:9d:06:73:c1:8b:f7:f8:0b:f7: e6:41:d7:1a:83:bb:8e:d1:3f:1e:af:a1:8f:21:88: 3e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:83:04:C1:AC:B8:D6:CD:72:7E:99:08:57:2E:09:CA:7F:15:7B:F5 X509v3 Authority Key Identifier: keyid:EA:EA:2F:2F:07:FF:F3:43:40:77:7B:3B:BD:7D:1D:18:6F:4E:C1:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:a3:a3:56:af:0a:ff:0b:8a:6d:2e:24:3f:43:df:d9:74:8d: 91:20:3f:ee:8f:03:3d:29:c3:1e:40:b4:11:ed:9c:7b:dc:7f: 9c:6e:a1:1b:69:a8:6e:29:de:de:6d:89:e5:78:cd:b4:94:c0: 76:e9:04:fa:7b:ed:09:fe:29:f1:9d:a4:f4:d1:1a:f2:8a:4b: 11:00:27:a4:2a:33:54:72:0c:c9:bb:9b:2f:07:4e:fb:f0:72: 1f:03:4b:80:ab:73:94:2e:13:6f:0a:7a:b9:6c:09:9e:74:70: 32:47:ec:d6:e4:1b:65:64:1e:32:f3:8e:d9:6b:5c:86:c6:ee: 26:8a:e2:c6:8e:bc:20:cb:0d:be:55:72:af:9b:d0:55:6d:f7: ff:11:c7:3c:e1:44:0d:a9:e2:81:7b:36:61:ba:6e:2d:0b:96: bc:58:3d:d7:2a:2b:4d:4b:5f:97:b5:6b:a6:9c:6b:25:fd:7c: 94:e4:27:20:63:61:21:83:bf:7a:b4:9f:cc:f3:37:ca:65:0b: 6e:53:a3:4c:da:1c:21:ba:4f:ba:66:43:bb:49:74:db:c8:09: 4a:28:73:a4:8e:07:8a:99:8a:eb:22:dd:88:2b:78:27:6b:7f: c2:f0:b8:b9:ff:d5:f6:6a:84:a6:bc:49:25:17:f4:62:8a:75: 44:ee:f6:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULr55IVhxhst4lLkSVVB4LnrCnRAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFFQTJGMkYwN0ZGRjM0MzQwNzc3QjNCQkQ3RDFEMTg2 RjRFQzFDQjAeFw0yNTA1MTEwMjI2MzFaFw0yNTA1MTQwNDIyMzFaMDMxMTAvBgNV BAMTKDAyODMwNEMxQUNCOEQ2Q0Q3MjdFOTkwODU3MkUwOUNBN0YxNTdCRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9bzb/r8ao9jDBD7sKD7nveVtm lA7WuLaJWiguzZv0YMdAG5Mx8VMJ2o2iFegvstqqfuzvB1JUJLEcWJiYZvpNafpA R+nYt5/XNlylZc9UKID7ZDnWVms7ZX52wYTbJTqCvtFdHFGavU3u4m+g7/8EgnQe ywVml5E+Yu5wIQEsf4YU3ttmzcHWMgdTn+YR/FVlxN5AVwwGo0KQ/CEgHRsyKLPz upmbCQ+nDKfCPFvUKtKNUQB6XrQuv8OEi92E4XZoNMlLV/L6pYaSB2A/V/g7Q/pQ GYwn4tJkKmpFJ83xjh0mJwO3hJ0Gc8GL9/gL9+ZB1xqDu47RPx6voY8hiD6zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAoMEway41s1yfpkIVy4Jyn8Ve/UwHwYDVR0j BBgwFoAU6uovLwf/80NAd3s7vX0dGG9OwcswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OGI0MjQyMC01NmQwLTQ1MWEtYTI5ZC01ZjlkNjIzMGUyMjcvMC9FQUVBMkYyRjA3 RkZGMzQzNDA3NzdCM0JCRDdEMUQxODZGNEVDMUNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUFFQTJGMkYwN0ZGRjM0MzQwNzc3QjNCQkQ3RDFEMTg2RjRF QzFDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMThiNDI0MjAtNTZkMC00NTFhLWEy OWQtNWY5ZDYyMzBlMjI3LzAvRUFFQTJGMkYwN0ZGRjM0MzQwNzc3QjNCQkQ3RDFE MTg2RjRFQzFDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKqjo1avCv8Lim0uJD9D39l0jZEgP+6PAz0p wx5AtBHtnHvcf5xuoRtpqG4p3t5tieV4zbSUwHbpBPp77Qn+KfGdpPTRGvKKSxEA J6QqM1RyDMm7my8HTvvwch8DS4Crc5QuE28KerlsCZ50cDJH7NbkG2VkHjLzjtlr XIbG7iaK4saOvCDLDb5Vcq+b0FVt9/8RxzzhRA2p4oF7NmG6bi0LlrxYPdcqK01L X5e1a6acayX9fJTkJyBjYSGDv3q0n8zzN8plC25To0zaHCG6T7pmQ7tJdNvICUoo c6SOB4qZiusi3YgreCdrf8LwuLn/1fZqhKa8SSUX9GKKdUTu9kI= -----END CERTIFICATE-----Generated at Mon May 12 08:23:10 2025 by rpki-client