$ rpki-client -vvf repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.mft File: EA1FF21834CE2546B93FF7ABD7A24231492E6157.mft (raw, json) Hash identifier: T1oYYOZdCDmHmOmdvS+MQlz7xX1+fpQw/2zTLbFv7FQ= Subject key identifier: A7:19:DC:EE:B4:E0:C8:D5:DA:F5:DC:43:A2:84:F7:15:C7:0B:FE:B8 Authority key identifier: EA:1F:F2:18:34:CE:25:46:B9:3F:F7:AB:D7:A2:42:31:49:2E:61:57 Certificate issuer: /CN=EA1FF21834CE2546B93FF7ABD7A24231492E6157 Certificate serial: 552D39BDB7E5BE754DD91868D00E79454A2AEFEF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA1FF21834CE2546B93FF7ABD7A24231492E6157.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.mft Manifest number: 04A5 Signing time: Mon 20 Oct 2025 10:11:57 +0000 Manifest this update: Mon 20 Oct 2025 10:06:57 +0000 Manifest next update: Thu 23 Oct 2025 12:52:57 +0000 Files and hashes: 1: EA1FF21834CE2546B93FF7ABD7A24231492E6157.crl (hash: NqXK3AIBPQ5QaZqENb5Gtt+PmfBzKSMb1nol51YRwgg=) 2: 3130332e3136312e3134392e302f32342d3234203d3e20313431363137.roa (hash: aO5GUOOYzWayE1+nuqtYCqJb6iqD3aY2aScclOaaV0o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.crl rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA1FF21834CE2546B93FF7ABD7A24231492E6157.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:2d:39:bd:b7:e5:be:75:4d:d9:18:68:d0:0e:79:45:4a:2a:ef:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA1FF21834CE2546B93FF7ABD7A24231492E6157 Validity Not Before: Oct 20 10:06:57 2025 GMT Not After : Oct 23 12:52:57 2025 GMT Subject: CN=A719DCEEB4E0C8D5DAF5DC43A284F715C70BFEB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:9e:6e:ef:98:90:b3:d5:95:78:18:56:7e:35: 82:d3:d3:90:8c:25:63:12:38:53:a0:c9:f9:53:10: b5:cf:b1:bb:a1:0c:da:40:76:f4:99:95:58:16:f4: 2a:8c:f1:72:0e:4f:23:b1:a4:a1:c6:63:b6:af:d3: c6:7e:d4:70:f5:48:60:d6:46:58:ef:98:f0:84:96: 08:3b:30:b6:f6:66:31:b7:77:61:cf:16:c3:93:7d: b3:18:89:ac:1e:81:a2:2b:44:56:12:28:6e:12:b4: 0f:81:27:3d:43:ca:b7:42:ee:22:d8:e4:e5:bc:5f: 6b:7b:1c:4f:f5:3d:55:5a:b4:9c:b5:d5:ec:0a:bd: d7:da:6b:52:3e:9c:06:a4:79:f6:7a:63:e8:03:b0: 97:2b:b0:29:1b:0e:38:a5:90:0c:2b:a0:ab:74:52: a7:f7:c5:68:db:c7:8a:1b:8e:a8:5b:76:c5:ff:50: 34:76:b9:ed:41:21:f4:5f:b6:d1:01:49:b3:e8:8b: 32:a3:06:5f:5a:32:23:34:3a:63:a2:93:7f:e7:67: da:23:0e:3b:48:51:95:12:99:97:2a:ad:a5:20:4c: 77:ff:b9:f1:8b:7f:82:98:a9:27:48:0e:65:3f:c8: e1:ae:70:ee:f6:18:fd:67:91:8a:78:88:02:6f:6d: b2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:19:DC:EE:B4:E0:C8:D5:DA:F5:DC:43:A2:84:F7:15:C7:0B:FE:B8 X509v3 Authority Key Identifier: keyid:EA:1F:F2:18:34:CE:25:46:B9:3F:F7:AB:D7:A2:42:31:49:2E:61:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA1FF21834CE2546B93FF7ABD7A24231492E6157.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:c6:df:b4:81:95:08:f2:ad:e4:03:02:09:b3:30:e6:94:72: 8a:5b:de:3a:07:6b:18:51:32:75:43:9b:ad:ad:bf:0a:b9:f3: 16:da:a3:72:fe:5c:a8:94:5d:a2:08:2c:c7:5f:0e:b1:35:f8: 78:cd:ee:53:8f:f9:4d:8a:22:b1:1c:fb:45:c7:13:59:4b:6d: 63:35:d5:7a:6d:fb:da:3e:1c:13:fc:47:a6:05:42:c7:4a:f5: fa:0a:d3:1c:95:24:e6:27:01:5e:2a:63:c6:3e:20:66:c3:51: 56:dc:00:c7:c7:66:23:de:81:94:38:d2:38:88:cb:36:67:21: 25:b3:9b:d9:32:61:a1:aa:3b:bc:fc:4d:bb:97:0b:08:1c:2b: 7f:bd:9f:d7:e2:59:45:49:ce:89:61:e7:5e:52:74:53:30:b9: 07:16:65:4a:b8:27:d6:38:83:0e:e4:9e:dd:9a:af:60:85:5c: 5d:c3:8b:88:2f:44:cd:fb:f3:e0:32:bb:ed:c0:57:ed:36:e2: af:aa:d5:42:05:83:6a:d9:e5:05:46:2d:2b:79:f9:20:f6:ed: 1c:fa:04:e4:0e:94:a8:32:9b:ac:55:33:7e:31:8d:86:b4:ca: ed:37:bf:40:13:55:b0:72:e3:e5:5e:29:cd:37:ea:40:d5:87: d3:53:ff:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVS05vbflvnVN2Rho0A55RUoq7+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUExRkYyMTgzNENFMjU0NkI5M0ZGN0FCRDdBMjQyMzE0 OTJFNjE1NzAeFw0yNTEwMjAxMDA2NTdaFw0yNTEwMjMxMjUyNTdaMDMxMTAvBgNV BAMTKEE3MTlEQ0VFQjRFMEM4RDVEQUY1REM0M0EyODRGNzE1QzcwQkZFQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqnm7vmJCz1ZV4GFZ+NYLT05CM JWMSOFOgyflTELXPsbuhDNpAdvSZlVgW9CqM8XIOTyOxpKHGY7av08Z+1HD1SGDW RljvmPCElgg7MLb2ZjG3d2HPFsOTfbMYiawegaIrRFYSKG4StA+BJz1DyrdC7iLY 5OW8X2t7HE/1PVVatJy11ewKvdfaa1I+nAakefZ6Y+gDsJcrsCkbDjilkAwroKt0 Uqf3xWjbx4objqhbdsX/UDR2ue1BIfRfttEBSbPoizKjBl9aMiM0OmOik3/nZ9oj DjtIUZUSmZcqraUgTHf/ufGLf4KYqSdIDmU/yOGucO72GP1nkYp4iAJvbbJrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpxnc7rTgyNXa9dxDooT3FccL/rgwHwYDVR0j BBgwFoAU6h/yGDTOJUa5P/er16JCMUkuYVcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjExOGYyYi05Zjk0LTQxOTktYTI0MS04ZmM1MWQxN2UwYzUvMC9FQTFGRjIxODM0 Q0UyNTQ2QjkzRkY3QUJEN0EyNDIzMTQ5MkU2MTU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUExRkYyMTgzNENFMjU0NkI5M0ZGN0FCRDdBMjQyMzE0OTJF NjE1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDYxMThmMmItOWY5NC00MTk5LWEy NDEtOGZjNTFkMTdlMGM1LzAvRUExRkYyMTgzNENFMjU0NkI5M0ZGN0FCRDdBMjQy MzE0OTJFNjE1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADbG37SBlQjyreQDAgmzMOaUcopb3joHaxhR MnVDm62tvwq58xbao3L+XKiUXaIILMdfDrE1+HjN7lOP+U2KIrEc+0XHE1lLbWM1 1Xpt+9o+HBP8R6YFQsdK9foK0xyVJOYnAV4qY8Y+IGbDUVbcAMfHZiPegZQ40jiI yzZnISWzm9kyYaGqO7z8TbuXCwgcK3+9n9fiWUVJzolh515SdFMwuQcWZUq4J9Y4 gw7knt2ar2CFXF3Di4gvRM378+Ayu+3AV+024q+q1UIFg2rZ5QVGLSt5+SD27Rz6 BOQOlKgym6xVM34xjYa0yu03v0ATVbBy4+VeKc036kDVh9NT/5s= -----END CERTIFICATE-----Generated at Tue Oct 21 00:07:58 2025 by rpki-client