$ rpki-client -vvf repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft File: EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft (raw, json) Hash identifier: bT0jGhXdANg+x8Kxpd2QMVFv/cGOt12iMACIDhEwYzM= Subject key identifier: 47:BD:0B:F5:E4:30:F8:F0:A9:99:64:BF:87:C9:CD:37:50:23:88:8E Authority key identifier: EA:5E:33:0B:F8:DC:FF:6D:09:DF:49:07:4B:46:B2:2E:BD:FB:D4:54 Certificate issuer: /CN=EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454 Certificate serial: 7726290654A6C466FE24C1DE20EB16B45AD63819 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft Manifest number: 0186 Signing time: Sun 11 May 2025 10:01:25 +0000 Manifest this update: Sun 11 May 2025 09:56:25 +0000 Manifest next update: Wed 14 May 2025 14:19:25 +0000 Files and hashes: 1: EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl (hash: VnkSTPPnKY79kyT/hgbciwR2e7qJTz0AsTU8cpBBs5w=) 2: 3230322e34372e39322e302f32332d3234203d3e203137393935.roa (hash: BiJ73L794WTIFVs+3dlt1Nu1TwuPunFJpDTHrxt8w6o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 14:19:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:26:29:06:54:a6:c4:66:fe:24:c1:de:20:eb:16:b4:5a:d6:38:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454 Validity Not Before: May 11 09:56:25 2025 GMT Not After : May 14 14:19:25 2025 GMT Subject: CN=47BD0BF5E430F8F0A99964BF87C9CD375023888E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a8:35:51:bb:3b:7a:8d:e4:25:e7:da:bc:e1: 6d:4c:05:e3:47:be:51:20:c3:5b:aa:c2:5f:ae:c1: 0d:bf:d1:d8:0b:56:c5:c0:52:0b:3c:3f:9b:2d:f2: 92:88:b7:7c:b0:bb:c4:00:53:e0:48:6c:5d:86:bc: 85:73:52:11:2a:94:7c:68:84:c5:68:ad:c5:9c:6f: 1c:26:ca:b5:e4:b2:ee:57:bd:dc:77:18:e2:85:7e: 89:11:e1:71:a3:e9:42:0a:76:b8:7f:9f:2a:22:41: bc:c5:0d:79:67:29:c8:58:a7:83:05:b3:2f:8e:48: de:e2:10:a0:09:23:78:24:91:bd:45:99:f0:db:e6: 8d:e8:ba:5c:ca:07:cf:51:68:2c:0f:66:a7:46:d7: 99:3b:a6:f1:21:e9:b8:39:d1:37:63:62:2a:cc:f0: 0b:94:c9:41:50:9f:fd:43:84:ca:0c:b4:5b:95:d8: 60:79:1b:af:80:1c:93:a1:ee:90:20:e8:80:62:14: 21:41:fb:f6:b9:ee:8b:6a:fd:76:83:58:01:d8:87: 89:62:c1:be:c5:a2:2e:2d:ce:a0:72:f8:8a:b4:0e: f6:63:ab:4b:e3:61:29:32:99:16:13:2c:1f:92:b5: 44:14:40:3b:64:df:d4:78:40:93:c1:e2:23:d9:21: 58:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:BD:0B:F5:E4:30:F8:F0:A9:99:64:BF:87:C9:CD:37:50:23:88:8E X509v3 Authority Key Identifier: keyid:EA:5E:33:0B:F8:DC:FF:6D:09:DF:49:07:4B:46:B2:2E:BD:FB:D4:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:b9:da:45:19:e4:87:b1:01:15:31:9c:ff:70:31:48:ba:fc: 4f:01:c2:cb:dc:3a:e7:17:c3:21:85:f2:a2:9d:1f:e9:b9:6b: 8e:e7:c0:8f:68:23:cb:38:ce:2f:2e:0f:02:b3:8c:30:0b:9d: 76:0f:70:bb:41:61:2d:2c:f4:65:d5:8d:31:21:5b:5b:76:2d: fb:9c:d8:a5:ed:37:72:ec:d3:1f:5b:5a:2e:ef:5f:3b:c6:b2: a4:4c:fe:1b:33:50:b7:5c:85:75:61:1b:b5:78:af:d0:9e:d8: 4b:86:56:c1:16:6f:9e:b2:d5:5b:b7:f6:6a:be:6d:9c:6a:87: 35:a7:e4:83:31:55:e7:72:ee:98:8b:b5:48:6d:b3:f8:eb:0d: 7b:af:94:1a:6a:ef:ff:a3:bb:17:d6:c5:35:8a:a1:ab:e0:d5: fb:b8:9a:25:62:9c:1c:50:79:d4:97:09:34:75:7a:8a:3c:e8: c7:15:f6:60:59:b8:c5:b1:d1:70:1b:d8:85:71:81:4b:42:34: 08:55:10:a6:4c:27:fe:dd:c9:13:1d:b0:ff:bf:7c:27:d1:58: 1d:e7:89:fe:a7:48:54:71:5a:86:1e:0a:30:ba:54:6f:ea:a5: 4a:4f:91:4f:cc:58:a9:d2:35:f5:5f:d0:65:0f:9d:a4:a0:36: 39:32:4b:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdyYpBlSmxGb+JMHeIOsWtFrWOBkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUE1RTMzMEJGOERDRkY2RDA5REY0OTA3NEI0NkIyMkVC REZCRDQ1NDAeFw0yNTA1MTEwOTU2MjVaFw0yNTA1MTQxNDE5MjVaMDMxMTAvBgNV BAMTKDQ3QkQwQkY1RTQzMEY4RjBBOTk5NjRCRjg3QzlDRDM3NTAyMzg4OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVqDVRuzt6jeQl59q84W1MBeNH vlEgw1uqwl+uwQ2/0dgLVsXAUgs8P5st8pKIt3ywu8QAU+BIbF2GvIVzUhEqlHxo hMVorcWcbxwmyrXksu5Xvdx3GOKFfokR4XGj6UIKdrh/nyoiQbzFDXlnKchYp4MF sy+OSN7iEKAJI3gkkb1FmfDb5o3oulzKB89RaCwPZqdG15k7pvEh6bg50TdjYirM 8AuUyUFQn/1DhMoMtFuV2GB5G6+AHJOh7pAg6IBiFCFB+/a57otq/XaDWAHYh4li wb7Foi4tzqBy+Iq0DvZjq0vjYSkymRYTLB+StUQUQDtk39R4QJPB4iPZIVgrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR70L9eQw+PCpmWS/h8nNN1AjiI4wHwYDVR0j BBgwFoAU6l4zC/jc/20J30kHS0ayLr371FQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzcxZGI5Yi03YzQwLTQ5NjYtOTkxYi01MTM4YjM2OTMyNDYvMC9FQTVFMzMwQkY4 RENGRjZEMDlERjQ5MDc0QjQ2QjIyRUJERkJENDU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUE1RTMzMEJGOERDRkY2RDA5REY0OTA3NEI0NkIyMkVCREZC RDQ1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM3MWRiOWItN2M0MC00OTY2LTk5 MWItNTEzOGIzNjkzMjQ2LzAvRUE1RTMzMEJGOERDRkY2RDA5REY0OTA3NEI0NkIy MkVCREZCRDQ1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEm52kUZ5IexARUxnP9wMUi6/E8BwsvcOucX wyGF8qKdH+m5a47nwI9oI8s4zi8uDwKzjDALnXYPcLtBYS0s9GXVjTEhW1t2Lfuc 2KXtN3Ls0x9bWi7vXzvGsqRM/hszULdchXVhG7V4r9Ce2EuGVsEWb56y1Vu39mq+ bZxqhzWn5IMxVedy7piLtUhts/jrDXuvlBpq7/+juxfWxTWKoavg1fu4miVinBxQ edSXCTR1eoo86McV9mBZuMWx0XAb2IVxgUtCNAhVEKZMJ/7dyRMdsP+/fCfRWB3n if6nSFRxWoYeCjC6VG/qpUpPkU/MWKnSNfVf0GUPnaSgNjkyS18= -----END CERTIFICATE-----Generated at Mon May 12 10:38:59 2025 by rpki-client