$ rpki-client -vvf repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft File: EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft (raw, json) Hash identifier: 04cHAQQB/Vr0AQAfb0MrcU2qii4SlJccwd3hFSZhGps= Subject key identifier: 94:5B:3E:D1:39:15:C5:EC:C8:D6:E0:1F:41:2B:F9:BA:40:14:02:A1 Authority key identifier: EA:5E:33:0B:F8:DC:FF:6D:09:DF:49:07:4B:46:B2:2E:BD:FB:D4:54 Certificate issuer: /CN=EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454 Certificate serial: 2EB61673163E53A20832D0A7BCC96C2B2C1AF7E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft Manifest number: 01B3 Signing time: Fri 22 Aug 2025 12:01:29 +0000 Manifest this update: Fri 22 Aug 2025 11:56:29 +0000 Manifest next update: Mon 25 Aug 2025 23:46:29 +0000 Files and hashes: 1: 3230322e34372e39322e302f32332d3234203d3e203137393935.roa (hash: BiJ73L794WTIFVs+3dlt1Nu1TwuPunFJpDTHrxt8w6o=) 2: EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl (hash: oENJa+5UHjyt9/FWRLa5AxiI71eC6bTTcV1HPI1fepQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 23:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:b6:16:73:16:3e:53:a2:08:32:d0:a7:bc:c9:6c:2b:2c:1a:f7:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454 Validity Not Before: Aug 22 11:56:29 2025 GMT Not After : Aug 25 23:46:29 2025 GMT Subject: CN=945B3ED13915C5ECC8D6E01F412BF9BA401402A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:60:9e:26:51:26:17:94:54:06:fb:52:42:9f: 88:9c:62:3c:41:4f:e6:48:aa:80:64:91:41:9e:ce: ba:3d:f5:90:45:b2:0c:89:13:92:ef:5f:4e:56:31: 88:64:4c:af:de:82:2a:ea:3a:c0:cc:58:df:c6:bb: 82:43:e7:f4:fb:bc:d1:f3:bc:ec:35:a1:e8:5c:0e: 11:2e:3c:f2:ff:2d:9b:16:f4:25:9d:76:48:af:c7: 09:9b:03:c1:16:bd:de:61:e1:0a:73:65:0e:01:8b: 93:73:76:77:1d:d6:3c:b9:a8:51:db:be:b1:9a:9e: c5:a1:bc:03:90:39:e1:f2:c1:d6:17:54:61:cd:18: 4e:d3:79:ac:0b:97:3f:15:b5:db:06:51:14:fd:3c: 55:8e:ef:50:91:c9:82:b0:af:be:5f:e3:55:c4:bc: 1c:3c:f2:8b:c5:d1:79:28:51:81:e6:66:34:10:2f: 36:92:78:b5:16:71:59:7b:5a:78:0a:ec:4f:7a:87: a0:c3:e7:23:90:e3:4f:87:e2:4d:70:d5:80:2a:b7: 25:53:69:e0:16:3e:d3:5f:ba:a3:7e:11:bb:ec:d7: 06:23:f1:3c:1d:bd:61:cd:4a:4d:e6:76:c1:7e:e5: 44:ed:28:df:37:0d:88:56:d0:8f:71:5b:02:43:27: 6e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:5B:3E:D1:39:15:C5:EC:C8:D6:E0:1F:41:2B:F9:BA:40:14:02:A1 X509v3 Authority Key Identifier: keyid:EA:5E:33:0B:F8:DC:FF:6D:09:DF:49:07:4B:46:B2:2E:BD:FB:D4:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:48:89:58:f7:9d:4a:44:75:c5:40:6a:ab:0b:e2:9c:5f:b4: e9:1c:77:4f:11:ac:07:66:60:3b:b1:59:d0:b9:52:e5:9c:40: 1f:93:29:52:90:8c:c7:b7:22:25:14:3c:e1:8a:b1:e0:fe:b3: 7e:e4:45:07:33:3f:c2:9b:17:0c:68:46:8d:0f:ba:32:1b:69: 21:05:db:76:fe:16:2c:9d:77:94:e3:25:c7:6c:a6:9f:b2:50: c6:06:16:fd:d2:8b:c0:15:2e:97:10:1c:5a:c1:8d:0e:16:2e: 9d:92:f4:02:8d:f9:2a:f7:9e:ff:38:97:86:ff:1a:74:98:c7: 41:b2:4f:59:75:36:13:88:9d:a1:b9:74:91:6a:2c:21:76:18: a1:7f:dd:ba:d4:62:42:21:21:80:ac:18:e0:c8:32:08:1c:45: 83:a9:10:2f:53:86:ab:3f:4d:bb:bd:e1:16:b5:2a:da:71:45: c5:10:ac:1e:ca:f7:06:85:43:aa:0e:58:7f:1e:75:31:07:6f: 60:14:ea:2c:89:c9:90:65:d7:cc:ac:12:15:d3:75:0e:1c:5e: 74:d6:a8:06:92:80:44:7d:c6:8c:b0:ff:d9:39:65:59:f1:cd: 4f:61:4f:b7:71:4c:52:be:9b:f6:b1:1c:62:6b:f0:0e:76:c2: a8:7f:d5:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULrYWcxY+U6IIMtCnvMlsKywa9+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUE1RTMzMEJGOERDRkY2RDA5REY0OTA3NEI0NkIyMkVC REZCRDQ1NDAeFw0yNTA4MjIxMTU2MjlaFw0yNTA4MjUyMzQ2MjlaMDMxMTAvBgNV BAMTKDk0NUIzRUQxMzkxNUM1RUNDOEQ2RTAxRjQxMkJGOUJBNDAxNDAyQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzYJ4mUSYXlFQG+1JCn4icYjxB T+ZIqoBkkUGezro99ZBFsgyJE5LvX05WMYhkTK/egirqOsDMWN/Gu4JD5/T7vNHz vOw1oehcDhEuPPL/LZsW9CWddkivxwmbA8EWvd5h4QpzZQ4Bi5Nzdncd1jy5qFHb vrGansWhvAOQOeHywdYXVGHNGE7TeawLlz8VtdsGURT9PFWO71CRyYKwr75f41XE vBw88ovF0XkoUYHmZjQQLzaSeLUWcVl7WngK7E96h6DD5yOQ40+H4k1w1YAqtyVT aeAWPtNfuqN+Ebvs1wYj8TwdvWHNSk3mdsF+5UTtKN83DYhW0I9xWwJDJ24tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlFs+0TkVxezI1uAfQSv5ukAUAqEwHwYDVR0j BBgwFoAU6l4zC/jc/20J30kHS0ayLr371FQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzcxZGI5Yi03YzQwLTQ5NjYtOTkxYi01MTM4YjM2OTMyNDYvMC9FQTVFMzMwQkY4 RENGRjZEMDlERjQ5MDc0QjQ2QjIyRUJERkJENDU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUE1RTMzMEJGOERDRkY2RDA5REY0OTA3NEI0NkIyMkVCREZC RDQ1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM3MWRiOWItN2M0MC00OTY2LTk5 MWItNTEzOGIzNjkzMjQ2LzAvRUE1RTMzMEJGOERDRkY2RDA5REY0OTA3NEI0NkIy MkVCREZCRDQ1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJIiVj3nUpEdcVAaqsL4pxftOkcd08RrAdm YDuxWdC5UuWcQB+TKVKQjMe3IiUUPOGKseD+s37kRQczP8KbFwxoRo0PujIbaSEF 23b+Fiydd5TjJcdspp+yUMYGFv3Si8AVLpcQHFrBjQ4WLp2S9AKN+Sr3nv84l4b/ GnSYx0GyT1l1NhOInaG5dJFqLCF2GKF/3brUYkIhIYCsGODIMggcRYOpEC9Thqs/ Tbu94Ra1KtpxRcUQrB7K9waFQ6oOWH8edTEHb2AU6iyJyZBl18ysEhXTdQ4cXnTW qAaSgER9xoyw/9k5ZVnxzU9hT7dxTFK+m/axHGJr8A52wqh/1bI= -----END CERTIFICATE-----Generated at Sat Aug 23 17:45:37 2025 by rpki-client