$ rpki-client -vvf repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft File: EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft (raw, json) Hash identifier: KdUuxdA6ZfQ6TQYe5wM+uSpTqIC8uLrtIV5GyPbYxzc= Subject key identifier: 8C:0D:6F:C7:0A:71:1A:5D:2E:4F:F8:96:5D:34:F0:36:FC:BE:EE:0E Authority key identifier: EA:5E:33:0B:F8:DC:FF:6D:09:DF:49:07:4B:46:B2:2E:BD:FB:D4:54 Certificate issuer: /CN=EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454 Certificate serial: 370C429D1DBFBB985BD94B75E1E26C6DF4715F9F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft Manifest number: 019B Signing time: Sun 29 Jun 2025 01:01:24 +0000 Manifest this update: Sun 29 Jun 2025 00:56:24 +0000 Manifest next update: Wed 02 Jul 2025 02:44:24 +0000 Files and hashes: 1: EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl (hash: IGi7dvUIL+l2W9OHuG+Sj8katHcFA1/j5hTT1+1iRgc=) 2: 3230322e34372e39322e302f32332d3234203d3e203137393935.roa (hash: BiJ73L794WTIFVs+3dlt1Nu1TwuPunFJpDTHrxt8w6o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 02:44:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:0c:42:9d:1d:bf:bb:98:5b:d9:4b:75:e1:e2:6c:6d:f4:71:5f:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454 Validity Not Before: Jun 29 00:56:24 2025 GMT Not After : Jul 2 02:44:24 2025 GMT Subject: CN=8C0D6FC70A711A5D2E4FF8965D34F036FCBEEE0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1a:70:cb:9d:33:75:d9:e1:5c:f9:d2:42:15: 76:be:88:33:28:0c:02:2d:29:2d:6c:f4:65:12:73: 55:53:f6:cd:b0:6e:7d:ef:33:2f:be:59:d5:19:1f: fd:46:d0:11:cb:ef:cb:1a:7b:48:21:8f:48:ed:ef: 68:27:37:ba:bd:aa:ee:c0:ce:c8:11:79:4a:83:83: e0:0c:28:3e:d2:05:62:10:36:56:b4:93:75:28:fc: 68:f2:28:76:fa:58:2f:0c:66:68:d7:c0:a0:e0:13: ad:7b:e1:88:68:de:66:f6:9d:7f:ab:08:71:7f:08: 5a:8d:e1:f2:ab:e8:f2:9f:16:31:e6:2d:2b:d9:56: 84:7f:ce:ce:05:52:bd:5d:52:0d:d1:e7:8d:2a:d6: 8a:ae:d9:03:f1:31:13:d3:dc:04:e6:75:b0:72:f8: 14:23:77:47:03:1d:38:99:f8:5d:21:84:90:84:77: 22:b7:d1:6f:b8:3a:7c:1f:23:a1:a8:bd:16:2b:df: 9f:b3:5a:3d:bd:31:8c:40:d6:ca:d9:79:91:e1:a1: 49:0b:85:df:79:de:28:c3:c7:cc:d6:d3:d9:60:a3: ee:7a:b5:56:8f:71:ae:5e:fb:d4:98:8d:15:78:a3: 72:a7:a6:ae:9f:00:03:3f:0f:0a:7c:38:5f:ab:fa: e8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:0D:6F:C7:0A:71:1A:5D:2E:4F:F8:96:5D:34:F0:36:FC:BE:EE:0E X509v3 Authority Key Identifier: keyid:EA:5E:33:0B:F8:DC:FF:6D:09:DF:49:07:4B:46:B2:2E:BD:FB:D4:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:8c:9e:ca:df:d6:5a:ef:99:cc:49:03:b9:9d:91:01:42:e3: de:07:89:66:55:e4:da:06:3d:18:a0:28:ef:81:59:79:56:d0: de:59:8d:fa:21:dd:5a:b8:23:aa:4d:65:8b:6f:e3:9a:57:15: 80:ee:71:9e:2a:6b:2a:6d:f8:7c:94:f8:25:c5:7f:8b:93:b4: 74:5f:ff:92:3f:ab:20:e5:7c:73:ed:99:83:c7:c6:fb:b1:de: 8e:f8:ba:c4:46:39:3d:8f:40:63:68:a9:56:74:43:f1:00:f0: 71:4c:f4:55:52:9b:64:e5:c5:ac:75:1b:c7:e2:75:ee:7c:c1: 8f:a7:d3:86:33:d3:c7:8b:2b:3e:96:f9:22:d3:3f:a3:d9:e7: e7:9e:10:84:14:da:82:7a:93:62:a4:0e:a9:9d:4f:1e:38:8d: d7:6b:42:fa:0b:2f:d6:fa:38:1d:b0:07:e4:87:77:15:e2:f8: c1:54:2e:7a:fa:03:3e:f8:9d:43:1e:9a:05:f1:12:45:8d:86: 28:7f:d0:04:a0:1b:cc:e2:3e:17:1f:b7:b2:8c:76:07:e3:67: 10:78:8b:b2:ca:7f:e9:c3:00:7a:1a:08:4f:1e:0a:2d:ab:c4: 3f:47:ed:f1:96:d0:b4:b7:50:32:36:10:97:6c:74:1b:36:a3: 33:77:38:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNwxCnR2/u5hb2Ut14eJsbfRxX58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUE1RTMzMEJGOERDRkY2RDA5REY0OTA3NEI0NkIyMkVC REZCRDQ1NDAeFw0yNTA2MjkwMDU2MjRaFw0yNTA3MDIwMjQ0MjRaMDMxMTAvBgNV BAMTKDhDMEQ2RkM3MEE3MTFBNUQyRTRGRjg5NjVEMzRGMDM2RkNCRUVFMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDGnDLnTN12eFc+dJCFXa+iDMo DAItKS1s9GUSc1VT9s2wbn3vMy++WdUZH/1G0BHL78sae0ghj0jt72gnN7q9qu7A zsgReUqDg+AMKD7SBWIQNla0k3Uo/GjyKHb6WC8MZmjXwKDgE6174Yho3mb2nX+r CHF/CFqN4fKr6PKfFjHmLSvZVoR/zs4FUr1dUg3R540q1oqu2QPxMRPT3ATmdbBy +BQjd0cDHTiZ+F0hhJCEdyK30W+4OnwfI6GovRYr35+zWj29MYxA1srZeZHhoUkL hd953ijDx8zW09lgo+56tVaPca5e+9SYjRV4o3Knpq6fAAM/Dwp8OF+r+uhZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjA1vxwpxGl0uT/iWXTTwNvy+7g4wHwYDVR0j BBgwFoAU6l4zC/jc/20J30kHS0ayLr371FQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzcxZGI5Yi03YzQwLTQ5NjYtOTkxYi01MTM4YjM2OTMyNDYvMC9FQTVFMzMwQkY4 RENGRjZEMDlERjQ5MDc0QjQ2QjIyRUJERkJENDU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUE1RTMzMEJGOERDRkY2RDA5REY0OTA3NEI0NkIyMkVCREZC RDQ1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM3MWRiOWItN2M0MC00OTY2LTk5 MWItNTEzOGIzNjkzMjQ2LzAvRUE1RTMzMEJGOERDRkY2RDA5REY0OTA3NEI0NkIy MkVCREZCRDQ1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEyMnsrf1lrvmcxJA7mdkQFC494HiWZV5NoG PRigKO+BWXlW0N5Zjfoh3Vq4I6pNZYtv45pXFYDucZ4qaypt+HyU+CXFf4uTtHRf /5I/qyDlfHPtmYPHxvux3o74usRGOT2PQGNoqVZ0Q/EA8HFM9FVSm2Tlxax1G8fi de58wY+n04Yz08eLKz6W+SLTP6PZ5+eeEIQU2oJ6k2KkDqmdTx44jddrQvoLL9b6 OB2wB+SHdxXi+MFULnr6Az74nUMemgXxEkWNhih/0ASgG8ziPhcft7KMdgfjZxB4 i7LKf+nDAHoaCE8eCi2rxD9H7fGW0LS3UDI2EJdsdBs2ozN3OJg= -----END CERTIFICATE-----Generated at Sun Jun 29 18:54:46 2025 by rpki-client