$ rpki-client -vvf repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft File: EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft (raw, json) Hash identifier: H7snFSVe+Cup2JGGx3msqUZckg/Y1ghqQ5ZZZ40z2JI= Subject key identifier: 9D:91:04:12:A2:01:24:E7:93:BB:AA:09:FD:1C:40:E6:1C:EC:46:FC Authority key identifier: EA:5E:33:0B:F8:DC:FF:6D:09:DF:49:07:4B:46:B2:2E:BD:FB:D4:54 Certificate issuer: /CN=EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454 Certificate serial: 4E2879C9293A14DFBAD1ECD229B2905D3ABCBDB4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft Manifest number: 01CD Signing time: Mon 20 Oct 2025 13:11:26 +0000 Manifest this update: Mon 20 Oct 2025 13:06:26 +0000 Manifest next update: Thu 23 Oct 2025 17:53:26 +0000 Files and hashes: 1: 3230322e34372e39322e302f32332d3234203d3e203137393935.roa (hash: 80MS0ZuTW+5iQNzQYBDQPZfjWsQsANAR7yyCgQ7zGBU=) 2: EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl (hash: S2z1IeqRjws9pjeS9tIU7EiSaJP9G5bKgRZ2AE/Jx0Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:28:79:c9:29:3a:14:df:ba:d1:ec:d2:29:b2:90:5d:3a:bc:bd:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454 Validity Not Before: Oct 20 13:06:26 2025 GMT Not After : Oct 23 17:53:26 2025 GMT Subject: CN=9D910412A20124E793BBAA09FD1C40E61CEC46FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c7:38:14:04:ef:76:11:a9:a5:40:90:68:ee: 69:28:04:ff:e7:f5:dc:5b:05:fb:b3:76:e8:e4:73: 4d:ee:e6:37:b5:04:5f:62:85:f4:4d:4f:43:0d:06: 02:db:6d:2a:e7:5f:81:fb:47:3f:4d:d0:c1:07:5f: 3b:ee:58:9e:d0:71:07:73:54:9a:c9:f6:43:45:c8: 02:66:ef:25:f5:64:b7:56:2c:dd:57:01:bb:ec:c9: 9e:0a:fe:fe:3f:75:57:ae:b6:cd:0d:51:54:fc:3d: 74:7a:03:b4:a2:93:62:62:b3:ae:54:35:5a:96:4b: cc:e2:a3:b2:df:5a:72:20:bb:74:ff:d1:27:6f:eb: f9:80:a3:c8:bd:0c:71:4a:ae:61:13:23:49:34:03: 38:c2:3e:81:1c:17:a0:52:4c:3e:8b:fa:a1:84:32: 9e:91:3f:5d:df:d1:6a:f5:76:9d:b3:01:d0:1d:d8: 8a:bd:0f:27:3f:1e:1e:f9:eb:ca:a0:b3:b6:43:d4: 4d:6c:f9:02:b2:1e:9a:77:b1:69:dd:01:66:44:04: 3b:9c:9b:c9:11:0d:23:c4:e4:72:8d:3b:d0:74:f9: 32:c0:a6:21:bd:53:a9:48:b7:e2:b2:a1:56:f5:59: e5:08:6c:c7:43:a4:92:2d:1b:71:f0:1d:bc:42:cd: 12:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:91:04:12:A2:01:24:E7:93:BB:AA:09:FD:1C:40:E6:1C:EC:46:FC X509v3 Authority Key Identifier: keyid:EA:5E:33:0B:F8:DC:FF:6D:09:DF:49:07:4B:46:B2:2E:BD:FB:D4:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:4c:69:ca:ef:05:d9:e4:0a:f3:fa:0c:cf:5b:b7:87:ae:b1: e2:66:54:b1:76:d0:55:52:57:75:e7:5e:0a:17:65:7c:cc:63: 02:c9:b5:44:d1:dc:c5:2d:d5:a8:50:47:f5:4c:a8:49:11:f5: e3:62:88:ec:8c:5b:57:fd:66:23:45:b8:4d:e4:72:e0:fc:7b: d8:6c:b4:8a:34:a9:49:37:d9:f6:79:c4:4f:68:f2:36:58:64: ca:79:03:29:a3:de:3e:eb:13:d9:0d:9b:7b:48:d4:d1:33:c2: fb:c7:ff:35:45:8d:1d:99:39:36:89:d8:66:21:8d:93:32:ec: 1d:f2:a1:f4:dc:28:d4:ba:13:b4:f6:8a:c6:a8:31:7e:5b:51: 2d:ff:82:70:cc:11:80:fd:40:1b:b5:2d:bb:09:80:20:10:99: e1:7a:60:51:2f:60:06:39:e1:c2:4a:e7:54:a4:c6:86:a4:a2: 9b:6b:22:c7:4f:31:d0:a7:fb:25:a6:11:f2:a0:52:43:27:3a: dd:d9:b9:99:63:1d:95:b7:1f:67:42:10:2e:6a:9c:73:51:a5: c8:0f:74:62:e9:19:b4:13:12:df:41:d2:48:d4:1b:37:93:06: e0:74:c7:2a:ce:ef:fd:af:88:7a:24:25:64:fc:5d:6c:31:ba: 89:15:43:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTih5ySk6FN+60ezSKbKQXTq8vbQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUE1RTMzMEJGOERDRkY2RDA5REY0OTA3NEI0NkIyMkVC REZCRDQ1NDAeFw0yNTEwMjAxMzA2MjZaFw0yNTEwMjMxNzUzMjZaMDMxMTAvBgNV BAMTKDlEOTEwNDEyQTIwMTI0RTc5M0JCQUEwOUZEMUM0MEU2MUNFQzQ2RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4xzgUBO92EamlQJBo7mkoBP/n 9dxbBfuzdujkc03u5je1BF9ihfRNT0MNBgLbbSrnX4H7Rz9N0MEHXzvuWJ7QcQdz VJrJ9kNFyAJm7yX1ZLdWLN1XAbvsyZ4K/v4/dVeuts0NUVT8PXR6A7Sik2Jis65U NVqWS8zio7LfWnIgu3T/0Sdv6/mAo8i9DHFKrmETI0k0AzjCPoEcF6BSTD6L+qGE Mp6RP13f0Wr1dp2zAdAd2Iq9Dyc/Hh7568qgs7ZD1E1s+QKyHpp3sWndAWZEBDuc m8kRDSPE5HKNO9B0+TLApiG9U6lIt+KyoVb1WeUIbMdDpJItG3HwHbxCzRKHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnZEEEqIBJOeTu6oJ/RxA5hzsRvwwHwYDVR0j BBgwFoAU6l4zC/jc/20J30kHS0ayLr371FQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzcxZGI5Yi03YzQwLTQ5NjYtOTkxYi01MTM4YjM2OTMyNDYvMC9FQTVFMzMwQkY4 RENGRjZEMDlERjQ5MDc0QjQ2QjIyRUJERkJENDU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUE1RTMzMEJGOERDRkY2RDA5REY0OTA3NEI0NkIyMkVCREZC RDQ1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM3MWRiOWItN2M0MC00OTY2LTk5 MWItNTEzOGIzNjkzMjQ2LzAvRUE1RTMzMEJGOERDRkY2RDA5REY0OTA3NEI0NkIy MkVCREZCRDQ1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGRMacrvBdnkCvP6DM9bt4euseJmVLF20FVS V3XnXgoXZXzMYwLJtUTR3MUt1ahQR/VMqEkR9eNiiOyMW1f9ZiNFuE3kcuD8e9hs tIo0qUk32fZ5xE9o8jZYZMp5Aymj3j7rE9kNm3tI1NEzwvvH/zVFjR2ZOTaJ2GYh jZMy7B3yofTcKNS6E7T2isaoMX5bUS3/gnDMEYD9QBu1LbsJgCAQmeF6YFEvYAY5 4cJK51SkxoakoptrIsdPMdCn+yWmEfKgUkMnOt3ZuZljHZW3H2dCEC5qnHNRpcgP dGLpGbQTEt9B0kjUGzeTBuB0xyrO7/2viHokJWT8XWwxuokVQ6A= -----END CERTIFICATE-----Generated at Mon Oct 20 14:57:06 2025 by rpki-client