$ rpki-client -vvf repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft File: EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft (raw, json) Hash identifier: /StBcKKoh7YasnYm0Kst006a8eNRIk9F02bXOBP39YE= Subject key identifier: 10:D0:64:82:09:FC:BE:F1:8B:DA:34:C1:CD:95:56:A8:16:6F:9E:AD Authority key identifier: EA:DA:0A:EE:51:F3:91:0B:50:A0:65:D5:7D:94:6E:3E:AF:A8:BD:11 Certificate issuer: /CN=EADA0AEE51F3910B50A065D57D946E3EAFA8BD11 Certificate serial: 655FED8DC2619F86842A8276BDA8E82B8238F88B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft Manifest number: 04DB Signing time: Sun 11 May 2025 17:01:31 +0000 Manifest this update: Sun 11 May 2025 16:56:31 +0000 Manifest next update: Wed 14 May 2025 19:36:31 +0000 Files and hashes: 1: 3130332e3131342e35332e302f32342d3234203d3e20313337333439.roa (hash: L0aGyUwEYHJDyRetS6plSaGHfNVoM/NqZGtNJzzztcc=) 2: 323030313a6466343a663330303a3a2f34382d3438203d3e20313337333439.roa (hash: 8FPgLGtfyDAEpIxK5OqOfu3zjvn4uiTV9+bBUUTfjTg=) 3: 3130332e3131342e35322e302f32342d3234203d3e20313337333439.roa (hash: PbzUEe0UQr8XKfElcqOIqamd3OJjVX7VfL4ViGWOAc4=) 4: 3130332e3131342e35322e302f32332d3234203d3e20313337333439.roa (hash: IHRMKls6bDo6efJZc4SPr2h5Nej24aqy+WpwVULn5ZQ=) 5: EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.crl (hash: 1JeRkct3loS6GIY0V8cwBHxd5LgMYpGBFVkV8TF9q1U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.crl rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 19:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:5f:ed:8d:c2:61:9f:86:84:2a:82:76:bd:a8:e8:2b:82:38:f8:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EADA0AEE51F3910B50A065D57D946E3EAFA8BD11 Validity Not Before: May 11 16:56:31 2025 GMT Not After : May 14 19:36:31 2025 GMT Subject: CN=10D0648209FCBEF18BDA34C1CD9556A8166F9EAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fc:e5:94:00:64:7e:51:e7:36:fa:64:cc:c8: 87:07:4c:f7:c5:28:85:3d:1b:4f:fa:48:0d:ec:f5: 3a:61:46:0d:16:d8:c2:51:7e:7a:8e:26:3e:f3:be: 28:a7:b9:2a:14:5f:0b:d4:48:7e:ac:18:46:1a:11: d0:c8:2c:66:3e:96:e2:cc:b8:3a:54:8f:0e:45:e8: 5b:86:71:c4:6b:49:d8:7b:ca:8b:fa:54:2b:01:ae: 05:6a:e7:7d:76:bd:24:11:5c:1d:93:6c:72:a6:89: 5c:19:c3:2c:5a:d3:26:10:0d:67:19:a0:7c:5a:cc: c1:64:31:96:5c:1c:18:85:21:aa:a6:e5:0e:e9:24: 07:92:9b:bf:b5:01:12:d1:a0:c4:a4:2c:36:e1:bd: 41:d4:1c:5c:cf:31:cc:94:64:87:34:0d:e9:10:52: 5a:c7:34:66:94:17:28:c0:46:06:e7:7d:ce:d1:bd: 5d:72:10:5b:1f:6a:90:4d:18:b0:e7:31:63:c8:e7: 81:29:27:9c:53:35:0f:99:d5:fc:68:e9:12:22:0a: 29:51:d4:a3:3e:c7:e3:bc:5d:5e:5d:18:d6:97:c4: 21:7d:2a:80:c8:0c:d0:ec:9e:ad:5b:a5:de:41:ba: 15:df:a5:de:4c:5f:3e:32:12:3e:33:61:f1:d9:64: cf:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D0:64:82:09:FC:BE:F1:8B:DA:34:C1:CD:95:56:A8:16:6F:9E:AD X509v3 Authority Key Identifier: keyid:EA:DA:0A:EE:51:F3:91:0B:50:A0:65:D5:7D:94:6E:3E:AF:A8:BD:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:46:9e:53:9b:ff:42:a1:14:1c:a5:ce:46:63:3e:80:4c:aa: 8c:26:19:cc:65:2e:f1:12:56:1b:e6:0f:fe:ca:6a:8d:55:16: 8f:9a:38:62:b1:2d:31:34:63:ac:3c:0e:92:7b:b8:41:cf:55: 10:b1:a2:e8:f0:72:77:85:76:aa:6e:c2:f1:4e:d2:fa:cf:9c: 77:cb:83:ef:db:43:ac:f7:f4:0a:21:35:ab:ad:ae:ea:f5:9d: e5:67:e6:ff:12:a7:e3:69:8a:0e:82:31:b7:a0:1e:b4:b2:09: 54:c0:46:a1:26:52:33:db:fd:40:ad:3c:c4:f7:b7:c3:12:d4: 50:ac:02:e5:f1:28:5f:5e:b1:30:08:9b:12:9f:65:a5:c9:a6: d2:ea:d1:6a:ea:d4:46:9e:32:bb:85:57:fd:04:29:0e:91:f6: 79:f5:c5:7b:38:d9:19:64:50:b8:9b:76:ea:db:55:a4:1e:c9: 54:fe:30:ec:19:b3:e6:c4:ad:15:c9:8b:e3:33:9c:28:c1:ac: 28:04:56:9f:15:aa:9e:8a:c3:73:c8:d5:1a:ef:e4:11:85:ac: 77:2d:ee:a2:ba:71:06:f9:dc:51:c1:e0:c9:59:da:1c:cb:2e: a9:0b:14:53:ae:4e:66:3a:da:b8:0f:ba:54:9c:45:46:7c:91: 06:51:a9:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZV/tjcJhn4aEKoJ2vajoK4I4+IswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFEQTBBRUU1MUYzOTEwQjUwQTA2NUQ1N0Q5NDZFM0VB RkE4QkQxMTAeFw0yNTA1MTExNjU2MzFaFw0yNTA1MTQxOTM2MzFaMDMxMTAvBgNV BAMTKDEwRDA2NDgyMDlGQ0JFRjE4QkRBMzRDMUNEOTU1NkE4MTY2RjlFQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9/OWUAGR+Uec2+mTMyIcHTPfF KIU9G0/6SA3s9TphRg0W2MJRfnqOJj7zviinuSoUXwvUSH6sGEYaEdDILGY+luLM uDpUjw5F6FuGccRrSdh7yov6VCsBrgVq5312vSQRXB2TbHKmiVwZwyxa0yYQDWcZ oHxazMFkMZZcHBiFIaqm5Q7pJAeSm7+1ARLRoMSkLDbhvUHUHFzPMcyUZIc0DekQ UlrHNGaUFyjARgbnfc7RvV1yEFsfapBNGLDnMWPI54EpJ5xTNQ+Z1fxo6RIiCilR 1KM+x+O8XV5dGNaXxCF9KoDIDNDsnq1bpd5BuhXfpd5MXz4yEj4zYfHZZM8zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUENBkggn8vvGL2jTBzZVWqBZvnq0wHwYDVR0j BBgwFoAU6toK7lHzkQtQoGXVfZRuPq+ovREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDk2MmM2ZS01OTVhLTQ3YzQtYWE3Yy1lZjhlNzdjYWU2NDIvMC9FQURBMEFFRTUx RjM5MTBCNTBBMDY1RDU3RDk0NkUzRUFGQThCRDExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUFEQTBBRUU1MUYzOTEwQjUwQTA2NUQ1N0Q5NDZFM0VBRkE4 QkQxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA5NjJjNmUtNTk1YS00N2M0LWFh N2MtZWY4ZTc3Y2FlNjQyLzAvRUFEQTBBRUU1MUYzOTEwQjUwQTA2NUQ1N0Q5NDZF M0VBRkE4QkQxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALBGnlOb/0KhFBylzkZjPoBMqowmGcxlLvES VhvmD/7Kao1VFo+aOGKxLTE0Y6w8DpJ7uEHPVRCxoujwcneFdqpuwvFO0vrPnHfL g+/bQ6z39AohNautrur1neVn5v8Sp+Npig6CMbegHrSyCVTARqEmUjPb/UCtPMT3 t8MS1FCsAuXxKF9esTAImxKfZaXJptLq0Wrq1EaeMruFV/0EKQ6R9nn1xXs42Rlk ULibdurbVaQeyVT+MOwZs+bErRXJi+MznCjBrCgEVp8Vqp6Kw3PI1Rrv5BGFrHct 7qK6cQb53FHB4MlZ2hzLLqkLFFOuTmY62rgPulScRUZ8kQZRqc0= -----END CERTIFICATE-----Generated at Sun May 11 23:35:50 2025 by rpki-client