$ rpki-client -vvf repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft File: EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft (raw, json) Hash identifier: xNdVyNbRVKD4ngLdAv4359bUvM1Ff6F5b3+oac7C0Uo= Subject key identifier: 3A:14:8C:86:26:4F:E7:41:85:BF:81:E3:5D:E1:52:BA:9B:FC:0A:6F Authority key identifier: EA:DA:0A:EE:51:F3:91:0B:50:A0:65:D5:7D:94:6E:3E:AF:A8:BD:11 Certificate issuer: /CN=EADA0AEE51F3910B50A065D57D946E3EAFA8BD11 Certificate serial: 727BF0BB60958C50705987EF810358B9E4E8D70B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft Manifest number: 0523 Signing time: Sun 19 Oct 2025 13:41:34 +0000 Manifest this update: Sun 19 Oct 2025 13:36:34 +0000 Manifest next update: Wed 22 Oct 2025 15:52:34 +0000 Files and hashes: 1: 3130332e3131342e35322e302f32332d3234203d3e20313337333439.roa (hash: IHRMKls6bDo6efJZc4SPr2h5Nej24aqy+WpwVULn5ZQ=) 2: 323030313a6466343a663330303a3a2f34382d3438203d3e20313337333439.roa (hash: bM2bCiWvvR67fLAxEBLdbaa9UVbcM3IM7NopO4JRa9U=) 3: EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.crl (hash: bcUeDSvavFJBH/myiNGhCnPsju8XnCzcF6d3BaE3U3I=) 4: 3130332e3131342e35322e302f32342d3234203d3e20313337333439.roa (hash: PbzUEe0UQr8XKfElcqOIqamd3OJjVX7VfL4ViGWOAc4=) 5: 3130332e3131342e35332e302f32342d3234203d3e20313337333439.roa (hash: L0aGyUwEYHJDyRetS6plSaGHfNVoM/NqZGtNJzzztcc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.crl rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 15:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:7b:f0:bb:60:95:8c:50:70:59:87:ef:81:03:58:b9:e4:e8:d7:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EADA0AEE51F3910B50A065D57D946E3EAFA8BD11 Validity Not Before: Oct 19 13:36:34 2025 GMT Not After : Oct 22 15:52:34 2025 GMT Subject: CN=3A148C86264FE74185BF81E35DE152BA9BFC0A6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:10:34:69:ee:63:4c:1b:c2:af:38:42:6e:6d: d0:8d:fe:2d:71:4d:40:96:e7:58:ae:6b:47:aa:21: be:21:71:a5:7c:dd:fa:3d:cd:13:e4:a7:29:20:3b: c0:82:2a:72:63:fa:42:42:2b:94:24:e6:88:cb:a1: 8c:23:ad:68:9d:84:43:8e:a2:fd:31:9d:6a:50:b1: cb:6c:c1:6c:fc:33:ab:35:91:14:48:f1:f8:03:4c: 96:b1:36:eb:e6:aa:13:bf:b6:94:09:46:8c:98:22: 20:fd:71:1d:57:76:88:f3:90:a3:b2:3e:2e:d1:35: 5b:33:6c:1d:37:9b:89:e4:e3:c4:70:82:60:02:9c: 15:73:08:01:e7:47:a4:62:44:ba:8a:e0:52:a1:40: d9:0d:83:fc:cb:00:e1:cc:3f:7b:c8:73:df:5a:90: 78:2d:45:c6:36:9d:7f:45:67:bf:44:3b:47:73:11: c4:42:bb:2b:cd:e5:1e:a6:ac:f2:43:12:fb:b6:81: c2:27:bb:a0:20:5b:b4:87:1c:8d:6a:d1:69:e0:23: 4e:8e:74:34:b0:a9:44:1f:77:7f:55:4d:ca:72:af: a9:a4:be:c6:54:3f:d8:01:0c:4d:c8:4e:20:72:84: 78:bd:9b:81:14:7f:7a:26:72:fc:12:3f:87:51:40: 0c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:14:8C:86:26:4F:E7:41:85:BF:81:E3:5D:E1:52:BA:9B:FC:0A:6F X509v3 Authority Key Identifier: keyid:EA:DA:0A:EE:51:F3:91:0B:50:A0:65:D5:7D:94:6E:3E:AF:A8:BD:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:8a:34:b0:10:ec:90:01:27:a8:58:1f:ae:05:5f:57:e0:f9: c0:ce:04:47:4b:ac:d6:cc:83:42:58:0a:a8:21:48:af:2b:55: b3:8f:6e:af:3b:34:cb:ba:24:67:43:b4:ec:17:c8:0b:41:3b: 53:02:21:66:4e:88:bc:37:d4:b4:f7:ab:6c:5b:46:c0:62:8d: 96:ad:0b:af:3c:db:92:42:d5:25:7f:e2:76:7d:17:c0:7f:1d: dd:b5:fc:c0:c2:84:8a:8f:5b:b5:05:9b:5a:71:9b:f8:3d:82: 8e:b8:7a:3f:f9:76:e1:93:72:19:b7:68:08:65:69:f5:49:80: 4b:7c:da:58:62:c8:66:50:ca:41:2e:e6:62:3c:96:ce:d8:c0: 82:90:5c:fe:5b:b3:1a:83:de:d0:25:b8:89:0c:43:07:87:8f: d4:2c:d5:5a:46:12:14:11:19:33:09:9a:e0:10:e8:4e:b7:3d: b5:96:cf:e8:d5:68:8c:f9:de:59:08:4c:f4:c6:c0:9e:e0:60: d7:81:f6:9c:22:52:4e:35:e3:5d:79:46:0f:54:fa:42:7b:29: 49:0d:f9:fa:f3:ae:e8:6f:28:97:6a:72:10:53:c1:04:38:58: 1c:77:bd:b8:32:33:ae:c4:55:76:04:0a:cc:8b:a7:46:4e:7b: 11:6c:c0:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcnvwu2CVjFBwWYfvgQNYueTo1wswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFEQTBBRUU1MUYzOTEwQjUwQTA2NUQ1N0Q5NDZFM0VB RkE4QkQxMTAeFw0yNTEwMTkxMzM2MzRaFw0yNTEwMjIxNTUyMzRaMDMxMTAvBgNV BAMTKDNBMTQ4Qzg2MjY0RkU3NDE4NUJGODFFMzVERTE1MkJBOUJGQzBBNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjEDRp7mNMG8KvOEJubdCN/i1x TUCW51iua0eqIb4hcaV83fo9zRPkpykgO8CCKnJj+kJCK5Qk5ojLoYwjrWidhEOO ov0xnWpQsctswWz8M6s1kRRI8fgDTJaxNuvmqhO/tpQJRoyYIiD9cR1XdojzkKOy Pi7RNVszbB03m4nk48RwgmACnBVzCAHnR6RiRLqK4FKhQNkNg/zLAOHMP3vIc99a kHgtRcY2nX9FZ79EO0dzEcRCuyvN5R6mrPJDEvu2gcInu6AgW7SHHI1q0WngI06O dDSwqUQfd39VTcpyr6mkvsZUP9gBDE3ITiByhHi9m4EUf3omcvwSP4dRQAxRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOhSMhiZP50GFv4HjXeFSupv8Cm8wHwYDVR0j BBgwFoAU6toK7lHzkQtQoGXVfZRuPq+ovREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDk2MmM2ZS01OTVhLTQ3YzQtYWE3Yy1lZjhlNzdjYWU2NDIvMC9FQURBMEFFRTUx RjM5MTBCNTBBMDY1RDU3RDk0NkUzRUFGQThCRDExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUFEQTBBRUU1MUYzOTEwQjUwQTA2NUQ1N0Q5NDZFM0VBRkE4 QkQxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA5NjJjNmUtNTk1YS00N2M0LWFh N2MtZWY4ZTc3Y2FlNjQyLzAvRUFEQTBBRUU1MUYzOTEwQjUwQTA2NUQ1N0Q5NDZF M0VBRkE4QkQxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFiKNLAQ7JABJ6hYH64FX1fg+cDOBEdLrNbM g0JYCqghSK8rVbOPbq87NMu6JGdDtOwXyAtBO1MCIWZOiLw31LT3q2xbRsBijZat C68825JC1SV/4nZ9F8B/Hd21/MDChIqPW7UFm1pxm/g9go64ej/5duGTchm3aAhl afVJgEt82lhiyGZQykEu5mI8ls7YwIKQXP5bsxqD3tAluIkMQweHj9Qs1VpGEhQR GTMJmuAQ6E63PbWWz+jVaIz53lkITPTGwJ7gYNeB9pwiUk414115Rg9U+kJ7KUkN +frzruhvKJdqchBTwQQ4WBx3vbgyM67EVXYECsyLp0ZOexFswNQ= -----END CERTIFICATE-----Generated at Mon Oct 20 18:19:44 2025 by rpki-client