$ rpki-client -vvf repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft File: EAAF14D74C27E1502835CCF1541D5D92498C8427.mft (raw, json) Hash identifier: ktaHNiHCinVtzvoiB1A66Ywy+QcTAa3h8gzido7dBzA= Subject key identifier: D9:40:02:3F:5C:98:E4:98:C8:7C:0F:EA:05:9B:D5:0F:3E:FC:BB:B0 Authority key identifier: EA:AF:14:D7:4C:27:E1:50:28:35:CC:F1:54:1D:5D:92:49:8C:84:27 Certificate issuer: /CN=EAAF14D74C27E1502835CCF1541D5D92498C8427 Certificate serial: 28F04E1A4607C33EB7E4711865A17D6BF8EDDFBE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft Manifest number: CD Signing time: Fri 27 Jun 2025 19:02:02 +0000 Manifest this update: Fri 27 Jun 2025 18:57:02 +0000 Manifest next update: Tue 01 Jul 2025 01:20:02 +0000 Files and hashes: 1: EAAF14D74C27E1502835CCF1541D5D92498C8427.crl (hash: 3pyrR3rOX8ZK874JUWk1NyftYTDO3piSEiBXpVKZPuk=) 2: 323030313a6466333a393263303a3a2f34382d3438203d3e20313532343231.roa (hash: sF0+Hzy6oJxlj5HSJzIfCoHVtQeeL/eSjk9uB3se86E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.crl rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 01:20:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:f0:4e:1a:46:07:c3:3e:b7:e4:71:18:65:a1:7d:6b:f8:ed:df:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAAF14D74C27E1502835CCF1541D5D92498C8427 Validity Not Before: Jun 27 18:57:02 2025 GMT Not After : Jul 1 01:20:02 2025 GMT Subject: CN=D940023F5C98E498C87C0FEA059BD50F3EFCBBB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e0:48:a2:00:64:eb:99:22:aa:13:39:6e:be: f8:cc:fe:13:48:d1:0a:2c:1d:a4:a6:6b:b0:0c:9b: 32:bc:08:f8:1c:34:b7:d6:99:c7:54:fd:16:eb:83: 2d:37:a8:1e:9a:c9:3b:d8:77:a6:e6:59:59:36:85: c8:65:84:18:78:56:a7:85:f7:ea:5c:d9:a9:d0:4e: b9:80:2c:dc:d1:f3:92:70:81:2a:60:e4:ea:e1:b9: 3b:ec:fc:47:ea:71:c6:d6:2a:45:43:e0:52:36:05: 87:4d:93:f7:9b:3c:b1:9c:4b:0d:10:43:4a:1c:4a: db:99:4b:4b:cb:04:51:4a:39:5d:fa:a7:a1:3c:ac: 03:fa:1d:e2:0c:54:44:95:40:a3:1f:b0:7d:a3:d6: ff:8a:c7:de:df:3d:e7:be:fc:48:37:97:63:01:7c: 6f:93:e0:5e:23:f4:77:80:84:9b:a9:50:bd:d2:e4: 01:7a:02:2c:f5:85:38:e0:75:84:89:2e:97:98:e9: 7f:2b:1f:7d:20:d9:d5:77:a5:fc:ab:be:e6:de:d7: 19:39:54:5b:3b:55:31:b0:9d:13:12:4f:aa:0b:fb: 98:c9:aa:9d:71:04:43:8d:91:5f:c7:37:60:ab:39: 67:29:3b:b2:2b:6f:e7:25:8c:78:e3:94:09:63:7b: 00:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:40:02:3F:5C:98:E4:98:C8:7C:0F:EA:05:9B:D5:0F:3E:FC:BB:B0 X509v3 Authority Key Identifier: keyid:EA:AF:14:D7:4C:27:E1:50:28:35:CC:F1:54:1D:5D:92:49:8C:84:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:55:31:ed:f0:55:d6:72:2e:c5:0a:16:48:5d:88:90:08:c4: d2:d4:ef:0a:0d:c4:0e:88:13:e5:f2:25:5e:63:83:2c:45:29: 19:68:df:8c:68:2e:d1:27:c0:ba:66:2c:8f:5f:26:9b:ad:97: 06:53:54:49:70:66:18:bd:62:d1:51:2a:0c:35:07:6a:97:65: af:45:9f:7e:70:4e:84:bb:fb:e2:b7:39:ca:33:5c:dc:bb:ba: 7c:e1:af:4b:37:b6:84:5f:5b:b2:15:20:eb:28:10:65:1f:c9: 7b:12:3c:2f:d0:d5:7e:90:e9:c1:e7:50:42:e8:9e:96:8e:bf: 5b:d7:dd:ff:b6:12:ee:b4:e0:a9:be:57:d2:04:b7:d7:b1:66: 52:81:43:40:b2:81:ba:f6:87:20:40:3a:2a:fb:a8:db:d8:e7: ff:20:dc:bf:52:1d:ca:02:f2:7b:a4:40:f7:ab:28:c0:84:32: ed:c2:76:4b:84:ad:d0:80:58:f5:30:29:b1:27:1a:ec:c6:96: 10:93:0e:d4:c4:d9:53:2b:c1:1c:03:c7:4a:c2:79:0d:37:3b: 04:9c:40:29:a8:4f:40:40:55:72:2f:08:fa:95:ce:0b:cc:6c: 22:52:56:de:cd:e4:b4:95:7a:64:56:af:af:8f:14:15:ac:3d: 68:ba:26:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKPBOGkYHwz635HEYZaF9a/jt374wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVEOTI0 OThDODQyNzAeFw0yNTA2MjcxODU3MDJaFw0yNTA3MDEwMTIwMDJaMDMxMTAvBgNV BAMTKEQ5NDAwMjNGNUM5OEU0OThDODdDMEZFQTA1OUJENTBGM0VGQ0JCQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl4EiiAGTrmSKqEzluvvjM/hNI 0QosHaSma7AMmzK8CPgcNLfWmcdU/Rbrgy03qB6ayTvYd6bmWVk2hchlhBh4VqeF 9+pc2anQTrmALNzR85JwgSpg5OrhuTvs/EfqccbWKkVD4FI2BYdNk/ebPLGcSw0Q Q0ocStuZS0vLBFFKOV36p6E8rAP6HeIMVESVQKMfsH2j1v+Kx97fPee+/Eg3l2MB fG+T4F4j9HeAhJupUL3S5AF6Aiz1hTjgdYSJLpeY6X8rH30g2dV3pfyrvube1xk5 VFs7VTGwnRMST6oL+5jJqp1xBEONkV/HN2CrOWcpO7Irb+cljHjjlAljewDZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2UACP1yY5JjIfA/qBZvVDz78u7AwHwYDVR0j BBgwFoAU6q8U10wn4VAoNczxVB1dkkmMhCcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTRmNzkzNC1jZGM3LTQwODItODNmYi1kZjdkNGY4MjE5YWYvMS9FQUFGMTRENzRD MjdFMTUwMjgzNUNDRjE1NDFENUQ5MjQ5OEM4NDI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVEOTI0OThD ODQyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE0Zjc5MzQtY2RjNy00MDgyLTgz ZmItZGY3ZDRmODIxOWFmLzEvRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVE OTI0OThDODQyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALJVMe3wVdZyLsUKFkhdiJAIxNLU7woNxA6I E+XyJV5jgyxFKRlo34xoLtEnwLpmLI9fJputlwZTVElwZhi9YtFRKgw1B2qXZa9F n35wToS7++K3OcozXNy7unzhr0s3toRfW7IVIOsoEGUfyXsSPC/Q1X6Q6cHnUELo npaOv1vX3f+2Eu604Km+V9IEt9exZlKBQ0Cygbr2hyBAOir7qNvY5/8g3L9SHcoC 8nukQPerKMCEMu3CdkuErdCAWPUwKbEnGuzGlhCTDtTE2VMrwRwDx0rCeQ03OwSc QCmoT0BAVXIvCPqVzgvMbCJSVt7N5LSVemRWr6+PFBWsPWi6Jh4= -----END CERTIFICATE-----Generated at Sun Jun 29 18:16:02 2025 by rpki-client