$ rpki-client -vvf repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft File: EAAF14D74C27E1502835CCF1541D5D92498C8427.mft (raw, json) Hash identifier: Yg+oig8vbHb8WnH6GeP3wqNHTi7KSSnt8EdesJmH8FA= Subject key identifier: 43:3C:78:19:CA:F5:3E:F9:CE:E0:4E:21:5A:4A:55:D8:45:77:DF:4C Authority key identifier: EA:AF:14:D7:4C:27:E1:50:28:35:CC:F1:54:1D:5D:92:49:8C:84:27 Certificate issuer: /CN=EAAF14D74C27E1502835CCF1541D5D92498C8427 Certificate serial: 78A68B775234403D0AE4E531E07C5EACB486EE3A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft Manifest number: 0100 Signing time: Sun 19 Oct 2025 11:01:51 +0000 Manifest this update: Sun 19 Oct 2025 10:56:51 +0000 Manifest next update: Wed 22 Oct 2025 20:06:51 +0000 Files and hashes: 1: EAAF14D74C27E1502835CCF1541D5D92498C8427.crl (hash: zxgDAtNKjO63w/KXLXS1SZsrkji7dGuRUOHHjx554fo=) 2: 323030313a6466333a393263303a3a2f34382d3438203d3e20313532343231.roa (hash: sF0+Hzy6oJxlj5HSJzIfCoHVtQeeL/eSjk9uB3se86E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.crl rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 20:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:a6:8b:77:52:34:40:3d:0a:e4:e5:31:e0:7c:5e:ac:b4:86:ee:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAAF14D74C27E1502835CCF1541D5D92498C8427 Validity Not Before: Oct 19 10:56:51 2025 GMT Not After : Oct 22 20:06:51 2025 GMT Subject: CN=433C7819CAF53EF9CEE04E215A4A55D84577DF4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:24:83:32:69:c5:db:ed:b9:d3:3f:e2:a4:51: ad:71:1a:82:bb:5c:af:2d:0b:33:90:11:59:99:92: d3:b4:36:46:ca:df:5f:4e:b1:cb:89:6c:ae:3e:38: 07:3c:bb:29:aa:e6:fb:2f:66:7a:df:35:96:14:6c: 4e:f5:c5:e9:7c:fd:64:dc:40:54:8d:2a:58:e0:40: 50:d3:36:e5:40:fb:6f:8b:a1:56:26:85:81:43:a7: 76:e3:00:32:43:38:df:28:d5:0c:63:e3:d0:4c:e5: f0:52:e7:64:92:16:aa:71:a6:e1:49:57:35:db:43: 2a:68:e7:0b:99:00:cd:a7:6d:0d:bd:ce:68:c0:cf: 32:36:df:5e:3e:02:fd:32:23:75:51:cf:d1:62:c6: 2f:64:dd:2e:76:95:3a:06:4a:ec:85:1b:ca:0f:2f: 4b:f0:1d:f2:34:76:d7:59:c0:94:75:e2:d2:cb:b2: 0a:5b:5b:9d:3d:32:85:e8:99:25:9f:a4:c6:c8:47: d3:ba:05:f1:e3:f3:a0:4b:13:b6:3e:00:51:f4:d1: 0c:52:58:93:7b:52:6f:8e:b1:4d:db:49:ca:7d:40: 29:47:38:a4:aa:46:f8:26:9e:18:0c:21:de:8a:e7: 52:35:1f:ed:38:af:9d:f8:9d:37:66:ec:23:b1:c9: 5f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:3C:78:19:CA:F5:3E:F9:CE:E0:4E:21:5A:4A:55:D8:45:77:DF:4C X509v3 Authority Key Identifier: keyid:EA:AF:14:D7:4C:27:E1:50:28:35:CC:F1:54:1D:5D:92:49:8C:84:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAAF14D74C27E1502835CCF1541D5D92498C8427.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/EAAF14D74C27E1502835CCF1541D5D92498C8427.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:9d:12:2b:d0:ab:2e:a3:13:9b:67:e8:c9:6d:d4:ef:73:a7: 6b:d1:49:92:90:1f:f3:6e:27:05:47:00:7f:48:ac:59:e6:07: aa:b6:a5:e4:40:79:bf:6b:f2:69:70:a0:51:53:a4:a2:3a:b1: b9:20:fc:c4:a0:3e:b2:f9:3e:91:7e:42:95:4f:12:51:45:fb: 28:87:b7:d3:14:58:cc:ec:5d:15:ba:d6:dc:fc:cf:d1:82:7c: 2d:a6:17:da:53:71:57:b2:46:36:a5:46:a5:46:b3:b7:f3:62: 12:82:b5:fc:88:d4:a5:58:5b:d3:43:9c:52:3c:47:b6:15:4d: 13:1b:f4:2f:5f:35:40:24:2a:d2:88:5e:91:6d:6e:df:9c:c3: a4:08:79:37:6b:a5:91:18:a1:ec:48:44:bf:7d:b3:44:73:1d: 08:e0:f0:4d:aa:81:00:fa:12:63:a9:18:a5:e6:53:c7:3b:a7: 4c:66:4f:f1:2a:89:a4:26:b5:87:35:fb:f0:8e:c4:9c:dc:c1: ce:a4:1e:e2:cc:f7:5a:67:2f:2a:c8:ba:43:d8:41:d5:24:95: 25:ff:91:6b:88:64:fe:a4:1d:c0:b4:65:51:16:02:ca:75:4d: d9:0a:6e:43:ae:3f:74:84:65:bf:61:83:23:0a:d5:c6:a8:bf: 60:89:03:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeKaLd1I0QD0K5OUx4HxerLSG7jowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVEOTI0 OThDODQyNzAeFw0yNTEwMTkxMDU2NTFaFw0yNTEwMjIyMDA2NTFaMDMxMTAvBgNV BAMTKDQzM0M3ODE5Q0FGNTNFRjlDRUUwNEUyMTVBNEE1NUQ4NDU3N0RGNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9JIMyacXb7bnTP+KkUa1xGoK7 XK8tCzOQEVmZktO0NkbK319OscuJbK4+OAc8uymq5vsvZnrfNZYUbE71xel8/WTc QFSNKljgQFDTNuVA+2+LoVYmhYFDp3bjADJDON8o1Qxj49BM5fBS52SSFqpxpuFJ VzXbQypo5wuZAM2nbQ29zmjAzzI2314+Av0yI3VRz9Fixi9k3S52lToGSuyFG8oP L0vwHfI0dtdZwJR14tLLsgpbW509MoXomSWfpMbIR9O6BfHj86BLE7Y+AFH00QxS WJN7Um+OsU3bScp9QClHOKSqRvgmnhgMId6K51I1H+04r534nTdm7COxyV8LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQzx4Gcr1PvnO4E4hWkpV2EV330wwHwYDVR0j BBgwFoAU6q8U10wn4VAoNczxVB1dkkmMhCcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTRmNzkzNC1jZGM3LTQwODItODNmYi1kZjdkNGY4MjE5YWYvMS9FQUFGMTRENzRD MjdFMTUwMjgzNUNDRjE1NDFENUQ5MjQ5OEM4NDI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVEOTI0OThD ODQyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE0Zjc5MzQtY2RjNy00MDgyLTgz ZmItZGY3ZDRmODIxOWFmLzEvRUFBRjE0RDc0QzI3RTE1MDI4MzVDQ0YxNTQxRDVE OTI0OThDODQyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAKdEivQqy6jE5tn6Mlt1O9zp2vRSZKQH/Nu JwVHAH9IrFnmB6q2peRAeb9r8mlwoFFTpKI6sbkg/MSgPrL5PpF+QpVPElFF+yiH t9MUWMzsXRW61tz8z9GCfC2mF9pTcVeyRjalRqVGs7fzYhKCtfyI1KVYW9NDnFI8 R7YVTRMb9C9fNUAkKtKIXpFtbt+cw6QIeTdrpZEYoexIRL99s0RzHQjg8E2qgQD6 EmOpGKXmU8c7p0xmT/EqiaQmtYc1+/COxJzcwc6kHuLM91pnLyrIukPYQdUklSX/ kWuIZP6kHcC0ZVEWAsp1TdkKbkOuP3SEZb9hgyMK1caov2CJAzk= -----END CERTIFICATE-----Generated at Mon Oct 20 20:38:23 2025 by rpki-client