$ rpki-client -vvf repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft File: EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft (raw, json) Hash identifier: 3dF+2Uzh+3FjfV0YiP2MiGs6haABjt9+5XyL/dnou5k= Subject key identifier: AD:CE:18:2B:AC:1A:8D:C7:56:F9:CF:6C:5C:D8:F4:A5:07:23:F6:43 Authority key identifier: EB:78:21:4F:24:8E:FE:08:B4:E4:62:FD:AF:D4:E7:0B:C3:D0:5A:2F Certificate issuer: /CN=EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F Certificate serial: 6346A47EBD8AD98B0A0B9CD9FE2053DD08CB5DD7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft Manifest number: D5 Signing time: Thu 21 Aug 2025 11:20:49 +0000 Manifest this update: Thu 21 Aug 2025 11:15:49 +0000 Manifest next update: Sun 24 Aug 2025 15:48:49 +0000 Files and hashes: 1: 3130332e3130312e3231372e302f32342d3234203d3e20313530393431.roa (hash: aAMjUzaN1yMPp7oXLSGICiOHUfNylQXYPCCHO4WZk9E=) 2: 3130332e3130312e3231362e302f32342d3234203d3e20313530393431.roa (hash: V76cC5CNnJtNiE3A1eNlVqFtp7QA7yYWZJ54/BrVb60=) 3: EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.crl (hash: osiKhTMTn+kU5VMagbbHr15vrtIwp04Xi1/yHaCGsFw=) 4: 3130332e3130312e3231362e302f32332d3233203d3e20313530393431.roa (hash: 0KEJOj4To40f7hQCQKr4Kq8RhTmo523YXQIvq+ZY6HI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.crl rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 15:48:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:46:a4:7e:bd:8a:d9:8b:0a:0b:9c:d9:fe:20:53:dd:08:cb:5d:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F Validity Not Before: Aug 21 11:15:49 2025 GMT Not After : Aug 24 15:48:49 2025 GMT Subject: CN=ADCE182BAC1A8DC756F9CF6C5CD8F4A50723F643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5e:62:9b:18:6f:a3:13:f5:39:fb:cd:79:72: 4b:75:36:52:76:07:94:7a:b4:93:4b:d9:48:16:43: 7c:b9:de:a4:24:cb:b8:6d:4d:f4:96:68:ae:08:61: 26:51:9d:17:bc:36:35:62:24:fc:0d:aa:ad:e3:4a: 3f:05:75:b8:9e:24:1c:57:26:68:cf:61:41:bb:b4: 6e:26:82:50:e3:b6:eb:0b:ae:07:7a:4f:39:aa:6a: ab:cc:3a:54:d3:87:7e:50:31:2e:85:5f:94:72:a5: ba:ec:ef:86:3f:19:b7:1b:d6:c6:ec:f5:4c:fc:d9: 76:46:c3:5e:fd:3b:9c:c1:64:9c:ed:84:1b:6d:6d: 0e:d7:3e:90:59:cb:58:75:06:73:28:76:ec:96:99: 72:80:21:7a:5a:cd:ef:72:a1:04:14:1e:20:b6:b5: 80:be:43:ef:f9:07:8b:60:a9:5f:75:bf:ad:8d:4a: c2:8e:d1:45:3e:d5:63:c3:86:a3:80:b7:c3:1f:b1: 91:7b:59:ba:3f:6f:d9:d6:93:69:bd:5e:47:99:14: 51:5a:44:21:0c:e5:32:12:e4:94:a4:c5:94:7e:84: 19:ea:ae:20:26:50:e4:2c:61:52:f5:79:1c:fd:4f: de:35:77:c9:69:f9:bd:0e:7a:16:9e:2a:74:c6:43: 22:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:CE:18:2B:AC:1A:8D:C7:56:F9:CF:6C:5C:D8:F4:A5:07:23:F6:43 X509v3 Authority Key Identifier: keyid:EB:78:21:4F:24:8E:FE:08:B4:E4:62:FD:AF:D4:E7:0B:C3:D0:5A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:4a:ae:a8:7f:56:5d:5d:67:3c:94:63:e7:79:44:7e:7d:be: b6:cc:43:3b:6c:d5:f7:5f:69:41:6d:21:fd:aa:9c:46:20:f7: 46:9f:07:c1:02:58:98:bc:f7:c8:76:1f:2c:eb:85:ee:11:22: 6b:8d:5e:db:c6:2c:18:c6:a1:b1:e5:e0:ed:b9:5f:69:01:c2: a8:65:50:22:b6:d7:0c:fe:86:40:fd:fe:6c:fc:7b:24:b0:1d: b3:6a:5d:d4:a2:23:94:0c:a7:9b:bd:6e:df:b1:02:e5:a6:30: 1a:dc:1a:cf:8f:c2:bd:f9:7e:15:89:c9:fc:05:05:3e:1a:51: 56:e5:d4:7f:fe:27:b9:7b:f9:c0:2f:f4:8e:4f:89:00:48:97: 08:fe:f3:b7:b1:41:7b:db:5c:fa:cb:82:59:51:55:c7:5b:30: 68:fa:8b:89:95:d2:4c:53:1f:0e:07:ed:f2:bf:7d:f5:7b:5b: 72:ba:ff:9e:83:15:b9:80:f4:98:8f:13:f1:91:96:4e:d6:3e: 77:a4:06:f7:0e:c2:05:29:cc:71:c5:60:03:89:bd:98:70:9a: 25:1f:e7:13:90:11:ca:94:28:1d:b6:fe:0c:ac:1f:e8:9c:cf: 00:84:74:b0:09:11:d1:9c:6a:b5:81:b9:1e:fb:35:5b:2a:5a: 45:47:b3:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY0akfr2K2YsKC5zZ/iBT3QjLXdcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUI3ODIxNEYyNDhFRkUwOEI0RTQ2MkZEQUZENEU3MEJD M0QwNUEyRjAeFw0yNTA4MjExMTE1NDlaFw0yNTA4MjQxNTQ4NDlaMDMxMTAvBgNV BAMTKEFEQ0UxODJCQUMxQThEQzc1NkY5Q0Y2QzVDRDhGNEE1MDcyM0Y2NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAXmKbGG+jE/U5+815ckt1NlJ2 B5R6tJNL2UgWQ3y53qQky7htTfSWaK4IYSZRnRe8NjViJPwNqq3jSj8FdbieJBxX JmjPYUG7tG4mglDjtusLrgd6TzmqaqvMOlTTh35QMS6FX5Rypbrs74Y/Gbcb1sbs 9Uz82XZGw179O5zBZJzthBttbQ7XPpBZy1h1BnModuyWmXKAIXpaze9yoQQUHiC2 tYC+Q+/5B4tgqV91v62NSsKO0UU+1WPDhqOAt8MfsZF7Wbo/b9nWk2m9XkeZFFFa RCEM5TIS5JSkxZR+hBnqriAmUOQsYVL1eRz9T941d8lp+b0OehaeKnTGQyI/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrc4YK6wajcdW+c9sXNj0pQcj9kMwHwYDVR0j BBgwFoAU63ghTySO/gi05GL9r9TnC8PQWi8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTFmMzk3MS0zYTQ3LTQ1NWQtYWIzMC1lN2MyM2I2MWI5ZjIvMC9FQjc4MjE0RjI0 OEVGRTA4QjRFNDYyRkRBRkQ0RTcwQkMzRDA1QTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUI3ODIxNEYyNDhFRkUwOEI0RTQ2MkZEQUZENEU3MEJDM0Qw NUEyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGExZjM5NzEtM2E0Ny00NTVkLWFi MzAtZTdjMjNiNjFiOWYyLzAvRUI3ODIxNEYyNDhFRkUwOEI0RTQ2MkZEQUZENEU3 MEJDM0QwNUEyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIpKrqh/Vl1dZzyUY+d5RH59vrbMQzts1fdf aUFtIf2qnEYg90afB8ECWJi898h2Hyzrhe4RImuNXtvGLBjGobHl4O25X2kBwqhl UCK21wz+hkD9/mz8eySwHbNqXdSiI5QMp5u9bt+xAuWmMBrcGs+Pwr35fhWJyfwF BT4aUVbl1H/+J7l7+cAv9I5PiQBIlwj+87exQXvbXPrLgllRVcdbMGj6i4mV0kxT Hw4H7fK/ffV7W3K6/56DFbmA9JiPE/GRlk7WPnekBvcOwgUpzHHFYAOJvZhwmiUf 5xOQEcqUKB22/gysH+iczwCEdLAJEdGcarWBuR77NVsqWkVHs0s= -----END CERTIFICATE-----Generated at Sat Aug 23 10:07:15 2025 by rpki-client