$ rpki-client -vvf repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft File: EBA04070CA27E646C332039E07557734C6732ED2.mft (raw, json) Hash identifier: pYgcsFIIT5qmVSkwAwqUtpr7a/DWUs0LAZirQiLaSYY= Subject key identifier: BA:89:A5:A8:23:96:F8:8B:63:19:26:25:88:BD:6E:E6:B0:F1:46:35 Authority key identifier: EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2 Certificate issuer: /CN=EBA04070CA27E646C332039E07557734C6732ED2 Certificate serial: 44E29E8DA657F8204913F22C60955882EA658082 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft Manifest number: 01AD Signing time: Tue 01 Jul 2025 14:31:46 +0000 Manifest this update: Tue 01 Jul 2025 14:26:46 +0000 Manifest next update: Fri 04 Jul 2025 19:43:46 +0000 Files and hashes: 1: EBA04070CA27E646C332039E07557734C6732ED2.crl (hash: 2q+gU5GFYa928t1LaD+70Yj/jD/G7wFn5DGSU+28foQ=) 2: 3130332e3131312e3134302e302f32342d3234203d3e20313431343631.roa (hash: QxaX29t3xWsvrxzUc9KZP0vfZV3yJi9iJK7O+Mg8IY0=) 3: 3130332e3131312e3134312e302f32342d3234203d3e20313431343631.roa (hash: s7QOuxoUDXpiJb6tRGci1SxU/QQoW+kyAaIfnlMIP40=) 4: 3130332e3131312e3134332e302f32342d3234203d3e20313431343631.roa (hash: VLiqZK5/RUS6hOrKh5dQ9m9sABBe0DKT5N2DBOt5pfM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.crl rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 19:43:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:e2:9e:8d:a6:57:f8:20:49:13:f2:2c:60:95:58:82:ea:65:80:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBA04070CA27E646C332039E07557734C6732ED2 Validity Not Before: Jul 1 14:26:46 2025 GMT Not After : Jul 4 19:43:46 2025 GMT Subject: CN=BA89A5A82396F88B6319262588BD6EE6B0F14635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b4:f5:dd:b9:77:2b:9e:7a:1c:3a:e4:c2:1e: af:0b:fe:8a:0a:b7:36:03:1c:1f:f3:58:4e:6b:b5: f2:dd:19:6d:75:90:6d:37:3b:d3:10:27:df:47:a9: 2f:d8:4f:17:2c:43:6e:6d:44:a9:6b:8f:0d:f2:e8: d1:f6:43:06:6f:dd:73:ce:7a:7a:08:25:d0:4a:f5: a9:c5:9c:8e:ca:67:9f:48:00:03:68:9b:d1:01:2e: 20:84:b0:1c:9a:d5:59:4f:5a:f9:a4:50:81:02:01: 35:9a:54:d8:1d:1b:b0:ab:fd:bd:1c:29:13:26:a2: 06:0b:41:08:1a:29:ba:9c:b7:61:99:fd:cc:b0:99: 5a:b4:af:b1:2f:1f:93:19:4b:bd:2e:87:87:dd:f0: 01:89:ff:d5:18:4b:0e:49:13:eb:0c:51:aa:fe:63: 39:3b:bb:f6:30:11:77:7e:55:db:48:52:d0:0e:04: ae:f6:b7:9f:9b:a9:3d:79:55:b5:33:76:74:3e:24: 18:1a:b7:92:ed:6d:24:31:7e:93:99:fa:f1:38:20: 80:18:5e:fc:81:f9:33:04:2c:f2:e3:3f:6e:ad:28: 12:72:29:03:84:79:d6:d0:9a:46:35:90:68:19:c7: e5:a4:d3:2a:b6:60:98:b8:d4:c3:01:55:1e:d3:45: 76:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:89:A5:A8:23:96:F8:8B:63:19:26:25:88:BD:6E:E6:B0:F1:46:35 X509v3 Authority Key Identifier: keyid:EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:04:25:55:e6:01:53:b5:ea:c1:88:d8:fe:4f:59:30:11:16: 9e:07:13:62:15:a7:b1:09:2e:ef:32:ca:c5:91:2e:08:e1:9a: 95:3e:7b:08:76:ce:1c:89:b0:da:ab:c3:94:f0:76:4c:f6:9e: fa:81:33:37:d0:51:61:3d:53:5d:65:84:b2:10:f0:98:0f:92: 2f:31:b9:99:99:04:0d:d0:df:e7:23:d8:0a:61:f0:af:d7:dd: 39:ac:78:7d:d8:8c:38:ef:67:fe:ef:30:cf:35:5b:7a:cc:d9: 9f:77:8c:18:ba:54:ff:57:d5:11:a7:4b:d8:db:35:26:28:86: 65:ad:bd:25:46:27:37:5a:8a:26:ca:33:ef:57:62:16:da:09: ec:97:64:05:ce:84:2c:8a:bd:9c:53:39:b9:ca:bb:31:a9:fb: 8f:e7:dd:87:6a:38:39:93:c6:45:1e:61:a7:5d:e9:fe:38:f9: 9c:59:b3:86:a8:e2:b2:c8:08:4a:58:69:63:79:a8:d0:87:68: 4b:d9:a3:f0:57:77:e8:a7:e1:94:64:b6:c2:47:f6:0b:66:98: 42:69:d5:4f:7c:eb:ff:f4:0a:f1:86:29:25:f0:fe:14:64:e9: 41:3d:3d:3d:2a:60:da:2e:23:05:cd:ad:a5:88:48:09:48:20: 9f:05:d3:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUROKejaZX+CBJE/IsYJVYguplgIIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3MzRD NjczMkVEMjAeFw0yNTA3MDExNDI2NDZaFw0yNTA3MDQxOTQzNDZaMDMxMTAvBgNV BAMTKEJBODlBNUE4MjM5NkY4OEI2MzE5MjYyNTg4QkQ2RUU2QjBGMTQ2MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCutPXduXcrnnocOuTCHq8L/ooK tzYDHB/zWE5rtfLdGW11kG03O9MQJ99HqS/YTxcsQ25tRKlrjw3y6NH2QwZv3XPO enoIJdBK9anFnI7KZ59IAANom9EBLiCEsBya1VlPWvmkUIECATWaVNgdG7Cr/b0c KRMmogYLQQgaKbqct2GZ/cywmVq0r7EvH5MZS70uh4fd8AGJ/9UYSw5JE+sMUar+ Yzk7u/YwEXd+VdtIUtAOBK72t5+bqT15VbUzdnQ+JBgat5LtbSQxfpOZ+vE4IIAY XvyB+TMELPLjP26tKBJyKQOEedbQmkY1kGgZx+Wk0yq2YJi41MMBVR7TRXa/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuomlqCOW+ItjGSYliL1u5rDxRjUwHwYDVR0j BBgwFoAU66BAcMon5kbDMgOeB1V3NMZzLtIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTI3ZWFmZC1hNjc0LTQ0MzctYWJmMS1lNTUwZGVjMTM3ZmEvMC9FQkEwNDA3MENB MjdFNjQ2QzMzMjAzOUUwNzU1NzczNEM2NzMyRUQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3MzRDNjcz MkVEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTEyN2VhZmQtYTY3NC00NDM3LWFi ZjEtZTU1MGRlYzEzN2ZhLzAvRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3 MzRDNjczMkVEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4EJVXmAVO16sGI2P5PWTARFp4HE2IVp7EJ Lu8yysWRLgjhmpU+ewh2zhyJsNqrw5Twdkz2nvqBMzfQUWE9U11lhLIQ8JgPki8x uZmZBA3Q3+cj2Aph8K/X3TmseH3YjDjvZ/7vMM81W3rM2Z93jBi6VP9X1RGnS9jb NSYohmWtvSVGJzdaiibKM+9XYhbaCeyXZAXOhCyKvZxTObnKuzGp+4/n3YdqODmT xkUeYadd6f44+ZxZs4ao4rLICEpYaWN5qNCHaEvZo/BXd+in4ZRktsJH9gtmmEJp 1U986//0CvGGKSXw/hRk6UE9PT0qYNouIwXNraWISAlIIJ8F09o= -----END CERTIFICATE-----Generated at Thu Jul 3 09:11:54 2025 by rpki-client