$ rpki-client -vvf repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft File: EBA04070CA27E646C332039E07557734C6732ED2.mft (raw, json) Hash identifier: BNT2pwtdgoUWA1BL/UGkCYQOV+Glq7h3TpPkaiutIqU= Subject key identifier: 8F:24:9E:1D:D1:C5:48:25:9D:8D:03:44:1C:93:20:48:A1:95:92:D2 Authority key identifier: EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2 Certificate issuer: /CN=EBA04070CA27E646C332039E07557734C6732ED2 Certificate serial: 59E12E6C87CA831117E97C3839E4F34D714D9472 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft Manifest number: 01C6 Signing time: Sun 24 Aug 2025 02:01:21 +0000 Manifest this update: Sun 24 Aug 2025 01:56:21 +0000 Manifest next update: Wed 27 Aug 2025 03:49:21 +0000 Files and hashes: 1: 3130332e3131312e3134302e302f32342d3234203d3e20313431343631.roa (hash: QxaX29t3xWsvrxzUc9KZP0vfZV3yJi9iJK7O+Mg8IY0=) 2: 3130332e3131312e3134332e302f32342d3234203d3e20313431343631.roa (hash: vMUSQ2h0yM8CNBMFULwiVWwmyMjPH1qg6y43JB4Vwvw=) 3: 3130332e3131312e3134312e302f32342d3234203d3e20313431343631.roa (hash: FOKCBmZQR+RvQ/YXjf6i5T2Jp3732D5RrjsxBFstWVo=) 4: EBA04070CA27E646C332039E07557734C6732ED2.crl (hash: bwyS7Un6SUATkNW0JjOLhTVgH1+Loil9UUAJNGsyIFE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.crl rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 03:49:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:e1:2e:6c:87:ca:83:11:17:e9:7c:38:39:e4:f3:4d:71:4d:94:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBA04070CA27E646C332039E07557734C6732ED2 Validity Not Before: Aug 24 01:56:21 2025 GMT Not After : Aug 27 03:49:21 2025 GMT Subject: CN=8F249E1DD1C548259D8D03441C932048A19592D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9a:bd:6f:b7:e4:b4:58:c5:a1:90:67:ab:41: 4f:97:7a:4c:2b:e9:ca:65:49:a2:04:37:01:1d:7a: d4:fb:4e:94:ce:6f:9c:ee:9a:5c:9f:53:73:3a:19: 20:94:db:7f:4a:75:b9:17:58:03:aa:6a:a7:7d:3d: ed:d4:0f:4d:a2:37:e4:d8:99:ee:fe:cc:af:ba:79: 81:40:7c:9b:86:a4:26:f4:c2:75:12:fe:c2:2b:88: eb:57:b5:a8:cc:29:b5:25:65:84:92:5e:06:84:1a: 0c:5d:f2:02:a0:17:c7:ae:f2:aa:f9:3f:35:0f:6f: 52:94:d1:6a:6d:8e:2c:b5:c0:59:87:59:77:1e:6c: dd:22:35:e5:5f:8d:e9:94:71:45:ce:ba:96:f2:cf: d2:ae:3a:4a:7e:ab:f1:67:05:50:24:57:58:3e:c8: 0f:20:c9:1a:e4:dd:c6:a1:80:a0:5f:9a:3d:05:1e: 3a:a1:6e:8f:04:1f:77:8d:74:11:77:8e:e3:63:a8: 2f:2f:e7:ee:4b:c5:23:78:64:58:69:e5:dc:7e:32: 49:74:bb:35:54:e3:4b:94:4f:9b:2a:09:42:70:81: 13:49:54:86:25:04:e6:5a:b5:ec:cd:b7:35:d3:4e: 14:8f:9f:f7:a5:53:1b:b4:a6:00:86:39:f8:3a:9f: 9f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:24:9E:1D:D1:C5:48:25:9D:8D:03:44:1C:93:20:48:A1:95:92:D2 X509v3 Authority Key Identifier: keyid:EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:a5:2f:b8:b8:7e:70:67:81:21:e8:88:cb:45:ff:d5:50:0a: 3c:fa:36:51:9f:b1:32:19:83:ff:7e:82:4e:3f:32:11:b8:51: 6b:af:cc:78:7b:2f:c1:a3:7f:88:d4:4f:94:b1:6b:3a:76:fd: ad:55:3a:c0:e0:d0:2e:15:9f:1a:7b:b3:47:7e:ca:72:f2:91: 1a:66:fd:f4:6e:0e:84:99:9a:e0:2c:cb:ba:21:a9:22:35:5a: 82:3d:7b:d8:0f:c0:ef:a8:71:6e:67:ec:27:39:8a:b3:8c:3e: 52:af:93:54:ac:24:eb:f1:d5:ac:5a:d3:07:b7:4f:d7:58:49: 29:7a:a5:15:23:6a:b1:34:ab:26:82:66:51:5f:86:65:a1:be: 0e:f7:90:db:9c:5d:1c:3d:71:59:2e:7d:5b:bc:aa:48:27:5a: 26:fc:b8:0d:40:d4:de:5b:a7:fe:dc:2e:f6:72:46:2f:f8:d9: 83:2a:c7:e0:a4:2a:3c:e7:53:3c:92:14:44:b8:46:ef:82:0e: 73:20:58:4b:dc:e7:9a:c0:7d:70:8a:66:72:bc:9c:ea:c5:3f: 79:6f:9e:01:c4:40:8b:3c:d9:14:08:d2:ff:95:80:f2:18:cb: 94:ee:5e:a5:3f:f8:89:f8:30:10:56:c1:d5:c1:fc:ec:e5:4d: 82:6e:67:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWeEubIfKgxEX6Xw4OeTzTXFNlHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3MzRD NjczMkVEMjAeFw0yNTA4MjQwMTU2MjFaFw0yNTA4MjcwMzQ5MjFaMDMxMTAvBgNV BAMTKDhGMjQ5RTFERDFDNTQ4MjU5RDhEMDM0NDFDOTMyMDQ4QTE5NTkyRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfmr1vt+S0WMWhkGerQU+Xekwr 6cplSaIENwEdetT7TpTOb5zumlyfU3M6GSCU239KdbkXWAOqaqd9Pe3UD02iN+TY me7+zK+6eYFAfJuGpCb0wnUS/sIriOtXtajMKbUlZYSSXgaEGgxd8gKgF8eu8qr5 PzUPb1KU0Wptjiy1wFmHWXcebN0iNeVfjemUcUXOupbyz9KuOkp+q/FnBVAkV1g+ yA8gyRrk3cahgKBfmj0FHjqhbo8EH3eNdBF3juNjqC8v5+5LxSN4ZFhp5dx+Mkl0 uzVU40uUT5sqCUJwgRNJVIYlBOZatezNtzXTThSPn/elUxu0pgCGOfg6n5+/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjySeHdHFSCWdjQNEHJMgSKGVktIwHwYDVR0j BBgwFoAU66BAcMon5kbDMgOeB1V3NMZzLtIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTI3ZWFmZC1hNjc0LTQ0MzctYWJmMS1lNTUwZGVjMTM3ZmEvMC9FQkEwNDA3MENB MjdFNjQ2QzMzMjAzOUUwNzU1NzczNEM2NzMyRUQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3MzRDNjcz MkVEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTEyN2VhZmQtYTY3NC00NDM3LWFi ZjEtZTU1MGRlYzEzN2ZhLzAvRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3 MzRDNjczMkVEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADmlL7i4fnBngSHoiMtF/9VQCjz6NlGfsTIZ g/9+gk4/MhG4UWuvzHh7L8Gjf4jUT5Sxazp2/a1VOsDg0C4Vnxp7s0d+ynLykRpm /fRuDoSZmuAsy7ohqSI1WoI9e9gPwO+ocW5n7Cc5irOMPlKvk1SsJOvx1axa0we3 T9dYSSl6pRUjarE0qyaCZlFfhmWhvg73kNucXRw9cVkufVu8qkgnWib8uA1A1N5b p/7cLvZyRi/42YMqx+CkKjznUzySFES4Ru+CDnMgWEvc55rAfXCKZnK8nOrFP3lv ngHEQIs82RQI0v+VgPIYy5TuXqU/+In4MBBWwdXB/OzlTYJuZyI= -----END CERTIFICATE-----Generated at Sun Aug 24 04:49:00 2025 by rpki-client