$ rpki-client -vvf repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft File: EBA04070CA27E646C332039E07557734C6732ED2.mft (raw, json) Hash identifier: Aju3LFrrX6o7f0P+9M1PLpaWIrxvZVsS8FZFFiwX1XE= Subject key identifier: A9:AE:AC:D8:CE:66:11:7E:5E:92:18:B4:E6:BB:BE:80:19:8E:A1:3D Authority key identifier: EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2 Certificate issuer: /CN=EBA04070CA27E646C332039E07557734C6732ED2 Certificate serial: 7DFCC985D484D29E63EA13A227944297EEDBDFDA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft Manifest number: 01E0 Signing time: Sun 19 Oct 2025 00:41:51 +0000 Manifest this update: Sun 19 Oct 2025 00:36:51 +0000 Manifest next update: Wed 22 Oct 2025 01:51:51 +0000 Files and hashes: 1: 3130332e3131312e3134332e302f32342d3234203d3e20313431343631.roa (hash: vMUSQ2h0yM8CNBMFULwiVWwmyMjPH1qg6y43JB4Vwvw=) 2: 3130332e3131312e3134302e302f32342d3234203d3e20313431343631.roa (hash: bDyPI2WVo6BjRMZp12OHCZAGn1tdLEQqcz47No/uxaA=) 3: 3130332e3131312e3134312e302f32342d3234203d3e20313431343631.roa (hash: FOKCBmZQR+RvQ/YXjf6i5T2Jp3732D5RrjsxBFstWVo=) 4: EBA04070CA27E646C332039E07557734C6732ED2.crl (hash: q/r4B6YXLSjoKpHv19Q+L8eqcZtEMYsthy98WK8v4uk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.crl rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 01:51:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:fc:c9:85:d4:84:d2:9e:63:ea:13:a2:27:94:42:97:ee:db:df:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBA04070CA27E646C332039E07557734C6732ED2 Validity Not Before: Oct 19 00:36:51 2025 GMT Not After : Oct 22 01:51:51 2025 GMT Subject: CN=A9AEACD8CE66117E5E9218B4E6BBBE80198EA13D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:00:59:03:86:5f:27:a2:72:ac:d6:b2:53:b0: 01:72:af:4c:30:16:b1:1a:5d:61:78:6c:2b:6e:0e: 02:44:8b:3c:af:75:36:39:76:3a:32:0a:a0:1b:c9: 67:41:d6:2a:0b:52:3a:20:9a:cb:71:25:59:5c:50: af:82:0a:ec:11:25:38:3e:14:3d:86:14:c3:39:a8: ae:31:df:70:44:51:8d:9b:41:24:4f:dd:16:59:7d: 71:76:f2:ba:8d:8a:8c:ab:58:20:4d:d7:03:ae:f8: 59:cb:56:27:28:fb:fa:d7:43:41:c8:15:44:d0:80: 35:ad:e2:c2:17:a2:c9:56:fd:18:8d:1c:0a:af:cc: cc:0a:14:77:13:a7:3d:a2:72:1b:42:05:d0:05:7d: 94:c6:43:9f:96:f0:e5:38:47:89:85:1e:2b:c6:ed: ff:26:39:b2:c8:00:6a:5f:9b:98:9a:ec:8b:5b:7b: aa:85:e9:cf:23:98:34:db:b5:22:70:34:a8:09:36: 9a:5c:45:3f:f9:e1:46:e2:ba:ad:29:64:94:e5:0b: 62:4a:17:e7:7f:6e:64:8f:a1:e5:0f:c2:5d:4e:8e: b3:94:58:58:72:36:ff:ca:12:4b:c1:0e:bf:42:50: 37:a0:a0:86:f6:7b:6e:64:ee:0f:1c:d7:37:c3:93: 14:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:AE:AC:D8:CE:66:11:7E:5E:92:18:B4:E6:BB:BE:80:19:8E:A1:3D X509v3 Authority Key Identifier: keyid:EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:fc:ae:ab:56:0b:a8:58:40:5e:df:7b:6a:b6:68:2a:7c:a1: 07:d6:1b:06:74:93:bd:5f:8e:56:87:4e:af:3f:82:26:93:ef: ea:59:38:8c:6e:1e:84:93:4a:12:0e:10:a9:61:e7:e7:90:f0: c9:b5:66:dc:c7:c4:fc:8f:20:10:c1:cf:04:10:37:6d:34:d2: 61:b2:dc:c7:ee:af:8d:3c:fe:81:ce:04:7e:33:bd:7c:7c:90: 6a:89:c7:db:d1:a6:40:f9:7d:33:8e:4c:be:29:b5:13:c8:eb: af:af:14:14:f9:31:64:ec:e7:c1:cc:b1:dc:a9:a7:3f:c0:6c: 4e:c7:77:e5:a9:2d:88:15:40:6e:ac:49:2d:3e:c1:3e:0f:39: a6:bd:62:9a:6f:4a:4d:db:4c:50:74:18:f0:1c:3e:4e:dc:13: 8a:c2:ac:07:f7:8f:37:88:33:1a:b2:c0:bd:19:b1:13:19:37: c2:99:61:c9:6b:e5:5e:d2:f8:ca:30:f1:85:ea:88:3c:b4:5a: 82:23:42:c3:35:49:a1:d2:46:42:07:80:1c:d7:e0:65:cd:22: 49:61:f9:94:c0:4b:79:a9:5e:4e:cd:c3:f1:40:43:a1:d3:5d: 56:22:f2:cb:6c:bb:c6:84:22:63:ec:ce:3f:32:34:07:27:8e: 5e:c2:fc:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUffzJhdSE0p5j6hOiJ5RCl+7b39owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3MzRD NjczMkVEMjAeFw0yNTEwMTkwMDM2NTFaFw0yNTEwMjIwMTUxNTFaMDMxMTAvBgNV BAMTKEE5QUVBQ0Q4Q0U2NjExN0U1RTkyMThCNEU2QkJCRTgwMTk4RUExM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgAFkDhl8nonKs1rJTsAFyr0ww FrEaXWF4bCtuDgJEizyvdTY5djoyCqAbyWdB1ioLUjogmstxJVlcUK+CCuwRJTg+ FD2GFMM5qK4x33BEUY2bQSRP3RZZfXF28rqNioyrWCBN1wOu+FnLVico+/rXQ0HI FUTQgDWt4sIXoslW/RiNHAqvzMwKFHcTpz2ichtCBdAFfZTGQ5+W8OU4R4mFHivG 7f8mObLIAGpfm5ia7Itbe6qF6c8jmDTbtSJwNKgJNppcRT/54Ubiuq0pZJTlC2JK F+d/bmSPoeUPwl1OjrOUWFhyNv/KEkvBDr9CUDegoIb2e25k7g8c1zfDkxS9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqa6s2M5mEX5ekhi05ru+gBmOoT0wHwYDVR0j BBgwFoAU66BAcMon5kbDMgOeB1V3NMZzLtIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTI3ZWFmZC1hNjc0LTQ0MzctYWJmMS1lNTUwZGVjMTM3ZmEvMC9FQkEwNDA3MENB MjdFNjQ2QzMzMjAzOUUwNzU1NzczNEM2NzMyRUQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3MzRDNjcz MkVEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTEyN2VhZmQtYTY3NC00NDM3LWFi ZjEtZTU1MGRlYzEzN2ZhLzAvRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3 MzRDNjczMkVEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFr8rqtWC6hYQF7fe2q2aCp8oQfWGwZ0k71f jlaHTq8/giaT7+pZOIxuHoSTShIOEKlh5+eQ8Mm1ZtzHxPyPIBDBzwQQN2000mGy 3Mfur408/oHOBH4zvXx8kGqJx9vRpkD5fTOOTL4ptRPI66+vFBT5MWTs58HMsdyp pz/AbE7Hd+WpLYgVQG6sSS0+wT4POaa9YppvSk3bTFB0GPAcPk7cE4rCrAf3jzeI MxqywL0ZsRMZN8KZYclr5V7S+Mow8YXqiDy0WoIjQsM1SaHSRkIHgBzX4GXNIklh +ZTAS3mpXk7Nw/FAQ6HTXVYi8stsu8aEImPszj8yNAcnjl7C/O8= -----END CERTIFICATE-----Generated at Mon Oct 20 17:49:28 2025 by rpki-client