$ rpki-client -vvf repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft File: EBA04070CA27E646C332039E07557734C6732ED2.mft (raw, json) Hash identifier: xUgvQnzr8l7Gx4XudfptW9TpQ+I7BBq9xuwaizwgeDc= Subject key identifier: D1:FC:38:21:68:2D:14:F9:68:27:79:DA:5F:B7:39:FB:11:D4:72:C2 Authority key identifier: EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2 Certificate issuer: /CN=EBA04070CA27E646C332039E07557734C6732ED2 Certificate serial: 56001D22D40AB9F53FEC8AA97991AF345CA77A0C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft Manifest number: 0225 Signing time: Tue 24 Mar 2026 02:12:05 +0000 Manifest this update: Tue 24 Mar 2026 02:07:05 +0000 Manifest next update: Fri 27 Mar 2026 10:40:05 +0000 Files and hashes: 1: 3130332e3131312e3134312e302f32342d3234203d3e20313431343631.roa (hash: FOKCBmZQR+RvQ/YXjf6i5T2Jp3732D5RrjsxBFstWVo=) 2: 3130332e3131312e3134302e302f32342d3234203d3e20313431343631.roa (hash: bDyPI2WVo6BjRMZp12OHCZAGn1tdLEQqcz47No/uxaA=) 3: 3130332e3131312e3134332e302f32342d3234203d3e20313431343631.roa (hash: vMUSQ2h0yM8CNBMFULwiVWwmyMjPH1qg6y43JB4Vwvw=) 4: EBA04070CA27E646C332039E07557734C6732ED2.crl (hash: VUZa3RwIlBlrDXMvbGaeIqh7JTQkvNrZ0ufnZe6c9Ss=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.crl rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 10:40:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:00:1d:22:d4:0a:b9:f5:3f:ec:8a:a9:79:91:af:34:5c:a7:7a:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBA04070CA27E646C332039E07557734C6732ED2 Validity Not Before: Mar 24 02:07:05 2026 GMT Not After : Mar 27 10:40:05 2026 GMT Subject: CN=D1FC3821682D14F9682779DA5FB739FB11D472C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:49:c6:9f:a4:e7:4e:06:89:29:e7:69:ca:74: 3a:1a:53:a5:d7:cd:b2:2b:f6:f7:98:67:22:bb:22: cb:f9:16:63:9a:85:2d:8a:4f:08:32:a5:ef:e8:ef: 42:5e:af:ca:f0:1b:2f:4f:58:a2:64:3d:1a:c8:1d: 72:1d:e7:ed:1d:5a:1e:ad:a7:0f:67:fe:0c:50:82: 06:19:16:f8:f9:22:54:ff:1d:de:08:63:c2:ba:b9: 53:a5:94:49:16:4a:42:09:5b:71:fb:66:f3:1c:9a: 02:72:e8:6c:2f:27:3a:ae:aa:b2:08:a3:0b:5e:22: e1:09:fe:f3:98:66:bf:4e:46:a6:97:d5:bb:e4:45: ca:00:07:d0:57:04:70:a8:a3:a4:59:f7:f4:02:eb: 39:35:3e:fa:64:7d:67:e5:a8:65:ed:8f:95:b9:79: 59:e2:68:8a:42:6b:9c:39:b4:cb:f4:e6:a2:65:4e: e5:02:1e:67:89:ac:73:d1:46:29:ca:8f:9b:a4:cc: ef:6f:2f:f2:23:25:ee:03:5a:72:0b:20:42:6a:0d: 1d:b5:86:83:5a:7c:6d:b3:82:8d:fe:d8:0d:fd:a2: 1d:7c:f5:03:b7:6c:c6:be:24:11:13:7a:bc:e0:01: 23:93:8c:23:49:2e:93:28:83:bb:88:18:be:65:82: 4e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:FC:38:21:68:2D:14:F9:68:27:79:DA:5F:B7:39:FB:11:D4:72:C2 X509v3 Authority Key Identifier: keyid:EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:bc:f0:3a:6f:a4:26:5e:2d:26:7f:cb:15:a3:9b:fe:8e:01: a6:2b:70:90:f5:d9:b8:6b:86:6c:a3:1b:6c:90:1f:a3:72:59: 79:9f:63:1c:07:67:56:ad:55:e2:6d:47:48:e4:51:12:42:1b: 72:19:94:10:e9:81:61:77:1b:b8:03:b3:d8:7e:a6:96:27:2e: e9:1f:81:29:05:32:16:51:2a:73:a5:9d:03:38:1b:ca:bd:1b: 3c:ce:c2:e3:ab:1b:ec:3e:9b:5e:4f:ff:9c:91:ad:47:69:fe: 96:f5:68:56:74:fa:cd:26:0f:d1:b3:b2:64:1f:5c:b1:91:0c: 50:03:17:d7:ec:04:a7:b1:05:a5:e2:e2:b1:e6:0d:c7:6b:90: 99:9d:11:ff:2f:2c:c0:43:93:ef:d0:0c:8b:95:31:61:ff:9b: e5:3d:fe:3d:75:4f:28:fd:a8:c4:24:b2:6c:5f:39:3b:8d:37: ab:69:fd:03:76:bb:b3:d0:ac:75:19:90:ee:43:e0:1f:7c:0e: 45:5d:e2:35:a2:5c:62:a8:b1:5a:50:3c:07:6c:fa:da:b2:cc: 0c:74:0f:c2:d9:1f:63:21:45:b4:1c:a6:77:6b:52:3d:72:de: 9f:e2:4e:16:e4:cb:71:58:d7:09:a3:cf:02:e4:1f:3d:3b:80: fe:59:e8:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVgAdItQKufU/7IqpeZGvNFynegwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3MzRD NjczMkVEMjAeFw0yNjAzMjQwMjA3MDVaFw0yNjAzMjcxMDQwMDVaMDMxMTAvBgNV BAMTKEQxRkMzODIxNjgyRDE0Rjk2ODI3NzlEQTVGQjczOUZCMTFENDcyQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ScafpOdOBokp52nKdDoaU6XX zbIr9veYZyK7Isv5FmOahS2KTwgype/o70Jer8rwGy9PWKJkPRrIHXId5+0dWh6t pw9n/gxQggYZFvj5IlT/Hd4IY8K6uVOllEkWSkIJW3H7ZvMcmgJy6GwvJzquqrII owteIuEJ/vOYZr9ORqaX1bvkRcoAB9BXBHCoo6RZ9/QC6zk1PvpkfWflqGXtj5W5 eVniaIpCa5w5tMv05qJlTuUCHmeJrHPRRinKj5ukzO9vL/IjJe4DWnILIEJqDR21 hoNafG2zgo3+2A39oh189QO3bMa+JBETerzgASOTjCNJLpMog7uIGL5lgk4hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0fw4IWgtFPloJ3naX7c5+xHUcsIwHwYDVR0j BBgwFoAU66BAcMon5kbDMgOeB1V3NMZzLtIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTI3ZWFmZC1hNjc0LTQ0MzctYWJmMS1lNTUwZGVjMTM3ZmEvMC9FQkEwNDA3MENB MjdFNjQ2QzMzMjAzOUUwNzU1NzczNEM2NzMyRUQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3MzRDNjcz MkVEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTEyN2VhZmQtYTY3NC00NDM3LWFi ZjEtZTU1MGRlYzEzN2ZhLzAvRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3 MzRDNjczMkVEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIi88DpvpCZeLSZ/yxWjm/6OAaYrcJD12bhr hmyjG2yQH6NyWXmfYxwHZ1atVeJtR0jkURJCG3IZlBDpgWF3G7gDs9h+ppYnLukf gSkFMhZRKnOlnQM4G8q9GzzOwuOrG+w+m15P/5yRrUdp/pb1aFZ0+s0mD9GzsmQf XLGRDFADF9fsBKexBaXi4rHmDcdrkJmdEf8vLMBDk+/QDIuVMWH/m+U9/j11Tyj9 qMQksmxfOTuNN6tp/QN2u7PQrHUZkO5D4B98DkVd4jWiXGKosVpQPAds+tqyzAx0 D8LZH2MhRbQcpndrUj1y3p/iThbky3FY1wmjzwLkHz07gP5Z6N8= -----END CERTIFICATE-----Generated at Thu Mar 26 08:02:38 2026 by rpki-client