$ rpki-client -vvf repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft File: EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft (raw, json) Hash identifier: b3Us4d8eXUx7EcUgvOY3BYCaB9HXqI8QfX+IIEy5wuE= Subject key identifier: 0E:8D:BA:A3:5C:03:30:0F:1F:76:ED:32:16:EC:EF:A4:9C:07:BB:06 Authority key identifier: EB:DA:93:9B:37:F3:6E:8A:9F:58:1B:10:36:E0:1C:32:F1:F3:D9:DF Certificate issuer: /CN=EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF Certificate serial: 1532145F6A477FF96D4D1B5AE11BA24DBB54D256 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft Manifest number: 0187 Signing time: Sat 23 Aug 2025 13:51:37 +0000 Manifest this update: Sat 23 Aug 2025 13:46:37 +0000 Manifest next update: Tue 26 Aug 2025 14:33:37 +0000 Files and hashes: 1: 3130332e3132322e302e302f32332d3234203d3e20313335343737.roa (hash: 0dxD7I8rMeBsoy/bZAItegSvjuCOP4VyKJVgOZz4NLU=) 2: EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.crl (hash: 1hB57wcvyrxKRTfXjlCMSlqwej8PQyAPtJMc20EEbrI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.crl rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 14:33:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:32:14:5f:6a:47:7f:f9:6d:4d:1b:5a:e1:1b:a2:4d:bb:54:d2:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF Validity Not Before: Aug 23 13:46:37 2025 GMT Not After : Aug 26 14:33:37 2025 GMT Subject: CN=0E8DBAA35C03300F1F76ED3216ECEFA49C07BB06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:60:2d:9b:7a:51:e9:af:ed:be:56:54:b5:13: a3:f9:dc:e4:e6:9f:df:51:1d:32:31:f9:c1:52:2c: 3e:67:61:26:f8:d7:e5:be:fc:e3:5e:38:35:c2:0a: ae:df:49:ad:c0:f1:b7:8a:aa:33:94:e5:6a:bc:3c: 47:4b:72:c0:a2:8b:78:09:6d:33:21:db:8d:43:06: ab:24:ad:05:1c:c4:c1:ff:13:da:60:31:5e:dd:f0: 7c:67:d9:4a:ec:63:f6:cb:2b:ab:39:f9:a5:5d:fe: ba:50:13:1b:1c:9a:6e:19:16:39:46:30:04:80:9e: b7:64:71:96:10:c4:10:0b:e0:85:ec:fc:7e:fc:59: 7b:cb:64:2a:2e:d8:52:56:7e:d8:3f:fd:f5:09:92: ec:b2:a2:04:ce:38:62:65:e3:c1:a0:6b:a4:7b:0e: 83:aa:48:76:5e:32:5b:82:c6:67:4d:c8:bc:8b:45: eb:03:5b:bc:4d:f1:95:81:dd:a4:16:69:08:4e:ca: e4:5f:8f:4d:5f:00:f9:5a:b4:3e:e1:b9:f6:30:8a: a3:66:35:ab:76:58:5d:89:0e:a8:5b:67:76:b1:ae: a4:9f:cd:8e:3a:3f:ba:d7:a9:65:44:3f:25:12:b3: 88:35:e6:3c:3d:7a:ff:26:6f:cd:fe:9f:e3:b7:17: 77:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:8D:BA:A3:5C:03:30:0F:1F:76:ED:32:16:EC:EF:A4:9C:07:BB:06 X509v3 Authority Key Identifier: keyid:EB:DA:93:9B:37:F3:6E:8A:9F:58:1B:10:36:E0:1C:32:F1:F3:D9:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:93:86:9e:6c:4d:3c:06:8a:d0:bb:f1:d0:09:c5:bf:9c:57: 4a:54:71:65:b0:c0:e1:e2:00:ff:ab:c9:69:62:37:fd:f3:75: 82:5d:f2:d7:f7:22:ef:a6:ed:37:c0:91:c9:09:09:13:9b:9f: 8f:cf:7c:37:c5:e1:14:3a:b5:bb:97:a7:90:5f:b3:fa:76:40: e4:3d:07:bf:d8:89:6c:45:77:6c:9a:d7:47:81:88:07:57:26: 51:ee:1a:a9:39:ee:9a:a8:62:6c:f4:ad:6d:7d:58:62:8b:01: 17:a5:7e:6f:b6:f9:2c:b0:eb:30:fa:3d:8d:30:4b:01:0a:d7: a9:f2:dc:a9:4d:d6:13:44:10:ef:7e:f4:ad:6e:6e:16:1c:12: 2a:41:c7:34:7c:cb:83:fa:87:bb:81:77:51:48:97:05:84:84: 9e:25:9d:9a:d6:f6:24:d3:ef:23:04:ee:7e:c4:68:e0:ba:21: 2e:9b:38:c4:9f:e7:66:1b:66:bd:7e:80:8d:87:c2:fe:22:59: 01:79:a4:b6:89:34:65:d2:f4:0b:d6:30:07:6e:88:fa:15:0a: 47:f3:96:2a:87:fb:c1:13:30:5f:1a:4b:17:8f:72:1f:56:01: 20:f7:9c:20:4d:55:8b:c2:87:0b:a0:1d:49:69:ed:3a:1f:c7: 51:70:28:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFTIUX2pHf/ltTRta4RuiTbtU0lYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJEQTkzOUIzN0YzNkU4QTlGNTgxQjEwMzZFMDFDMzJG MUYzRDlERjAeFw0yNTA4MjMxMzQ2MzdaFw0yNTA4MjYxNDMzMzdaMDMxMTAvBgNV BAMTKDBFOERCQUEzNUMwMzMwMEYxRjc2RUQzMjE2RUNFRkE0OUMwN0JCMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLYC2belHpr+2+VlS1E6P53OTm n99RHTIx+cFSLD5nYSb41+W+/ONeODXCCq7fSa3A8beKqjOU5Wq8PEdLcsCii3gJ bTMh241DBqskrQUcxMH/E9pgMV7d8Hxn2UrsY/bLK6s5+aVd/rpQExscmm4ZFjlG MASAnrdkcZYQxBAL4IXs/H78WXvLZCou2FJWftg//fUJkuyyogTOOGJl48Gga6R7 DoOqSHZeMluCxmdNyLyLResDW7xN8ZWB3aQWaQhOyuRfj01fAPlatD7hufYwiqNm Nat2WF2JDqhbZ3axrqSfzY46P7rXqWVEPyUSs4g15jw9ev8mb83+n+O3F3f5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDo26o1wDMA8fdu0yFuzvpJwHuwYwHwYDVR0j BBgwFoAU69qTmzfzboqfWBsQNuAcMvHz2d8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzEyYTE0Ni1mOTU0LTQ3ZTMtYjkzZi05MmMyZmU2ZDg5ZWEvMC9FQkRBOTM5QjM3 RjM2RThBOUY1ODFCMTAzNkUwMUMzMkYxRjNEOURGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUJEQTkzOUIzN0YzNkU4QTlGNTgxQjEwMzZFMDFDMzJGMUYz RDlERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjMxMmExNDYtZjk1NC00N2UzLWI5 M2YtOTJjMmZlNmQ4OWVhLzAvRUJEQTkzOUIzN0YzNkU4QTlGNTgxQjEwMzZFMDFD MzJGMUYzRDlERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEyThp5sTTwGitC78dAJxb+cV0pUcWWwwOHi AP+ryWliN/3zdYJd8tf3Iu+m7TfAkckJCRObn4/PfDfF4RQ6tbuXp5Bfs/p2QOQ9 B7/YiWxFd2ya10eBiAdXJlHuGqk57pqoYmz0rW19WGKLARelfm+2+Syw6zD6PY0w SwEK16ny3KlN1hNEEO9+9K1ubhYcEipBxzR8y4P6h7uBd1FIlwWEhJ4lnZrW9iTT 7yME7n7EaOC6IS6bOMSf52YbZr1+gI2Hwv4iWQF5pLaJNGXS9AvWMAduiPoVCkfz liqH+8ETMF8aSxePch9WASD3nCBNVYvChwugHUlp7Tofx1FwKK0= -----END CERTIFICATE-----Generated at Sat Aug 23 20:03:08 2025 by rpki-client