$ rpki-client -vvf repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft File: EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft (raw, json) Hash identifier: d1cC+WUyZCkgYFu9CDOJDPBPYzVQ9gPsZdwOnHt5DKY= Subject key identifier: FA:F3:34:F6:2E:73:B1:BE:90:73:39:90:BE:91:01:A4:63:2D:50:4A Authority key identifier: EB:DA:93:9B:37:F3:6E:8A:9F:58:1B:10:36:E0:1C:32:F1:F3:D9:DF Certificate issuer: /CN=EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF Certificate serial: 0E3AC88F4CEC439B862AC9E9FCFB712E069D4B12 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft Manifest number: 016E Signing time: Sat 28 Jun 2025 11:01:34 +0000 Manifest this update: Sat 28 Jun 2025 10:56:34 +0000 Manifest next update: Tue 01 Jul 2025 11:43:34 +0000 Files and hashes: 1: EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.crl (hash: kUNGBEvLre0omfKzgn8s9MRkCLo0zpr/VbL208eMS3I=) 2: 3130332e3132322e302e302f32332d3234203d3e20313335343737.roa (hash: 0dxD7I8rMeBsoy/bZAItegSvjuCOP4VyKJVgOZz4NLU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.crl rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 11:43:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:3a:c8:8f:4c:ec:43:9b:86:2a:c9:e9:fc:fb:71:2e:06:9d:4b:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF Validity Not Before: Jun 28 10:56:34 2025 GMT Not After : Jul 1 11:43:34 2025 GMT Subject: CN=FAF334F62E73B1BE90733990BE9101A4632D504A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7f:22:cd:ef:8f:51:33:e8:12:12:96:cc:d7: eb:40:84:2b:d3:d6:20:8a:95:e6:0e:2c:c9:8f:7a: 64:67:52:52:5d:2a:fc:f0:ad:08:97:58:6e:d3:7c: 29:eb:61:d0:f3:be:49:bf:a8:5d:d5:1e:7b:c9:dd: 07:3a:ef:34:8f:47:59:59:ed:41:e7:ee:9b:7b:13: 4e:5d:0a:ea:09:4c:71:63:65:81:a1:54:50:cc:43: 8d:5a:bc:91:26:25:6c:5e:7e:4f:3a:f1:fd:6b:5a: 42:ad:c8:2c:79:da:21:41:f3:35:25:c2:87:cb:e7: c2:83:09:31:0b:82:bd:61:bd:95:db:df:b7:8a:d9: 16:62:ba:09:32:4a:d5:94:77:00:cd:13:0f:30:78: 22:40:ae:63:1e:f8:0d:63:cc:ea:c5:62:09:01:a0: 4c:9f:90:31:f5:2c:b7:26:ca:b9:c2:1d:fe:68:23: 55:5b:b4:17:71:1c:b7:b5:d8:14:9e:73:82:f9:bd: 72:ce:92:48:87:f2:95:1c:e3:68:80:12:4c:b0:d5: ce:00:43:9d:e6:06:24:f4:4f:00:5a:d0:b0:29:85: bc:17:4f:b3:36:23:5c:ae:0d:1d:67:f8:6c:22:2c: 01:d2:94:5f:67:88:b2:a7:dc:a0:93:44:2c:85:8a: 6a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F3:34:F6:2E:73:B1:BE:90:73:39:90:BE:91:01:A4:63:2D:50:4A X509v3 Authority Key Identifier: keyid:EB:DA:93:9B:37:F3:6E:8A:9F:58:1B:10:36:E0:1C:32:F1:F3:D9:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:d9:45:1c:79:8b:f4:2e:38:6b:9f:91:6d:a1:8c:e3:37:5e: e8:b2:cd:9a:5f:cc:2a:b1:f4:aa:90:57:15:3b:ec:e7:8d:c2: 38:fa:65:14:76:1e:b7:6d:1b:a5:8c:40:67:04:c4:26:17:7a: 00:51:b3:5f:ab:c1:b3:48:03:cb:70:85:9e:79:b9:d2:d1:f4: 61:55:f5:43:e6:3b:4c:45:1e:69:bf:58:d2:42:e5:d6:2d:e9: d5:b9:55:15:47:b2:dd:f9:c4:b0:9e:5c:59:26:7e:33:8b:54: 01:18:4f:06:95:05:94:ac:10:26:d5:d0:2c:0a:eb:1c:54:b2: 1b:84:1f:ed:75:1f:fe:e0:82:b7:4b:4a:b1:af:d7:f3:30:a4: 31:68:5e:17:40:63:00:1e:fa:58:87:bf:b9:ee:c4:2c:f0:b9: fc:2b:9c:ef:c0:9a:b0:29:3e:63:6a:55:d1:fd:71:4f:56:6b: d2:a7:9a:1d:19:03:26:93:1a:90:9d:91:dc:e3:03:1b:20:9d: 54:f8:53:d6:04:f3:00:f2:ba:c4:73:84:89:09:c2:9f:e1:5f: 80:08:b3:77:4c:c2:27:df:1e:2d:a0:5e:6a:c0:a6:81:ae:0b: d5:3e:4e:17:bd:22:fb:da:b9:10:c6:9d:7b:f7:20:be:23:31: 45:3a:b5:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDjrIj0zsQ5uGKsnp/PtxLgadSxIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJEQTkzOUIzN0YzNkU4QTlGNTgxQjEwMzZFMDFDMzJG MUYzRDlERjAeFw0yNTA2MjgxMDU2MzRaFw0yNTA3MDExMTQzMzRaMDMxMTAvBgNV BAMTKEZBRjMzNEY2MkU3M0IxQkU5MDczMzk5MEJFOTEwMUE0NjMyRDUwNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8fyLN749RM+gSEpbM1+tAhCvT 1iCKleYOLMmPemRnUlJdKvzwrQiXWG7TfCnrYdDzvkm/qF3VHnvJ3Qc67zSPR1lZ 7UHn7pt7E05dCuoJTHFjZYGhVFDMQ41avJEmJWxefk868f1rWkKtyCx52iFB8zUl wofL58KDCTELgr1hvZXb37eK2RZiugkyStWUdwDNEw8weCJArmMe+A1jzOrFYgkB oEyfkDH1LLcmyrnCHf5oI1VbtBdxHLe12BSec4L5vXLOkkiH8pUc42iAEkyw1c4A Q53mBiT0TwBa0LAphbwXT7M2I1yuDR1n+GwiLAHSlF9niLKn3KCTRCyFimp9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+vM09i5zsb6QczmQvpEBpGMtUEowHwYDVR0j BBgwFoAU69qTmzfzboqfWBsQNuAcMvHz2d8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzEyYTE0Ni1mOTU0LTQ3ZTMtYjkzZi05MmMyZmU2ZDg5ZWEvMC9FQkRBOTM5QjM3 RjM2RThBOUY1ODFCMTAzNkUwMUMzMkYxRjNEOURGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUJEQTkzOUIzN0YzNkU4QTlGNTgxQjEwMzZFMDFDMzJGMUYz RDlERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjMxMmExNDYtZjk1NC00N2UzLWI5 M2YtOTJjMmZlNmQ4OWVhLzAvRUJEQTkzOUIzN0YzNkU4QTlGNTgxQjEwMzZFMDFD MzJGMUYzRDlERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABPZRRx5i/QuOGufkW2hjOM3XuiyzZpfzCqx 9KqQVxU77OeNwjj6ZRR2HrdtG6WMQGcExCYXegBRs1+rwbNIA8twhZ55udLR9GFV 9UPmO0xFHmm/WNJC5dYt6dW5VRVHst35xLCeXFkmfjOLVAEYTwaVBZSsECbV0CwK 6xxUshuEH+11H/7ggrdLSrGv1/MwpDFoXhdAYwAe+liHv7nuxCzwufwrnO/AmrAp PmNqVdH9cU9Wa9Knmh0ZAyaTGpCdkdzjAxsgnVT4U9YE8wDyusRzhIkJwp/hX4AI s3dMwiffHi2gXmrApoGuC9U+The9IvvauRDGnXv3IL4jMUU6tYs= -----END CERTIFICATE-----Generated at Sun Jun 29 18:13:02 2025 by rpki-client