$ rpki-client -vvf repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft File: EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft (raw, json) Hash identifier: 6LArMMI5zTbYbmg1NAD/7YfYMkl2nxd77mtV3/n5qBQ= Subject key identifier: 14:DC:CA:53:55:FE:AA:4A:F6:D5:FE:50:A5:9A:86:1A:AB:D4:98:9A Authority key identifier: EB:DA:93:9B:37:F3:6E:8A:9F:58:1B:10:36:E0:1C:32:F1:F3:D9:DF Certificate issuer: /CN=EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF Certificate serial: 27CF03EC1A40F7BA1B997B95F224105358C702E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft Manifest number: 01A0 Signing time: Sat 18 Oct 2025 14:41:35 +0000 Manifest this update: Sat 18 Oct 2025 14:36:35 +0000 Manifest next update: Tue 21 Oct 2025 19:14:35 +0000 Files and hashes: 1: 3130332e3132322e302e302f32332d3234203d3e20313335343737.roa (hash: 0dxD7I8rMeBsoy/bZAItegSvjuCOP4VyKJVgOZz4NLU=) 2: EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.crl (hash: yi0IyvMmPy3MtQmDh5p5hqf0JLU49eX0cf1Rj8VEgQU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.crl rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 19:14:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:cf:03:ec:1a:40:f7:ba:1b:99:7b:95:f2:24:10:53:58:c7:02:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF Validity Not Before: Oct 18 14:36:35 2025 GMT Not After : Oct 21 19:14:35 2025 GMT Subject: CN=14DCCA5355FEAA4AF6D5FE50A59A861AABD4989A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:78:30:be:55:d2:4d:5e:24:79:d0:45:9e:cd: 00:26:7b:fd:71:7a:48:27:c7:59:bf:e7:e3:90:9d: f1:97:73:84:01:2b:b1:38:67:b1:6e:16:57:e9:2b: b2:d9:1e:c1:2a:0d:69:a3:f1:1f:9f:89:6c:d7:ba: f6:0b:b2:c9:e0:42:af:9c:98:04:2e:23:15:f0:c4: 83:42:31:e3:8f:63:e7:90:61:72:3e:ae:71:8b:ce: 81:d3:50:d6:a5:f4:19:27:f3:55:d4:df:2c:23:50: d5:45:bd:30:f6:91:aa:22:7e:2e:c4:67:05:06:fa: 47:33:f1:de:94:a8:c8:1e:04:4d:02:0a:60:c5:8b: c3:8d:39:c1:56:8d:b9:73:2e:ac:ef:46:98:ed:29: 1e:8b:79:32:8a:ee:49:f0:42:13:26:df:88:6c:0c: 6c:cc:5f:a7:71:7b:19:7f:4c:9d:9d:94:83:5f:57: 2c:2f:08:47:3d:56:08:70:23:90:21:0b:f4:01:f2: 23:ef:ca:1e:a8:e6:10:cf:94:f9:6d:d8:9c:d4:43: 5b:94:93:b8:e1:93:d1:f7:11:62:30:3a:db:98:3b: e8:d1:fb:24:6c:ec:82:f8:4f:bf:12:60:e3:64:7b: af:29:ab:63:f7:8b:59:10:43:2e:65:38:57:8f:ce: c1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:DC:CA:53:55:FE:AA:4A:F6:D5:FE:50:A5:9A:86:1A:AB:D4:98:9A X509v3 Authority Key Identifier: keyid:EB:DA:93:9B:37:F3:6E:8A:9F:58:1B:10:36:E0:1C:32:F1:F3:D9:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:e0:11:b1:32:21:e2:1f:d0:99:e5:c9:74:ef:5f:d5:49:c0: ea:33:59:bb:e2:72:4a:ce:f0:63:a3:fd:47:38:78:d8:85:1a: d1:29:1c:85:78:51:8d:c5:77:a7:e3:cc:e6:85:5a:9b:eb:8a: e3:d1:77:2f:22:09:ab:a0:0f:1f:d3:d9:bb:1e:33:6d:3b:b8: 2c:e7:ca:dc:5a:09:83:04:26:9c:07:c8:14:d3:18:b1:b8:10: 9e:37:93:fb:f9:3a:df:4e:bc:26:54:8c:e8:3d:4e:f6:9c:74: 52:a7:b3:7b:23:e5:fe:e7:20:c1:f1:22:8c:63:b6:5b:10:82: 88:19:5e:88:a9:57:77:0b:85:45:39:9b:4a:c5:ad:63:a9:ed: 97:4b:2b:72:82:e1:b6:05:73:7c:e6:af:19:1d:a4:d7:e8:a4: f7:e0:b7:66:03:86:d2:8c:e9:1e:2a:70:cf:2e:6a:ce:45:3a: 27:68:e6:ee:88:e2:25:c6:c8:4c:81:84:d6:a9:8a:fb:72:0c: 7c:97:e4:8f:f6:b2:4c:5b:01:69:88:e2:7f:f0:ab:a9:3e:79: 33:ff:b6:e5:2b:fb:7d:24:27:33:db:92:aa:6c:ce:08:28:f8: a6:e1:9b:43:b8:99:93:a3:8c:62:ba:32:7e:43:46:c3:16:19: 5d:0b:83:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ88D7BpA97obmXuV8iQQU1jHAugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJEQTkzOUIzN0YzNkU4QTlGNTgxQjEwMzZFMDFDMzJG MUYzRDlERjAeFw0yNTEwMTgxNDM2MzVaFw0yNTEwMjExOTE0MzVaMDMxMTAvBgNV BAMTKDE0RENDQTUzNTVGRUFBNEFGNkQ1RkU1MEE1OUE4NjFBQUJENDk4OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6eDC+VdJNXiR50EWezQAme/1x ekgnx1m/5+OQnfGXc4QBK7E4Z7FuFlfpK7LZHsEqDWmj8R+fiWzXuvYLssngQq+c mAQuIxXwxINCMeOPY+eQYXI+rnGLzoHTUNal9Bkn81XU3ywjUNVFvTD2kaoifi7E ZwUG+kcz8d6UqMgeBE0CCmDFi8ONOcFWjblzLqzvRpjtKR6LeTKK7knwQhMm34hs DGzMX6dxexl/TJ2dlINfVywvCEc9VghwI5AhC/QB8iPvyh6o5hDPlPlt2JzUQ1uU k7jhk9H3EWIwOtuYO+jR+yRs7IL4T78SYONke68pq2P3i1kQQy5lOFePzsGjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFNzKU1X+qkr21f5QpZqGGqvUmJowHwYDVR0j BBgwFoAU69qTmzfzboqfWBsQNuAcMvHz2d8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzEyYTE0Ni1mOTU0LTQ3ZTMtYjkzZi05MmMyZmU2ZDg5ZWEvMC9FQkRBOTM5QjM3 RjM2RThBOUY1ODFCMTAzNkUwMUMzMkYxRjNEOURGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUJEQTkzOUIzN0YzNkU4QTlGNTgxQjEwMzZFMDFDMzJGMUYz RDlERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjMxMmExNDYtZjk1NC00N2UzLWI5 M2YtOTJjMmZlNmQ4OWVhLzAvRUJEQTkzOUIzN0YzNkU4QTlGNTgxQjEwMzZFMDFD MzJGMUYzRDlERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACLgEbEyIeIf0JnlyXTvX9VJwOozWbvickrO 8GOj/Uc4eNiFGtEpHIV4UY3Fd6fjzOaFWpvriuPRdy8iCaugDx/T2bseM207uCzn ytxaCYMEJpwHyBTTGLG4EJ43k/v5Ot9OvCZUjOg9TvacdFKns3sj5f7nIMHxIoxj tlsQgogZXoipV3cLhUU5m0rFrWOp7ZdLK3KC4bYFc3zmrxkdpNfopPfgt2YDhtKM 6R4qcM8uas5FOido5u6I4iXGyEyBhNapivtyDHyX5I/2skxbAWmI4n/wq6k+eTP/ tuUr+30kJzPbkqpszggo+Kbhm0O4mZOjjGK6Mn5DRsMWGV0Lg18= -----END CERTIFICATE-----Generated at Mon Oct 20 09:20:33 2025 by rpki-client