$ rpki-client -vvf repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft File: EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft (raw, json) Hash identifier: uI/H/ejUib5nZ27q04nixPQhN2Ni1vyRnC7ABIJRWG8= Subject key identifier: 00:8D:2D:AA:78:C8:1A:73:31:FF:0B:CF:E1:84:07:EE:98:1D:DB:60 Authority key identifier: EB:DA:93:9B:37:F3:6E:8A:9F:58:1B:10:36:E0:1C:32:F1:F3:D9:DF Certificate issuer: /CN=EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF Certificate serial: 2645DFA7FA4B41D4B82BB8C4641AD891A2F39EAB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft Manifest number: 0157 Signing time: Tue 06 May 2025 19:41:36 +0000 Manifest this update: Tue 06 May 2025 19:36:36 +0000 Manifest next update: Sat 10 May 2025 07:02:36 +0000 Files and hashes: 1: 3130332e3132322e302e302f32332d3234203d3e20313335343737.roa (hash: 0dxD7I8rMeBsoy/bZAItegSvjuCOP4VyKJVgOZz4NLU=) 2: EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.crl (hash: OzOh9kRDJ5Ijtv4LOpyubIyW6xdkPwEa9SR+23e8Pxo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.crl rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 07:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:45:df:a7:fa:4b:41:d4:b8:2b:b8:c4:64:1a:d8:91:a2:f3:9e:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF Validity Not Before: May 6 19:36:36 2025 GMT Not After : May 10 07:02:36 2025 GMT Subject: CN=008D2DAA78C81A7331FF0BCFE18407EE981DDB60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:a5:2f:3b:9d:f1:f7:9a:72:ce:42:5a:43:c7: 0b:7d:69:4b:a5:5a:8f:9f:3a:59:83:5b:e6:e9:97: 4f:c6:ff:fd:13:8a:21:d8:a7:dd:c3:f1:64:db:f9: 5a:b3:15:ff:23:7a:2a:ce:ea:0b:b4:eb:c6:33:1a: fc:8c:05:2d:51:74:22:9c:de:f3:60:a1:a8:19:c8: 5f:dc:25:16:22:dc:40:4b:0b:e2:61:42:7e:ce:b2: 41:50:0f:f1:8d:07:9d:84:45:05:f8:69:bc:41:eb: b0:a8:72:48:d2:a1:ea:31:aa:ae:72:36:f0:bc:fe: ba:ce:c7:ed:0b:2a:b9:75:ea:5f:d1:93:12:6a:0a: 60:ea:22:34:cf:05:14:c4:cb:4b:c4:a9:71:b0:ec: 21:f8:48:d7:5f:99:4c:68:b0:8e:b6:52:26:71:a6: 44:ae:37:33:6c:46:7c:9b:bf:61:67:9c:1e:f1:d1: 7e:c7:94:47:11:75:e0:e0:40:cf:4e:ca:7d:cb:98: 8d:6b:47:5e:e6:f0:9c:9a:10:de:bc:43:3c:71:63: 74:73:b2:17:ac:96:e0:c8:a9:1c:e7:38:39:6f:a5: 4d:75:00:9c:ef:d2:d2:35:4f:a4:af:92:65:c7:48: af:e8:2f:0b:40:ec:9d:95:b3:02:6b:f3:5a:90:fe: eb:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:8D:2D:AA:78:C8:1A:73:31:FF:0B:CF:E1:84:07:EE:98:1D:DB:60 X509v3 Authority Key Identifier: keyid:EB:DA:93:9B:37:F3:6E:8A:9F:58:1B:10:36:E0:1C:32:F1:F3:D9:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:31:95:8e:14:ff:47:ff:f3:95:e9:dd:b2:c4:49:00:01:80: 92:80:15:87:0d:35:bb:1b:7a:99:cf:ec:65:40:62:b6:21:19: eb:b7:68:66:41:5a:e8:6d:bd:96:86:f8:49:e9:77:4c:18:3a: 41:68:bc:c4:b4:8f:c4:db:0f:aa:fc:fc:85:91:9a:81:23:52: 46:9f:d0:8b:d1:c5:c0:bd:df:b7:ad:de:23:32:e3:3b:fa:54: 6d:9c:6e:43:64:40:9a:58:05:3c:c1:1e:7a:1a:c2:34:1b:ed: 3e:5c:b2:6b:45:09:0e:82:e4:18:a0:80:3c:3a:f2:49:d3:2b: 78:fb:9a:56:45:8b:11:47:09:0e:33:cf:0b:55:5a:a9:d2:70: f7:92:8a:11:47:dc:47:b6:83:9a:85:47:13:43:55:e5:53:f8: ac:a4:8f:92:fb:2a:86:0f:25:e4:10:bf:f2:f2:38:1c:af:d8: de:b9:b2:60:d1:d4:6f:4e:23:14:99:6b:74:aa:ea:f2:07:84: 33:92:6e:11:7a:6d:f0:7f:7a:d2:0d:27:27:02:ea:65:87:7b: 7f:a2:84:7f:c3:7f:a2:1a:69:e4:cc:75:9f:9a:1b:94:92:0f: 1a:b3:da:50:10:cf:e1:9e:7d:8c:2f:f9:00:9f:07:57:d8:5f: c4:a9:2d:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJkXfp/pLQdS4K7jEZBrYkaLznqswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJEQTkzOUIzN0YzNkU4QTlGNTgxQjEwMzZFMDFDMzJG MUYzRDlERjAeFw0yNTA1MDYxOTM2MzZaFw0yNTA1MTAwNzAyMzZaMDMxMTAvBgNV BAMTKDAwOEQyREFBNzhDODFBNzMzMUZGMEJDRkUxODQwN0VFOTgxRERCNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqpS87nfH3mnLOQlpDxwt9aUul Wo+fOlmDW+bpl0/G//0TiiHYp93D8WTb+VqzFf8jeirO6gu068YzGvyMBS1RdCKc 3vNgoagZyF/cJRYi3EBLC+JhQn7OskFQD/GNB52ERQX4abxB67CockjSoeoxqq5y NvC8/rrOx+0LKrl16l/RkxJqCmDqIjTPBRTEy0vEqXGw7CH4SNdfmUxosI62UiZx pkSuNzNsRnybv2FnnB7x0X7HlEcRdeDgQM9Oyn3LmI1rR17m8JyaEN68QzxxY3Rz shesluDIqRznODlvpU11AJzv0tI1T6SvkmXHSK/oLwtA7J2VswJr81qQ/utDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAI0tqnjIGnMx/wvP4YQH7pgd22AwHwYDVR0j BBgwFoAU69qTmzfzboqfWBsQNuAcMvHz2d8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzEyYTE0Ni1mOTU0LTQ3ZTMtYjkzZi05MmMyZmU2ZDg5ZWEvMC9FQkRBOTM5QjM3 RjM2RThBOUY1ODFCMTAzNkUwMUMzMkYxRjNEOURGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUJEQTkzOUIzN0YzNkU4QTlGNTgxQjEwMzZFMDFDMzJGMUYz RDlERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjMxMmExNDYtZjk1NC00N2UzLWI5 M2YtOTJjMmZlNmQ4OWVhLzAvRUJEQTkzOUIzN0YzNkU4QTlGNTgxQjEwMzZFMDFD MzJGMUYzRDlERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH4xlY4U/0f/85Xp3bLESQABgJKAFYcNNbsb epnP7GVAYrYhGeu3aGZBWuhtvZaG+Enpd0wYOkFovMS0j8TbD6r8/IWRmoEjUkaf 0IvRxcC937et3iMy4zv6VG2cbkNkQJpYBTzBHnoawjQb7T5csmtFCQ6C5BiggDw6 8knTK3j7mlZFixFHCQ4zzwtVWqnScPeSihFH3Ee2g5qFRxNDVeVT+Kykj5L7KoYP JeQQv/LyOByv2N65smDR1G9OIxSZa3Sq6vIHhDOSbhF6bfB/etINJycC6mWHe3+i hH/Df6IaaeTMdZ+aG5SSDxqz2lAQz+GefYwv+QCfB1fYX8SpLdg= -----END CERTIFICATE-----Generated at Thu May 8 22:28:22 2025 by rpki-client