$ rpki-client -vvf repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.mft File: EB7AB53449E52996F1539393C3DA704C6F12F359.mft (raw, json) Hash identifier: qFEyl5+xDz/SyeyVvdh3QRRmmx++0DocIarU+DwKJh0= Subject key identifier: 1E:6F:D6:DB:0C:26:A7:F7:B9:20:14:29:1F:31:6B:2E:A2:43:5F:3B Authority key identifier: EB:7A:B5:34:49:E5:29:96:F1:53:93:93:C3:DA:70:4C:6F:12:F3:59 Certificate issuer: /CN=EB7AB53449E52996F1539393C3DA704C6F12F359 Certificate serial: 43781728716955E7E6F6E11A24DD6DC2DF467D71 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB7AB53449E52996F1539393C3DA704C6F12F359.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.mft Manifest number: 0352 Signing time: Fri 22 Aug 2025 22:20:35 +0000 Manifest this update: Fri 22 Aug 2025 22:15:35 +0000 Manifest next update: Tue 26 Aug 2025 09:48:35 +0000 Files and hashes: 1: EB7AB53449E52996F1539393C3DA704C6F12F359.crl (hash: NxktjmF91QoIYW/+SMeucz2FcyV1M2l1585l1H9C6lc=) 2: 3131362e302e302e302f32312d3234203d3e203539313339.roa (hash: tvzxlzO0vwNEL3kdVV0vVfOPTOFF94uCEicPO2IlBZc=) 3: 3130332e3235332e302e302f32322d3234203d3e203539313339.roa (hash: DyW9wD+/QVlej0CI+5sCilJX/+5ZDxLLSw8cy8l6+Ec=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.crl rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB7AB53449E52996F1539393C3DA704C6F12F359.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 09:48:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:78:17:28:71:69:55:e7:e6:f6:e1:1a:24:dd:6d:c2:df:46:7d:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB7AB53449E52996F1539393C3DA704C6F12F359 Validity Not Before: Aug 22 22:15:35 2025 GMT Not After : Aug 26 09:48:35 2025 GMT Subject: CN=1E6FD6DB0C26A7F7B92014291F316B2EA2435F3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:03:60:ea:8f:21:99:77:31:4a:6d:1d:07:72: 26:40:ef:0f:89:85:17:93:03:bb:d0:69:76:a4:5b: e7:1f:78:68:1a:04:99:fc:c4:93:e1:8e:41:b1:2f: 90:7e:1f:ff:e4:66:c8:d5:16:a3:24:2c:97:0b:8b: 4f:ab:be:5a:e3:a4:9f:43:90:77:6a:0e:d9:f3:52: 41:38:d1:6c:bb:48:f3:a5:94:66:d7:89:93:74:d3: 28:d6:4b:31:7c:88:6e:18:31:4a:ce:4b:3b:2c:77: 69:05:04:15:10:c3:58:25:d0:b6:d4:63:49:5a:c4: 2a:a9:4f:7e:6a:47:c3:99:b4:8a:7f:21:34:25:55: 4a:a5:9e:0c:a0:ed:9e:04:a3:8a:68:e6:b8:cf:26: 42:b4:49:73:2c:b2:90:2f:ae:d9:df:61:2b:97:9f: 2f:75:bb:e2:e4:e6:02:88:fe:11:ab:8a:7f:7c:2b: 41:5a:5d:86:03:d3:c0:3d:f7:8d:29:8b:96:07:b7: ea:9a:00:92:56:a0:0b:80:5a:41:5d:3c:8c:30:64: c7:81:b6:64:87:48:b3:57:0b:6c:df:ef:49:a8:7c: 19:df:77:3d:b1:92:52:d0:8c:5c:66:d7:33:10:87: a6:e7:a9:a9:80:71:c4:14:a6:0f:ae:36:ec:76:85: be:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:6F:D6:DB:0C:26:A7:F7:B9:20:14:29:1F:31:6B:2E:A2:43:5F:3B X509v3 Authority Key Identifier: keyid:EB:7A:B5:34:49:E5:29:96:F1:53:93:93:C3:DA:70:4C:6F:12:F3:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB7AB53449E52996F1539393C3DA704C6F12F359.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:88:8a:3f:5d:31:f3:cb:4e:f2:3d:03:99:9d:0a:cc:10:a8: a1:69:8b:47:be:ca:b3:e6:cb:d8:60:bd:ac:b3:53:d8:98:c8: 40:1b:1c:61:ba:b2:40:3a:b1:05:0b:cd:b3:7b:c6:7a:e3:12: e7:07:12:45:b9:8f:0f:a3:ea:f3:d9:97:2a:14:6d:9c:b6:fe: 44:e4:98:1b:bf:60:f9:07:e8:04:6e:d0:1a:eb:86:87:27:17: 3e:73:df:1e:4c:90:34:4e:2b:86:65:02:ef:f8:bd:98:08:41: 59:d2:8e:32:00:90:aa:5c:e4:ed:06:06:cf:e2:97:93:af:92: 5e:b8:42:67:03:56:91:e0:c6:87:a5:4f:e6:7b:2b:22:d9:55: 25:86:bf:3f:cd:4c:0f:60:eb:0c:8b:83:f2:ea:59:fa:fa:93: 6e:58:b6:77:0d:c1:c7:52:70:1f:0d:2a:87:70:0f:df:c5:81: 7b:a2:00:0d:22:7d:5a:fa:25:b0:f3:02:a4:22:aa:7c:ab:c1: 88:43:83:fa:28:7a:2f:45:31:a0:f8:2d:d3:29:23:23:b9:8a: 45:1b:b1:6c:91:e6:0c:02:83:5c:0a:f1:7f:00:9d:69:8a:e5: d1:7d:69:24:e7:b9:91:d7:3d:c2:62:2d:78:15:78:2d:fe:d9: 9b:fa:b0:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ3gXKHFpVefm9uEaJN1twt9GfXEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUI3QUI1MzQ0OUU1Mjk5NkYxNTM5MzkzQzNEQTcwNEM2 RjEyRjM1OTAeFw0yNTA4MjIyMjE1MzVaFw0yNTA4MjYwOTQ4MzVaMDMxMTAvBgNV BAMTKDFFNkZENkRCMEMyNkE3RjdCOTIwMTQyOTFGMzE2QjJFQTI0MzVGM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeA2DqjyGZdzFKbR0HciZA7w+J hReTA7vQaXakW+cfeGgaBJn8xJPhjkGxL5B+H//kZsjVFqMkLJcLi0+rvlrjpJ9D kHdqDtnzUkE40Wy7SPOllGbXiZN00yjWSzF8iG4YMUrOSzssd2kFBBUQw1gl0LbU Y0laxCqpT35qR8OZtIp/ITQlVUqlngyg7Z4Eo4po5rjPJkK0SXMsspAvrtnfYSuX ny91u+Lk5gKI/hGrin98K0FaXYYD08A9940pi5YHt+qaAJJWoAuAWkFdPIwwZMeB tmSHSLNXC2zf70mofBnfdz2xklLQjFxm1zMQh6bnqamAccQUpg+uNux2hb4xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHm/W2wwmp/e5IBQpHzFrLqJDXzswHwYDVR0j BBgwFoAU63q1NEnlKZbxU5OTw9pwTG8S81kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZThjZDk3ZS01NmY1LTRjYTUtYTg1Yy01NWEzMjNmMDYwOGMvMC9FQjdBQjUzNDQ5 RTUyOTk2RjE1MzkzOTNDM0RBNzA0QzZGMTJGMzU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUI3QUI1MzQ0OUU1Mjk5NkYxNTM5MzkzQzNEQTcwNEM2RjEy RjM1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U4Y2Q5N2UtNTZmNS00Y2E1LWE4 NWMtNTVhMzIzZjA2MDhjLzAvRUI3QUI1MzQ0OUU1Mjk5NkYxNTM5MzkzQzNEQTcw NEM2RjEyRjM1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHqIij9dMfPLTvI9A5mdCswQqKFpi0e+yrPm y9hgvayzU9iYyEAbHGG6skA6sQULzbN7xnrjEucHEkW5jw+j6vPZlyoUbZy2/kTk mBu/YPkH6ARu0BrrhocnFz5z3x5MkDROK4ZlAu/4vZgIQVnSjjIAkKpc5O0GBs/i l5Ovkl64QmcDVpHgxoelT+Z7KyLZVSWGvz/NTA9g6wyLg/LqWfr6k25YtncNwcdS cB8NKodwD9/FgXuiAA0ifVr6JbDzAqQiqnyrwYhDg/ooei9FMaD4LdMpIyO5ikUb sWyR5gwCg1wK8X8AnWmK5dF9aSTnuZHXPcJiLXgVeC3+2Zv6sAs= -----END CERTIFICATE-----Generated at Sat Aug 23 14:37:35 2025 by rpki-client