$ rpki-client -vvf repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.mft File: EB7AB53449E52996F1539393C3DA704C6F12F359.mft (raw, json) Hash identifier: uKVavsENwlnTa0JFRbF5QxiTZWK0IaAuF3RWQs1umrI= Subject key identifier: EE:0A:DD:5E:BC:64:74:5B:E6:FD:EE:05:D2:8C:B4:2C:54:44:50:02 Authority key identifier: EB:7A:B5:34:49:E5:29:96:F1:53:93:93:C3:DA:70:4C:6F:12:F3:59 Certificate issuer: /CN=EB7AB53449E52996F1539393C3DA704C6F12F359 Certificate serial: 0B7FC83EC2D28B21244903D59CC43DD792829753 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB7AB53449E52996F1539393C3DA704C6F12F359.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.mft Manifest number: 036B Signing time: Sat 18 Oct 2025 22:30:35 +0000 Manifest this update: Sat 18 Oct 2025 22:25:35 +0000 Manifest next update: Wed 22 Oct 2025 10:26:35 +0000 Files and hashes: 1: 3130332e3235332e302e302f32322d3234203d3e203539313339.roa (hash: DyW9wD+/QVlej0CI+5sCilJX/+5ZDxLLSw8cy8l6+Ec=) 2: 3131362e302e302e302f32312d3234203d3e203539313339.roa (hash: tvzxlzO0vwNEL3kdVV0vVfOPTOFF94uCEicPO2IlBZc=) 3: EB7AB53449E52996F1539393C3DA704C6F12F359.crl (hash: ES+O27NKtpzXOgk04p1x6LQvghwk2gEJ+/eqbSI8myA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.crl rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB7AB53449E52996F1539393C3DA704C6F12F359.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 10:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:7f:c8:3e:c2:d2:8b:21:24:49:03:d5:9c:c4:3d:d7:92:82:97:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB7AB53449E52996F1539393C3DA704C6F12F359 Validity Not Before: Oct 18 22:25:35 2025 GMT Not After : Oct 22 10:26:35 2025 GMT Subject: CN=EE0ADD5EBC64745BE6FDEE05D28CB42C54445002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:41:78:21:5b:eb:c8:de:75:3d:d8:6c:4c:1f: 37:e2:9c:78:c3:18:da:6c:a2:5e:b5:95:8c:91:53: 48:ac:47:19:65:b2:7c:19:58:04:49:a5:a3:f1:de: 26:91:e0:c4:c5:2e:d9:a6:0b:5d:0a:4b:04:3e:36: da:64:f1:e8:bb:28:a2:39:46:e4:7a:b2:7a:81:f1: ff:ee:08:4a:9b:b5:a5:95:20:d3:86:4c:a4:23:6b: 46:3e:2c:94:14:69:e6:ed:ff:f4:32:6c:03:b9:7d: c7:7e:7d:10:50:0f:72:4c:9d:86:9b:9b:7e:76:9a: 03:79:69:67:05:02:d8:37:9e:ff:f8:f6:43:55:cf: e0:2e:22:c5:f3:7b:73:db:8c:1b:c4:11:00:fb:ca: c2:dc:4a:fe:ee:1c:91:e6:5b:99:70:05:7c:ca:2f: 5c:62:7c:1a:8f:20:bf:ca:d5:eb:7d:8c:a7:62:c8: 64:fb:ad:89:81:4a:c9:0d:d6:81:a3:21:7b:5d:67: 83:50:c5:18:96:d8:e5:a6:0b:80:5a:75:a4:3a:09: b1:80:ed:a1:72:62:1d:ac:03:f6:fd:6d:61:85:c8: cc:55:57:0f:1d:89:70:e2:93:c5:bb:55:9f:cd:f8: 53:8f:12:0b:c0:b1:04:7d:6c:81:56:fe:72:5f:97: 2f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:0A:DD:5E:BC:64:74:5B:E6:FD:EE:05:D2:8C:B4:2C:54:44:50:02 X509v3 Authority Key Identifier: keyid:EB:7A:B5:34:49:E5:29:96:F1:53:93:93:C3:DA:70:4C:6F:12:F3:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB7AB53449E52996F1539393C3DA704C6F12F359.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:b4:0a:22:c8:34:aa:98:8e:d1:35:4e:89:fd:fc:d3:51:23: d6:5e:58:6f:19:56:19:a4:ef:7b:c0:33:20:3c:81:76:1f:c0: c9:b3:1e:3d:2a:09:c3:30:e4:6f:41:62:ca:c6:4b:85:7c:0b: 27:2b:99:21:d5:ef:5c:e4:bf:cb:6a:c1:bf:0b:2c:99:35:c0: de:14:f0:99:5c:35:e6:c1:50:58:5f:9e:23:07:70:a7:8e:64: 0c:7a:23:5b:3d:8c:a1:48:11:4e:7b:a5:57:df:5e:e0:58:a4: 1a:3e:7c:e5:90:1d:be:2f:ee:70:96:af:54:27:82:a7:5f:38: 71:a3:34:63:29:ee:d0:b5:b1:ff:95:5c:40:07:b2:ec:f3:fb: 04:c6:19:46:29:f3:a2:fc:55:83:74:f2:5c:d3:a9:e0:d9:02: dd:72:3d:b6:e1:81:3f:72:36:c5:1f:3e:44:7b:e9:ac:8c:91: 54:13:24:34:fc:d2:25:3f:d4:c7:c5:27:7d:dd:f4:41:68:22: 3b:2f:ff:f1:3d:c7:a3:31:86:48:11:02:60:49:3e:38:cd:03: 1b:79:b0:a6:14:b5:80:05:75:75:3c:22:41:94:7f:f3:d3:c1: 3a:65:77:18:d6:17:5e:79:40:c8:9b:2e:0b:6c:84:38:22:b7: e3:10:eb:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC3/IPsLSiyEkSQPVnMQ915KCl1MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUI3QUI1MzQ0OUU1Mjk5NkYxNTM5MzkzQzNEQTcwNEM2 RjEyRjM1OTAeFw0yNTEwMTgyMjI1MzVaFw0yNTEwMjIxMDI2MzVaMDMxMTAvBgNV BAMTKEVFMEFERDVFQkM2NDc0NUJFNkZERUUwNUQyOENCNDJDNTQ0NDUwMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUQXghW+vI3nU92GxMHzfinHjD GNpsol61lYyRU0isRxllsnwZWARJpaPx3iaR4MTFLtmmC10KSwQ+Ntpk8ei7KKI5 RuR6snqB8f/uCEqbtaWVINOGTKQja0Y+LJQUaebt//QybAO5fcd+fRBQD3JMnYab m352mgN5aWcFAtg3nv/49kNVz+AuIsXze3PbjBvEEQD7ysLcSv7uHJHmW5lwBXzK L1xifBqPIL/K1et9jKdiyGT7rYmBSskN1oGjIXtdZ4NQxRiW2OWmC4BadaQ6CbGA 7aFyYh2sA/b9bWGFyMxVVw8diXDik8W7VZ/N+FOPEgvAsQR9bIFW/nJfly+/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7grdXrxkdFvm/e4F0oy0LFREUAIwHwYDVR0j BBgwFoAU63q1NEnlKZbxU5OTw9pwTG8S81kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZThjZDk3ZS01NmY1LTRjYTUtYTg1Yy01NWEzMjNmMDYwOGMvMC9FQjdBQjUzNDQ5 RTUyOTk2RjE1MzkzOTNDM0RBNzA0QzZGMTJGMzU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUI3QUI1MzQ0OUU1Mjk5NkYxNTM5MzkzQzNEQTcwNEM2RjEy RjM1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U4Y2Q5N2UtNTZmNS00Y2E1LWE4 NWMtNTVhMzIzZjA2MDhjLzAvRUI3QUI1MzQ0OUU1Mjk5NkYxNTM5MzkzQzNEQTcw NEM2RjEyRjM1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALK0CiLINKqYjtE1Ton9/NNRI9ZeWG8ZVhmk 73vAMyA8gXYfwMmzHj0qCcMw5G9BYsrGS4V8CycrmSHV71zkv8tqwb8LLJk1wN4U 8JlcNebBUFhfniMHcKeOZAx6I1s9jKFIEU57pVffXuBYpBo+fOWQHb4v7nCWr1Qn gqdfOHGjNGMp7tC1sf+VXEAHsuzz+wTGGUYp86L8VYN08lzTqeDZAt1yPbbhgT9y NsUfPkR76ayMkVQTJDT80iU/1MfFJ33d9EFoIjsv//E9x6MxhkgRAmBJPjjNAxt5 sKYUtYAFdXU8IkGUf/PTwTpldxjWF155QMibLgtshDgit+MQ63U= -----END CERTIFICATE-----Generated at Mon Oct 20 12:07:54 2025 by rpki-client