$ rpki-client -vvf repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.mft File: EB6A398D686553919657E094022E843191F4573E.mft (raw, json) Hash identifier: pEO6ojVi0dh86Kw/s5PPlVKnTg/0U6TpRsFC/2c37KU= Subject key identifier: 5E:5E:DE:07:8D:54:6F:B0:28:B8:89:27:DE:14:E4:DB:62:87:AB:96 Authority key identifier: EB:6A:39:8D:68:65:53:91:96:57:E0:94:02:2E:84:31:91:F4:57:3E Certificate issuer: /CN=EB6A398D686553919657E094022E843191F4573E Certificate serial: 61C1A1CD201A9812F32582B4E64A2F5E8983E952 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB6A398D686553919657E094022E843191F4573E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.mft Manifest number: 0250 Signing time: Sat 18 Oct 2025 03:41:50 +0000 Manifest this update: Sat 18 Oct 2025 03:36:50 +0000 Manifest next update: Tue 21 Oct 2025 13:46:50 +0000 Files and hashes: 1: EB6A398D686553919657E094022E843191F4573E.crl (hash: TZOpLKBdRTyGluBatzFearm9qBHybPOSulTPrY4ykow=) 2: 3130332e3138312e3234382e302f32332d3234203d3e20313439343030.roa (hash: sKkJQmxuHQRpbOu7tarZjRh6SYZHx7wMO0xOOxar2Ro=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.crl rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB6A398D686553919657E094022E843191F4573E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 13:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:c1:a1:cd:20:1a:98:12:f3:25:82:b4:e6:4a:2f:5e:89:83:e9:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB6A398D686553919657E094022E843191F4573E Validity Not Before: Oct 18 03:36:50 2025 GMT Not After : Oct 21 13:46:50 2025 GMT Subject: CN=5E5EDE078D546FB028B88927DE14E4DB6287AB96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7c:dc:41:77:f6:ec:6d:9e:48:87:46:67:5a: db:bc:03:5d:c0:6b:45:f0:c4:0e:3b:70:fb:21:dc: ba:1e:3e:1b:a8:51:76:eb:34:13:ee:2f:a9:53:da: c2:30:b1:78:02:bb:ba:5a:cf:b3:c4:d9:19:be:20: ff:33:0d:b6:9f:17:25:c4:aa:37:ac:54:fa:0c:ab: 82:c3:21:99:c9:16:4f:74:8b:e8:b5:1e:96:ee:eb: be:33:74:95:6d:eb:74:8c:4f:98:a4:92:e8:49:58: 6f:4f:52:b0:aa:90:4f:4a:ce:f4:52:34:1d:56:2f: 76:11:38:4b:c7:8f:80:4c:c9:3a:34:1d:80:3d:d8: a9:62:68:1e:9f:5f:24:0a:3c:d5:29:e2:ae:c7:07: 03:42:23:b2:44:6e:2a:e8:07:b8:2e:4d:0d:c2:54: 7b:0f:72:52:4f:a4:f5:23:2c:36:64:d0:3e:c7:b3: 76:8f:d1:0b:85:3a:5a:37:21:a4:40:d1:e4:e0:af: 17:ac:38:2b:69:12:6f:f6:22:7f:2f:fc:31:9a:fa: de:72:bf:78:31:9f:59:9f:63:d0:c5:21:70:44:98: 91:ad:eb:46:63:b9:26:67:44:cb:33:95:49:9a:fc: 67:74:a1:bb:70:dc:55:f3:35:2b:7f:8a:07:e2:7b: c9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:5E:DE:07:8D:54:6F:B0:28:B8:89:27:DE:14:E4:DB:62:87:AB:96 X509v3 Authority Key Identifier: keyid:EB:6A:39:8D:68:65:53:91:96:57:E0:94:02:2E:84:31:91:F4:57:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB6A398D686553919657E094022E843191F4573E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:a3:dc:ce:77:25:fb:43:55:9a:1f:9a:2c:1f:ba:64:f9:83: 9e:44:39:c9:2a:09:b8:33:ba:a5:77:7d:30:9a:b7:98:d4:6f: 1f:e8:29:25:e8:37:a4:2e:d3:94:79:33:2b:2e:d9:8b:5c:71: 2d:b9:ea:ca:1b:ca:84:31:d1:ff:ec:9e:81:4b:fa:d9:24:ca: 96:32:2d:25:8b:5b:b4:9e:27:46:77:80:a2:39:4b:dc:58:32: 26:4a:ee:18:66:6e:d7:6c:2f:66:0d:8b:0b:1a:3d:b2:d0:88: c1:e3:16:64:e9:ce:d2:69:f6:9c:1b:59:4c:17:38:46:31:4c: f6:ba:4c:20:50:95:07:fe:cf:27:39:fc:a5:41:d6:89:45:7b: 31:d8:ea:bd:d9:ff:d3:bd:c1:3e:24:ad:0c:59:8a:4d:be:8b: a8:f8:81:21:b6:72:cd:2e:62:82:70:f5:98:d8:38:89:23:b1: 6a:f2:56:55:0d:75:ab:de:1a:81:df:ad:fe:04:3d:86:69:eb: 71:d2:a9:4f:33:32:36:43:83:84:74:ef:e8:9e:c9:14:94:9f: 5c:de:7b:13:75:b3:01:f0:d7:68:2f:de:f8:74:ea:e9:99:bf: 65:38:76:f8:5d:b5:c2:f7:b1:cd:a5:4f:35:2c:1e:e0:f3:38: 17:56:d4:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYcGhzSAamBLzJYK05kovXomD6VIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUI2QTM5OEQ2ODY1NTM5MTk2NTdFMDk0MDIyRTg0MzE5 MUY0NTczRTAeFw0yNTEwMTgwMzM2NTBaFw0yNTEwMjExMzQ2NTBaMDMxMTAvBgNV BAMTKDVFNUVERTA3OEQ1NDZGQjAyOEI4ODkyN0RFMTRFNERCNjI4N0FCOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6fNxBd/bsbZ5Ih0ZnWtu8A13A a0XwxA47cPsh3LoePhuoUXbrNBPuL6lT2sIwsXgCu7paz7PE2Rm+IP8zDbafFyXE qjesVPoMq4LDIZnJFk90i+i1Hpbu674zdJVt63SMT5ikkuhJWG9PUrCqkE9KzvRS NB1WL3YROEvHj4BMyTo0HYA92KliaB6fXyQKPNUp4q7HBwNCI7JEbiroB7guTQ3C VHsPclJPpPUjLDZk0D7Hs3aP0QuFOlo3IaRA0eTgrxesOCtpEm/2In8v/DGa+t5y v3gxn1mfY9DFIXBEmJGt60ZjuSZnRMszlUma/Gd0obtw3FXzNSt/igfie8lxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXl7eB41Ub7AouIkn3hTk22KHq5YwHwYDVR0j BBgwFoAU62o5jWhlU5GWV+CUAi6EMZH0Vz4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTRlMTAzZS0zZDc4LTRhZTAtOWJhNC1kMTc5MmZmYTA0YWMvMC9FQjZBMzk4RDY4 NjU1MzkxOTY1N0UwOTQwMjJFODQzMTkxRjQ1NzNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUI2QTM5OEQ2ODY1NTM5MTk2NTdFMDk0MDIyRTg0MzE5MUY0 NTczRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2U0ZTEwM2UtM2Q3OC00YWUwLTli YTQtZDE3OTJmZmEwNGFjLzAvRUI2QTM5OEQ2ODY1NTM5MTk2NTdFMDk0MDIyRTg0 MzE5MUY0NTczRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJKj3M53JftDVZofmiwfumT5g55EOckqCbgz uqV3fTCat5jUbx/oKSXoN6Qu05R5Mysu2YtccS256sobyoQx0f/snoFL+tkkypYy LSWLW7SeJ0Z3gKI5S9xYMiZK7hhmbtdsL2YNiwsaPbLQiMHjFmTpztJp9pwbWUwX OEYxTPa6TCBQlQf+zyc5/KVB1olFezHY6r3Z/9O9wT4krQxZik2+i6j4gSG2cs0u YoJw9ZjYOIkjsWryVlUNdaveGoHfrf4EPYZp63HSqU8zMjZDg4R07+ieyRSUn1ze exN1swHw12gv3vh06umZv2U4dvhdtcL3sc2lTzUsHuDzOBdW1E0= -----END CERTIFICATE-----Generated at Mon Oct 20 09:28:44 2025 by rpki-client