$ rpki-client -vvf repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft File: EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft (raw, json) Hash identifier: k1mmCwMsL3neDbsBnPjAiL5hcnIBDmoDRklgFN4cCEY= Subject key identifier: C2:1B:B1:E9:12:38:B2:9C:92:04:9F:0D:FF:73:07:B3:A4:BE:AC:35 Authority key identifier: EB:DA:93:9B:37:F3:6E:8A:9F:58:1B:10:36:E0:1C:32:F1:F3:D9:DF Certificate issuer: /CN=EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF Certificate serial: 3D7AEA2C26613F3C9DA017A25C627E6067977531 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft Manifest number: 0178 Signing time: Sun 20 Jul 2025 10:21:33 +0000 Manifest this update: Sun 20 Jul 2025 10:16:33 +0000 Manifest next update: Wed 23 Jul 2025 18:24:33 +0000 Files and hashes: 1: EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.crl (hash: pr/k+hhZR6wGTuq2IFyDzxM2jmXpjjT8zdA6RSUfYuQ=) 2: 3130332e3132322e302e302f32332d3234203d3e20313335343737.roa (hash: 0dxD7I8rMeBsoy/bZAItegSvjuCOP4VyKJVgOZz4NLU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.crl rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 18:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:7a:ea:2c:26:61:3f:3c:9d:a0:17:a2:5c:62:7e:60:67:97:75:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF Validity Not Before: Jul 20 10:16:33 2025 GMT Not After : Jul 23 18:24:33 2025 GMT Subject: CN=C21BB1E91238B29C92049F0DFF7307B3A4BEAC35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:31:6a:61:30:e4:8e:92:11:ae:e0:d7:32:14: bb:1f:02:01:24:76:82:5a:97:ce:70:f8:5a:13:1f: 81:13:e1:1f:3f:6a:5f:31:77:64:46:19:68:62:59: 46:59:eb:4a:e8:30:44:0a:b0:79:d0:13:25:fa:8e: 53:ea:d5:08:97:f4:50:ec:00:86:1f:ed:82:ea:cb: 28:eb:1e:7e:bf:b2:2f:1a:23:91:e5:cc:37:49:44: f9:9b:38:27:5f:37:af:4b:9b:90:18:c7:79:e0:c2: f1:2d:c4:3d:4f:c3:d3:bf:d4:4c:65:d7:a7:a6:21: aa:e9:33:ff:13:ed:a4:3d:8a:6c:8f:53:e3:03:52: f0:56:cb:d0:83:c4:a9:a2:e1:1e:39:eb:6b:f4:f8: 89:cb:96:36:fb:f1:f6:92:34:80:3f:6b:70:ac:38: ac:62:db:cc:56:87:2b:66:c0:9d:f2:eb:7c:7f:a6: c6:82:81:97:18:ca:f5:98:5c:73:76:23:6e:13:6d: 34:15:d1:96:0d:11:11:2c:34:2e:79:15:a0:17:01: 71:26:9e:c6:3e:e5:36:52:86:00:4b:9e:6c:7b:ac: c3:1b:7f:dd:c5:96:00:79:b3:c7:40:6f:c0:ac:4b: be:3f:5f:71:e3:65:e9:3a:d0:9f:c9:da:53:c1:ba: c5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:1B:B1:E9:12:38:B2:9C:92:04:9F:0D:FF:73:07:B3:A4:BE:AC:35 X509v3 Authority Key Identifier: keyid:EB:DA:93:9B:37:F3:6E:8A:9F:58:1B:10:36:E0:1C:32:F1:F3:D9:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:6a:84:1a:e0:67:8d:47:c0:78:14:45:ad:9a:f4:70:a2:22: 2f:dd:0f:77:1a:c4:bb:f5:fe:2f:57:a8:1d:02:21:b9:8c:69: b2:bb:93:d2:53:5e:49:13:83:c9:5b:04:b3:21:fe:c4:e0:38: a7:6e:1d:43:47:2e:11:d2:7b:19:e9:66:07:22:2b:2f:7c:f4: c4:18:24:cc:48:35:0e:66:eb:4e:bc:c3:b2:98:0b:05:76:f8: 4a:60:a3:f4:c1:f2:a8:e5:65:a1:0b:b8:81:f3:30:d2:c4:51: ef:01:5c:03:58:87:87:84:43:ed:e5:0c:b2:79:c2:68:33:e3: 1b:34:4b:de:75:e8:79:8d:61:ea:59:dc:8a:65:db:24:5b:26: e9:86:7c:78:a3:d2:e3:59:fa:2d:b2:08:ef:5d:f7:a7:0f:c2: f9:18:0b:09:0a:4d:6f:df:0a:aa:e2:e5:f8:86:6f:2b:87:b4: 34:c5:a7:f3:de:11:74:5c:da:f3:a1:54:a4:67:88:64:f6:4b: d1:d9:5d:2c:f9:a6:79:cf:44:ac:4c:26:47:50:69:55:a6:c7: 9c:b9:4e:e8:d7:a8:5b:f4:db:c9:3a:03:7a:2b:03:26:1e:dd: d0:6d:57:4f:2a:74:56:6f:65:99:c6:67:56:7e:79:be:82:98: 6f:c2:d9:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPXrqLCZhPzydoBeiXGJ+YGeXdTEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJEQTkzOUIzN0YzNkU4QTlGNTgxQjEwMzZFMDFDMzJG MUYzRDlERjAeFw0yNTA3MjAxMDE2MzNaFw0yNTA3MjMxODI0MzNaMDMxMTAvBgNV BAMTKEMyMUJCMUU5MTIzOEIyOUM5MjA0OUYwREZGNzMwN0IzQTRCRUFDMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7MWphMOSOkhGu4NcyFLsfAgEk doJal85w+FoTH4ET4R8/al8xd2RGGWhiWUZZ60roMEQKsHnQEyX6jlPq1QiX9FDs AIYf7YLqyyjrHn6/si8aI5HlzDdJRPmbOCdfN69Lm5AYx3ngwvEtxD1Pw9O/1Exl 16emIarpM/8T7aQ9imyPU+MDUvBWy9CDxKmi4R4562v0+InLljb78faSNIA/a3Cs OKxi28xWhytmwJ3y63x/psaCgZcYyvWYXHN2I24TbTQV0ZYNEREsNC55FaAXAXEm nsY+5TZShgBLnmx7rMMbf93FlgB5s8dAb8CsS74/X3HjZek60J/J2lPBusV1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwhux6RI4spySBJ8N/3MHs6S+rDUwHwYDVR0j BBgwFoAU69qTmzfzboqfWBsQNuAcMvHz2d8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzEyYTE0Ni1mOTU0LTQ3ZTMtYjkzZi05MmMyZmU2ZDg5ZWEvMC9FQkRBOTM5QjM3 RjM2RThBOUY1ODFCMTAzNkUwMUMzMkYxRjNEOURGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUJEQTkzOUIzN0YzNkU4QTlGNTgxQjEwMzZFMDFDMzJGMUYz RDlERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjMxMmExNDYtZjk1NC00N2UzLWI5 M2YtOTJjMmZlNmQ4OWVhLzAvRUJEQTkzOUIzN0YzNkU4QTlGNTgxQjEwMzZFMDFD MzJGMUYzRDlERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJBqhBrgZ41HwHgURa2a9HCiIi/dD3caxLv1 /i9XqB0CIbmMabK7k9JTXkkTg8lbBLMh/sTgOKduHUNHLhHSexnpZgciKy989MQY JMxINQ5m6068w7KYCwV2+Epgo/TB8qjlZaELuIHzMNLEUe8BXANYh4eEQ+3lDLJ5 wmgz4xs0S9516HmNYepZ3Ipl2yRbJumGfHij0uNZ+i2yCO9d96cPwvkYCwkKTW/f Cqri5fiGbyuHtDTFp/PeEXRc2vOhVKRniGT2S9HZXSz5pnnPRKxMJkdQaVWmx5y5 TujXqFv028k6A3orAyYe3dBtV08qdFZvZZnGZ1Z+eb6CmG/C2ZE= -----END CERTIFICATE-----Generated at Mon Jul 21 09:00:39 2025 by rpki-client