$ rpki-client -vvf repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.mft File: EB7AB53449E52996F1539393C3DA704C6F12F359.mft (raw, json) Hash identifier: 4XUoZW2d8noZPqZJSfLeh/aNqkiaaxTmZrTpp0CfCkE= Subject key identifier: 97:49:A8:F4:FE:3C:5C:56:28:83:2C:06:DA:DC:B4:80:9B:C4:F3:7F Authority key identifier: EB:7A:B5:34:49:E5:29:96:F1:53:93:93:C3:DA:70:4C:6F:12:F3:59 Certificate issuer: /CN=EB7AB53449E52996F1539393C3DA704C6F12F359 Certificate serial: 47958ADF392938C1CAFFEEE5B59A4D832E63E6DC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB7AB53449E52996F1539393C3DA704C6F12F359.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.mft Manifest number: 0343 Signing time: Mon 21 Jul 2025 03:10:34 +0000 Manifest this update: Mon 21 Jul 2025 03:05:34 +0000 Manifest next update: Thu 24 Jul 2025 07:25:34 +0000 Files and hashes: 1: 3131362e302e302e302f32312d3234203d3e203539313339.roa (hash: tvzxlzO0vwNEL3kdVV0vVfOPTOFF94uCEicPO2IlBZc=) 2: EB7AB53449E52996F1539393C3DA704C6F12F359.crl (hash: 0i+EKA2U/5lfJElIBGnQj1mTS56KD7Ase8K5TDD0YuQ=) 3: 3130332e3235332e302e302f32322d3234203d3e203539313339.roa (hash: DyW9wD+/QVlej0CI+5sCilJX/+5ZDxLLSw8cy8l6+Ec=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.crl rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB7AB53449E52996F1539393C3DA704C6F12F359.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 07:25:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:95:8a:df:39:29:38:c1:ca:ff:ee:e5:b5:9a:4d:83:2e:63:e6:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB7AB53449E52996F1539393C3DA704C6F12F359 Validity Not Before: Jul 21 03:05:34 2025 GMT Not After : Jul 24 07:25:34 2025 GMT Subject: CN=9749A8F4FE3C5C5628832C06DADCB4809BC4F37F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7e:2e:90:00:eb:85:4c:48:4e:c2:63:05:0f: 1f:5c:c5:66:d1:74:2c:0c:46:07:2d:5e:32:84:cd: ba:b1:28:5f:49:80:0d:68:15:90:50:3f:2d:f2:f5: ba:8c:98:9b:c0:0e:af:71:b1:8f:73:49:5c:5c:ac: e3:8f:1f:ac:ac:2f:9c:30:5c:97:7a:5c:a2:d5:dd: 39:b7:57:98:89:03:20:80:7f:6c:a4:e3:3b:9f:36: 10:21:9c:f7:42:35:45:37:18:d2:cf:69:4d:6c:eb: 6e:8c:fc:d3:dc:c8:0c:77:dd:10:59:08:e8:8a:de: 18:a3:93:14:ba:9b:92:c2:fd:bd:d7:0d:26:f5:7b: 13:5c:45:64:93:9e:d4:10:4d:7d:1e:d6:bd:de:a4: af:21:30:fa:a7:a5:ee:e8:70:47:a5:58:70:26:81: f5:97:d1:1e:85:f0:7c:59:42:23:97:22:4a:03:ee: 2a:5e:1f:cb:87:82:b3:64:15:82:fc:b9:0e:7d:57: 09:dd:2d:60:8e:3b:9e:34:c9:ce:e0:38:d3:03:c6: c2:29:01:7e:de:e3:7f:e2:f9:45:30:6a:7d:fc:67: e7:e6:34:7e:98:9a:41:dc:4b:7f:6e:cd:98:0c:10: b6:a7:59:ff:29:e3:aa:df:4c:bc:03:5c:74:36:7f: 1c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:49:A8:F4:FE:3C:5C:56:28:83:2C:06:DA:DC:B4:80:9B:C4:F3:7F X509v3 Authority Key Identifier: keyid:EB:7A:B5:34:49:E5:29:96:F1:53:93:93:C3:DA:70:4C:6F:12:F3:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB7AB53449E52996F1539393C3DA704C6F12F359.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:28:b5:5c:c8:50:47:10:88:a9:84:39:ed:10:3c:c1:ac:61: bc:fd:2f:94:63:80:05:a5:09:b0:96:a6:41:a0:cb:e1:ab:42: 5c:96:e6:3a:f2:03:c2:a1:b2:a9:1b:ab:ea:7d:ac:42:04:4b: ef:ef:75:22:9f:9a:dd:a3:5f:5b:61:52:7d:2b:70:eb:29:37: 13:fc:a5:98:f5:17:2f:27:6e:10:66:50:33:68:b5:0b:ee:52: 9c:2e:39:e0:5c:0e:92:d3:2a:d4:58:ca:41:8c:d9:14:17:b9: dd:ef:85:db:e6:2d:11:24:fa:de:ac:67:17:a1:90:02:96:bc: 19:42:6d:fa:f6:d0:1e:8d:8a:e3:01:66:3b:66:f0:2e:08:b4: cd:e9:fe:2f:03:fe:b7:95:30:a9:0e:3d:85:ee:b8:08:ec:93: 13:46:32:9c:9f:f1:d0:ff:52:09:1e:d8:35:dc:35:b5:12:fc: fb:f2:b2:1c:6d:88:57:45:7b:93:ba:6d:72:77:4b:3b:e9:d1: 9a:a1:af:3a:45:58:ca:41:4c:a8:7d:e6:cc:01:61:37:80:aa: 9b:f7:c2:80:fb:b0:a1:d3:ae:06:ee:ea:27:8b:20:6b:b5:2d: ae:92:61:ce:09:53:e9:cb:88:f5:75:04:8d:0d:cf:b9:e7:84: 3e:a5:65:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR5WK3zkpOMHK/+7ltZpNgy5j5twwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUI3QUI1MzQ0OUU1Mjk5NkYxNTM5MzkzQzNEQTcwNEM2 RjEyRjM1OTAeFw0yNTA3MjEwMzA1MzRaFw0yNTA3MjQwNzI1MzRaMDMxMTAvBgNV BAMTKDk3NDlBOEY0RkUzQzVDNTYyODgzMkMwNkRBRENCNDgwOUJDNEYzN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRfi6QAOuFTEhOwmMFDx9cxWbR dCwMRgctXjKEzbqxKF9JgA1oFZBQPy3y9bqMmJvADq9xsY9zSVxcrOOPH6ysL5ww XJd6XKLV3Tm3V5iJAyCAf2yk4zufNhAhnPdCNUU3GNLPaU1s626M/NPcyAx33RBZ COiK3hijkxS6m5LC/b3XDSb1exNcRWSTntQQTX0e1r3epK8hMPqnpe7ocEelWHAm gfWX0R6F8HxZQiOXIkoD7ipeH8uHgrNkFYL8uQ59VwndLWCOO540yc7gONMDxsIp AX7e43/i+UUwan38Z+fmNH6YmkHcS39uzZgMELanWf8p46rfTLwDXHQ2fxzZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl0mo9P48XFYogywG2ty0gJvE838wHwYDVR0j BBgwFoAU63q1NEnlKZbxU5OTw9pwTG8S81kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZThjZDk3ZS01NmY1LTRjYTUtYTg1Yy01NWEzMjNmMDYwOGMvMC9FQjdBQjUzNDQ5 RTUyOTk2RjE1MzkzOTNDM0RBNzA0QzZGMTJGMzU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUI3QUI1MzQ0OUU1Mjk5NkYxNTM5MzkzQzNEQTcwNEM2RjEy RjM1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U4Y2Q5N2UtNTZmNS00Y2E1LWE4 NWMtNTVhMzIzZjA2MDhjLzAvRUI3QUI1MzQ0OUU1Mjk5NkYxNTM5MzkzQzNEQTcw NEM2RjEyRjM1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACUotVzIUEcQiKmEOe0QPMGsYbz9L5RjgAWl CbCWpkGgy+GrQlyW5jryA8Khsqkbq+p9rEIES+/vdSKfmt2jX1thUn0rcOspNxP8 pZj1Fy8nbhBmUDNotQvuUpwuOeBcDpLTKtRYykGM2RQXud3vhdvmLREk+t6sZxeh kAKWvBlCbfr20B6NiuMBZjtm8C4ItM3p/i8D/reVMKkOPYXuuAjskxNGMpyf8dD/ Ugke2DXcNbUS/PvyshxtiFdFe5O6bXJ3Szvp0ZqhrzpFWMpBTKh95swBYTeAqpv3 woD7sKHTrgbu6ieLIGu1La6SYc4JU+nLiPV1BI0Nz7nnhD6lZXI= -----END CERTIFICATE-----Generated at Tue Jul 22 11:45:11 2025 by rpki-client