$ rpki-client -vvf repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.mft File: EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.mft (raw, json) Hash identifier: Fzew5HEJ8HkuGMQ5zbwGYD2EPNOu5AwlU4jydFL3lZ4= Subject key identifier: 84:33:60:BD:F5:D2:87:2B:F5:A3:64:E7:2C:2C:CA:35:88:F6:84:F3 Authority key identifier: EB:17:E4:6A:BC:B7:8A:51:E4:C5:B9:A1:4B:D7:81:7F:CC:60:92:F9 Certificate issuer: /CN=EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9 Certificate serial: 4DE9B696A2F1A27C6694B36F96AFE88DF2F8F71B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.mft Manifest number: 04F1 Signing time: Thu 24 Jul 2025 19:02:33 +0000 Manifest this update: Thu 24 Jul 2025 18:57:33 +0000 Manifest next update: Mon 28 Jul 2025 01:25:33 +0000 Files and hashes: 1: 3130332e3134372e3231382e302f32342d3234203d3e20313336303831.roa (hash: 3V+KbbdMSsyWcppKJdE78z6t2xUFj1baxa/Y1TQkRqM=) 2: EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.crl (hash: uKUcKQ0D1Crq/kbxm5JZBP+IKfRteBffVbm7KCIGnPQ=) 3: 3130332e38362e3130332e302f32342d3234203d3e20313336303831.roa (hash: FH/voLgmuZE3XbtxgnYOWLHEkRd7OKtR53sqhIsyCzA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.crl rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 01:25:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:e9:b6:96:a2:f1:a2:7c:66:94:b3:6f:96:af:e8:8d:f2:f8:f7:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9 Validity Not Before: Jul 24 18:57:33 2025 GMT Not After : Jul 28 01:25:33 2025 GMT Subject: CN=843360BDF5D2872BF5A364E72C2CCA3588F684F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0e:f4:0f:04:9c:90:15:26:bf:40:52:97:df: 9a:0e:bb:ce:72:00:28:02:6c:57:f7:09:51:f0:76: 55:a6:ed:5d:a9:cb:a6:d0:9d:d0:75:b0:53:5c:28: 8b:eb:ad:10:f0:f8:ea:d5:a4:3a:52:6e:a1:69:7f: ce:a3:71:5e:35:ff:2d:21:34:93:7f:ec:cc:2f:31: 59:6f:56:68:6d:ff:52:9d:b9:9d:89:c9:33:21:f6: d2:6e:d4:df:7e:19:03:1b:c1:bb:a3:0a:3d:b5:6a: f6:74:a1:b5:59:9a:65:6f:f3:0d:55:41:2a:9e:7b: 5b:3d:6f:00:23:e4:6d:78:d6:9f:32:c8:36:68:34: 30:74:ae:10:92:f9:ae:c2:38:80:f3:b2:ca:c8:2d: ca:9a:7e:f6:3e:b1:c7:4b:fa:ed:4d:fe:49:74:e6: 45:33:7c:24:d4:e7:42:d7:58:8c:b7:b2:87:26:1e: 63:3c:ae:31:d6:4f:c3:0e:d2:e2:70:72:f3:a9:1d: 8a:e1:84:07:d2:05:22:60:c2:9c:7f:1b:20:74:a4: 73:42:99:12:40:cd:92:d8:2c:50:0f:70:ef:a5:70: 24:08:46:9f:73:f5:24:13:cc:7d:a6:97:eb:d1:eb: e3:2b:68:78:81:7f:c0:25:e0:3f:e4:ce:5f:b4:52: cc:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:33:60:BD:F5:D2:87:2B:F5:A3:64:E7:2C:2C:CA:35:88:F6:84:F3 X509v3 Authority Key Identifier: keyid:EB:17:E4:6A:BC:B7:8A:51:E4:C5:B9:A1:4B:D7:81:7F:CC:60:92:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:77:b2:be:1d:a5:ed:e7:7b:65:f5:5f:c0:a5:78:73:d1:64: b6:aa:fb:42:b3:e7:15:59:f8:37:b0:95:82:5a:5c:47:46:a2: 42:95:c5:e2:43:cf:70:d2:9a:ef:e8:fa:13:01:21:7a:50:3a: df:d3:fa:2b:af:9e:91:86:56:01:fb:1e:e2:1e:8e:05:35:2f: b0:1d:22:a9:40:d4:8b:18:1c:b4:f3:b9:34:20:c6:0e:6d:b1: 72:70:7b:67:73:0c:a6:8e:77:e8:bc:dc:01:ce:6a:6e:f6:71: fe:7d:44:3b:78:ce:0a:0d:26:15:03:eb:41:1b:63:6a:5c:70: 3d:ef:f3:25:9d:ff:15:c3:03:d2:ac:2a:90:39:d0:3f:8e:6f: 82:f2:6f:c5:44:2a:fd:53:68:ea:49:35:4e:3b:f0:b7:57:44: fc:c3:97:fe:aa:f2:a6:e6:12:6d:2e:27:6a:3e:95:81:72:fc: 69:72:48:a6:1c:b0:6e:b5:4b:a6:0d:d8:2c:25:00:07:9b:db: bd:fb:ac:52:dc:fe:18:df:8a:64:e3:28:3e:37:bf:e5:ff:8f: aa:0e:63:7a:67:48:59:8f:83:4b:58:20:75:3b:53:fd:8e:83: 30:2f:16:c9:e8:0d:d7:d0:59:d5:95:cc:87:37:1e:f1:2c:1a: 38:57:6a:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTem2lqLxonxmlLNvlq/ojfL49xswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUIxN0U0NkFCQ0I3OEE1MUU0QzVCOUExNEJENzgxN0ZD QzYwOTJGOTAeFw0yNTA3MjQxODU3MzNaFw0yNTA3MjgwMTI1MzNaMDMxMTAvBgNV BAMTKDg0MzM2MEJERjVEMjg3MkJGNUEzNjRFNzJDMkNDQTM1ODhGNjg0RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1DvQPBJyQFSa/QFKX35oOu85y ACgCbFf3CVHwdlWm7V2py6bQndB1sFNcKIvrrRDw+OrVpDpSbqFpf86jcV41/y0h NJN/7MwvMVlvVmht/1KduZ2JyTMh9tJu1N9+GQMbwbujCj21avZ0obVZmmVv8w1V QSqee1s9bwAj5G141p8yyDZoNDB0rhCS+a7COIDzssrILcqafvY+scdL+u1N/kl0 5kUzfCTU50LXWIy3socmHmM8rjHWT8MO0uJwcvOpHYrhhAfSBSJgwpx/GyB0pHNC mRJAzZLYLFAPcO+lcCQIRp9z9SQTzH2ml+vR6+MraHiBf8Al4D/kzl+0UszFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhDNgvfXShyv1o2TnLCzKNYj2hPMwHwYDVR0j BBgwFoAU6xfkary3ilHkxbmhS9eBf8xgkvkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MjYwNTg2ZC1iMDI3LTQ2NTYtYjYzMS0wNTg5NmI1NDM3ODIvMC9FQjE3RTQ2QUJD Qjc4QTUxRTRDNUI5QTE0QkQ3ODE3RkNDNjA5MkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUIxN0U0NkFCQ0I3OEE1MUU0QzVCOUExNEJENzgxN0ZDQzYw OTJGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjI2MDU4NmQtYjAyNy00NjU2LWI2 MzEtMDU4OTZiNTQzNzgyLzAvRUIxN0U0NkFCQ0I3OEE1MUU0QzVCOUExNEJENzgx N0ZDQzYwOTJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAR3sr4dpe3ne2X1X8CleHPRZLaq+0Kz5xVZ +DewlYJaXEdGokKVxeJDz3DSmu/o+hMBIXpQOt/T+iuvnpGGVgH7HuIejgU1L7Ad IqlA1IsYHLTzuTQgxg5tsXJwe2dzDKaOd+i83AHOam72cf59RDt4zgoNJhUD60Eb Y2pccD3v8yWd/xXDA9KsKpA50D+Ob4Lyb8VEKv1TaOpJNU478LdXRPzDl/6q8qbm Em0uJ2o+lYFy/GlySKYcsG61S6YN2CwlAAeb2737rFLc/hjfimTjKD43v+X/j6oO Y3pnSFmPg0tYIHU7U/2OgzAvFsnoDdfQWdWVzIc3HvEsGjhXalU= -----END CERTIFICATE-----Generated at Fri Jul 25 07:04:23 2025 by rpki-client