$ rpki-client -vvf repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.mft File: EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.mft (raw, json) Hash identifier: 1hXGcty/5CYMuWXXDsjKexlRXpb73wa7L8FYOlrNowk= Subject key identifier: EC:F6:2E:84:7B:D9:4A:29:52:FB:59:CD:44:8B:71:8A:3F:20:75:5F Authority key identifier: EB:17:E4:6A:BC:B7:8A:51:E4:C5:B9:A1:4B:D7:81:7F:CC:60:92:F9 Certificate issuer: /CN=EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9 Certificate serial: 73AAD75E5E7AC8A2F3A47C1B494EC41C6322E8F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.mft Manifest number: 04F0 Signing time: Tue 22 Jul 2025 10:02:22 +0000 Manifest this update: Tue 22 Jul 2025 09:57:22 +0000 Manifest next update: Fri 25 Jul 2025 19:01:22 +0000 Files and hashes: 1: 3130332e38362e3130332e302f32342d3234203d3e20313336303831.roa (hash: FH/voLgmuZE3XbtxgnYOWLHEkRd7OKtR53sqhIsyCzA=) 2: EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.crl (hash: KKFUS2WmPYDSjlDJhptVrojn/E/aJYdllHAs4NReg48=) 3: 3130332e3134372e3231382e302f32342d3234203d3e20313336303831.roa (hash: 3V+KbbdMSsyWcppKJdE78z6t2xUFj1baxa/Y1TQkRqM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.crl rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:aa:d7:5e:5e:7a:c8:a2:f3:a4:7c:1b:49:4e:c4:1c:63:22:e8:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9 Validity Not Before: Jul 22 09:57:22 2025 GMT Not After : Jul 25 19:01:22 2025 GMT Subject: CN=ECF62E847BD94A2952FB59CD448B718A3F20755F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:38:48:88:80:a3:da:b1:86:fe:89:65:20:ff: ce:72:4a:ed:74:2f:c7:fc:d8:a6:55:f3:6f:cc:cd: 9a:ba:66:2e:e2:22:58:b9:d0:eb:9e:cd:0d:63:1f: 14:2b:17:79:ef:36:da:fb:7f:d5:0d:53:71:8d:c5: 73:4d:f8:a6:f6:be:3d:b1:ac:c3:00:5c:53:46:fb: e2:f1:3d:d5:32:e5:dc:de:5b:88:fa:6e:fd:ca:6f: d9:8e:36:13:ee:bb:9d:ce:90:10:14:46:76:ad:c1: fc:85:a7:34:5d:aa:70:82:75:84:ae:95:6f:f3:c7: ec:8e:83:f7:a1:d8:20:8d:e6:c1:d8:c6:4e:fe:ba: 66:73:94:ee:75:af:2f:13:01:8a:6d:a6:bb:c8:74: 87:80:a7:16:c1:58:08:bd:e1:70:e2:f0:04:b8:a9: 03:4e:d6:a7:fe:53:dd:53:74:64:6f:47:d7:cf:a5: 2c:fc:9d:8f:d3:03:ac:41:bb:f6:0e:a3:46:aa:72: b7:20:dd:49:35:f4:fe:88:3f:f9:8b:f8:ed:e2:63: 01:33:77:43:f5:81:bf:65:45:08:38:f9:a5:f7:84: 15:9d:35:35:ea:e6:d8:72:9a:6d:6d:71:a4:f2:02: c7:ca:73:4f:04:6d:82:4b:74:df:b8:84:de:b2:25: 53:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F6:2E:84:7B:D9:4A:29:52:FB:59:CD:44:8B:71:8A:3F:20:75:5F X509v3 Authority Key Identifier: keyid:EB:17:E4:6A:BC:B7:8A:51:E4:C5:B9:A1:4B:D7:81:7F:CC:60:92:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:c4:10:6b:62:14:e0:fb:28:8e:1c:7e:a1:d8:d2:ef:e1:1b: 90:fb:b2:44:ce:03:c6:30:c3:42:ee:3b:c6:d8:f4:05:e3:0b: 5b:3f:4e:25:f8:cb:61:3b:a0:50:bd:30:cb:dc:cf:da:13:51: 5e:d0:df:9d:b2:e8:64:54:da:ea:3f:2e:de:1a:37:40:dd:f4: 15:32:a7:13:bb:b6:2a:61:78:09:9b:43:25:a0:c8:c6:94:5f: 0d:99:98:83:2a:3e:5e:5f:e2:12:84:a8:9c:1c:28:a1:4c:30: f8:6d:b8:95:20:b1:0b:a0:8c:fd:12:bb:4d:61:7c:f5:cf:7b: 77:42:b3:c6:9f:63:f3:1e:60:3e:8e:5b:e5:b7:11:81:0f:21: 63:ca:04:03:6a:43:c2:98:77:0b:86:a5:8d:1d:78:1d:a2:b5: b1:d2:33:92:71:c0:6f:a4:04:08:d8:42:c1:80:b0:59:30:b2: cd:08:e0:0c:3c:20:95:77:78:87:7a:e1:73:e7:03:05:ab:32: a5:9e:3c:45:08:a1:79:e7:51:00:89:06:09:71:69:51:82:f6: 29:ee:68:79:58:68:e0:61:c2:ec:2d:fe:fd:7e:dc:07:8c:35: e5:f3:40:24:29:5e:1f:6e:c9:a5:74:17:b7:2f:74:5b:a4:41: 1d:09:b5:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc6rXXl56yKLzpHwbSU7EHGMi6PMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUIxN0U0NkFCQ0I3OEE1MUU0QzVCOUExNEJENzgxN0ZD QzYwOTJGOTAeFw0yNTA3MjIwOTU3MjJaFw0yNTA3MjUxOTAxMjJaMDMxMTAvBgNV BAMTKEVDRjYyRTg0N0JEOTRBMjk1MkZCNTlDRDQ0OEI3MThBM0YyMDc1NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgOEiIgKPasYb+iWUg/85ySu10 L8f82KZV82/MzZq6Zi7iIli50OuezQ1jHxQrF3nvNtr7f9UNU3GNxXNN+Kb2vj2x rMMAXFNG++LxPdUy5dzeW4j6bv3Kb9mONhPuu53OkBAURnatwfyFpzRdqnCCdYSu lW/zx+yOg/eh2CCN5sHYxk7+umZzlO51ry8TAYptprvIdIeApxbBWAi94XDi8AS4 qQNO1qf+U91TdGRvR9fPpSz8nY/TA6xBu/YOo0aqcrcg3Uk19P6IP/mL+O3iYwEz d0P1gb9lRQg4+aX3hBWdNTXq5thymm1tcaTyAsfKc08EbYJLdN+4hN6yJVMRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7PYuhHvZSilS+1nNRItxij8gdV8wHwYDVR0j BBgwFoAU6xfkary3ilHkxbmhS9eBf8xgkvkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MjYwNTg2ZC1iMDI3LTQ2NTYtYjYzMS0wNTg5NmI1NDM3ODIvMC9FQjE3RTQ2QUJD Qjc4QTUxRTRDNUI5QTE0QkQ3ODE3RkNDNjA5MkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUIxN0U0NkFCQ0I3OEE1MUU0QzVCOUExNEJENzgxN0ZDQzYw OTJGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjI2MDU4NmQtYjAyNy00NjU2LWI2 MzEtMDU4OTZiNTQzNzgyLzAvRUIxN0U0NkFCQ0I3OEE1MUU0QzVCOUExNEJENzgx N0ZDQzYwOTJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAErEEGtiFOD7KI4cfqHY0u/hG5D7skTOA8Yw w0LuO8bY9AXjC1s/TiX4y2E7oFC9MMvcz9oTUV7Q352y6GRU2uo/Lt4aN0Dd9BUy pxO7tipheAmbQyWgyMaUXw2ZmIMqPl5f4hKEqJwcKKFMMPhtuJUgsQugjP0Su01h fPXPe3dCs8afY/MeYD6OW+W3EYEPIWPKBANqQ8KYdwuGpY0deB2itbHSM5JxwG+k BAjYQsGAsFkwss0I4Aw8IJV3eId64XPnAwWrMqWePEUIoXnnUQCJBglxaVGC9inu aHlYaOBhwuwt/v1+3AeMNeXzQCQpXh9uyaV0F7cvdFukQR0JtfM= -----END CERTIFICATE-----Generated at Thu Jul 24 12:13:09 2025 by rpki-client