$ rpki-client -vvf repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft File: EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft (raw, json) Hash identifier: Dj5gwhVZe/9IwjbKlvBlRrNdvKiofkTHgD+OQ4Q8M5o= Subject key identifier: 64:6A:AA:87:BC:5C:DE:76:33:81:A5:9B:FC:9A:81:14:90:60:FF:B0 Authority key identifier: EB:78:21:4F:24:8E:FE:08:B4:E4:62:FD:AF:D4:E7:0B:C3:D0:5A:2F Certificate issuer: /CN=EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F Certificate serial: 47CD309588EA5C12E3341DC57A4CE85D3F9AF637 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft Manifest number: 97 Signing time: Sun 06 Apr 2025 14:50:46 +0000 Manifest this update: Sun 06 Apr 2025 14:45:46 +0000 Manifest next update: Wed 09 Apr 2025 21:38:46 +0000 Files and hashes: 1: 3130332e3130312e3231362e302f32342d3234203d3e20313530393431.roa (hash: Q4bEPXGITMYlEUkogoBHUQw6aD1GENfQinOJ9BlkZrU=) 2: EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.crl (hash: v0YXBD6hp8c7UPwf9fcXNhyj1f2pJIwNoGFd4MnA5Rg=) 3: 3130332e3130312e3231372e302f32342d3234203d3e20313530393431.roa (hash: 5Yt/WCOhHipQ3C773vHA0ujUlZHdqnjXIPyfowlLmdw=) 4: 3130332e3130312e3231362e302f32332d3233203d3e20313530393431.roa (hash: UdzlF3DFeRaQ63vzO60cAa/vqEjotO8aLRdntyRiQwk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.crl rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:38:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:cd:30:95:88:ea:5c:12:e3:34:1d:c5:7a:4c:e8:5d:3f:9a:f6:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F Validity Not Before: Apr 6 14:45:46 2025 GMT Not After : Apr 9 21:38:46 2025 GMT Subject: CN=646AAA87BC5CDE763381A59BFC9A81149060FFB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c7:b8:35:f5:78:f2:89:d6:8f:b2:c9:41:13: 2a:76:1a:a0:01:f8:23:3b:29:ad:d9:ea:b3:fa:8f: b4:38:a0:40:29:d8:94:31:96:d7:fc:38:67:43:9a: 8c:b7:9b:5b:2d:08:73:10:c6:79:8d:21:0a:a4:d7: d9:40:65:6c:64:6a:76:17:24:82:be:c8:53:c5:21: 38:5c:8c:f9:80:e5:8d:a4:57:2f:5f:71:4d:19:41: 66:a6:69:89:00:d9:ee:2d:1f:96:dd:e3:6d:2a:0c: 78:4f:e9:b4:8f:75:ff:20:62:a4:b8:3a:8b:50:c6: 29:66:df:89:d4:b5:52:32:ab:61:b6:fd:cb:2f:ed: 86:c7:7b:70:df:08:d5:36:09:2a:a7:09:51:24:83: 92:b6:1c:86:3c:ee:5b:4d:01:7f:7f:d8:84:ad:ec: 1b:19:d2:68:98:bd:ea:59:71:19:32:bf:01:2b:4a: 08:f8:05:cf:f2:0a:d2:44:0d:ef:30:3a:b2:5e:79: e4:a7:15:9d:ec:f3:12:10:7b:36:bf:7b:06:37:f1: 37:b1:19:5e:4d:90:ee:3c:1f:f9:14:76:24:77:9a: e0:40:1b:52:44:ca:ce:34:5a:2b:a2:02:05:bf:be: cb:d6:21:52:78:24:04:ea:de:9e:cc:d8:18:ad:35: 6a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:6A:AA:87:BC:5C:DE:76:33:81:A5:9B:FC:9A:81:14:90:60:FF:B0 X509v3 Authority Key Identifier: keyid:EB:78:21:4F:24:8E:FE:08:B4:E4:62:FD:AF:D4:E7:0B:C3:D0:5A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:57:1c:09:a4:7a:06:8a:5c:09:ea:2a:73:ea:27:e4:92:c4: 28:b0:35:8a:f2:b2:2e:9f:5e:38:cc:c4:bb:91:a6:e0:f0:4e: 82:ff:15:0b:2c:3b:18:85:24:74:47:38:26:dc:90:3f:b5:ba: 15:41:63:32:c5:9a:15:58:d4:81:95:83:32:5b:92:ea:8d:a0: 7e:2c:02:8b:24:25:85:82:b8:74:04:54:fe:e0:f5:ac:85:d1: c7:38:26:45:a8:4d:e9:53:2f:17:17:17:43:f8:c1:ca:06:40: 5a:fc:19:7f:2c:64:1c:46:03:0e:76:48:bb:2d:6f:d8:2c:0d: cb:07:5d:3c:73:d4:0c:e9:6e:c7:b9:15:c0:8e:87:65:43:67: ef:61:92:83:9f:09:31:b5:57:6d:04:53:25:02:5e:49:0a:4c: 0e:36:38:b9:ba:1b:a7:a9:b6:fd:65:cf:27:b0:14:56:37:c6: 4d:03:c9:9c:e0:be:05:23:94:bd:47:c6:4b:9f:89:da:da:b7: ef:0b:eb:ea:90:29:9a:2f:29:4f:9c:79:c3:20:d5:b6:73:da: a0:e7:11:7e:58:65:ea:aa:ae:40:54:90:05:ef:55:b1:da:15: 39:8c:00:df:e8:62:15:62:07:8f:ea:c9:ab:e0:3c:79:c1:88: b5:b1:b2:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR80wlYjqXBLjNB3FekzoXT+a9jcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUI3ODIxNEYyNDhFRkUwOEI0RTQ2MkZEQUZENEU3MEJD M0QwNUEyRjAeFw0yNTA0MDYxNDQ1NDZaFw0yNTA0MDkyMTM4NDZaMDMxMTAvBgNV BAMTKDY0NkFBQTg3QkM1Q0RFNzYzMzgxQTU5QkZDOUE4MTE0OTA2MEZGQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+x7g19XjyidaPsslBEyp2GqAB +CM7Ka3Z6rP6j7Q4oEAp2JQxltf8OGdDmoy3m1stCHMQxnmNIQqk19lAZWxkanYX JIK+yFPFIThcjPmA5Y2kVy9fcU0ZQWamaYkA2e4tH5bd420qDHhP6bSPdf8gYqS4 OotQxilm34nUtVIyq2G2/csv7YbHe3DfCNU2CSqnCVEkg5K2HIY87ltNAX9/2ISt 7BsZ0miYvepZcRkyvwErSgj4Bc/yCtJEDe8wOrJeeeSnFZ3s8xIQeza/ewY38Tex GV5NkO48H/kUdiR3muBAG1JEys40WiuiAgW/vsvWIVJ4JATq3p7M2BitNWq/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZGqqh7xc3nYzgaWb/JqBFJBg/7AwHwYDVR0j BBgwFoAU63ghTySO/gi05GL9r9TnC8PQWi8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTFmMzk3MS0zYTQ3LTQ1NWQtYWIzMC1lN2MyM2I2MWI5ZjIvMC9FQjc4MjE0RjI0 OEVGRTA4QjRFNDYyRkRBRkQ0RTcwQkMzRDA1QTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUI3ODIxNEYyNDhFRkUwOEI0RTQ2MkZEQUZENEU3MEJDM0Qw NUEyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGExZjM5NzEtM2E0Ny00NTVkLWFi MzAtZTdjMjNiNjFiOWYyLzAvRUI3ODIxNEYyNDhFRkUwOEI0RTQ2MkZEQUZENEU3 MEJDM0QwNUEyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMNXHAmkegaKXAnqKnPqJ+SSxCiwNYrysi6f XjjMxLuRpuDwToL/FQssOxiFJHRHOCbckD+1uhVBYzLFmhVY1IGVgzJbkuqNoH4s AoskJYWCuHQEVP7g9ayF0cc4JkWoTelTLxcXF0P4wcoGQFr8GX8sZBxGAw52SLst b9gsDcsHXTxz1Azpbse5FcCOh2VDZ+9hkoOfCTG1V20EUyUCXkkKTA42OLm6G6ep tv1lzyewFFY3xk0DyZzgvgUjlL1Hxkufidrat+8L6+qQKZovKU+cecMg1bZz2qDn EX5YZeqqrkBUkAXvVbHaFTmMAN/oYhViB4/qyavgPHnBiLWxsqc= -----END CERTIFICATE-----Generated at Mon Apr 7 08:13:25 2025 by rpki-client