$ rpki-client -vvf repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft File: EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft (raw, json) Hash identifier: 61/tSdqdnGzGpQR99zi+qX4LDI4RIQOCO6kXasjAzEk= Subject key identifier: 48:C0:8A:2F:12:C7:3B:96:5B:3C:EE:5F:AF:D1:0D:F7:26:A0:76:D8 Authority key identifier: EB:78:21:4F:24:8E:FE:08:B4:E4:62:FD:AF:D4:E7:0B:C3:D0:5A:2F Certificate issuer: /CN=EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F Certificate serial: 355D174AD2B06766E4EEB5A4A34359D4177D0B6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft Manifest number: DC Signing time: Sat 06 Sep 2025 05:20:48 +0000 Manifest this update: Sat 06 Sep 2025 05:15:48 +0000 Manifest next update: Tue 09 Sep 2025 12:08:48 +0000 Files and hashes: 1: 3130332e3130312e3231362e302f32332d3233203d3e20313530393431.roa (hash: 0KEJOj4To40f7hQCQKr4Kq8RhTmo523YXQIvq+ZY6HI=) 2: 3130332e3130312e3231372e302f32342d3234203d3e20313530393431.roa (hash: aAMjUzaN1yMPp7oXLSGICiOHUfNylQXYPCCHO4WZk9E=) 3: EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.crl (hash: N6IzQlgD877W8DMCrBBXHuaBaXOg4EYGu6sqOY63z0Y=) 4: 3130332e3130312e3231362e302f32342d3234203d3e20313530393431.roa (hash: V76cC5CNnJtNiE3A1eNlVqFtp7QA7yYWZJ54/BrVb60=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.crl rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 12:08:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:5d:17:4a:d2:b0:67:66:e4:ee:b5:a4:a3:43:59:d4:17:7d:0b:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F Validity Not Before: Sep 6 05:15:48 2025 GMT Not After : Sep 9 12:08:48 2025 GMT Subject: CN=48C08A2F12C73B965B3CEE5FAFD10DF726A076D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fe:91:ed:6b:bb:e0:ae:62:cb:c3:b6:1a:d3: af:bc:0b:91:a8:18:8f:68:b0:74:54:0f:b3:12:18: 46:49:52:4b:b8:b7:b4:43:d1:2b:a8:80:e9:75:ad: b8:af:ab:3a:ed:c1:1d:75:ab:99:3f:f5:96:0c:37: 42:2c:2d:15:7c:35:7f:9e:04:ac:15:91:2a:a7:6c: 33:49:b2:3b:97:43:74:9d:7a:7e:22:f4:b8:8f:07: d1:61:c6:5a:f5:f0:22:eb:17:b3:14:ec:84:a7:b2: f3:3a:75:ac:50:ed:f3:63:d9:25:6b:00:7a:c3:c1: a4:42:36:b4:96:6b:8a:4c:7c:8c:7e:29:94:a5:31: 93:5f:ba:81:74:10:7c:c5:f7:52:ca:86:3d:81:0f: 31:e2:6c:aa:9f:87:06:e5:7b:e2:34:c5:73:e8:68: df:6d:08:bc:db:ee:de:27:ef:60:d0:7c:19:17:58: b7:23:60:30:77:cc:2d:e4:31:d7:ca:07:20:5a:e0: c9:29:eb:86:46:6e:71:71:e9:1c:a3:41:06:17:f4: b3:60:5e:77:2d:e3:8c:db:0a:73:fa:39:ac:13:c8: 5a:20:8f:4e:26:26:90:2d:08:77:9d:c3:30:63:50: 7c:bd:72:ba:b2:dd:c0:af:ed:25:80:ad:7e:31:90: 96:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:C0:8A:2F:12:C7:3B:96:5B:3C:EE:5F:AF:D1:0D:F7:26:A0:76:D8 X509v3 Authority Key Identifier: keyid:EB:78:21:4F:24:8E:FE:08:B4:E4:62:FD:AF:D4:E7:0B:C3:D0:5A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:35:c2:c5:6d:06:4c:a4:bf:de:d7:87:1f:15:6b:12:d2:fa: fe:70:be:83:b1:51:a0:ea:dc:1f:b9:ea:a2:08:5f:95:d6:dd: a9:0c:96:84:73:f2:98:76:2b:ad:7d:6a:b3:8b:7b:49:e0:30: 33:95:ec:a6:b6:61:1a:9e:04:ff:8e:7c:09:21:7b:6a:d1:cd: 7e:7d:7a:0c:3f:99:ab:2e:1e:92:2c:24:ac:38:59:31:c4:5d: a8:5e:7d:8f:89:4f:70:0e:75:b4:06:63:94:31:25:0b:40:3b: 85:7c:da:64:a7:bb:0c:cf:93:7c:e5:d0:3e:04:8b:9d:49:9b: 56:48:f5:3c:bf:66:b8:1f:32:9c:d5:f0:85:10:3b:16:f9:15: 92:f6:23:65:c5:6e:2c:7e:fd:ac:23:af:bc:2a:d0:f6:7f:4a: 3f:65:01:14:19:76:82:d5:1b:19:33:b0:07:21:cd:1a:40:43: 2e:4d:a6:97:c0:3b:45:df:84:d4:46:c6:84:69:28:f7:6e:25: ef:a4:24:05:de:71:b5:9c:13:13:a8:0b:91:b6:7d:cc:ab:65: 11:67:7b:33:c5:de:38:e0:65:6b:35:e8:f5:86:50:52:64:0b: 0d:b3:11:a3:b3:b5:b9:dd:b7:3f:3a:6c:ba:5d:f8:d4:a2:ce: 10:0e:d3:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNV0XStKwZ2bk7rWko0NZ1Bd9C28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUI3ODIxNEYyNDhFRkUwOEI0RTQ2MkZEQUZENEU3MEJD M0QwNUEyRjAeFw0yNTA5MDYwNTE1NDhaFw0yNTA5MDkxMjA4NDhaMDMxMTAvBgNV BAMTKDQ4QzA4QTJGMTJDNzNCOTY1QjNDRUU1RkFGRDEwREY3MjZBMDc2RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA/pHta7vgrmLLw7Ya06+8C5Go GI9osHRUD7MSGEZJUku4t7RD0SuogOl1rbivqzrtwR11q5k/9ZYMN0IsLRV8NX+e BKwVkSqnbDNJsjuXQ3Sden4i9LiPB9Fhxlr18CLrF7MU7ISnsvM6daxQ7fNj2SVr AHrDwaRCNrSWa4pMfIx+KZSlMZNfuoF0EHzF91LKhj2BDzHibKqfhwble+I0xXPo aN9tCLzb7t4n72DQfBkXWLcjYDB3zC3kMdfKByBa4Mkp64ZGbnFx6RyjQQYX9LNg Xnct44zbCnP6OawTyFogj04mJpAtCHedwzBjUHy9crqy3cCv7SWArX4xkJZlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSMCKLxLHO5ZbPO5fr9EN9yagdtgwHwYDVR0j BBgwFoAU63ghTySO/gi05GL9r9TnC8PQWi8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTFmMzk3MS0zYTQ3LTQ1NWQtYWIzMC1lN2MyM2I2MWI5ZjIvMC9FQjc4MjE0RjI0 OEVGRTA4QjRFNDYyRkRBRkQ0RTcwQkMzRDA1QTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUI3ODIxNEYyNDhFRkUwOEI0RTQ2MkZEQUZENEU3MEJDM0Qw NUEyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGExZjM5NzEtM2E0Ny00NTVkLWFi MzAtZTdjMjNiNjFiOWYyLzAvRUI3ODIxNEYyNDhFRkUwOEI0RTQ2MkZEQUZENEU3 MEJDM0QwNUEyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFc1wsVtBkykv97Xhx8VaxLS+v5wvoOxUaDq 3B+56qIIX5XW3akMloRz8ph2K619arOLe0ngMDOV7Ka2YRqeBP+OfAkhe2rRzX59 egw/masuHpIsJKw4WTHEXahefY+JT3AOdbQGY5QxJQtAO4V82mSnuwzPk3zl0D4E i51Jm1ZI9Ty/ZrgfMpzV8IUQOxb5FZL2I2XFbix+/awjr7wq0PZ/Sj9lARQZdoLV GxkzsAchzRpAQy5NppfAO0XfhNRGxoRpKPduJe+kJAXecbWcExOoC5G2fcyrZRFn ezPF3jjgZWs16PWGUFJkCw2zEaOztbndtz86bLpd+NSizhAO064= -----END CERTIFICATE-----Generated at Sun Sep 7 13:56:40 2025 by rpki-client