$ rpki-client -vvf repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft File: EBA04070CA27E646C332039E07557734C6732ED2.mft (raw, json) Hash identifier: 0zeszV0BGew0PFlE+EmF1mKhZs4PWvA+7Y5jZTXrdw4= Subject key identifier: 2A:4A:5E:DD:61:A7:BF:E7:A7:C3:38:0B:37:0B:08:46:89:F4:15:A1 Authority key identifier: EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2 Certificate issuer: /CN=EBA04070CA27E646C332039E07557734C6732ED2 Certificate serial: 3DB53ABB3E52B1A49D2576BDACF3A500649E58C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft Manifest number: 0187 Signing time: Sat 05 Apr 2025 20:41:47 +0000 Manifest this update: Sat 05 Apr 2025 20:36:47 +0000 Manifest next update: Wed 09 Apr 2025 06:11:47 +0000 Files and hashes: 1: 3130332e3131312e3134332e302f32342d3234203d3e20313431343631.roa (hash: VLiqZK5/RUS6hOrKh5dQ9m9sABBe0DKT5N2DBOt5pfM=) 2: EBA04070CA27E646C332039E07557734C6732ED2.crl (hash: fJDBelYKap93wVIRFtxiv2sPbhXyocO/b3HZ2Ehh9EE=) 3: 3130332e3131312e3134302e302f32342d3234203d3e20313431343631.roa (hash: QxaX29t3xWsvrxzUc9KZP0vfZV3yJi9iJK7O+Mg8IY0=) 4: 3130332e3131312e3134312e302f32342d3234203d3e20313431343631.roa (hash: s7QOuxoUDXpiJb6tRGci1SxU/QQoW+kyAaIfnlMIP40=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.crl rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 06:11:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:b5:3a:bb:3e:52:b1:a4:9d:25:76:bd:ac:f3:a5:00:64:9e:58:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBA04070CA27E646C332039E07557734C6732ED2 Validity Not Before: Apr 5 20:36:47 2025 GMT Not After : Apr 9 06:11:47 2025 GMT Subject: CN=2A4A5EDD61A7BFE7A7C3380B370B084689F415A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bb:ac:e1:70:bb:7f:db:12:31:23:b9:a0:c3: 2b:00:f9:35:79:51:e4:04:1e:a4:85:a8:00:a1:b1: 14:75:16:9b:0e:94:e5:9f:46:cc:28:15:3b:77:88: 2a:e7:fc:77:53:2e:93:35:9f:52:da:11:ab:6c:e6: a7:e6:49:a5:94:71:72:94:80:45:16:3d:7a:07:82: 2e:0b:f5:79:06:56:f9:0d:27:8b:1c:e3:eb:11:a0: be:9d:ce:7f:b2:e2:86:c3:3a:12:c6:82:33:7c:25: 6f:3d:53:9f:66:59:7b:64:79:69:cc:c1:b0:41:30: 0b:b2:96:24:75:35:ec:45:56:35:96:c1:25:5f:71: ee:48:20:a3:2e:f7:fb:97:b1:d9:df:c6:d8:18:83: 21:84:18:2f:57:57:33:02:f3:f1:8f:81:0d:f8:ea: 08:3e:a7:82:30:38:16:52:10:f7:71:28:9a:f1:55: 5c:b4:97:03:9a:e8:94:f7:a0:97:c9:88:7f:33:f1: 5b:ec:04:62:94:50:72:40:21:45:7d:9b:b0:e6:db: 34:27:9b:33:ef:0d:8b:f0:c3:5f:0d:c4:03:55:02: 42:87:f5:a4:38:3a:22:9b:2b:68:aa:23:a7:34:db: 07:f6:b4:1d:90:b3:c2:b5:ba:8f:d6:56:2e:ec:ec: 04:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:4A:5E:DD:61:A7:BF:E7:A7:C3:38:0B:37:0B:08:46:89:F4:15:A1 X509v3 Authority Key Identifier: keyid:EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:38:75:d8:f9:bf:9e:b3:d9:b8:e9:47:85:7e:3a:23:c6:28: 65:e2:85:e9:e8:ba:ca:11:e0:84:bb:f6:b1:6e:68:ea:dc:dc: 69:ad:d2:6f:4f:83:fa:a4:ad:c8:48:ec:e3:bd:56:b6:61:a6: 63:a0:12:e2:f2:a5:0b:c9:ca:b0:17:a1:83:d8:c3:64:8f:6e: 64:07:f6:71:5b:98:49:44:a6:f5:6c:68:6d:4a:58:d4:56:7e: e1:aa:90:32:89:84:9e:7e:60:ee:5e:92:a3:2e:d2:9f:9a:a8: e2:91:98:b0:e1:d2:b3:bc:e0:d9:e5:c2:c1:c9:4b:49:e5:58: 74:cf:34:02:ed:18:be:2d:ec:33:42:d9:54:32:22:96:04:fc: 11:f4:db:c7:39:bc:cb:1c:89:c1:02:00:57:5e:68:bc:6e:32: 9d:3e:b7:1f:0f:94:97:89:49:b3:7a:16:67:ed:de:f9:33:5e: 89:ad:7d:83:cd:22:5a:c7:41:c7:1d:1c:18:25:2f:5f:e0:e3: 25:65:0e:e8:0f:e4:1b:d4:2d:74:8f:62:7f:28:1f:e8:55:e0: 75:ce:10:0e:c4:e3:ce:b6:17:31:2f:37:a6:9f:b1:79:2c:ef: 01:8a:89:f2:5b:34:63:9f:51:a5:cb:3d:15:1d:d4:37:05:79: b1:2e:4a:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPbU6uz5SsaSdJXa9rPOlAGSeWMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3MzRD NjczMkVEMjAeFw0yNTA0MDUyMDM2NDdaFw0yNTA0MDkwNjExNDdaMDMxMTAvBgNV BAMTKDJBNEE1RURENjFBN0JGRTdBN0MzMzgwQjM3MEIwODQ2ODlGNDE1QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCru6zhcLt/2xIxI7mgwysA+TV5 UeQEHqSFqAChsRR1FpsOlOWfRswoFTt3iCrn/HdTLpM1n1LaEats5qfmSaWUcXKU gEUWPXoHgi4L9XkGVvkNJ4sc4+sRoL6dzn+y4obDOhLGgjN8JW89U59mWXtkeWnM wbBBMAuyliR1NexFVjWWwSVfce5IIKMu9/uXsdnfxtgYgyGEGC9XVzMC8/GPgQ34 6gg+p4IwOBZSEPdxKJrxVVy0lwOa6JT3oJfJiH8z8VvsBGKUUHJAIUV9m7Dm2zQn mzPvDYvww18NxANVAkKH9aQ4OiKbK2iqI6c02wf2tB2Qs8K1uo/WVi7s7ATBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKkpe3WGnv+enwzgLNwsIRon0FaEwHwYDVR0j BBgwFoAU66BAcMon5kbDMgOeB1V3NMZzLtIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTI3ZWFmZC1hNjc0LTQ0MzctYWJmMS1lNTUwZGVjMTM3ZmEvMC9FQkEwNDA3MENB MjdFNjQ2QzMzMjAzOUUwNzU1NzczNEM2NzMyRUQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3MzRDNjcz MkVEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTEyN2VhZmQtYTY3NC00NDM3LWFi ZjEtZTU1MGRlYzEzN2ZhLzAvRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3 MzRDNjczMkVEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABE4ddj5v56z2bjpR4V+OiPGKGXihenousoR 4IS79rFuaOrc3Gmt0m9Pg/qkrchI7OO9VrZhpmOgEuLypQvJyrAXoYPYw2SPbmQH 9nFbmElEpvVsaG1KWNRWfuGqkDKJhJ5+YO5ekqMu0p+aqOKRmLDh0rO84NnlwsHJ S0nlWHTPNALtGL4t7DNC2VQyIpYE/BH028c5vMscicECAFdeaLxuMp0+tx8PlJeJ SbN6Fmft3vkzXomtfYPNIlrHQccdHBglL1/g4yVlDugP5BvULXSPYn8oH+hV4HXO EA7E4862FzEvN6afsXks7wGKifJbNGOfUaXLPRUd1DcFebEuSuc= -----END CERTIFICATE-----Generated at Mon Apr 7 07:54:37 2025 by rpki-client