$ rpki-client -vvf repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft File: EBA04070CA27E646C332039E07557734C6732ED2.mft (raw, json) Hash identifier: MoHy6Ucv3jRWakTkaFuyi6sFrC1nuSVfO9vShiI7suw= Subject key identifier: F3:2B:D1:AA:2C:E7:9F:86:43:3F:C1:84:A5:1B:8F:B2:CD:09:B5:90 Authority key identifier: EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2 Certificate issuer: /CN=EBA04070CA27E646C332039E07557734C6732ED2 Certificate serial: 5C01FA7D5D22BCD15654C8E1A93A8F406B0DC0A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft Manifest number: 01CC Signing time: Thu 04 Sep 2025 10:31:49 +0000 Manifest this update: Thu 04 Sep 2025 10:26:49 +0000 Manifest next update: Sun 07 Sep 2025 19:41:49 +0000 Files and hashes: 1: 3130332e3131312e3134332e302f32342d3234203d3e20313431343631.roa (hash: vMUSQ2h0yM8CNBMFULwiVWwmyMjPH1qg6y43JB4Vwvw=) 2: 3130332e3131312e3134312e302f32342d3234203d3e20313431343631.roa (hash: FOKCBmZQR+RvQ/YXjf6i5T2Jp3732D5RrjsxBFstWVo=) 3: 3130332e3131312e3134302e302f32342d3234203d3e20313431343631.roa (hash: bDyPI2WVo6BjRMZp12OHCZAGn1tdLEQqcz47No/uxaA=) 4: EBA04070CA27E646C332039E07557734C6732ED2.crl (hash: 2SDobLBtbZbMYIytin9g70tambx18/A1SXrloRXehwM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.crl rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 19:41:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:01:fa:7d:5d:22:bc:d1:56:54:c8:e1:a9:3a:8f:40:6b:0d:c0:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBA04070CA27E646C332039E07557734C6732ED2 Validity Not Before: Sep 4 10:26:49 2025 GMT Not After : Sep 7 19:41:49 2025 GMT Subject: CN=F32BD1AA2CE79F86433FC184A51B8FB2CD09B590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:0d:22:40:44:81:1c:d0:63:fc:4b:85:d2:a2: 77:f3:3d:bc:52:0e:82:5b:05:18:74:7b:7e:af:6b: e7:79:87:33:08:97:d3:57:ae:03:a7:b6:86:64:11: 45:88:5d:d8:7b:01:71:14:b1:de:d2:63:88:f1:36: 7a:8c:3a:f1:27:f5:89:18:80:4a:27:c1:f7:d7:61: 91:28:6a:14:4a:b8:09:2a:68:17:d3:b8:f3:15:88: df:1f:f4:24:fa:b0:50:62:c7:4b:49:fa:76:b7:18: 09:07:a4:7e:3f:88:ff:79:57:82:40:45:1b:7f:df: e2:55:ad:44:ac:38:0c:39:b5:ff:20:16:5b:58:61: e3:ca:9e:29:fb:04:d2:75:a9:7a:40:36:56:20:fb: bc:31:80:5b:4b:fa:0f:b6:2b:4d:e3:39:ba:66:79: a2:db:bc:95:c4:8d:36:05:50:25:de:95:e7:82:4c: 45:fb:6d:80:1d:0f:38:4e:7d:a2:e8:59:a9:b6:55: 8a:1f:47:1b:bb:99:fb:ab:8b:1a:1f:21:a5:18:ea: 9d:d7:ba:51:5d:7d:46:70:32:90:1e:c9:3d:16:fc: f4:88:a6:c6:95:45:eb:c2:e6:b5:42:8f:ce:92:b9: e7:64:ef:b4:3f:f8:fc:05:f7:24:13:77:03:c6:36: 15:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:2B:D1:AA:2C:E7:9F:86:43:3F:C1:84:A5:1B:8F:B2:CD:09:B5:90 X509v3 Authority Key Identifier: keyid:EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:86:fb:41:8e:33:ef:03:2b:f7:b7:63:35:e4:c4:89:53:0e: a5:2f:b9:5f:0c:b6:03:da:65:94:9c:f8:73:0b:91:24:39:ef: 51:d9:d0:99:55:41:3b:de:5d:eb:6f:02:97:30:c1:9e:f7:c2: 11:64:7b:c6:7e:33:58:ad:09:83:14:73:00:6b:c8:e1:e5:74: 05:71:2c:0c:53:3a:eb:82:5b:68:60:09:c1:2d:f3:21:60:9e: 3f:8b:04:f2:e1:54:0f:3c:ac:bb:aa:67:25:ee:e1:ac:66:81: 9e:c5:b4:1d:65:77:58:1b:b1:c8:53:1b:89:d3:7d:8e:f9:42: 60:09:ad:18:b4:d1:44:10:42:24:82:c8:de:80:4a:d1:ea:c9: de:e9:34:aa:25:ee:1d:17:bf:9d:f5:62:2b:f3:52:35:3a:72: a2:b6:72:c6:da:20:ef:26:3b:c6:c5:aa:20:0d:42:ac:1c:8f: ce:d9:8f:41:3f:67:90:0d:f5:11:4a:c1:cd:84:be:bd:d8:ed: 3b:b6:66:e2:19:dd:4e:cf:66:8c:6e:ca:e3:da:6f:b8:d0:4b: dc:48:92:ad:48:19:96:7e:30:8d:e0:c6:c6:45:1d:da:72:a9: 4f:4d:fc:2c:74:4f:de:71:6b:5d:71:b4:8d:7b:62:5a:3f:66: e8:9c:76:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXAH6fV0ivNFWVMjhqTqPQGsNwKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3MzRD NjczMkVEMjAeFw0yNTA5MDQxMDI2NDlaFw0yNTA5MDcxOTQxNDlaMDMxMTAvBgNV BAMTKEYzMkJEMUFBMkNFNzlGODY0MzNGQzE4NEE1MUI4RkIyQ0QwOUI1OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnDSJARIEc0GP8S4XSonfzPbxS DoJbBRh0e36va+d5hzMIl9NXrgOntoZkEUWIXdh7AXEUsd7SY4jxNnqMOvEn9YkY gEonwffXYZEoahRKuAkqaBfTuPMViN8f9CT6sFBix0tJ+na3GAkHpH4/iP95V4JA RRt/3+JVrUSsOAw5tf8gFltYYePKnin7BNJ1qXpANlYg+7wxgFtL+g+2K03jObpm eaLbvJXEjTYFUCXeleeCTEX7bYAdDzhOfaLoWam2VYofRxu7mfurixofIaUY6p3X ulFdfUZwMpAeyT0W/PSIpsaVRevC5rVCj86Suedk77Q/+PwF9yQTdwPGNhWrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8yvRqiznn4ZDP8GEpRuPss0JtZAwHwYDVR0j BBgwFoAU66BAcMon5kbDMgOeB1V3NMZzLtIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTI3ZWFmZC1hNjc0LTQ0MzctYWJmMS1lNTUwZGVjMTM3ZmEvMC9FQkEwNDA3MENB MjdFNjQ2QzMzMjAzOUUwNzU1NzczNEM2NzMyRUQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3MzRDNjcz MkVEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTEyN2VhZmQtYTY3NC00NDM3LWFi ZjEtZTU1MGRlYzEzN2ZhLzAvRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3 MzRDNjczMkVEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFGG+0GOM+8DK/e3YzXkxIlTDqUvuV8MtgPa ZZSc+HMLkSQ571HZ0JlVQTveXetvApcwwZ73whFke8Z+M1itCYMUcwBryOHldAVx LAxTOuuCW2hgCcEt8yFgnj+LBPLhVA88rLuqZyXu4axmgZ7FtB1ld1gbschTG4nT fY75QmAJrRi00UQQQiSCyN6AStHqyd7pNKol7h0Xv531YivzUjU6cqK2csbaIO8m O8bFqiANQqwcj87Zj0E/Z5AN9RFKwc2Evr3Y7Tu2ZuIZ3U7PZoxuyuPab7jQS9xI kq1IGZZ+MI3gxsZFHdpyqU9N/Cx0T95xa11xtI17Ylo/Zuicdog= -----END CERTIFICATE-----Generated at Fri Sep 5 10:39:36 2025 by rpki-client