$ rpki-client -vvf repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft File: EBA04070CA27E646C332039E07557734C6732ED2.mft (raw, json) Hash identifier: TFhP8iqctRSyz7Vb+dVmzpElX6/HqtfFtL2pRkJGKiM= Subject key identifier: 8E:D6:16:9C:F5:71:91:6F:CD:A8:DC:5E:AA:D6:7B:35:5E:A9:D5:9A Authority key identifier: EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2 Certificate issuer: /CN=EBA04070CA27E646C332039E07557734C6732ED2 Certificate serial: 346BF161C905A22EE42565C291301A09854D68C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft Manifest number: 01A4 Signing time: Wed 11 Jun 2025 06:11:49 +0000 Manifest this update: Wed 11 Jun 2025 06:06:49 +0000 Manifest next update: Sat 14 Jun 2025 16:59:49 +0000 Files and hashes: 1: EBA04070CA27E646C332039E07557734C6732ED2.crl (hash: H0dUTvXSMMLByvTWSh0ci7e2t77rlhssdgR1mijTkrM=) 2: 3130332e3131312e3134302e302f32342d3234203d3e20313431343631.roa (hash: QxaX29t3xWsvrxzUc9KZP0vfZV3yJi9iJK7O+Mg8IY0=) 3: 3130332e3131312e3134312e302f32342d3234203d3e20313431343631.roa (hash: s7QOuxoUDXpiJb6tRGci1SxU/QQoW+kyAaIfnlMIP40=) 4: 3130332e3131312e3134332e302f32342d3234203d3e20313431343631.roa (hash: VLiqZK5/RUS6hOrKh5dQ9m9sABBe0DKT5N2DBOt5pfM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.crl rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 16:59:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:6b:f1:61:c9:05:a2:2e:e4:25:65:c2:91:30:1a:09:85:4d:68:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBA04070CA27E646C332039E07557734C6732ED2 Validity Not Before: Jun 11 06:06:49 2025 GMT Not After : Jun 14 16:59:49 2025 GMT Subject: CN=8ED6169CF571916FCDA8DC5EAAD67B355EA9D59A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e6:5d:73:7b:e7:ac:ed:9a:5a:27:d2:26:05: 84:85:dd:cc:60:bd:df:9b:18:8e:70:33:23:e1:cf: 25:4f:ad:97:98:0b:6e:9f:fc:37:48:66:d4:8b:02: 4f:c2:5b:79:8c:22:88:fd:b2:ca:55:71:0d:e5:ba: 08:e3:1d:75:c2:34:09:75:0a:9a:7c:53:69:84:d8: 66:39:51:c3:f9:ff:9e:c0:2f:c1:86:16:3e:a0:9f: a5:55:a8:eb:2f:e7:24:c8:59:fc:7b:1d:aa:cb:0b: b6:8b:9e:8d:95:86:ab:96:62:a9:34:a2:de:2a:d0: 60:e2:bd:65:08:f3:86:9d:18:4e:0c:6b:67:c3:82: 2e:95:4d:a3:08:73:53:f3:e7:dd:df:d9:3d:3d:8a: 58:b0:98:32:52:fd:cb:a8:15:d9:7b:2a:09:c3:b1: 10:de:c9:b6:f9:d2:1b:ac:7a:07:53:82:3f:47:28: ea:0b:2f:24:84:6a:1a:b7:2b:e0:01:93:b6:f7:d4: 59:3d:0a:f3:b1:d1:db:48:3e:1b:1f:a7:4a:24:df: d3:6d:32:29:7a:2a:ff:07:ab:6c:0d:4c:e6:4e:03: f2:6e:05:1a:c4:87:ef:64:01:a9:6b:70:cd:13:bd: 33:b0:36:02:53:d7:9d:36:fb:df:01:35:68:f2:43: 9f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D6:16:9C:F5:71:91:6F:CD:A8:DC:5E:AA:D6:7B:35:5E:A9:D5:9A X509v3 Authority Key Identifier: keyid:EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:dc:c0:79:90:dc:c0:0f:fe:8f:5c:43:86:dd:02:63:45:5d: 38:45:32:62:26:ae:91:54:3e:12:b9:6b:5a:6a:2c:3c:46:00: 9b:50:6d:1b:96:2f:39:5f:58:53:93:ed:23:c3:37:df:2b:d8: e0:a8:42:e0:34:ee:b7:e9:9b:36:bb:06:4a:ea:6d:c5:26:85: 0b:44:78:7c:fb:55:f5:99:c4:38:44:90:a8:68:28:5f:41:c4: cc:94:45:fb:d4:8e:84:bf:e5:b1:fd:72:e4:1a:fd:77:db:d8: e5:11:3c:f9:82:12:92:b1:ff:f7:df:9b:3b:26:d2:55:46:57: 1d:53:38:bf:ef:7a:29:3b:b9:b1:2a:03:9a:9a:c0:d2:69:65: ad:67:4d:97:26:c3:2b:69:0b:8e:ba:25:3b:93:8d:43:d3:23: c2:41:58:43:d0:9a:62:4a:d7:1b:e2:33:03:67:39:c7:4f:9b: a9:b5:be:45:50:c2:e6:3d:34:06:1d:02:b4:3f:21:48:94:79: c9:7d:32:83:70:9a:d1:ba:a0:f4:d6:dc:99:a4:e2:92:8c:24: a3:63:20:8e:0b:d0:30:e0:9f:ef:11:9f:c3:35:d6:1d:5e:42: 0a:a1:c2:a1:33:ac:cc:13:a8:3f:96:ed:79:19:8b:b1:24:e5: 03:53:11:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNGvxYckFoi7kJWXCkTAaCYVNaMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3MzRD NjczMkVEMjAeFw0yNTA2MTEwNjA2NDlaFw0yNTA2MTQxNjU5NDlaMDMxMTAvBgNV BAMTKDhFRDYxNjlDRjU3MTkxNkZDREE4REM1RUFBRDY3QjM1NUVBOUQ1OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb5l1ze+es7ZpaJ9ImBYSF3cxg vd+bGI5wMyPhzyVPrZeYC26f/DdIZtSLAk/CW3mMIoj9sspVcQ3lugjjHXXCNAl1 Cpp8U2mE2GY5UcP5/57AL8GGFj6gn6VVqOsv5yTIWfx7HarLC7aLno2VhquWYqk0 ot4q0GDivWUI84adGE4Ma2fDgi6VTaMIc1Pz593f2T09iliwmDJS/cuoFdl7KgnD sRDeybb50husegdTgj9HKOoLLySEahq3K+ABk7b31Fk9CvOx0dtIPhsfp0ok39Nt Mil6Kv8Hq2wNTOZOA/JuBRrEh+9kAalrcM0TvTOwNgJT1502+98BNWjyQ59RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjtYWnPVxkW/NqNxeqtZ7NV6p1ZowHwYDVR0j BBgwFoAU66BAcMon5kbDMgOeB1V3NMZzLtIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTI3ZWFmZC1hNjc0LTQ0MzctYWJmMS1lNTUwZGVjMTM3ZmEvMC9FQkEwNDA3MENB MjdFNjQ2QzMzMjAzOUUwNzU1NzczNEM2NzMyRUQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3MzRDNjcz MkVEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTEyN2VhZmQtYTY3NC00NDM3LWFi ZjEtZTU1MGRlYzEzN2ZhLzAvRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3 MzRDNjczMkVEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEncwHmQ3MAP/o9cQ4bdAmNFXThFMmImrpFU PhK5a1pqLDxGAJtQbRuWLzlfWFOT7SPDN98r2OCoQuA07rfpmza7BkrqbcUmhQtE eHz7VfWZxDhEkKhoKF9BxMyURfvUjoS/5bH9cuQa/Xfb2OURPPmCEpKx//ffmzsm 0lVGVx1TOL/veik7ubEqA5qawNJpZa1nTZcmwytpC466JTuTjUPTI8JBWEPQmmJK 1xviMwNnOcdPm6m1vkVQwuY9NAYdArQ/IUiUecl9MoNwmtG6oPTW3Jmk4pKMJKNj II4L0DDgn+8Rn8M11h1eQgqhwqEzrMwTqD+W7XkZi7Ek5QNTEUw= -----END CERTIFICATE-----Generated at Fri Jun 13 06:27:28 2025 by rpki-client