$ rpki-client -vvf repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft File: EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft (raw, json) Hash identifier: Xo0zwNUhd2vRQ5ZIworeiH95OcSRsLfBjqCEALDwuTY= Subject key identifier: F2:A0:4E:29:F3:82:0F:72:A3:85:21:64:A3:B6:3C:59:72:84:2A:08 Authority key identifier: EB:78:21:4F:24:8E:FE:08:B4:E4:62:FD:AF:D4:E7:0B:C3:D0:5A:2F Certificate issuer: /CN=EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F Certificate serial: 08CFAD37592F1B7B3CD8DE7A028A2C290224B4B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft Manifest number: CE Signing time: Tue 05 Aug 2025 23:30:48 +0000 Manifest this update: Tue 05 Aug 2025 23:25:48 +0000 Manifest next update: Sat 09 Aug 2025 03:32:48 +0000 Files and hashes: 1: 3130332e3130312e3231362e302f32342d3234203d3e20313530393431.roa (hash: V76cC5CNnJtNiE3A1eNlVqFtp7QA7yYWZJ54/BrVb60=) 2: 3130332e3130312e3231362e302f32332d3233203d3e20313530393431.roa (hash: 0KEJOj4To40f7hQCQKr4Kq8RhTmo523YXQIvq+ZY6HI=) 3: 3130332e3130312e3231372e302f32342d3234203d3e20313530393431.roa (hash: aAMjUzaN1yMPp7oXLSGICiOHUfNylQXYPCCHO4WZk9E=) 4: EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.crl (hash: MU1IZ4+qlmP21FHX4NzF+kw3kYipZjIQIA39bv7WKVg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.crl rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 03:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:cf:ad:37:59:2f:1b:7b:3c:d8:de:7a:02:8a:2c:29:02:24:b4:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F Validity Not Before: Aug 5 23:25:48 2025 GMT Not After : Aug 9 03:32:48 2025 GMT Subject: CN=F2A04E29F3820F72A3852164A3B63C5972842A08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2e:4b:7b:d9:4d:a4:3f:84:76:8e:7a:47:13: 93:60:ef:83:f5:1a:10:e7:2d:05:72:d5:71:4b:e8: a8:19:7b:c6:65:05:28:ea:f5:46:36:0c:ec:b1:f7: 6f:66:ff:17:72:90:7c:e7:61:91:85:48:ef:c4:8e: 66:4c:f0:3e:f8:ce:76:11:ff:3f:f1:93:99:37:5b: 4e:f2:b4:a7:61:07:16:c9:94:5c:45:8e:fc:ee:18: 87:59:9e:05:4d:5b:78:6c:41:05:49:76:13:87:ba: 5a:91:34:64:2d:1f:29:49:0f:3e:f7:31:ef:34:0d: 28:c5:0e:a8:ea:5e:0b:a7:6f:57:1e:87:70:f2:2d: 2c:a6:e0:ad:95:33:12:cb:a8:ae:58:86:c0:20:08: ac:fd:d5:6b:76:2c:9e:f4:0d:09:4c:66:aa:74:79: 7c:72:78:a2:2e:ac:8c:7f:62:4d:a4:27:2a:71:dc: d4:49:e0:0a:08:d2:70:17:60:cd:ac:06:56:7b:70: fd:3e:f4:87:59:b5:46:96:9c:8c:cc:45:3f:ae:20: 10:3e:de:cd:60:b2:23:43:2e:32:8f:91:3d:df:2d: 04:3a:d3:21:da:65:8f:a4:72:fd:be:16:ab:23:b0: 90:8d:42:6f:bd:b2:5d:bd:b4:ce:94:c4:64:3f:8d: aa:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A0:4E:29:F3:82:0F:72:A3:85:21:64:A3:B6:3C:59:72:84:2A:08 X509v3 Authority Key Identifier: keyid:EB:78:21:4F:24:8E:FE:08:B4:E4:62:FD:AF:D4:E7:0B:C3:D0:5A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:47:3f:d7:eb:cd:bf:eb:e0:6e:54:41:50:73:79:e2:e0:c8: 76:28:39:b7:62:29:b1:e9:d4:b6:d1:f6:6d:15:ac:aa:e8:f6: 97:e0:3f:80:db:7b:ab:b7:ed:c7:4b:4d:fb:95:a1:13:e3:ae: 10:4f:19:24:fe:7e:08:b1:0b:b8:a0:fc:3f:2e:99:ee:83:91: 9a:25:fa:56:bb:f0:4c:3b:4f:28:27:13:09:7f:c7:03:31:c3: 8d:8e:54:f2:f2:f7:45:df:93:15:2d:55:a4:41:02:58:e3:1c: b1:85:30:2f:93:cd:d4:e6:66:05:f3:f4:87:73:36:f1:6b:82: e9:19:d7:db:cb:47:85:59:57:53:e3:ac:f1:96:a4:52:2e:d0: 42:41:5d:64:8a:81:4e:5c:a8:ee:ac:c8:06:20:67:ee:52:2b: 16:a5:ff:cf:a2:f5:81:7c:14:fd:fc:9a:a3:b6:86:8e:c8:f9: 6b:31:57:d9:07:e3:c1:16:3f:07:9c:4f:5e:35:2d:f8:0a:7a: 0a:6d:d2:7e:1c:6e:59:e2:a9:5c:ad:10:eb:e9:0b:9d:9e:54: 07:31:73:53:ef:dd:de:95:cd:e8:6c:93:c6:a9:13:8e:48:cd: ac:c4:00:b0:a9:76:3b:af:e2:66:8a:8a:17:17:56:cf:ef:4d: 97:a7:39:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCM+tN1kvG3s82N56AoosKQIktLYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUI3ODIxNEYyNDhFRkUwOEI0RTQ2MkZEQUZENEU3MEJD M0QwNUEyRjAeFw0yNTA4MDUyMzI1NDhaFw0yNTA4MDkwMzMyNDhaMDMxMTAvBgNV BAMTKEYyQTA0RTI5RjM4MjBGNzJBMzg1MjE2NEEzQjYzQzU5NzI4NDJBMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtLkt72U2kP4R2jnpHE5Ng74P1 GhDnLQVy1XFL6KgZe8ZlBSjq9UY2DOyx929m/xdykHznYZGFSO/EjmZM8D74znYR /z/xk5k3W07ytKdhBxbJlFxFjvzuGIdZngVNW3hsQQVJdhOHulqRNGQtHylJDz73 Me80DSjFDqjqXgunb1ceh3DyLSym4K2VMxLLqK5YhsAgCKz91Wt2LJ70DQlMZqp0 eXxyeKIurIx/Yk2kJypx3NRJ4AoI0nAXYM2sBlZ7cP0+9IdZtUaWnIzMRT+uIBA+ 3s1gsiNDLjKPkT3fLQQ60yHaZY+kcv2+FqsjsJCNQm+9sl29tM6UxGQ/jao9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8qBOKfOCD3KjhSFko7Y8WXKEKggwHwYDVR0j BBgwFoAU63ghTySO/gi05GL9r9TnC8PQWi8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTFmMzk3MS0zYTQ3LTQ1NWQtYWIzMC1lN2MyM2I2MWI5ZjIvMC9FQjc4MjE0RjI0 OEVGRTA4QjRFNDYyRkRBRkQ0RTcwQkMzRDA1QTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUI3ODIxNEYyNDhFRkUwOEI0RTQ2MkZEQUZENEU3MEJDM0Qw NUEyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGExZjM5NzEtM2E0Ny00NTVkLWFi MzAtZTdjMjNiNjFiOWYyLzAvRUI3ODIxNEYyNDhFRkUwOEI0RTQ2MkZEQUZENEU3 MEJDM0QwNUEyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAFHP9frzb/r4G5UQVBzeeLgyHYoObdiKbHp 1LbR9m0VrKro9pfgP4Dbe6u37cdLTfuVoRPjrhBPGST+fgixC7ig/D8ume6DkZol +la78Ew7TygnEwl/xwMxw42OVPLy90XfkxUtVaRBAljjHLGFMC+TzdTmZgXz9Idz NvFrgukZ19vLR4VZV1PjrPGWpFIu0EJBXWSKgU5cqO6syAYgZ+5SKxal/8+i9YF8 FP38mqO2ho7I+WsxV9kH48EWPwecT141LfgKegpt0n4cblniqVytEOvpC52eVAcx c1Pv3d6Vzehsk8apE45IzazEALCpdjuv4maKihcXVs/vTZenOYs= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:51 2025 by rpki-client