$ rpki-client -vvf repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft File: EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft (raw, json) Hash identifier: gn7wQzR2cVOCYimw1Y4PSHsT7Fg9bEgNaK1ituNb57c= Subject key identifier: 0B:DC:A0:CA:1B:F2:3B:38:71:28:34:80:78:64:D2:B0:E9:59:3E:AC Authority key identifier: EB:78:21:4F:24:8E:FE:08:B4:E4:62:FD:AF:D4:E7:0B:C3:D0:5A:2F Certificate issuer: /CN=EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F Certificate serial: 04C19706D8CDA3971938C30209DDD41D679EEBF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft Manifest number: B6 Signing time: Sat 14 Jun 2025 10:30:47 +0000 Manifest this update: Sat 14 Jun 2025 10:25:47 +0000 Manifest next update: Tue 17 Jun 2025 17:38:47 +0000 Files and hashes: 1: 3130332e3130312e3231372e302f32342d3234203d3e20313530393431.roa (hash: 5Yt/WCOhHipQ3C773vHA0ujUlZHdqnjXIPyfowlLmdw=) 2: 3130332e3130312e3231362e302f32342d3234203d3e20313530393431.roa (hash: Q4bEPXGITMYlEUkogoBHUQw6aD1GENfQinOJ9BlkZrU=) 3: 3130332e3130312e3231362e302f32332d3233203d3e20313530393431.roa (hash: 0KEJOj4To40f7hQCQKr4Kq8RhTmo523YXQIvq+ZY6HI=) 4: EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.crl (hash: Q4QMcmBM6mfj2It2e1y6vgRbRs4p5Oz9nzQnL0fNGFA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.crl rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 17:38:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:c1:97:06:d8:cd:a3:97:19:38:c3:02:09:dd:d4:1d:67:9e:eb:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F Validity Not Before: Jun 14 10:25:47 2025 GMT Not After : Jun 17 17:38:47 2025 GMT Subject: CN=0BDCA0CA1BF23B38712834807864D2B0E9593EAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:89:fe:c4:c0:a7:6b:ed:da:30:9e:ac:3c:0d: ab:44:97:5d:a3:c5:d5:14:8e:76:1e:72:69:b1:b6: 7c:3f:0c:d6:1d:28:c7:2a:cc:1f:ef:4e:76:74:48: ec:c5:93:fd:df:a6:1a:0f:31:ce:7e:98:5b:cf:9f: b8:16:4c:bb:fe:2c:8c:c4:d6:23:99:e9:9b:9f:73: dc:3a:6a:64:cc:d3:79:18:a7:04:14:b5:24:27:28: 83:3c:a3:de:51:0c:ae:6e:8c:29:e9:0b:09:90:61: 46:61:21:f0:ae:fa:86:c6:58:2b:b9:f3:79:88:ba: e5:7d:64:cb:10:a1:54:22:71:6e:b5:f0:ee:c2:bb: f0:6d:25:96:eb:ac:d1:35:78:60:cf:07:9b:76:c4: 56:9c:2f:28:bc:6b:34:c6:6d:5e:26:db:a9:6e:b3: 99:b4:7c:7a:6d:53:37:78:bf:fe:66:5a:4a:d0:6e: b1:98:b0:ed:cc:8f:e0:d1:66:51:9f:bb:82:01:69: a9:c0:8e:e3:8c:3c:57:39:b4:90:61:30:e5:14:34: ee:2b:3e:a5:3a:c6:a3:ec:10:40:15:4c:53:2f:23: b5:52:eb:fc:51:5c:ef:2f:c7:12:fc:91:9b:97:ea: 89:62:f7:80:e8:fa:92:fd:2b:e7:2f:f5:55:be:9a: 57:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:DC:A0:CA:1B:F2:3B:38:71:28:34:80:78:64:D2:B0:E9:59:3E:AC X509v3 Authority Key Identifier: keyid:EB:78:21:4F:24:8E:FE:08:B4:E4:62:FD:AF:D4:E7:0B:C3:D0:5A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:66:00:e0:e0:6d:fc:01:18:a7:e7:e3:07:c3:53:14:0b:6c: 76:a8:f3:06:c9:86:9b:7e:ec:ac:8f:6a:b2:da:76:bb:ea:6f: 2c:39:20:b4:83:72:89:f7:bf:33:28:26:3f:b2:ef:2e:8a:e7: ee:0a:17:52:71:e5:21:bb:5f:c6:c9:63:7e:33:96:a2:10:69: a8:5f:d3:41:3b:86:08:49:7b:48:50:83:7e:67:6e:88:81:a9: fc:1c:8f:8a:0b:b0:06:ba:4d:36:2e:d9:68:72:91:ea:f1:56: a3:ce:34:30:53:23:52:47:65:5d:e5:ef:1a:9d:48:20:09:10: 1b:bd:ef:43:ee:09:3f:4a:ef:dd:61:d7:b0:82:fd:63:80:82: 95:77:1c:00:12:47:48:54:14:90:88:e7:c0:ba:e8:5b:d9:f6: cc:ad:47:51:6a:77:ca:3d:a6:19:36:c9:a8:68:e8:3a:a4:33: 7b:57:73:87:48:69:a7:0b:17:a4:ac:af:cd:cc:20:a5:80:71: 38:cb:cc:7c:f7:40:e4:f0:1f:95:c2:c9:42:c2:c3:27:07:83: 14:6d:90:27:90:19:d6:ce:ec:b9:98:cd:fb:ce:2b:1a:c0:4c: a0:e9:b4:41:e5:56:2f:df:38:f0:14:af:7b:4f:60:54:48:b6: fc:77:7d:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBMGXBtjNo5cZOMMCCd3UHWee6/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUI3ODIxNEYyNDhFRkUwOEI0RTQ2MkZEQUZENEU3MEJD M0QwNUEyRjAeFw0yNTA2MTQxMDI1NDdaFw0yNTA2MTcxNzM4NDdaMDMxMTAvBgNV BAMTKDBCRENBMENBMUJGMjNCMzg3MTI4MzQ4MDc4NjREMkIwRTk1OTNFQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCif7EwKdr7downqw8DatEl12j xdUUjnYecmmxtnw/DNYdKMcqzB/vTnZ0SOzFk/3fphoPMc5+mFvPn7gWTLv+LIzE 1iOZ6Zufc9w6amTM03kYpwQUtSQnKIM8o95RDK5ujCnpCwmQYUZhIfCu+obGWCu5 83mIuuV9ZMsQoVQicW618O7Cu/BtJZbrrNE1eGDPB5t2xFacLyi8azTGbV4m26lu s5m0fHptUzd4v/5mWkrQbrGYsO3Mj+DRZlGfu4IBaanAjuOMPFc5tJBhMOUUNO4r PqU6xqPsEEAVTFMvI7VS6/xRXO8vxxL8kZuX6oli94Do+pL9K+cv9VW+mlffAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC9ygyhvyOzhxKDSAeGTSsOlZPqwwHwYDVR0j BBgwFoAU63ghTySO/gi05GL9r9TnC8PQWi8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTFmMzk3MS0zYTQ3LTQ1NWQtYWIzMC1lN2MyM2I2MWI5ZjIvMC9FQjc4MjE0RjI0 OEVGRTA4QjRFNDYyRkRBRkQ0RTcwQkMzRDA1QTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUI3ODIxNEYyNDhFRkUwOEI0RTQ2MkZEQUZENEU3MEJDM0Qw NUEyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGExZjM5NzEtM2E0Ny00NTVkLWFi MzAtZTdjMjNiNjFiOWYyLzAvRUI3ODIxNEYyNDhFRkUwOEI0RTQ2MkZEQUZENEU3 MEJDM0QwNUEyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADNmAODgbfwBGKfn4wfDUxQLbHao8wbJhpt+ 7KyParLadrvqbyw5ILSDcon3vzMoJj+y7y6K5+4KF1Jx5SG7X8bJY34zlqIQaahf 00E7hghJe0hQg35nboiBqfwcj4oLsAa6TTYu2WhykerxVqPONDBTI1JHZV3l7xqd SCAJEBu970PuCT9K791h17CC/WOAgpV3HAASR0hUFJCI58C66FvZ9sytR1Fqd8o9 phk2yaho6DqkM3tXc4dIaacLF6Ssr83MIKWAcTjLzHz3QOTwH5XCyULCwycHgxRt kCeQGdbO7LmYzfvOKxrATKDptEHlVi/fOPAUr3tPYFRItvx3faY= -----END CERTIFICATE-----Generated at Mon Jun 16 00:04:23 2025 by rpki-client