$ rpki-client -vvf repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft File: EBA04070CA27E646C332039E07557734C6732ED2.mft (raw, json) Hash identifier: qeeKJ7f7RLB8lZ/jBJo6sZyCtoNlGW77B8zVCuf04wM= Subject key identifier: D3:EC:86:FC:FF:19:CC:04:90:A1:D3:C2:80:5E:01:4B:BC:B5:55:22 Authority key identifier: EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2 Certificate issuer: /CN=EBA04070CA27E646C332039E07557734C6732ED2 Certificate serial: 3D01C8CD5E1B3E9ACD1B81B70E2D6F6D8D643B91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft Manifest number: 01E7 Signing time: Mon 03 Nov 2025 20:01:52 +0000 Manifest this update: Mon 03 Nov 2025 19:56:52 +0000 Manifest next update: Thu 06 Nov 2025 21:37:52 +0000 Files and hashes: 1: EBA04070CA27E646C332039E07557734C6732ED2.crl (hash: Sk/JnelM44HoBNDOtKDlfX4OL+YbKPqcDJk5o9gBm1g=) 2: 3130332e3131312e3134302e302f32342d3234203d3e20313431343631.roa (hash: bDyPI2WVo6BjRMZp12OHCZAGn1tdLEQqcz47No/uxaA=) 3: 3130332e3131312e3134312e302f32342d3234203d3e20313431343631.roa (hash: FOKCBmZQR+RvQ/YXjf6i5T2Jp3732D5RrjsxBFstWVo=) 4: 3130332e3131312e3134332e302f32342d3234203d3e20313431343631.roa (hash: vMUSQ2h0yM8CNBMFULwiVWwmyMjPH1qg6y43JB4Vwvw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.crl rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 21:37:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:01:c8:cd:5e:1b:3e:9a:cd:1b:81:b7:0e:2d:6f:6d:8d:64:3b:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBA04070CA27E646C332039E07557734C6732ED2 Validity Not Before: Nov 3 19:56:52 2025 GMT Not After : Nov 6 21:37:52 2025 GMT Subject: CN=D3EC86FCFF19CC0490A1D3C2805E014BBCB55522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5b:76:99:ba:91:51:fc:d1:f4:25:77:81:4e: 7b:28:02:f1:5e:26:bd:bf:5f:a5:ef:75:e2:a5:28: e8:ba:90:67:81:ec:cd:70:d4:67:ef:61:7f:72:d1: 9a:87:a2:62:53:47:35:f8:56:00:5d:0d:dd:68:0b: 8c:32:7a:e1:e9:21:db:35:a5:52:98:43:60:dc:a8: 49:6c:92:47:7d:cb:e3:64:4a:cc:40:1d:6d:97:53: 2b:f0:6f:1d:a6:25:2c:e5:28:78:b9:21:8c:41:d5: d1:8f:2d:b5:cf:a7:17:b5:d9:9e:16:58:37:b6:9b: b6:72:7d:c1:f0:0c:d0:f5:ba:bd:25:a4:7c:f4:c6: aa:39:cf:00:9e:9f:08:ff:29:d5:22:e7:30:f4:b7: 02:c4:47:dd:f3:7c:16:43:29:be:bf:19:40:c2:cc: 30:45:24:05:d4:83:f0:63:ba:60:5f:f1:34:a5:de: 8f:42:21:c9:5c:14:86:af:31:df:4b:24:18:9c:c4: 86:ef:1a:bb:f4:3f:c7:6a:05:57:b9:43:b9:52:78: 9b:89:4a:19:1a:ef:d8:89:1c:56:84:2f:9d:f4:ff: 39:b5:3d:73:8f:85:ab:6d:dc:65:92:fe:9f:03:d8: 0c:c9:9c:8d:66:79:61:4e:14:a2:15:5f:f0:98:5a: 7b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:EC:86:FC:FF:19:CC:04:90:A1:D3:C2:80:5E:01:4B:BC:B5:55:22 X509v3 Authority Key Identifier: keyid:EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:92:f1:23:c7:e8:33:65:11:23:d5:e8:be:53:5b:3c:cc:fe: 2c:7f:30:0f:72:79:fc:73:53:5b:13:95:b5:ac:6d:de:6f:a6: 8b:37:bd:73:51:64:69:56:a8:37:e0:85:3d:37:59:48:c1:29: 3b:f0:e7:22:f6:f4:ae:ed:32:4e:7b:a0:f6:38:8d:13:eb:59: 12:04:8c:cf:57:62:9f:fd:18:72:cc:01:59:62:63:4f:7d:ba: 64:54:7d:83:43:fd:5b:6b:67:06:9a:52:ac:d7:c3:0d:13:d0: 56:ff:8f:42:fb:04:5d:c9:0d:db:19:d1:97:59:2d:36:c5:14: 53:d9:24:46:f9:ed:2c:3a:77:5d:cc:14:27:a1:7c:62:49:27: ab:c4:f1:9a:21:33:19:6c:ba:5d:1e:80:c2:f9:82:8e:f0:3c: ba:a9:11:64:cd:43:8a:69:9b:68:1e:f0:ff:bd:96:64:08:13: ed:6f:01:9c:02:35:13:e7:68:5e:26:93:16:b5:de:ef:d4:84: 54:d2:de:b1:1a:b7:c6:c3:ce:a2:6a:7c:07:28:5f:42:85:5b: ef:89:8b:cd:63:ca:ed:3c:86:3e:0b:59:cc:94:ed:e1:bf:d6: 3c:aa:80:94:fc:f9:ee:ae:4d:e5:7e:07:ab:90:0f:22:a6:c4: 55:f2:2a:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPQHIzV4bPprNG4G3Di1vbY1kO5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3MzRD NjczMkVEMjAeFw0yNTExMDMxOTU2NTJaFw0yNTExMDYyMTM3NTJaMDMxMTAvBgNV BAMTKEQzRUM4NkZDRkYxOUNDMDQ5MEExRDNDMjgwNUUwMTRCQkNCNTU1MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7W3aZupFR/NH0JXeBTnsoAvFe Jr2/X6XvdeKlKOi6kGeB7M1w1GfvYX9y0ZqHomJTRzX4VgBdDd1oC4wyeuHpIds1 pVKYQ2DcqElskkd9y+NkSsxAHW2XUyvwbx2mJSzlKHi5IYxB1dGPLbXPpxe12Z4W WDe2m7ZyfcHwDND1ur0lpHz0xqo5zwCenwj/KdUi5zD0twLER93zfBZDKb6/GUDC zDBFJAXUg/BjumBf8TSl3o9CIclcFIavMd9LJBicxIbvGrv0P8dqBVe5Q7lSeJuJ Shka79iJHFaEL530/zm1PXOPhatt3GWS/p8D2AzJnI1meWFOFKIVX/CYWnt5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0+yG/P8ZzASQodPCgF4BS7y1VSIwHwYDVR0j BBgwFoAU66BAcMon5kbDMgOeB1V3NMZzLtIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTI3ZWFmZC1hNjc0LTQ0MzctYWJmMS1lNTUwZGVjMTM3ZmEvMC9FQkEwNDA3MENB MjdFNjQ2QzMzMjAzOUUwNzU1NzczNEM2NzMyRUQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3MzRDNjcz MkVEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTEyN2VhZmQtYTY3NC00NDM3LWFi ZjEtZTU1MGRlYzEzN2ZhLzAvRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3 MzRDNjczMkVEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGWS8SPH6DNlESPV6L5TWzzM/ix/MA9yefxz U1sTlbWsbd5vpos3vXNRZGlWqDfghT03WUjBKTvw5yL29K7tMk57oPY4jRPrWRIE jM9XYp/9GHLMAVliY099umRUfYND/VtrZwaaUqzXww0T0Fb/j0L7BF3JDdsZ0ZdZ LTbFFFPZJEb57Sw6d13MFCehfGJJJ6vE8ZohMxlsul0egML5go7wPLqpEWTNQ4pp m2ge8P+9lmQIE+1vAZwCNRPnaF4mkxa13u/UhFTS3rEat8bDzqJqfAcoX0KFW++J i81jyu08hj4LWcyU7eG/1jyqgJT8+e6uTeV+B6uQDyKmxFXyKkA= -----END CERTIFICATE-----Generated at Wed Nov 5 05:19:05 2025 by rpki-client