$ rpki-client -vvf repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft File: EBA04070CA27E646C332039E07557734C6732ED2.mft (raw, json) Hash identifier: hzIILfMs1i//z8BHZlWIjB1AIMMmW/nbaCgbT8plXhU= Subject key identifier: 62:B0:4B:27:71:5E:6B:4A:2E:D6:17:2A:CA:FC:0E:FF:78:32:35:36 Authority key identifier: EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2 Certificate issuer: /CN=EBA04070CA27E646C332039E07557734C6732ED2 Certificate serial: 0D35E31999EB9010A2CE3FE622B1D0AAD4A97A51 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft Manifest number: 01BF Signing time: Sun 10 Aug 2025 15:01:51 +0000 Manifest this update: Sun 10 Aug 2025 14:56:51 +0000 Manifest next update: Wed 13 Aug 2025 17:05:51 +0000 Files and hashes: 1: 3130332e3131312e3134302e302f32342d3234203d3e20313431343631.roa (hash: QxaX29t3xWsvrxzUc9KZP0vfZV3yJi9iJK7O+Mg8IY0=) 2: 3130332e3131312e3134312e302f32342d3234203d3e20313431343631.roa (hash: s7QOuxoUDXpiJb6tRGci1SxU/QQoW+kyAaIfnlMIP40=) 3: 3130332e3131312e3134332e302f32342d3234203d3e20313431343631.roa (hash: VLiqZK5/RUS6hOrKh5dQ9m9sABBe0DKT5N2DBOt5pfM=) 4: EBA04070CA27E646C332039E07557734C6732ED2.crl (hash: M9L+YkSnt0YVQygy4nPm5YxYVNdxuKqwAh9yzIPmXXA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.crl rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 17:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:35:e3:19:99:eb:90:10:a2:ce:3f:e6:22:b1:d0:aa:d4:a9:7a:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBA04070CA27E646C332039E07557734C6732ED2 Validity Not Before: Aug 10 14:56:51 2025 GMT Not After : Aug 13 17:05:51 2025 GMT Subject: CN=62B04B27715E6B4A2ED6172ACAFC0EFF78323536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:84:b2:31:fc:0f:ed:80:80:4b:01:4f:7a:11: ba:d7:77:44:31:13:0e:30:93:f5:18:3e:23:bf:94: 0f:59:95:1c:f4:90:23:5b:90:58:83:73:0f:b6:7c: 0b:69:ad:55:a0:b7:e9:a5:66:2a:eb:a7:51:38:48: 6e:33:73:a5:4d:5e:1f:38:36:50:0f:fe:d2:0e:cd: b9:c4:97:9d:7b:57:57:6f:3e:48:01:33:e0:59:5b: 01:a9:a4:f5:83:72:b3:5c:72:c7:35:27:5e:23:a5: 38:83:ee:fd:4c:b8:87:8d:00:a8:9b:69:48:db:8b: 42:82:85:17:5b:cd:17:74:91:0e:60:3c:49:a7:02: e9:76:59:7e:fb:9b:1b:ad:2f:1f:6d:88:6b:1b:28: d1:2e:30:b4:8b:cd:9c:29:5e:8a:b1:b5:8e:cc:ba: a5:9e:c2:2a:ae:e7:83:1c:7b:f8:a8:38:fd:97:a9: e4:9c:b4:6b:1e:88:a9:2b:8a:22:75:82:ca:59:b6: 7c:33:73:39:82:34:a1:72:f7:f6:0a:60:04:b6:ed: 50:1a:cd:d4:f0:0b:a7:29:fa:61:d3:75:7b:60:f9: 8f:ab:43:e7:b5:64:8f:db:00:dc:15:66:3e:fa:10: 31:fc:e1:5a:30:73:f2:a2:a3:36:b0:68:fc:b4:7d: b2:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:B0:4B:27:71:5E:6B:4A:2E:D6:17:2A:CA:FC:0E:FF:78:32:35:36 X509v3 Authority Key Identifier: keyid:EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:ab:37:2e:a9:8d:e8:c0:70:4d:85:8b:1a:be:87:39:d3:07: 32:3e:fe:f9:3c:2a:e0:02:5e:ff:98:d7:cc:f9:5a:13:07:a2: 44:25:86:fc:a2:9b:3c:2c:dc:54:07:ff:a3:f0:76:e3:af:db: 7b:4a:22:3b:c0:b4:04:c6:66:02:e8:83:a8:75:2d:6b:3a:7b: 30:39:ae:11:c7:07:f0:e7:e3:83:da:98:0f:23:9b:01:5a:cf: 8c:70:dd:6d:e4:fc:0c:35:f1:06:9d:5d:1a:45:3e:77:08:bd: df:40:77:10:39:42:79:c2:9d:41:bb:65:92:27:4b:9e:7c:67: 91:e0:18:59:3f:1f:55:ec:de:21:4d:1a:8a:8e:85:4a:ba:ce: 55:ba:58:22:3a:c4:b2:44:22:1c:03:f3:79:cf:dd:a2:c8:35: ea:64:dc:42:4f:fd:0f:28:fa:58:30:b0:9e:26:8b:28:09:2a: d3:24:d1:29:c5:47:99:4b:44:bd:e4:83:56:27:0c:35:d7:d4: fc:70:d2:65:63:e0:58:08:76:aa:62:8f:71:29:9b:78:f4:d4: 07:f0:4b:6b:5a:87:6a:0a:db:ed:e5:1b:f4:4d:d5:95:ed:de: 2a:1a:6b:20:a2:28:88:96:8c:65:76:51:c3:2c:d1:a2:93:a0: 3a:3e:a7:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDTXjGZnrkBCizj/mIrHQqtSpelEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3MzRD NjczMkVEMjAeFw0yNTA4MTAxNDU2NTFaFw0yNTA4MTMxNzA1NTFaMDMxMTAvBgNV BAMTKDYyQjA0QjI3NzE1RTZCNEEyRUQ2MTcyQUNBRkMwRUZGNzgzMjM1MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1hLIx/A/tgIBLAU96EbrXd0Qx Ew4wk/UYPiO/lA9ZlRz0kCNbkFiDcw+2fAtprVWgt+mlZirrp1E4SG4zc6VNXh84 NlAP/tIOzbnEl517V1dvPkgBM+BZWwGppPWDcrNccsc1J14jpTiD7v1MuIeNAKib aUjbi0KChRdbzRd0kQ5gPEmnAul2WX77mxutLx9tiGsbKNEuMLSLzZwpXoqxtY7M uqWewiqu54Mce/ioOP2XqeSctGseiKkriiJ1gspZtnwzczmCNKFy9/YKYAS27VAa zdTwC6cp+mHTdXtg+Y+rQ+e1ZI/bANwVZj76EDH84Vowc/KiozawaPy0fbLfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYrBLJ3Fea0ou1hcqyvwO/3gyNTYwHwYDVR0j BBgwFoAU66BAcMon5kbDMgOeB1V3NMZzLtIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTI3ZWFmZC1hNjc0LTQ0MzctYWJmMS1lNTUwZGVjMTM3ZmEvMC9FQkEwNDA3MENB MjdFNjQ2QzMzMjAzOUUwNzU1NzczNEM2NzMyRUQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3MzRDNjcz MkVEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTEyN2VhZmQtYTY3NC00NDM3LWFi ZjEtZTU1MGRlYzEzN2ZhLzAvRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3 MzRDNjczMkVEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI6rNy6pjejAcE2Fixq+hznTBzI+/vk8KuAC Xv+Y18z5WhMHokQlhvyimzws3FQH/6PwduOv23tKIjvAtATGZgLog6h1LWs6ezA5 rhHHB/Dn44PamA8jmwFaz4xw3W3k/Aw18QadXRpFPncIvd9AdxA5QnnCnUG7ZZIn S558Z5HgGFk/H1Xs3iFNGoqOhUq6zlW6WCI6xLJEIhwD83nP3aLINepk3EJP/Q8o +lgwsJ4miygJKtMk0SnFR5lLRL3kg1YnDDXX1Pxw0mVj4FgIdqpij3Epm3j01Afw S2tah2oK2+3lG/RN1ZXt3ioaayCiKIiWjGV2UcMs0aKToDo+p4Q= -----END CERTIFICATE-----Generated at Mon Aug 11 06:03:17 2025 by rpki-client