$ rpki-client -vvf repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft File: EBA04070CA27E646C332039E07557734C6732ED2.mft (raw, json) Hash identifier: hjSVWbw52uw9P0gdkTpzIx8PmELO2r2kVqXdn+FpU1s= Subject key identifier: BC:00:C6:1B:41:90:5C:F0:7D:A7:E2:E8:B2:A2:61:6A:65:90:A6:EF Authority key identifier: EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2 Certificate issuer: /CN=EBA04070CA27E646C332039E07557734C6732ED2 Certificate serial: 0F342186D7ABB42ED0C26966BF82BE7B25BBFBA9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft Manifest number: 01A8 Signing time: Fri 20 Jun 2025 17:21:48 +0000 Manifest this update: Fri 20 Jun 2025 17:16:48 +0000 Manifest next update: Mon 23 Jun 2025 18:41:48 +0000 Files and hashes: 1: 3130332e3131312e3134302e302f32342d3234203d3e20313431343631.roa (hash: QxaX29t3xWsvrxzUc9KZP0vfZV3yJi9iJK7O+Mg8IY0=) 2: 3130332e3131312e3134312e302f32342d3234203d3e20313431343631.roa (hash: s7QOuxoUDXpiJb6tRGci1SxU/QQoW+kyAaIfnlMIP40=) 3: EBA04070CA27E646C332039E07557734C6732ED2.crl (hash: mit5N0hLgMPoUWFM4Bxs2q4SK2HXB0axDAQMn8y2Yis=) 4: 3130332e3131312e3134332e302f32342d3234203d3e20313431343631.roa (hash: VLiqZK5/RUS6hOrKh5dQ9m9sABBe0DKT5N2DBOt5pfM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.crl rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 18:41:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:34:21:86:d7:ab:b4:2e:d0:c2:69:66:bf:82:be:7b:25:bb:fb:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBA04070CA27E646C332039E07557734C6732ED2 Validity Not Before: Jun 20 17:16:48 2025 GMT Not After : Jun 23 18:41:48 2025 GMT Subject: CN=BC00C61B41905CF07DA7E2E8B2A2616A6590A6EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:87:29:8b:89:64:bc:2c:00:28:6a:c1:a4:db: 7a:09:43:26:10:f8:ae:29:29:84:21:df:33:b4:5d: 16:ef:6e:4a:d2:4c:ee:fd:67:c6:9b:6d:be:1d:ec: 30:6a:92:72:f2:88:f4:cf:51:40:bc:f3:61:24:85: 22:cf:01:9d:61:07:26:5c:39:06:8b:93:a5:ca:5d: 7a:ef:ea:e4:0a:08:ba:cf:39:94:bf:07:54:50:e3: c4:fa:a8:02:3b:30:6c:71:8b:ba:45:9b:c5:5c:98: 30:40:ac:8a:5d:4f:5c:2a:5b:4c:ef:0a:b7:59:f3: 31:98:de:fd:a0:8c:e3:1b:25:03:9c:07:e1:e1:dc: 9c:40:5e:dc:d0:6d:06:6e:61:01:8f:9b:07:a6:cb: 8b:e8:75:0a:92:d4:16:71:78:eb:b6:52:37:86:64: 0f:02:c6:0d:05:30:00:70:4d:35:fc:5b:d7:e0:c6: e7:25:6a:40:da:68:ee:45:e9:d0:45:f0:52:7f:73: d6:86:c0:ee:7c:a3:86:e0:47:90:e0:4b:73:ec:ab: 23:cc:c8:31:08:62:72:8c:54:a6:52:38:69:28:01: eb:69:9a:f7:7f:a4:0e:14:bf:64:58:81:46:ec:4c: 2c:47:44:7c:26:e9:95:1e:2f:f5:40:71:7a:cd:c0: 6c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:00:C6:1B:41:90:5C:F0:7D:A7:E2:E8:B2:A2:61:6A:65:90:A6:EF X509v3 Authority Key Identifier: keyid:EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:2c:db:85:70:d4:22:fc:71:bf:40:b8:d2:71:6e:9b:61:ac: 51:24:08:07:77:cd:a8:dc:ff:24:ba:01:0c:fc:36:bf:58:9f: 93:79:51:b4:11:71:ef:83:38:66:7d:c1:84:43:f6:d2:d1:92: 45:25:5b:c3:0f:1e:10:20:a5:9d:52:c8:46:85:6a:ae:2d:03: 87:85:f2:34:ea:9c:a9:2d:95:f2:ed:e7:12:3c:32:13:2f:a3: ad:f3:83:3f:78:1f:1d:65:12:12:2d:12:11:a6:61:32:97:ca: 36:5e:2d:23:b4:45:f8:1f:b7:8d:f7:6f:14:08:de:35:fb:28: 72:1e:1a:6b:d7:1c:bf:ff:f1:7f:ef:9e:d7:88:61:fb:c6:4b: f8:4f:39:c1:25:8a:ba:68:c1:c1:0f:8b:a6:fc:96:b2:ac:45: 21:4d:7a:74:53:90:f4:f7:ec:85:eb:11:11:15:aa:1d:42:02: 84:f9:17:51:5f:98:a2:bd:63:9c:58:34:49:b5:40:5d:ad:92: 82:e9:f5:8d:e0:80:e8:fc:ac:19:a6:e2:8e:88:fa:61:09:2d: 8b:68:a9:6d:75:e0:cc:bb:bc:7b:68:69:19:80:9b:55:11:36: 31:c9:3c:db:4c:68:97:e4:fc:8e:0f:45:ec:6b:1f:10:f2:e4: 4e:f2:f8:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDzQhhtertC7Qwmlmv4K+eyW7+6kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3MzRD NjczMkVEMjAeFw0yNTA2MjAxNzE2NDhaFw0yNTA2MjMxODQxNDhaMDMxMTAvBgNV BAMTKEJDMDBDNjFCNDE5MDVDRjA3REE3RTJFOEIyQTI2MTZBNjU5MEE2RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCshymLiWS8LAAoasGk23oJQyYQ +K4pKYQh3zO0XRbvbkrSTO79Z8abbb4d7DBqknLyiPTPUUC882EkhSLPAZ1hByZc OQaLk6XKXXrv6uQKCLrPOZS/B1RQ48T6qAI7MGxxi7pFm8VcmDBArIpdT1wqW0zv CrdZ8zGY3v2gjOMbJQOcB+Hh3JxAXtzQbQZuYQGPmwemy4vodQqS1BZxeOu2UjeG ZA8Cxg0FMABwTTX8W9fgxuclakDaaO5F6dBF8FJ/c9aGwO58o4bgR5DgS3PsqyPM yDEIYnKMVKZSOGkoAetpmvd/pA4Uv2RYgUbsTCxHRHwm6ZUeL/VAcXrNwGynAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvADGG0GQXPB9p+LosqJhamWQpu8wHwYDVR0j BBgwFoAU66BAcMon5kbDMgOeB1V3NMZzLtIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTI3ZWFmZC1hNjc0LTQ0MzctYWJmMS1lNTUwZGVjMTM3ZmEvMC9FQkEwNDA3MENB MjdFNjQ2QzMzMjAzOUUwNzU1NzczNEM2NzMyRUQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3MzRDNjcz MkVEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTEyN2VhZmQtYTY3NC00NDM3LWFi ZjEtZTU1MGRlYzEzN2ZhLzAvRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3 MzRDNjczMkVEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABws24Vw1CL8cb9AuNJxbpthrFEkCAd3zajc /yS6AQz8Nr9Yn5N5UbQRce+DOGZ9wYRD9tLRkkUlW8MPHhAgpZ1SyEaFaq4tA4eF 8jTqnKktlfLt5xI8MhMvo63zgz94Hx1lEhItEhGmYTKXyjZeLSO0Rfgft433bxQI 3jX7KHIeGmvXHL//8X/vnteIYfvGS/hPOcElirpowcEPi6b8lrKsRSFNenRTkPT3 7IXrEREVqh1CAoT5F1FfmKK9Y5xYNEm1QF2tkoLp9Y3ggOj8rBmm4o6I+mEJLYto qW114My7vHtoaRmAm1URNjHJPNtMaJfk/I4PRexrHxDy5E7y+Bs= -----END CERTIFICATE-----Generated at Sat Jun 21 19:10:37 2025 by rpki-client