$ rpki-client -vvf repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft File: EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft (raw, json) Hash identifier: K2eGcauo+vaFAx5Iip2xAiySO19aQ1hZrig4Rfx5dK0= Subject key identifier: 16:4A:D9:E3:93:75:E0:E3:96:A5:A2:90:14:A0:C1:4C:A2:0A:AB:85 Authority key identifier: EB:DA:93:9B:37:F3:6E:8A:9F:58:1B:10:36:E0:1C:32:F1:F3:D9:DF Certificate issuer: /CN=EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF Certificate serial: 7956CD451063D181E307238A506EF42C2DACB319 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft Manifest number: 017F Signing time: Tue 05 Aug 2025 11:41:37 +0000 Manifest this update: Tue 05 Aug 2025 11:36:37 +0000 Manifest next update: Fri 08 Aug 2025 21:04:37 +0000 Files and hashes: 1: 3130332e3132322e302e302f32332d3234203d3e20313335343737.roa (hash: 0dxD7I8rMeBsoy/bZAItegSvjuCOP4VyKJVgOZz4NLU=) 2: EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.crl (hash: mcuNS8VQJguLzBDWRTOukS9cp6OkzaW9nsbQESd6ycc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.crl rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 21:04:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:56:cd:45:10:63:d1:81:e3:07:23:8a:50:6e:f4:2c:2d:ac:b3:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF Validity Not Before: Aug 5 11:36:37 2025 GMT Not After : Aug 8 21:04:37 2025 GMT Subject: CN=164AD9E39375E0E396A5A29014A0C14CA20AAB85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:24:99:b7:7a:db:84:18:c6:ba:0c:e0:7b:5f: 79:0e:7c:86:61:52:31:4a:78:74:73:b4:7c:1d:0e: b8:4a:7f:74:3e:e4:eb:3f:13:d3:e6:7b:1b:be:73: b6:f0:e7:95:d7:32:ce:9f:95:7b:2d:b9:68:57:68: 86:09:e7:ef:a2:48:6a:16:fe:3c:76:2c:51:38:2c: 8d:e3:35:d1:9e:9d:90:65:29:27:95:4d:ee:dc:8b: e6:f9:5b:92:43:67:c0:97:b3:52:c1:73:50:3b:07: 19:ca:1f:ef:ba:2a:fb:5a:cf:dd:1c:4a:47:f3:d1: 15:e5:82:be:21:7b:6f:06:a3:fa:0b:63:ec:8b:11: ec:7f:f7:8a:ac:d8:4f:3b:ee:b8:19:98:37:5d:47: 59:d5:17:0b:1d:37:8c:9f:65:be:d8:c2:de:05:ed: 22:19:e6:e1:59:2b:a9:46:a5:01:5e:f3:93:53:26: 3f:21:a8:72:aa:b8:df:e4:f4:f5:cd:67:0a:5a:3b: 2e:21:92:d1:a8:c5:9b:20:06:f7:fe:53:73:e2:c7: db:c2:c0:85:d4:a4:55:7f:ae:a4:05:8e:98:e9:4f: d3:06:1e:ea:ce:ae:6f:73:f9:81:0a:13:68:3a:95: 31:4b:8e:4a:6d:e9:85:c2:46:ea:df:af:8b:b0:0b: f7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:4A:D9:E3:93:75:E0:E3:96:A5:A2:90:14:A0:C1:4C:A2:0A:AB:85 X509v3 Authority Key Identifier: keyid:EB:DA:93:9B:37:F3:6E:8A:9F:58:1B:10:36:E0:1C:32:F1:F3:D9:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:75:44:3b:bc:fc:69:4d:63:f4:2b:07:fd:d7:d8:f2:64:89: 99:30:0c:b0:99:84:9e:7b:eb:d7:83:4e:4c:78:5d:43:d2:a1: 5c:54:2c:05:0b:29:a1:06:e0:aa:fb:e2:ec:8a:3a:11:59:5e: 18:16:f8:18:87:e1:d1:59:a5:47:8d:21:6c:6f:ef:63:be:7d: d5:72:60:f5:57:d5:06:4c:23:a5:52:30:5e:ea:e9:d6:47:f9: 5a:ce:ce:18:1b:f5:0b:3c:1e:22:cc:39:f1:55:c2:3d:cf:34: c3:3b:a2:92:f2:26:fb:14:30:8d:91:d6:77:f5:aa:94:8f:f4: e7:b0:f4:2c:db:2b:4b:f9:e4:db:2e:2d:ed:4e:07:d9:52:25: 1c:09:f7:ac:6d:6f:b5:72:df:ff:25:c4:a8:88:18:97:7b:a7: c9:35:80:85:75:73:8b:20:f4:40:43:9f:b3:63:2a:af:27:a2: e2:bf:ad:b6:3a:b7:49:89:a7:02:d3:39:4d:5d:ee:c9:f5:36: 3c:83:dc:d9:e2:62:48:f0:95:95:bd:8f:b2:ea:2e:0b:73:c9: 05:6d:4c:58:16:1c:2f:b1:16:1a:bf:c4:00:cb:4d:11:bd:fb: 6c:b6:0a:dd:d6:d7:16:fe:06:f6:f9:6f:8a:f5:ef:b6:d8:da: 65:0e:fb:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeVbNRRBj0YHjByOKUG70LC2ssxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJEQTkzOUIzN0YzNkU4QTlGNTgxQjEwMzZFMDFDMzJG MUYzRDlERjAeFw0yNTA4MDUxMTM2MzdaFw0yNTA4MDgyMTA0MzdaMDMxMTAvBgNV BAMTKDE2NEFEOUUzOTM3NUUwRTM5NkE1QTI5MDE0QTBDMTRDQTIwQUFCODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGJJm3etuEGMa6DOB7X3kOfIZh UjFKeHRztHwdDrhKf3Q+5Os/E9Pmexu+c7bw55XXMs6flXstuWhXaIYJ5++iSGoW /jx2LFE4LI3jNdGenZBlKSeVTe7ci+b5W5JDZ8CXs1LBc1A7BxnKH++6Kvtaz90c Skfz0RXlgr4he28Go/oLY+yLEex/94qs2E877rgZmDddR1nVFwsdN4yfZb7Ywt4F 7SIZ5uFZK6lGpQFe85NTJj8hqHKquN/k9PXNZwpaOy4hktGoxZsgBvf+U3Pix9vC wIXUpFV/rqQFjpjpT9MGHurOrm9z+YEKE2g6lTFLjkpt6YXCRurfr4uwC/cnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFkrZ45N14OOWpaKQFKDBTKIKq4UwHwYDVR0j BBgwFoAU69qTmzfzboqfWBsQNuAcMvHz2d8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzEyYTE0Ni1mOTU0LTQ3ZTMtYjkzZi05MmMyZmU2ZDg5ZWEvMC9FQkRBOTM5QjM3 RjM2RThBOUY1ODFCMTAzNkUwMUMzMkYxRjNEOURGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUJEQTkzOUIzN0YzNkU4QTlGNTgxQjEwMzZFMDFDMzJGMUYz RDlERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjMxMmExNDYtZjk1NC00N2UzLWI5 M2YtOTJjMmZlNmQ4OWVhLzAvRUJEQTkzOUIzN0YzNkU4QTlGNTgxQjEwMzZFMDFD MzJGMUYzRDlERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABt1RDu8/GlNY/QrB/3X2PJkiZkwDLCZhJ57 69eDTkx4XUPSoVxULAULKaEG4Kr74uyKOhFZXhgW+BiH4dFZpUeNIWxv72O+fdVy YPVX1QZMI6VSMF7q6dZH+VrOzhgb9Qs8HiLMOfFVwj3PNMM7opLyJvsUMI2R1nf1 qpSP9Oew9CzbK0v55NsuLe1OB9lSJRwJ96xtb7Vy3/8lxKiIGJd7p8k1gIV1c4sg 9EBDn7NjKq8nouK/rbY6t0mJpwLTOU1d7sn1NjyD3NniYkjwlZW9j7LqLgtzyQVt TFgWHC+xFhq/xADLTRG9+2y2Ct3W1xb+Bvb5b4r177bY2mUO+2I= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:56 2025 by rpki-client