$ rpki-client -vvf repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.mft File: EB7AB53449E52996F1539393C3DA704C6F12F359.mft (raw, json) Hash identifier: No2ArEuYpdRUm9lOHCxltnnPIF96+vPk4seZJ5bWwR0= Subject key identifier: DD:15:AD:E4:E8:42:9D:E5:FF:96:7F:BA:2B:98:93:A5:39:F3:A6:D1 Authority key identifier: EB:7A:B5:34:49:E5:29:96:F1:53:93:93:C3:DA:70:4C:6F:12:F3:59 Certificate issuer: /CN=EB7AB53449E52996F1539393C3DA704C6F12F359 Certificate serial: 5BAFBC08DD7F13F70496CB5F14E0A470D4027EAE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB7AB53449E52996F1539393C3DA704C6F12F359.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.mft Manifest number: 034A Signing time: Tue 05 Aug 2025 10:50:35 +0000 Manifest this update: Tue 05 Aug 2025 10:45:35 +0000 Manifest next update: Fri 08 Aug 2025 15:24:35 +0000 Files and hashes: 1: 3130332e3235332e302e302f32322d3234203d3e203539313339.roa (hash: DyW9wD+/QVlej0CI+5sCilJX/+5ZDxLLSw8cy8l6+Ec=) 2: EB7AB53449E52996F1539393C3DA704C6F12F359.crl (hash: PTp0L1wayF3PgY8CfTnzKBKsU1fAsjfyE79qqtxQu3o=) 3: 3131362e302e302e302f32312d3234203d3e203539313339.roa (hash: tvzxlzO0vwNEL3kdVV0vVfOPTOFF94uCEicPO2IlBZc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.crl rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB7AB53449E52996F1539393C3DA704C6F12F359.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 15:24:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:af:bc:08:dd:7f:13:f7:04:96:cb:5f:14:e0:a4:70:d4:02:7e:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB7AB53449E52996F1539393C3DA704C6F12F359 Validity Not Before: Aug 5 10:45:35 2025 GMT Not After : Aug 8 15:24:35 2025 GMT Subject: CN=DD15ADE4E8429DE5FF967FBA2B9893A539F3A6D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:50:b4:f2:ab:b4:b3:65:8c:11:56:be:7c:03: 60:89:60:bf:1a:4f:de:df:68:2e:f0:6e:4d:17:12: bf:80:f6:59:9d:78:ab:36:ab:59:65:78:42:35:8d: 17:49:92:ac:19:c4:e4:e7:2c:1e:15:76:15:bc:8a: b6:fe:35:e9:f0:21:e3:2c:f5:65:7d:7a:75:ce:16: 50:96:d6:4e:77:8f:13:32:8b:b6:c8:8e:cb:06:4e: ba:65:a3:9b:f8:f2:1c:ce:02:c5:29:f3:af:6f:82: b6:30:a9:cd:db:b7:a1:ba:0d:f7:cd:8a:c5:12:e0: 7b:9b:66:1b:cd:5e:ef:89:fe:3b:1f:62:39:a0:7b: 4d:0e:7e:a8:0e:49:a3:ac:c0:e1:82:b0:35:0a:1c: 49:bb:36:1e:2b:f9:2f:1f:47:d7:15:56:1d:ac:14: a4:dc:14:21:e5:9a:01:2e:96:32:0b:a6:2a:fb:70: 3f:94:63:8c:ba:59:69:e4:ca:55:cb:2f:25:f2:65: c5:fe:d0:8f:99:a0:e0:d8:e0:7f:3d:c2:a8:54:1d: 31:25:c1:3e:e2:d9:c9:07:c9:4f:48:b3:33:54:4c: 79:f6:31:98:58:1b:68:80:48:ec:15:45:0e:16:1a: 04:81:06:89:be:05:30:6c:d0:40:70:97:7e:84:50: 09:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:15:AD:E4:E8:42:9D:E5:FF:96:7F:BA:2B:98:93:A5:39:F3:A6:D1 X509v3 Authority Key Identifier: keyid:EB:7A:B5:34:49:E5:29:96:F1:53:93:93:C3:DA:70:4C:6F:12:F3:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB7AB53449E52996F1539393C3DA704C6F12F359.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:b7:ea:96:1d:61:4b:01:2c:e6:7c:ee:c5:8b:07:83:00:c4: d3:df:da:56:a8:77:b6:e9:2b:dd:16:eb:7f:e6:38:86:a8:9d: af:5d:79:aa:ed:13:ae:72:78:d1:a7:d2:81:0e:6c:e7:df:2a: 6b:5d:65:86:65:20:7f:bc:1d:45:87:0c:00:fe:89:1f:e9:3c: ad:a7:36:62:06:3d:82:6d:c9:73:8d:e0:71:63:52:95:09:91: 59:78:3f:a1:6c:8c:fa:51:27:d0:d2:66:96:bd:d3:c4:bb:3b: e6:85:e3:25:47:e8:c1:c7:1e:44:e7:ad:17:66:a7:64:fc:aa: 60:01:75:07:f0:25:64:4e:b1:04:0c:36:5f:1b:c3:cf:40:a4: 95:f1:c8:f6:c8:50:eb:24:b8:bd:39:a0:2d:0f:7c:d3:63:b9: a3:0a:b5:dd:15:e3:52:2a:78:81:8e:6d:46:b0:12:2e:24:ce: d7:7f:2b:1c:22:ad:8f:3f:df:2f:d2:86:6c:c0:3f:96:47:c3: e0:47:f8:4b:0a:7e:62:e1:9e:c8:e8:b8:b0:7c:4d:aa:26:5d: 91:fc:ae:19:70:d2:e5:8a:c9:95:f1:a6:8f:e7:3e:bf:25:fa: 09:91:4b:59:2a:52:14:47:18:69:22:9f:b5:e2:43:6e:9f:3e: 08:f6:df:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW6+8CN1/E/cElstfFOCkcNQCfq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUI3QUI1MzQ0OUU1Mjk5NkYxNTM5MzkzQzNEQTcwNEM2 RjEyRjM1OTAeFw0yNTA4MDUxMDQ1MzVaFw0yNTA4MDgxNTI0MzVaMDMxMTAvBgNV BAMTKEREMTVBREU0RTg0MjlERTVGRjk2N0ZCQTJCOTg5M0E1MzlGM0E2RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUULTyq7SzZYwRVr58A2CJYL8a T97faC7wbk0XEr+A9lmdeKs2q1lleEI1jRdJkqwZxOTnLB4VdhW8irb+NenwIeMs 9WV9enXOFlCW1k53jxMyi7bIjssGTrplo5v48hzOAsUp869vgrYwqc3bt6G6DffN isUS4HubZhvNXu+J/jsfYjmge00OfqgOSaOswOGCsDUKHEm7Nh4r+S8fR9cVVh2s FKTcFCHlmgEuljILpir7cD+UY4y6WWnkylXLLyXyZcX+0I+ZoODY4H89wqhUHTEl wT7i2ckHyU9IszNUTHn2MZhYG2iASOwVRQ4WGgSBBom+BTBs0EBwl36EUAlBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3RWt5OhCneX/ln+6K5iTpTnzptEwHwYDVR0j BBgwFoAU63q1NEnlKZbxU5OTw9pwTG8S81kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZThjZDk3ZS01NmY1LTRjYTUtYTg1Yy01NWEzMjNmMDYwOGMvMC9FQjdBQjUzNDQ5 RTUyOTk2RjE1MzkzOTNDM0RBNzA0QzZGMTJGMzU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUI3QUI1MzQ0OUU1Mjk5NkYxNTM5MzkzQzNEQTcwNEM2RjEy RjM1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U4Y2Q5N2UtNTZmNS00Y2E1LWE4 NWMtNTVhMzIzZjA2MDhjLzAvRUI3QUI1MzQ0OUU1Mjk5NkYxNTM5MzkzQzNEQTcw NEM2RjEyRjM1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH+36pYdYUsBLOZ87sWLB4MAxNPf2laod7bp K90W63/mOIaona9deartE65yeNGn0oEObOffKmtdZYZlIH+8HUWHDAD+iR/pPK2n NmIGPYJtyXON4HFjUpUJkVl4P6FsjPpRJ9DSZpa908S7O+aF4yVH6MHHHkTnrRdm p2T8qmABdQfwJWROsQQMNl8bw89ApJXxyPbIUOskuL05oC0PfNNjuaMKtd0V41Iq eIGObUawEi4kztd/KxwirY8/3y/ShmzAP5ZHw+BH+EsKfmLhnsjouLB8TaomXZH8 rhlw0uWKyZXxpo/nPr8l+gmRS1kqUhRHGGkin7XiQ26fPgj231E= -----END CERTIFICATE-----Generated at Thu Aug 7 11:07:53 2025 by rpki-client