$ rpki-client -vvf repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.mft File: EB6A398D686553919657E094022E843191F4573E.mft (raw, json) Hash identifier: XutPk4ujIRrTb6HaIpDVgHCfctjWM+4kILclNt2KjQU= Subject key identifier: 2A:08:7E:97:E5:9F:83:2B:22:6E:0B:15:D7:36:1C:D6:4E:6E:48:AB Authority key identifier: EB:6A:39:8D:68:65:53:91:96:57:E0:94:02:2E:84:31:91:F4:57:3E Certificate issuer: /CN=EB6A398D686553919657E094022E843191F4573E Certificate serial: 495BA86179383409AFA1810BA3AAFCB3D8FF3014 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB6A398D686553919657E094022E843191F4573E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.mft Manifest number: 0257 Signing time: Mon 03 Nov 2025 10:01:49 +0000 Manifest this update: Mon 03 Nov 2025 09:56:49 +0000 Manifest next update: Thu 06 Nov 2025 15:49:49 +0000 Files and hashes: 1: 3130332e3138312e3234382e302f32332d3234203d3e20313439343030.roa (hash: sKkJQmxuHQRpbOu7tarZjRh6SYZHx7wMO0xOOxar2Ro=) 2: EB6A398D686553919657E094022E843191F4573E.crl (hash: hyVVqPiu13DGz45OoJyKMM4DZLB5Um73RnZ4j9dKF1k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.crl rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB6A398D686553919657E094022E843191F4573E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 15:49:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:5b:a8:61:79:38:34:09:af:a1:81:0b:a3:aa:fc:b3:d8:ff:30:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB6A398D686553919657E094022E843191F4573E Validity Not Before: Nov 3 09:56:49 2025 GMT Not After : Nov 6 15:49:49 2025 GMT Subject: CN=2A087E97E59F832B226E0B15D7361CD64E6E48AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:06:8f:1d:21:38:bb:b1:78:fa:8d:5b:11:56: a6:2c:5e:ac:19:c6:91:62:0b:a8:ac:29:97:06:04: ab:b6:53:fc:ac:81:12:c3:08:1a:99:0e:c0:2d:43: d0:dd:78:5b:92:bb:ed:7c:cc:3e:b0:66:cf:fc:0c: c4:d2:f6:ef:44:11:8f:52:3c:ca:06:6d:af:c7:4c: 67:b7:d9:f4:9d:42:7c:99:74:e2:69:3c:8d:9f:b1: 4c:c3:16:74:b7:b2:6f:43:50:d1:4c:9d:44:96:9d: f6:c1:2f:42:78:ec:ab:0e:41:d0:74:ea:09:06:e0: 34:c8:d4:88:78:fc:a8:ab:cc:f2:8b:e2:c8:d2:8d: 8d:de:84:a5:95:44:dc:c0:30:9c:e6:6e:af:f2:da: 85:cc:8f:5d:2a:43:b0:09:96:0f:9e:6f:45:cf:37: 88:d0:f3:8b:5c:85:10:39:10:b4:c7:1d:d1:bd:25: 49:76:6e:90:25:2e:f7:da:4d:3a:22:cb:06:07:69: d6:bd:da:6f:7b:5b:a8:b7:5a:ec:e3:46:04:cc:cb: e1:58:ad:75:ec:59:8a:f3:71:0f:d4:0e:2b:43:a1: b4:82:b9:15:63:75:ec:6d:69:61:df:f2:b5:a0:54: 14:0b:21:40:a6:3a:0c:2b:55:ee:2c:9d:a9:58:43: df:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:08:7E:97:E5:9F:83:2B:22:6E:0B:15:D7:36:1C:D6:4E:6E:48:AB X509v3 Authority Key Identifier: keyid:EB:6A:39:8D:68:65:53:91:96:57:E0:94:02:2E:84:31:91:F4:57:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB6A398D686553919657E094022E843191F4573E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:a0:8b:a8:29:38:60:3c:07:b0:fb:c2:b9:b6:b1:c6:a8:b2: b9:4e:21:26:05:c7:ba:51:72:7f:4c:c5:d1:7f:2a:b0:89:fe: f3:75:3a:e0:e0:a6:ea:db:4d:cb:de:8d:15:c6:2b:84:7f:5e: 24:ae:12:e0:5a:27:12:98:21:19:61:91:f0:b6:ad:19:da:b3: 1d:cc:28:c7:db:b3:e4:dd:7f:3e:53:d6:c9:cd:77:2c:2b:eb: 0e:92:60:f2:6a:e5:05:43:ac:da:03:94:01:9c:77:e5:40:0b: 29:19:62:86:17:dd:ad:f4:df:03:10:b0:78:72:84:75:84:ed: 66:18:b1:86:03:4e:64:8a:ee:d5:3b:38:36:33:72:1a:b9:9a: bb:5e:7c:f5:f4:74:2c:43:34:49:ca:09:e5:3d:b0:4e:07:84: 30:cd:61:8f:8d:c0:61:23:57:b8:bb:93:fa:2d:2d:9b:7d:64: 2c:a1:ba:06:c9:a8:89:87:c3:49:8d:03:c2:b3:36:65:6f:a2: 02:fc:b9:46:c8:91:d5:bf:a6:41:cc:4e:6b:45:16:dc:f3:87: c4:62:14:9d:df:cb:4a:03:c4:eb:f8:52:fb:98:6a:0e:b4:dc: 67:fe:c0:11:65:bd:58:77:a0:9b:1f:bb:21:59:d1:de:ca:d2: a3:d7:ce:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSVuoYXk4NAmvoYELo6r8s9j/MBQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUI2QTM5OEQ2ODY1NTM5MTk2NTdFMDk0MDIyRTg0MzE5 MUY0NTczRTAeFw0yNTExMDMwOTU2NDlaFw0yNTExMDYxNTQ5NDlaMDMxMTAvBgNV BAMTKDJBMDg3RTk3RTU5RjgzMkIyMjZFMEIxNUQ3MzYxQ0Q2NEU2RTQ4QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXBo8dITi7sXj6jVsRVqYsXqwZ xpFiC6isKZcGBKu2U/ysgRLDCBqZDsAtQ9DdeFuSu+18zD6wZs/8DMTS9u9EEY9S PMoGba/HTGe32fSdQnyZdOJpPI2fsUzDFnS3sm9DUNFMnUSWnfbBL0J47KsOQdB0 6gkG4DTI1Ih4/KirzPKL4sjSjY3ehKWVRNzAMJzmbq/y2oXMj10qQ7AJlg+eb0XP N4jQ84tchRA5ELTHHdG9JUl2bpAlLvfaTToiywYHada92m97W6i3WuzjRgTMy+FY rXXsWYrzcQ/UDitDobSCuRVjdextaWHf8rWgVBQLIUCmOgwrVe4snalYQ99ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKgh+l+WfgysibgsV1zYc1k5uSKswHwYDVR0j BBgwFoAU62o5jWhlU5GWV+CUAi6EMZH0Vz4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTRlMTAzZS0zZDc4LTRhZTAtOWJhNC1kMTc5MmZmYTA0YWMvMC9FQjZBMzk4RDY4 NjU1MzkxOTY1N0UwOTQwMjJFODQzMTkxRjQ1NzNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUI2QTM5OEQ2ODY1NTM5MTk2NTdFMDk0MDIyRTg0MzE5MUY0 NTczRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2U0ZTEwM2UtM2Q3OC00YWUwLTli YTQtZDE3OTJmZmEwNGFjLzAvRUI2QTM5OEQ2ODY1NTM5MTk2NTdFMDk0MDIyRTg0 MzE5MUY0NTczRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEqgi6gpOGA8B7D7wrm2scaosrlOISYFx7pR cn9MxdF/KrCJ/vN1OuDgpurbTcvejRXGK4R/XiSuEuBaJxKYIRlhkfC2rRnasx3M KMfbs+Tdfz5T1snNdywr6w6SYPJq5QVDrNoDlAGcd+VACykZYoYX3a303wMQsHhy hHWE7WYYsYYDTmSK7tU7ODYzchq5mrtefPX0dCxDNEnKCeU9sE4HhDDNYY+NwGEj V7i7k/otLZt9ZCyhugbJqImHw0mNA8KzNmVvogL8uUbIkdW/pkHMTmtFFtzzh8Ri FJ3fy0oDxOv4UvuYag603Gf+wBFlvVh3oJsfuyFZ0d7K0qPXzhA= -----END CERTIFICATE-----Generated at Wed Nov 5 00:29:24 2025 by rpki-client