$ rpki-client -vvf repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.mft File: EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.mft (raw, json) Hash identifier: n2/kqvwR9618qeuhK8dN9PY7TorbccCIAk5G1RK/wzg= Subject key identifier: B6:0A:55:C1:ED:D3:9F:32:27:47:2D:BB:D6:8A:71:71:B2:A7:35:FB Authority key identifier: EB:17:E4:6A:BC:B7:8A:51:E4:C5:B9:A1:4B:D7:81:7F:CC:60:92:F9 Certificate issuer: /CN=EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9 Certificate serial: 7C4489B8884F0DE5894E093051D15C7457159B1F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.mft Manifest number: 04E2 Signing time: Thu 19 Jun 2025 15:22:19 +0000 Manifest this update: Thu 19 Jun 2025 15:17:19 +0000 Manifest next update: Sun 22 Jun 2025 15:57:19 +0000 Files and hashes: 1: 3130332e38362e3130332e302f32342d3234203d3e20313336303831.roa (hash: FH/voLgmuZE3XbtxgnYOWLHEkRd7OKtR53sqhIsyCzA=) 2: 3130332e3134372e3231382e302f32342d3234203d3e20313336303831.roa (hash: 3V+KbbdMSsyWcppKJdE78z6t2xUFj1baxa/Y1TQkRqM=) 3: EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.crl (hash: 9rV9wyfYUPNhxaSfttHnEi/c6Vb4Jnvo0BZpZYyyx74=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.crl rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 13:31:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:44:89:b8:88:4f:0d:e5:89:4e:09:30:51:d1:5c:74:57:15:9b:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9 Validity Not Before: Jun 19 15:17:19 2025 GMT Not After : Jun 22 15:57:19 2025 GMT Subject: CN=B60A55C1EDD39F3227472DBBD68A7171B2A735FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f5:d3:1a:d2:bc:05:01:d5:0c:24:1d:1f:ef: 61:74:50:56:6e:8f:9e:4b:4a:1b:04:03:da:c8:52: 40:c1:d8:c4:4f:7b:9e:73:8a:88:83:2f:2f:ba:eb: 1f:0a:52:97:9c:a2:b5:43:b8:a6:c4:93:01:9e:8d: af:2e:5d:4c:46:3a:9d:7e:b0:9b:4e:9f:ca:e4:25: 48:0f:bc:01:84:f3:4a:fd:66:b6:da:73:a1:01:a2: 72:ed:af:bf:03:d2:05:b1:e7:17:6c:b7:4b:aa:8e: 10:38:55:f2:c0:b0:8a:a1:7e:c9:b8:c8:26:ae:3b: df:1a:01:20:b4:e8:c6:9f:4f:7d:2f:a9:e3:99:74: 62:6a:e7:13:76:6f:86:0f:52:fc:df:7a:61:23:1c: f6:82:29:5e:4e:e2:75:8c:ee:df:b4:9a:0d:6b:3e: 45:fc:15:23:0e:14:53:62:93:80:8a:f8:10:c2:99: a7:a9:4a:e6:52:52:dd:ae:5d:b5:47:b7:bf:72:91: 8f:22:67:d7:d2:53:2e:39:75:ba:c0:11:4e:49:ba: 8d:63:34:b8:b7:eb:54:ab:cb:11:f2:50:f2:ff:4d: 3d:5f:40:07:d2:ca:0f:fc:ae:85:f5:d8:29:e0:18: b9:e7:1c:ee:a4:c5:01:8e:05:c4:da:f5:0e:4b:3c: 25:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:0A:55:C1:ED:D3:9F:32:27:47:2D:BB:D6:8A:71:71:B2:A7:35:FB X509v3 Authority Key Identifier: keyid:EB:17:E4:6A:BC:B7:8A:51:E4:C5:B9:A1:4B:D7:81:7F:CC:60:92:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:e6:3b:ab:5e:b4:d6:47:cb:24:89:ba:ed:7a:a9:3c:9f:a3: 21:ea:f6:89:2f:25:fd:99:40:b4:f8:9a:15:c9:e8:04:50:ec: 46:b5:01:ce:46:1f:e6:67:21:2a:9d:40:f9:f9:e9:72:a3:a2: 10:7e:04:b5:c1:67:37:37:bd:a1:e7:fb:4f:16:d0:0f:dc:76: 37:02:70:70:cd:44:b7:c7:08:1e:51:8a:fc:0f:07:2d:3b:3e: d9:ba:83:3b:78:73:d6:b3:b0:70:ee:ec:03:62:86:bf:c0:e9: 64:5b:ab:d9:40:a0:c5:2b:73:9a:0d:9d:dd:f7:41:8e:50:f2: 93:ab:02:66:74:84:09:f4:4c:3b:19:ff:5b:b2:52:f8:fe:82: c0:96:20:c2:d3:d2:70:80:0e:37:8a:6c:5c:d9:7d:db:b4:9d: 4e:49:96:04:a3:8c:14:32:f1:58:78:62:57:2f:e8:31:d0:ec: c9:83:5f:9c:5f:bb:e6:8a:08:fa:ba:55:d6:19:6f:9c:d1:93: 29:7c:36:93:54:26:95:39:8b:f2:83:6d:3b:d1:78:d3:ef:f8: f6:32:2c:1a:54:77:a7:3d:74:43:29:bd:37:51:6a:8f:c1:08: ac:22:e0:e0:c1:a8:93:40:a6:73:64:7a:ae:7c:ef:07:3b:e0: c0:8a:d1:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfESJuIhPDeWJTgkwUdFcdFcVmx8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUIxN0U0NkFCQ0I3OEE1MUU0QzVCOUExNEJENzgxN0ZD QzYwOTJGOTAeFw0yNTA2MTkxNTE3MTlaFw0yNTA2MjIxNTU3MTlaMDMxMTAvBgNV BAMTKEI2MEE1NUMxRUREMzlGMzIyNzQ3MkRCQkQ2OEE3MTcxQjJBNzM1RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC99dMa0rwFAdUMJB0f72F0UFZu j55LShsEA9rIUkDB2MRPe55zioiDLy+66x8KUpecorVDuKbEkwGeja8uXUxGOp1+ sJtOn8rkJUgPvAGE80r9Zrbac6EBonLtr78D0gWx5xdst0uqjhA4VfLAsIqhfsm4 yCauO98aASC06MafT30vqeOZdGJq5xN2b4YPUvzfemEjHPaCKV5O4nWM7t+0mg1r PkX8FSMOFFNik4CK+BDCmaepSuZSUt2uXbVHt79ykY8iZ9fSUy45dbrAEU5Juo1j NLi361SryxHyUPL/TT1fQAfSyg/8roX12CngGLnnHO6kxQGOBcTa9Q5LPCVlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtgpVwe3TnzInRy271opxcbKnNfswHwYDVR0j BBgwFoAU6xfkary3ilHkxbmhS9eBf8xgkvkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MjYwNTg2ZC1iMDI3LTQ2NTYtYjYzMS0wNTg5NmI1NDM3ODIvMC9FQjE3RTQ2QUJD Qjc4QTUxRTRDNUI5QTE0QkQ3ODE3RkNDNjA5MkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUIxN0U0NkFCQ0I3OEE1MUU0QzVCOUExNEJENzgxN0ZDQzYw OTJGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjI2MDU4NmQtYjAyNy00NjU2LWI2 MzEtMDU4OTZiNTQzNzgyLzAvRUIxN0U0NkFCQ0I3OEE1MUU0QzVCOUExNEJENzgx N0ZDQzYwOTJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGbmO6tetNZHyySJuu16qTyfoyHq9okvJf2Z QLT4mhXJ6ARQ7Ea1Ac5GH+ZnISqdQPn56XKjohB+BLXBZzc3vaHn+08W0A/cdjcC cHDNRLfHCB5RivwPBy07Ptm6gzt4c9azsHDu7ANihr/A6WRbq9lAoMUrc5oNnd33 QY5Q8pOrAmZ0hAn0TDsZ/1uyUvj+gsCWIMLT0nCADjeKbFzZfdu0nU5JlgSjjBQy 8Vh4Ylcv6DHQ7MmDX5xfu+aKCPq6VdYZb5zRkyl8NpNUJpU5i/KDbTvReNPv+PYy LBpUd6c9dEMpvTdRao/BCKwi4ODBqJNApnNkeq587wc74MCK0Ww= -----END CERTIFICATE-----Generated at Thu Jun 19 17:48:07 2025 by rpki-client