$ rpki-client -vvf repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/EBBE263817C941A8999ED0A874948E0C42CC0DB6.mft File: EBBE263817C941A8999ED0A874948E0C42CC0DB6.mft (raw, json) Hash identifier: oTfTXOCCGxzNRtIoWSuU722ufZjRgW9w1vkh4G2JnTI= Subject key identifier: 41:87:51:D8:1B:0E:DE:9B:98:0B:23:93:B6:B8:D7:8A:58:1B:2F:CA Authority key identifier: EB:BE:26:38:17:C9:41:A8:99:9E:D0:A8:74:94:8E:0C:42:CC:0D:B6 Certificate issuer: /CN=EBBE263817C941A8999ED0A874948E0C42CC0DB6 Certificate serial: 500E0700672E5B9D5596D78BE4E42EC852268D67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBBE263817C941A8999ED0A874948E0C42CC0DB6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/EBBE263817C941A8999ED0A874948E0C42CC0DB6.mft Manifest number: 0228 Signing time: Sun 20 Jul 2025 05:52:04 +0000 Manifest this update: Sun 20 Jul 2025 05:47:04 +0000 Manifest next update: Wed 23 Jul 2025 14:39:04 +0000 Files and hashes: 1: EBBE263817C941A8999ED0A874948E0C42CC0DB6.crl (hash: QftecQX2Dsv3VFs2xGdwc2hu69Z+hx47mbawvdwkCnw=) 2: 3130332e3134362e32362e302f32332d3234203d3e20313339393834.roa (hash: 8IQ9LG3AzlybnsbCFsZuSxAen082EUpSqQEDIvI8Zyk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/EBBE263817C941A8999ED0A874948E0C42CC0DB6.crl rsync://repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/EBBE263817C941A8999ED0A874948E0C42CC0DB6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBBE263817C941A8999ED0A874948E0C42CC0DB6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 14:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:0e:07:00:67:2e:5b:9d:55:96:d7:8b:e4:e4:2e:c8:52:26:8d:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBBE263817C941A8999ED0A874948E0C42CC0DB6 Validity Not Before: Jul 20 05:47:04 2025 GMT Not After : Jul 23 14:39:04 2025 GMT Subject: CN=418751D81B0EDE9B980B2393B6B8D78A581B2FCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7a:09:43:ee:35:10:e0:84:36:46:ca:67:ae: 8d:b3:14:42:6d:f9:de:a3:de:79:73:e8:43:82:5f: 34:2d:45:de:49:e5:00:aa:06:d4:05:26:c8:8c:8c: d1:33:fc:66:5b:03:90:2f:15:5c:65:94:b6:c5:e4: 07:45:49:d6:e5:3c:7a:ae:96:0f:e2:e9:61:b5:dc: b6:31:dd:ca:c3:3a:ad:ba:44:55:f5:e4:3e:13:1a: 10:4b:51:e4:d1:55:a8:79:a8:d7:d3:29:84:ec:c1: ab:2d:1a:ad:09:ab:e6:76:2b:6e:9d:ac:fc:eb:c0: c4:0a:1f:c3:d0:92:90:6e:d1:a1:c2:6e:45:a4:5c: 62:71:65:99:a7:b9:50:86:aa:43:0c:fd:74:da:86: 9d:f0:c0:aa:97:fd:c5:38:c0:d2:fd:d4:c3:b1:26: 26:5d:83:b9:18:33:20:0f:08:ac:33:f6:2f:8a:91: b8:5f:20:59:1b:e4:d3:54:44:96:11:aa:c8:76:be: e8:ae:1c:b8:56:1a:95:1f:0f:d6:ad:dc:44:b3:90: 8c:84:99:5c:65:e5:28:81:8b:b7:b8:11:3a:c5:35: 4f:4d:10:dc:ae:2f:ce:04:3e:f4:e8:6b:22:44:be: da:34:84:b7:94:4b:7b:23:56:58:60:86:36:48:15: f3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:87:51:D8:1B:0E:DE:9B:98:0B:23:93:B6:B8:D7:8A:58:1B:2F:CA X509v3 Authority Key Identifier: keyid:EB:BE:26:38:17:C9:41:A8:99:9E:D0:A8:74:94:8E:0C:42:CC:0D:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/EBBE263817C941A8999ED0A874948E0C42CC0DB6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBBE263817C941A8999ED0A874948E0C42CC0DB6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/EBBE263817C941A8999ED0A874948E0C42CC0DB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:3a:34:36:c0:d9:3f:63:ba:15:aa:9b:2f:c0:e1:7b:1a:65: 55:ae:e8:5e:e0:b2:eb:61:ea:a7:c1:dc:55:0e:11:c2:9d:64: e1:4a:8e:9f:36:00:5b:aa:ec:d9:72:ff:c6:c2:91:05:4d:6d: a9:45:f4:79:90:26:52:9b:a0:7c:83:51:51:0a:98:4a:24:72: d8:8b:d8:7b:61:81:6a:ae:c9:eb:6c:14:fe:65:be:03:ee:95: 14:f2:6e:1c:cb:50:20:a5:e5:bb:40:d1:00:07:39:fa:62:51: 46:22:ca:73:d6:31:a4:ce:3a:b9:ad:47:98:74:ba:41:f9:ca: ec:3e:71:22:13:9d:33:10:84:db:ae:c0:18:ea:08:b3:bb:c1: 7b:1e:8b:dd:50:2e:b1:47:f9:d2:fa:94:1a:32:dc:4e:56:bf: 14:3a:8c:94:9e:68:3f:80:84:5d:30:90:c2:0e:43:43:9d:a3: b2:08:eb:fa:b1:99:12:34:7c:9f:3e:7f:4c:4a:3e:b4:4c:e3: 4b:3e:a1:a6:0f:2b:89:7a:0e:5b:58:72:f4:e7:88:bb:85:a1: 81:c7:98:0e:dc:15:90:54:34:29:fa:9e:e1:d9:27:87:d4:e1: 91:56:aa:d4:00:37:cf:cf:0f:74:a7:57:63:b9:e7:d2:45:6f: 1d:bd:0f:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUA4HAGcuW51VlteL5OQuyFImjWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJCRTI2MzgxN0M5NDFBODk5OUVEMEE4NzQ5NDhFMEM0 MkNDMERCNjAeFw0yNTA3MjAwNTQ3MDRaFw0yNTA3MjMxNDM5MDRaMDMxMTAvBgNV BAMTKDQxODc1MUQ4MUIwRURFOUI5ODBCMjM5M0I2QjhENzhBNTgxQjJGQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqeglD7jUQ4IQ2Rspnro2zFEJt +d6j3nlz6EOCXzQtRd5J5QCqBtQFJsiMjNEz/GZbA5AvFVxllLbF5AdFSdblPHqu lg/i6WG13LYx3crDOq26RFX15D4TGhBLUeTRVah5qNfTKYTswastGq0Jq+Z2K26d rPzrwMQKH8PQkpBu0aHCbkWkXGJxZZmnuVCGqkMM/XTahp3wwKqX/cU4wNL91MOx JiZdg7kYMyAPCKwz9i+KkbhfIFkb5NNURJYRqsh2vuiuHLhWGpUfD9at3ESzkIyE mVxl5SiBi7e4ETrFNU9NENyuL84EPvToayJEvto0hLeUS3sjVlhghjZIFfP/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQYdR2BsO3puYCyOTtrjXilgbL8owHwYDVR0j BBgwFoAU674mOBfJQaiZntCodJSODELMDbYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Njk1NDYzNi05ODI5LTRiYTgtOTZhZi02ZTAwYjcxYThlZjgvMC9FQkJFMjYzODE3 Qzk0MUE4OTk5RUQwQTg3NDk0OEUwQzQyQ0MwREI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUJCRTI2MzgxN0M5NDFBODk5OUVEMEE4NzQ5NDhFMEM0MkND MERCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY5NTQ2MzYtOTgyOS00YmE4LTk2 YWYtNmUwMGI3MWE4ZWY4LzAvRUJCRTI2MzgxN0M5NDFBODk5OUVEMEE4NzQ5NDhF MEM0MkNDMERCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADI6NDbA2T9juhWqmy/A4XsaZVWu6F7gsuth 6qfB3FUOEcKdZOFKjp82AFuq7Nly/8bCkQVNbalF9HmQJlKboHyDUVEKmEokctiL 2HthgWquyetsFP5lvgPulRTybhzLUCCl5btA0QAHOfpiUUYiynPWMaTOOrmtR5h0 ukH5yuw+cSITnTMQhNuuwBjqCLO7wXsei91QLrFH+dL6lBoy3E5WvxQ6jJSeaD+A hF0wkMIOQ0Odo7II6/qxmRI0fJ8+f0xKPrRM40s+oaYPK4l6DltYcvTniLuFoYHH mA7cFZBUNCn6nuHZJ4fU4ZFWqtQAN8/PD3SnV2O559JFbx29D8Y= -----END CERTIFICATE-----Generated at Mon Jul 21 08:37:02 2025 by rpki-client