$ rpki-client -vvf repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/EBBE263817C941A8999ED0A874948E0C42CC0DB6.mft File: EBBE263817C941A8999ED0A874948E0C42CC0DB6.mft (raw, json) Hash identifier: 2Tr6wvJgFByhaZxfX9t62v1WUznmqyqzeZk8bTMZTHs= Subject key identifier: EF:01:54:CC:18:6C:2F:48:67:7B:BF:F2:2A:66:1D:1C:D0:D1:74:70 Authority key identifier: EB:BE:26:38:17:C9:41:A8:99:9E:D0:A8:74:94:8E:0C:42:CC:0D:B6 Certificate issuer: /CN=EBBE263817C941A8999ED0A874948E0C42CC0DB6 Certificate serial: 22620E2E4DEADF4660B3ACAEBB810FF5CADB8EC8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBBE263817C941A8999ED0A874948E0C42CC0DB6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/EBBE263817C941A8999ED0A874948E0C42CC0DB6.mft Manifest number: 023D Signing time: Thu 04 Sep 2025 21:22:04 +0000 Manifest this update: Thu 04 Sep 2025 21:17:04 +0000 Manifest next update: Mon 08 Sep 2025 04:03:04 +0000 Files and hashes: 1: EBBE263817C941A8999ED0A874948E0C42CC0DB6.crl (hash: MbQ1fg5LkPTSBqej1/5cRK0EQhoha2ymJ0EyisBOPY8=) 2: 3130332e3134362e32362e302f32332d3234203d3e20313339393834.roa (hash: 8IQ9LG3AzlybnsbCFsZuSxAen082EUpSqQEDIvI8Zyk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/EBBE263817C941A8999ED0A874948E0C42CC0DB6.crl rsync://repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/EBBE263817C941A8999ED0A874948E0C42CC0DB6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBBE263817C941A8999ED0A874948E0C42CC0DB6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 04:03:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:62:0e:2e:4d:ea:df:46:60:b3:ac:ae:bb:81:0f:f5:ca:db:8e:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBBE263817C941A8999ED0A874948E0C42CC0DB6 Validity Not Before: Sep 4 21:17:04 2025 GMT Not After : Sep 8 04:03:04 2025 GMT Subject: CN=EF0154CC186C2F48677BBFF22A661D1CD0D17470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:be:21:38:ec:18:79:32:d3:68:2b:b8:f7:61: 92:f9:6b:03:1a:5a:88:8b:ad:66:c3:47:e5:bc:97: 79:fc:79:29:a3:2b:b9:c1:8b:6d:7b:98:0b:a1:4a: 38:26:ad:32:5e:58:30:38:05:0b:27:d8:67:64:65: a3:56:81:68:53:c8:71:3e:26:42:a1:c8:25:4e:b6: 3b:ef:4a:64:de:e0:2f:85:70:0a:1f:8e:12:ad:b5: 27:f4:c6:df:e8:cc:33:f3:48:c5:d8:0f:24:25:03: 95:88:98:8a:04:b0:94:88:db:d7:19:4c:46:3d:30: 26:1d:a7:6a:f1:ae:f4:f1:92:1a:17:2e:1c:79:19: e6:e5:2c:1f:58:d9:73:30:16:69:ba:0d:67:1a:67: 67:ec:90:fe:af:15:a2:bf:40:d0:e5:b2:38:57:45: 89:83:d2:05:cf:f1:5f:aa:76:47:ff:8a:e7:cf:2b: 9b:9b:d2:d3:10:f5:1a:4d:1f:ae:66:9f:a1:7d:f8: f7:f4:a4:6b:ed:c5:65:4a:dc:2c:fc:f8:55:38:ef: c1:46:0b:84:3e:29:d2:89:7a:11:05:8c:de:26:6f: 6f:70:5b:e4:e8:c1:8e:ed:87:0f:a5:32:8d:c5:1e: f8:0a:b4:e0:06:42:16:1e:9d:1d:d9:0b:91:78:e0: 8d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:01:54:CC:18:6C:2F:48:67:7B:BF:F2:2A:66:1D:1C:D0:D1:74:70 X509v3 Authority Key Identifier: keyid:EB:BE:26:38:17:C9:41:A8:99:9E:D0:A8:74:94:8E:0C:42:CC:0D:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/EBBE263817C941A8999ED0A874948E0C42CC0DB6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBBE263817C941A8999ED0A874948E0C42CC0DB6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/EBBE263817C941A8999ED0A874948E0C42CC0DB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:c4:0e:f7:06:d8:0e:b9:06:89:4f:0e:c2:9b:17:28:dd:56: b6:f7:33:8c:31:21:2b:b0:b3:a1:46:9b:56:9a:a0:64:7e:79: 9e:9c:77:54:73:32:87:0c:d5:8a:77:8c:b5:33:76:e5:84:d6: 33:ca:9c:71:54:97:2d:25:72:18:89:2e:0f:85:85:4a:51:8b: bc:a0:8e:21:18:d5:88:64:d9:92:ed:56:ba:f8:e6:cc:03:1f: 15:06:2e:5b:af:62:fc:0e:1a:f9:df:bb:bb:fe:a4:07:8d:29: 0b:9f:32:e8:40:4e:21:59:d1:38:f8:b1:88:cc:b9:37:db:ea: 6f:a3:6e:78:e9:ae:89:6f:48:28:28:ee:bb:3f:3f:fd:8c:92: 12:dd:d4:f7:04:aa:90:b0:ed:cf:26:44:30:94:dd:99:29:69: 00:9b:11:a9:ee:9c:bb:10:c4:04:34:f1:87:5e:92:14:e5:cb: ac:e5:72:51:c8:1f:f2:49:3c:d8:44:ae:5e:4a:e9:17:94:4c: 5a:d1:87:c4:93:18:de:9e:ce:40:ba:64:10:2e:45:dc:71:2f: b2:64:20:59:b0:69:ad:e4:c0:35:02:ba:fe:1f:8f:d3:64:1c: fe:23:ad:02:a4:a5:be:19:6f:1a:f0:9d:c4:94:b6:af:c4:2a: c6:2a:00:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUImIOLk3q30Zgs6yuu4EP9crbjsgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJCRTI2MzgxN0M5NDFBODk5OUVEMEE4NzQ5NDhFMEM0 MkNDMERCNjAeFw0yNTA5MDQyMTE3MDRaFw0yNTA5MDgwNDAzMDRaMDMxMTAvBgNV BAMTKEVGMDE1NENDMTg2QzJGNDg2NzdCQkZGMjJBNjYxRDFDRDBEMTc0NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9viE47Bh5MtNoK7j3YZL5awMa WoiLrWbDR+W8l3n8eSmjK7nBi217mAuhSjgmrTJeWDA4BQsn2GdkZaNWgWhTyHE+ JkKhyCVOtjvvSmTe4C+FcAofjhKttSf0xt/ozDPzSMXYDyQlA5WImIoEsJSI29cZ TEY9MCYdp2rxrvTxkhoXLhx5GeblLB9Y2XMwFmm6DWcaZ2fskP6vFaK/QNDlsjhX RYmD0gXP8V+qdkf/iufPK5ub0tMQ9RpNH65mn6F9+Pf0pGvtxWVK3Cz8+FU478FG C4Q+KdKJehEFjN4mb29wW+TowY7thw+lMo3FHvgKtOAGQhYenR3ZC5F44I3HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7wFUzBhsL0hne7/yKmYdHNDRdHAwHwYDVR0j BBgwFoAU674mOBfJQaiZntCodJSODELMDbYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Njk1NDYzNi05ODI5LTRiYTgtOTZhZi02ZTAwYjcxYThlZjgvMC9FQkJFMjYzODE3 Qzk0MUE4OTk5RUQwQTg3NDk0OEUwQzQyQ0MwREI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUJCRTI2MzgxN0M5NDFBODk5OUVEMEE4NzQ5NDhFMEM0MkND MERCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY5NTQ2MzYtOTgyOS00YmE4LTk2 YWYtNmUwMGI3MWE4ZWY4LzAvRUJCRTI2MzgxN0M5NDFBODk5OUVEMEE4NzQ5NDhF MEM0MkNDMERCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADLEDvcG2A65BolPDsKbFyjdVrb3M4wxISuw s6FGm1aaoGR+eZ6cd1RzMocM1Yp3jLUzduWE1jPKnHFUly0lchiJLg+FhUpRi7yg jiEY1Yhk2ZLtVrr45swDHxUGLluvYvwOGvnfu7v+pAeNKQufMuhATiFZ0Tj4sYjM uTfb6m+jbnjprolvSCgo7rs/P/2MkhLd1PcEqpCw7c8mRDCU3ZkpaQCbEanunLsQ xAQ08YdekhTly6zlclHIH/JJPNhErl5K6ReUTFrRh8STGN6ezkC6ZBAuRdxxL7Jk IFmwaa3kwDUCuv4fj9NkHP4jrQKkpb4ZbxrwncSUtq/EKsYqAAY= -----END CERTIFICATE-----Generated at Fri Sep 5 10:14:56 2025 by rpki-client