$ rpki-client -vvf repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft File: EBB7963402117E803037310CE98B392F968C3A9A.mft (raw, json) Hash identifier: H2v5NK9TfUwhKGh3zIvVnI1yk6rJFsHaMH9ZqL8mF3o= Subject key identifier: 96:74:FA:2A:2B:75:BF:9E:59:DE:C4:90:44:19:DE:7C:82:FD:F6:3B Authority key identifier: EB:B7:96:34:02:11:7E:80:30:37:31:0C:E9:8B:39:2F:96:8C:3A:9A Certificate issuer: /CN=EBB7963402117E803037310CE98B392F968C3A9A Certificate serial: 488B8D98F01827BCFD8FC21923DFDD8525BDC813 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft Manifest number: 01D8 Signing time: Tue 22 Jul 2025 20:22:14 +0000 Manifest this update: Tue 22 Jul 2025 20:17:14 +0000 Manifest next update: Sat 26 Jul 2025 00:30:14 +0000 Files and hashes: 1: EBB7963402117E803037310CE98B392F968C3A9A.crl (hash: bOhzAj3cZN+SgQ8AqZzH3pQOKytNOITGBKaX1iwIeHE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.crl rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:30:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:8b:8d:98:f0:18:27:bc:fd:8f:c2:19:23:df:dd:85:25:bd:c8:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBB7963402117E803037310CE98B392F968C3A9A Validity Not Before: Jul 22 20:17:14 2025 GMT Not After : Jul 26 00:30:14 2025 GMT Subject: CN=9674FA2A2B75BF9E59DEC4904419DE7C82FDF63B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:29:98:1c:5a:96:af:a1:d6:54:19:7c:68:c2: 34:20:b4:eb:69:e3:a0:e4:56:81:3a:71:43:4c:81: 96:d7:65:7f:30:e7:8c:26:84:b6:64:c9:c8:04:3c: 72:e6:00:96:b3:32:51:f6:88:26:e3:ce:23:bd:57: ad:32:2b:e6:25:ef:05:e3:eb:97:78:f3:61:1d:1f: ed:7c:ae:2a:6a:d0:7d:2f:df:e2:e7:62:15:f1:ee: 77:18:47:e9:b1:a6:03:4c:72:b6:57:b4:f0:11:ef: ca:84:42:fe:5c:d8:3e:5a:40:b5:5d:8f:c1:3c:43: 68:34:ce:7c:39:bb:8e:df:fd:53:ae:a9:22:c6:44: 42:69:17:2d:ca:b8:94:72:a4:51:c1:b8:0f:25:55: c3:df:0b:62:5d:82:3b:9f:2c:08:1e:5e:72:37:51: 84:c6:94:a3:16:4b:b9:2b:f7:de:4f:40:11:02:4d: 41:98:3f:52:f8:fd:0f:86:43:1f:94:f4:07:7c:e4: 28:a6:94:98:41:62:72:99:4d:83:33:dd:d3:eb:33: 0c:d6:e7:43:74:9d:ce:1e:6c:84:1d:39:d3:76:b6: 6b:33:9b:de:89:18:44:49:df:38:8e:39:2a:73:98: 36:9d:f1:db:d3:a8:e3:06:d1:16:31:66:3c:a8:c6: 54:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:74:FA:2A:2B:75:BF:9E:59:DE:C4:90:44:19:DE:7C:82:FD:F6:3B X509v3 Authority Key Identifier: keyid:EB:B7:96:34:02:11:7E:80:30:37:31:0C:E9:8B:39:2F:96:8C:3A:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:8d:93:b4:0f:36:a0:c8:1c:4d:fc:bc:98:c6:3e:25:10:e0: 6e:50:36:07:04:cb:ec:f0:ba:1c:e9:e6:62:18:03:7c:50:80: 36:92:64:e6:c7:8b:68:aa:96:8e:78:b2:5f:f0:16:da:e4:d1: ec:6b:ad:c4:05:ab:5f:0c:31:77:95:78:f3:28:4b:ff:88:c2: 59:82:e6:36:39:db:8a:ff:58:29:a1:c3:bc:9b:e2:2a:34:83: 73:fb:72:71:57:10:78:e8:76:48:13:52:f1:f7:da:18:02:6c: 73:fb:67:ca:1a:89:5d:a1:e3:8f:ff:4b:0e:a4:7d:cf:ed:fb: cb:f4:47:19:67:9b:b7:cc:02:fd:02:2d:5b:80:d7:57:23:50: 8e:49:36:22:6e:66:2d:e4:5c:e2:72:9e:f3:fe:6b:4f:d8:b6: 6b:0c:24:fb:d2:38:e1:4b:08:fc:87:4d:e6:a1:0c:6f:e5:84: 82:78:83:0c:cd:32:a1:8c:5b:b9:9f:17:51:df:de:e0:e3:e3: 4e:b9:5b:84:38:d4:43:43:54:8a:5a:7f:43:4f:f2:16:23:27: b9:7f:3a:a9:17:95:63:6d:c4:96:d9:b8:30:58:df:ec:42:ae: 0a:70:2f:eb:01:48:77:44:f6:5a:e6:cd:6f:fb:dc:7f:53:01: a9:6d:27:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSIuNmPAYJ7z9j8IZI9/dhSW9yBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJCNzk2MzQwMjExN0U4MDMwMzczMTBDRTk4QjM5MkY5 NjhDM0E5QTAeFw0yNTA3MjIyMDE3MTRaFw0yNTA3MjYwMDMwMTRaMDMxMTAvBgNV BAMTKDk2NzRGQTJBMkI3NUJGOUU1OURFQzQ5MDQ0MTlERTdDODJGREY2M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9KZgcWpavodZUGXxowjQgtOtp 46DkVoE6cUNMgZbXZX8w54wmhLZkycgEPHLmAJazMlH2iCbjziO9V60yK+Yl7wXj 65d482EdH+18ripq0H0v3+LnYhXx7ncYR+mxpgNMcrZXtPAR78qEQv5c2D5aQLVd j8E8Q2g0znw5u47f/VOuqSLGREJpFy3KuJRypFHBuA8lVcPfC2JdgjufLAgeXnI3 UYTGlKMWS7kr995PQBECTUGYP1L4/Q+GQx+U9Ad85CimlJhBYnKZTYMz3dPrMwzW 50N0nc4ebIQdOdN2tmszm96JGERJ3ziOOSpzmDad8dvTqOMG0RYxZjyoxlT9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlnT6Kit1v55Z3sSQRBnefIL99jswHwYDVR0j BBgwFoAU67eWNAIRfoAwNzEM6Ys5L5aMOpowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NWMyYzcxYy02YWU1LTRlYTktYjg1MC02MzAwZTJlMWJhZGYvMC9FQkI3OTYzNDAy MTE3RTgwMzAzNzMxMENFOThCMzkyRjk2OEMzQTlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUJCNzk2MzQwMjExN0U4MDMwMzczMTBDRTk4QjM5MkY5NjhD M0E5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDVjMmM3MWMtNmFlNS00ZWE5LWI4 NTAtNjMwMGUyZTFiYWRmLzAvRUJCNzk2MzQwMjExN0U4MDMwMzczMTBDRTk4QjM5 MkY5NjhDM0E5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL+Nk7QPNqDIHE38vJjGPiUQ4G5QNgcEy+zw uhzp5mIYA3xQgDaSZObHi2iqlo54sl/wFtrk0exrrcQFq18MMXeVePMoS/+IwlmC 5jY524r/WCmhw7yb4io0g3P7cnFXEHjodkgTUvH32hgCbHP7Z8oaiV2h44//Sw6k fc/t+8v0Rxlnm7fMAv0CLVuA11cjUI5JNiJuZi3kXOJynvP+a0/YtmsMJPvSOOFL CPyHTeahDG/lhIJ4gwzNMqGMW7mfF1Hf3uDj4065W4Q41ENDVIpaf0NP8hYjJ7l/ OqkXlWNtxJbZuDBY3+xCrgpwL+sBSHdE9lrmzW/73H9TAaltJ+U= -----END CERTIFICATE-----Generated at Thu Jul 24 12:17:02 2025 by rpki-client