$ rpki-client -vvf repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft File: EBB7963402117E803037310CE98B392F968C3A9A.mft (raw, json) Hash identifier: GkEapqAKN5TCfNepoyX8oQnlKlxTQkTtXctOi9eGsPw= Subject key identifier: B0:F5:56:31:F6:29:B7:CE:87:3A:F2:00:BB:67:4B:89:60:D9:36:D8 Authority key identifier: EB:B7:96:34:02:11:7E:80:30:37:31:0C:E9:8B:39:2F:96:8C:3A:9A Certificate issuer: /CN=EBB7963402117E803037310CE98B392F968C3A9A Certificate serial: 6AEBE3FE3E26C593D94C52ADD6E6CD7D9975C9CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft Manifest number: 01D9 Signing time: Fri 25 Jul 2025 00:32:00 +0000 Manifest this update: Fri 25 Jul 2025 00:27:00 +0000 Manifest next update: Mon 28 Jul 2025 08:49:00 +0000 Files and hashes: 1: EBB7963402117E803037310CE98B392F968C3A9A.crl (hash: 66AEtzwuBIiq7I/5MSP5oP3pEnslVyKOyg/QP0eoWkg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.crl rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 06:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:eb:e3:fe:3e:26:c5:93:d9:4c:52:ad:d6:e6:cd:7d:99:75:c9:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBB7963402117E803037310CE98B392F968C3A9A Validity Not Before: Jul 25 00:27:00 2025 GMT Not After : Jul 28 08:49:00 2025 GMT Subject: CN=B0F55631F629B7CE873AF200BB674B8960D936D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e8:44:94:43:0d:b2:44:c2:57:86:d1:9d:6e: 18:60:34:50:56:d9:a9:bf:bf:47:d1:91:6e:ec:e8: 6a:3a:7f:02:de:61:d6:16:00:ac:07:69:32:7e:e3: 49:b6:29:6c:91:43:a0:71:7b:95:e0:e4:21:a8:f3: fc:45:46:5d:ab:be:94:c7:4e:a4:1f:38:cb:d3:10: 08:e8:1b:ef:f8:00:b3:67:ab:06:df:b8:e6:78:e7: 0e:79:8c:82:d3:a6:56:49:d0:73:c5:29:d8:20:68: 66:3b:b8:2c:60:aa:01:83:c7:0c:67:80:cf:0b:19: e9:e6:fa:e7:75:ab:69:7a:4e:ed:a1:79:fd:be:4b: c6:af:49:d9:ce:70:a2:49:d6:e6:6a:5a:23:02:d1: a1:17:4b:75:e4:1e:6e:47:5e:5c:f1:f8:b3:d6:7b: 83:d9:a2:cf:1f:73:98:34:73:29:0b:d7:b1:aa:31: f7:2a:a5:3e:05:e5:73:dc:91:ea:8e:84:e9:02:e9: f0:d5:15:5a:20:20:52:e7:6b:48:d8:94:3c:41:83: 90:20:90:6f:6c:1b:e9:62:a4:64:d3:3a:fe:9b:86: 00:38:43:4f:24:da:b2:1b:34:8d:30:ec:46:55:58: 32:fa:c2:13:7c:57:31:82:9f:ad:37:8b:ea:b1:77: 3f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:F5:56:31:F6:29:B7:CE:87:3A:F2:00:BB:67:4B:89:60:D9:36:D8 X509v3 Authority Key Identifier: keyid:EB:B7:96:34:02:11:7E:80:30:37:31:0C:E9:8B:39:2F:96:8C:3A:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:60:cd:63:1f:9f:4a:5e:d7:a2:ed:b2:54:2e:08:9d:10:25: 97:f3:e5:8e:97:96:6e:bb:f5:85:1c:fd:06:9c:4e:75:8e:87: aa:04:77:33:cb:ac:8a:9d:32:a4:b0:7c:01:3b:2b:07:d9:d4: 17:74:1c:44:3e:df:cd:fc:d5:fb:76:2f:a0:04:ec:c1:17:29: c9:42:34:51:88:47:57:d8:a6:79:f0:81:1f:83:db:82:0f:df: 4a:d3:99:b9:72:6b:f0:9a:9b:04:2a:2e:0a:74:05:77:f5:29: 9b:67:44:21:5a:1f:f7:53:3f:50:51:b1:df:42:4a:f1:2a:45: ed:b0:d4:aa:8e:39:39:7b:44:31:7d:d3:1c:af:c4:ac:0d:e0: 2c:c5:35:02:84:25:24:a3:42:32:83:8b:dc:ef:d2:20:de:c7: 47:1d:41:72:74:07:e3:0c:71:d1:63:0b:a0:f7:55:8d:b7:b1: 9c:7d:29:7e:17:fc:aa:92:09:95:11:d8:15:23:d4:97:eb:e5: eb:49:40:7d:e5:99:61:bd:f8:24:94:fe:05:7f:11:ef:5f:3f: 9d:81:d5:1e:64:e4:7d:79:19:eb:d0:98:7d:37:95:e6:83:84: a4:27:2f:1c:95:25:02:75:01:a9:f2:d2:7a:97:fb:e2:be:b6: ea:1f:a7:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUauvj/j4mxZPZTFKt1ubNfZl1ycwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJCNzk2MzQwMjExN0U4MDMwMzczMTBDRTk4QjM5MkY5 NjhDM0E5QTAeFw0yNTA3MjUwMDI3MDBaFw0yNTA3MjgwODQ5MDBaMDMxMTAvBgNV BAMTKEIwRjU1NjMxRjYyOUI3Q0U4NzNBRjIwMEJCNjc0Qjg5NjBEOTM2RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC06ESUQw2yRMJXhtGdbhhgNFBW 2am/v0fRkW7s6Go6fwLeYdYWAKwHaTJ+40m2KWyRQ6Bxe5Xg5CGo8/xFRl2rvpTH TqQfOMvTEAjoG+/4ALNnqwbfuOZ45w55jILTplZJ0HPFKdggaGY7uCxgqgGDxwxn gM8LGenm+ud1q2l6Tu2hef2+S8avSdnOcKJJ1uZqWiMC0aEXS3XkHm5HXlzx+LPW e4PZos8fc5g0cykL17GqMfcqpT4F5XPckeqOhOkC6fDVFVogIFLna0jYlDxBg5Ag kG9sG+lipGTTOv6bhgA4Q08k2rIbNI0w7EZVWDL6whN8VzGCn603i+qxdz8dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsPVWMfYpt86HOvIAu2dLiWDZNtgwHwYDVR0j BBgwFoAU67eWNAIRfoAwNzEM6Ys5L5aMOpowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NWMyYzcxYy02YWU1LTRlYTktYjg1MC02MzAwZTJlMWJhZGYvMC9FQkI3OTYzNDAy MTE3RTgwMzAzNzMxMENFOThCMzkyRjk2OEMzQTlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUJCNzk2MzQwMjExN0U4MDMwMzczMTBDRTk4QjM5MkY5NjhD M0E5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDVjMmM3MWMtNmFlNS00ZWE5LWI4 NTAtNjMwMGUyZTFiYWRmLzAvRUJCNzk2MzQwMjExN0U4MDMwMzczMTBDRTk4QjM5 MkY5NjhDM0E5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALBgzWMfn0pe16LtslQuCJ0QJZfz5Y6Xlm67 9YUc/QacTnWOh6oEdzPLrIqdMqSwfAE7KwfZ1Bd0HEQ+38381ft2L6AE7MEXKclC NFGIR1fYpnnwgR+D24IP30rTmblya/CamwQqLgp0BXf1KZtnRCFaH/dTP1BRsd9C SvEqRe2w1KqOOTl7RDF90xyvxKwN4CzFNQKEJSSjQjKDi9zv0iDex0cdQXJ0B+MM cdFjC6D3VY23sZx9KX4X/KqSCZUR2BUj1Jfr5etJQH3lmWG9+CSU/gV/Ee9fP52B 1R5k5H15GevQmH03leaDhKQnLxyVJQJ1Aany0nqX++K+tuofpy0= -----END CERTIFICATE-----Generated at Fri Jul 25 06:55:35 2025 by rpki-client