$ rpki-client -vvf repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft File: EBB7963402117E803037310CE98B392F968C3A9A.mft (raw, json) Hash identifier: +Y6Oe7Mm4UT05nWlWR9WYh2fupQS+bOg9raBNfM6DTw= Subject key identifier: 36:A9:E9:28:72:76:E6:AA:3F:95:EB:10:A6:3E:BD:2E:A0:EE:78:D0 Authority key identifier: EB:B7:96:34:02:11:7E:80:30:37:31:0C:E9:8B:39:2F:96:8C:3A:9A Certificate issuer: /CN=EBB7963402117E803037310CE98B392F968C3A9A Certificate serial: 62DFD702304A8FF5E46ECF5DA5C08D653D6498D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft Manifest number: 0193 Signing time: Sun 16 Feb 2025 19:11:58 +0000 Manifest this update: Sun 16 Feb 2025 19:06:58 +0000 Manifest next update: Thu 20 Feb 2025 05:21:58 +0000 Files and hashes: 1: EBB7963402117E803037310CE98B392F968C3A9A.crl (hash: KaAquWqPigi8cdTScX+Vvcb/5B+pm1og/GiD/NkKjAo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.crl rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Feb 2025 05:21:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:df:d7:02:30:4a:8f:f5:e4:6e:cf:5d:a5:c0:8d:65:3d:64:98:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBB7963402117E803037310CE98B392F968C3A9A Validity Not Before: Feb 16 19:06:58 2025 GMT Not After : Feb 20 05:21:58 2025 GMT Subject: CN=36A9E9287276E6AA3F95EB10A63EBD2EA0EE78D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c4:6b:4a:93:26:5a:bd:b3:77:02:3f:3c:9e: cf:c6:0a:84:70:2c:79:32:31:5b:2d:89:6e:54:30: 27:2e:1d:13:ad:20:98:e1:3b:e7:e7:f8:c8:3b:2b: 56:6c:66:ab:dd:7d:6d:44:5a:a1:73:55:13:c6:53: d4:7a:01:e2:86:ec:98:7a:0e:c7:4f:53:c8:fe:47: 14:4b:91:b9:fe:1d:91:bd:2b:c1:f8:81:3c:45:69: 61:d3:4d:3e:cd:ec:3d:1a:68:4d:ae:99:a5:69:0f: 61:cb:0f:b9:b9:17:93:af:dc:90:49:3e:5c:78:71: 80:a0:a1:9e:d2:8d:89:a3:2e:69:50:69:c4:13:a6: 07:8e:7c:4f:23:48:fa:d0:d1:5e:87:9c:06:ee:05: 0f:f9:c2:49:cf:6a:bf:da:79:d7:57:92:4b:c0:da: 2b:36:ad:ae:e7:4c:b2:6b:40:fc:3f:fc:f5:86:7b: 91:db:c6:0f:e2:7d:e9:11:28:e8:04:a4:28:54:c8: 12:38:54:a7:95:53:6e:dc:5e:4b:97:8a:2c:61:4e: 68:26:0d:c0:7d:0c:50:9a:eb:01:2b:ef:6e:7c:96: 49:b8:5d:6f:d6:b1:18:4b:0e:c8:85:4c:27:b0:51: 0f:38:f5:64:fa:bb:80:3e:99:b9:c2:61:e2:16:a1: 88:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:A9:E9:28:72:76:E6:AA:3F:95:EB:10:A6:3E:BD:2E:A0:EE:78:D0 X509v3 Authority Key Identifier: keyid:EB:B7:96:34:02:11:7E:80:30:37:31:0C:E9:8B:39:2F:96:8C:3A:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:80:6d:1b:27:c2:1f:d5:6b:f4:95:d5:e5:cf:b3:b5:fd:e6: dd:12:09:3d:8b:0c:1a:d5:94:9f:b3:61:d1:cd:0f:60:25:54: 12:b9:ec:04:d4:24:1c:c5:ad:0b:97:d0:a9:31:d1:93:cd:2d: 36:73:7d:05:6b:29:88:ab:7b:8f:fd:cf:14:34:e9:11:8c:b3: e7:b9:2a:09:29:d0:9b:bf:41:87:7b:08:a2:fe:3a:5a:ed:b2: de:5c:89:f9:51:03:75:34:e7:a1:8c:6d:b7:ec:22:a0:95:a5: 4b:3b:0b:12:5a:43:65:fb:f7:ea:fa:12:59:a8:cb:be:1a:20: e4:45:12:46:6e:67:42:96:4c:27:e5:b7:70:21:9f:c4:c8:40: 12:89:ea:f6:f1:88:67:98:b3:52:c8:95:94:44:19:56:04:39: 88:2f:06:19:75:53:14:74:e3:9a:b0:70:0c:55:e8:f3:8b:6f: 82:4f:50:34:fb:a0:41:6a:95:e2:e3:0f:01:97:da:e2:2f:79: 71:45:b3:4f:66:3f:c4:70:d4:c5:01:88:ad:88:c1:b9:6f:62: f4:76:a3:36:34:bc:9f:2a:b9:a6:cf:31:c3:fc:17:ee:da:51: a7:9a:14:74:0b:c5:95:49:86:5d:b8:27:fa:b0:98:07:b0:da: 38:69:69:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYt/XAjBKj/Xkbs9dpcCNZT1kmNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJCNzk2MzQwMjExN0U4MDMwMzczMTBDRTk4QjM5MkY5 NjhDM0E5QTAeFw0yNTAyMTYxOTA2NThaFw0yNTAyMjAwNTIxNThaMDMxMTAvBgNV BAMTKDM2QTlFOTI4NzI3NkU2QUEzRjk1RUIxMEE2M0VCRDJFQTBFRTc4RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVxGtKkyZavbN3Aj88ns/GCoRw LHkyMVstiW5UMCcuHROtIJjhO+fn+Mg7K1ZsZqvdfW1EWqFzVRPGU9R6AeKG7Jh6 DsdPU8j+RxRLkbn+HZG9K8H4gTxFaWHTTT7N7D0aaE2umaVpD2HLD7m5F5Ov3JBJ Plx4cYCgoZ7SjYmjLmlQacQTpgeOfE8jSPrQ0V6HnAbuBQ/5wknPar/aeddXkkvA 2is2ra7nTLJrQPw//PWGe5Hbxg/ifekRKOgEpChUyBI4VKeVU27cXkuXiixhTmgm DcB9DFCa6wEr7258lkm4XW/WsRhLDsiFTCewUQ849WT6u4A+mbnCYeIWoYgBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNqnpKHJ25qo/lesQpj69LqDueNAwHwYDVR0j BBgwFoAU67eWNAIRfoAwNzEM6Ys5L5aMOpowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NWMyYzcxYy02YWU1LTRlYTktYjg1MC02MzAwZTJlMWJhZGYvMC9FQkI3OTYzNDAy MTE3RTgwMzAzNzMxMENFOThCMzkyRjk2OEMzQTlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUJCNzk2MzQwMjExN0U4MDMwMzczMTBDRTk4QjM5MkY5NjhD M0E5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDVjMmM3MWMtNmFlNS00ZWE5LWI4 NTAtNjMwMGUyZTFiYWRmLzAvRUJCNzk2MzQwMjExN0U4MDMwMzczMTBDRTk4QjM5 MkY5NjhDM0E5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKeAbRsnwh/Va/SV1eXPs7X95t0SCT2LDBrV lJ+zYdHND2AlVBK57ATUJBzFrQuX0Kkx0ZPNLTZzfQVrKYire4/9zxQ06RGMs+e5 Kgkp0Ju/QYd7CKL+Olrtst5ciflRA3U056GMbbfsIqCVpUs7CxJaQ2X79+r6Elmo y74aIORFEkZuZ0KWTCflt3Ahn8TIQBKJ6vbxiGeYs1LIlZREGVYEOYgvBhl1UxR0 45qwcAxV6POLb4JPUDT7oEFqleLjDwGX2uIveXFFs09mP8Rw1MUBiK2IwblvYvR2 ozY0vJ8quabPMcP8F+7aUaeaFHQLxZVJhl24J/qwmAew2jhpaTI= -----END CERTIFICATE-----Generated at Wed Feb 19 22:20:27 2025 by rpki-client