$ rpki-client -vvf repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft File: EBB7963402117E803037310CE98B392F968C3A9A.mft (raw, json) Hash identifier: 9T2i/1x+75MYbbv95E2cvBbUG909i76dtq1YRCKG3Vg= Subject key identifier: A2:77:6C:7C:79:22:39:A8:E1:6D:19:CD:2F:AF:E2:DE:3E:98:A5:C2 Authority key identifier: EB:B7:96:34:02:11:7E:80:30:37:31:0C:E9:8B:39:2F:96:8C:3A:9A Certificate issuer: /CN=EBB7963402117E803037310CE98B392F968C3A9A Certificate serial: 087D313A8F096FC4BEBDCADA1C38E7D2DE369CE7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft Manifest number: 01C2 Signing time: Tue 03 Jun 2025 12:03:26 +0000 Manifest this update: Tue 03 Jun 2025 11:58:26 +0000 Manifest next update: Fri 06 Jun 2025 17:45:26 +0000 Files and hashes: 1: EBB7963402117E803037310CE98B392F968C3A9A.crl (hash: Jm+pQstcmJGscJAD67b8MnmpEH2Szq+otC2LzZz75sA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.crl rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:7d:31:3a:8f:09:6f:c4:be:bd:ca:da:1c:38:e7:d2:de:36:9c:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBB7963402117E803037310CE98B392F968C3A9A Validity Not Before: Jun 3 11:58:26 2025 GMT Not After : Jun 6 17:45:26 2025 GMT Subject: CN=A2776C7C792239A8E16D19CD2FAFE2DE3E98A5C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4a:7c:be:36:87:64:1f:fd:7b:2b:c6:ff:dd: 6c:f1:b9:6d:ea:a9:f3:27:3f:38:6f:1f:2d:5f:0e: e0:42:ac:66:37:73:db:86:bc:5b:6a:85:76:b9:08: e1:8e:e0:ec:8c:54:72:db:c8:3f:d2:5e:da:96:ca: 9d:6a:f0:7e:1b:1c:0c:3b:e7:26:63:cc:bd:d3:db: 27:bb:5e:d4:96:9b:43:92:dc:0f:44:bd:d6:e9:13: d1:3c:4d:b1:e6:20:0d:c2:02:c7:b7:8a:d5:39:74: 5f:af:7e:01:26:f5:d9:71:0e:c0:b5:7b:11:76:30: fc:1b:cd:60:58:cb:91:3d:25:9b:bb:c8:31:3e:b9: a0:17:32:3e:90:22:2f:05:92:e6:5c:4a:a7:b7:29: ed:1d:31:ed:bb:c3:73:ef:ee:f5:a8:69:eb:87:42: 2e:f3:b6:e1:5a:4a:03:e4:fb:fe:60:f6:6f:8e:85: 6e:da:9e:06:6a:a1:b9:bd:fb:27:4c:01:93:52:7f: 07:53:c4:92:2b:7e:d8:b0:51:fe:3f:40:28:9e:63: 36:fc:7e:f8:dc:72:36:79:1e:61:b6:13:8a:9f:75: 23:77:9a:70:a5:44:26:dd:67:52:2e:92:d9:40:e1: 14:9f:f3:24:84:7c:ec:68:18:b1:a5:00:56:cd:1c: 14:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:77:6C:7C:79:22:39:A8:E1:6D:19:CD:2F:AF:E2:DE:3E:98:A5:C2 X509v3 Authority Key Identifier: keyid:EB:B7:96:34:02:11:7E:80:30:37:31:0C:E9:8B:39:2F:96:8C:3A:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:48:08:aa:67:b4:1f:98:5c:1b:53:4f:a7:60:77:d5:d9:cc: b6:44:5e:83:77:06:37:45:db:2f:89:bd:de:16:31:07:f7:de: ac:ff:98:8a:a5:50:85:1e:f5:01:fc:4c:3c:bb:0a:f0:8e:d8: 9a:57:a5:ed:49:7a:95:95:27:92:ef:3c:63:c5:11:a0:f4:41: e9:5d:8a:bc:5d:fb:9d:ee:a5:bc:2a:dd:a2:8b:61:17:1e:e0: 0d:ba:cb:31:51:19:0b:f1:d6:6d:26:7d:75:53:56:28:78:ba: 41:6d:21:0e:e9:b9:97:8c:de:a4:83:9e:3a:e8:5d:28:e8:25: dd:1a:68:80:12:91:8b:84:65:fc:0e:45:ef:0c:66:fb:e1:4b: 00:70:9f:66:1d:98:31:67:98:6f:d7:1d:7a:bf:4b:ae:9e:b9: 2b:99:79:33:c4:33:02:a6:a0:fd:39:14:37:15:8e:1d:0f:33: f2:d7:2c:1b:df:2f:70:44:46:6a:c7:78:e8:7b:0e:42:77:83: bb:3f:5b:62:6d:9e:ea:fa:c8:68:2f:c2:54:82:6e:80:a8:3f: 2b:da:86:e4:eb:76:8c:a3:3a:87:6c:40:9b:46:a2:9d:90:9a: 32:cb:7b:21:90:2a:c4:5d:e5:da:7b:c9:81:16:ac:4b:83:38: ca:af:14:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCH0xOo8Jb8S+vcraHDjn0t42nOcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJCNzk2MzQwMjExN0U4MDMwMzczMTBDRTk4QjM5MkY5 NjhDM0E5QTAeFw0yNTA2MDMxMTU4MjZaFw0yNTA2MDYxNzQ1MjZaMDMxMTAvBgNV BAMTKEEyNzc2QzdDNzkyMjM5QThFMTZEMTlDRDJGQUZFMkRFM0U5OEE1QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkSny+NodkH/17K8b/3WzxuW3q qfMnPzhvHy1fDuBCrGY3c9uGvFtqhXa5COGO4OyMVHLbyD/SXtqWyp1q8H4bHAw7 5yZjzL3T2ye7XtSWm0OS3A9EvdbpE9E8TbHmIA3CAse3itU5dF+vfgEm9dlxDsC1 exF2MPwbzWBYy5E9JZu7yDE+uaAXMj6QIi8FkuZcSqe3Ke0dMe27w3Pv7vWoaeuH Qi7ztuFaSgPk+/5g9m+OhW7angZqobm9+ydMAZNSfwdTxJIrftiwUf4/QCieYzb8 fvjccjZ5HmG2E4qfdSN3mnClRCbdZ1IuktlA4RSf8ySEfOxoGLGlAFbNHBRtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUondsfHkiOajhbRnNL6/i3j6YpcIwHwYDVR0j BBgwFoAU67eWNAIRfoAwNzEM6Ys5L5aMOpowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NWMyYzcxYy02YWU1LTRlYTktYjg1MC02MzAwZTJlMWJhZGYvMC9FQkI3OTYzNDAy MTE3RTgwMzAzNzMxMENFOThCMzkyRjk2OEMzQTlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUJCNzk2MzQwMjExN0U4MDMwMzczMTBDRTk4QjM5MkY5NjhD M0E5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDVjMmM3MWMtNmFlNS00ZWE5LWI4 NTAtNjMwMGUyZTFiYWRmLzAvRUJCNzk2MzQwMjExN0U4MDMwMzczMTBDRTk4QjM5 MkY5NjhDM0E5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIdICKpntB+YXBtTT6dgd9XZzLZEXoN3BjdF 2y+Jvd4WMQf33qz/mIqlUIUe9QH8TDy7CvCO2JpXpe1JepWVJ5LvPGPFEaD0Qeld irxd+53upbwq3aKLYRce4A26yzFRGQvx1m0mfXVTVih4ukFtIQ7puZeM3qSDnjro XSjoJd0aaIASkYuEZfwORe8MZvvhSwBwn2YdmDFnmG/XHXq/S66euSuZeTPEMwKm oP05FDcVjh0PM/LXLBvfL3BERmrHeOh7DkJ3g7s/W2Jtnur6yGgvwlSCboCoPyva huTrdoyjOodsQJtGop2QmjLLeyGQKsRd5dp7yYEWrEuDOMqvFNs= -----END CERTIFICATE-----Generated at Tue Jun 3 23:42:08 2025 by rpki-client