$ rpki-client -vvf repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/EBBE263817C941A8999ED0A874948E0C42CC0DB6.mft File: EBBE263817C941A8999ED0A874948E0C42CC0DB6.mft (raw, json) Hash identifier: 1ij4iIlLRNVUao6/nXIXsyOf0bp8p/at6egT73ry7hA= Subject key identifier: D9:BD:63:F5:E8:F4:44:89:C4:94:B0:87:80:65:4F:C0:7D:4C:5C:D4 Authority key identifier: EB:BE:26:38:17:C9:41:A8:99:9E:D0:A8:74:94:8E:0C:42:CC:0D:B6 Certificate issuer: /CN=EBBE263817C941A8999ED0A874948E0C42CC0DB6 Certificate serial: 4E3666E31A276FBFF4546C1FA8BFC8798EA647FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBBE263817C941A8999ED0A874948E0C42CC0DB6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/EBBE263817C941A8999ED0A874948E0C42CC0DB6.mft Manifest number: 0251 Signing time: Sun 19 Oct 2025 08:32:05 +0000 Manifest this update: Sun 19 Oct 2025 08:27:05 +0000 Manifest next update: Wed 22 Oct 2025 13:34:05 +0000 Files and hashes: 1: 3130332e3134362e32362e302f32332d3234203d3e20313339393834.roa (hash: 8IQ9LG3AzlybnsbCFsZuSxAen082EUpSqQEDIvI8Zyk=) 2: EBBE263817C941A8999ED0A874948E0C42CC0DB6.crl (hash: YiTgnNAUgmGdYk1rEFKZ4g+edkYGnnOYr+JZSja7PZk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/EBBE263817C941A8999ED0A874948E0C42CC0DB6.crl rsync://repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/EBBE263817C941A8999ED0A874948E0C42CC0DB6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBBE263817C941A8999ED0A874948E0C42CC0DB6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 13:34:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:36:66:e3:1a:27:6f:bf:f4:54:6c:1f:a8:bf:c8:79:8e:a6:47:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBBE263817C941A8999ED0A874948E0C42CC0DB6 Validity Not Before: Oct 19 08:27:05 2025 GMT Not After : Oct 22 13:34:05 2025 GMT Subject: CN=D9BD63F5E8F44489C494B08780654FC07D4C5CD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:19:19:94:84:5a:2b:ff:0f:74:5a:08:11:3e: f4:38:8a:b4:5f:fe:6f:6c:5c:5b:3f:b3:5d:fe:af: 65:15:f8:26:94:9a:2e:de:c6:fd:2b:78:f0:95:5f: 36:a9:ec:e3:c1:ba:90:d1:54:70:af:32:57:ab:88: 15:58:83:74:ff:95:db:7d:b8:82:a4:37:13:53:5f: 52:cc:9d:de:55:37:01:f2:39:5c:ea:8e:39:5d:36: d7:1d:b0:05:10:13:b1:1c:74:9a:80:a1:ee:1e:1d: 9d:e8:ce:92:64:05:eb:9b:66:66:87:05:c8:84:0c: c1:69:a4:45:30:73:6c:2a:63:16:58:a4:39:ea:46: 48:1b:33:3b:ef:86:4c:76:4f:82:1a:92:c3:0c:ec: dc:9f:2d:a5:74:5f:d4:d9:0a:52:9d:82:09:6c:9d: 3e:4a:ea:7d:30:95:67:a5:68:90:3f:ad:6a:6c:4c: b5:6f:77:89:4f:54:63:64:da:17:5c:f1:8e:9c:e1: 2d:d9:f7:b5:2a:17:65:73:9a:5e:80:d5:b7:29:77: 83:50:a5:80:ba:2e:45:cb:74:f7:94:0b:6e:72:89: d5:e5:7c:b9:e5:41:5c:1a:7c:ee:de:33:4a:8d:01: 8e:33:cf:77:2c:bc:82:c3:62:d7:a1:c3:33:02:0f: de:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:BD:63:F5:E8:F4:44:89:C4:94:B0:87:80:65:4F:C0:7D:4C:5C:D4 X509v3 Authority Key Identifier: keyid:EB:BE:26:38:17:C9:41:A8:99:9E:D0:A8:74:94:8E:0C:42:CC:0D:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/EBBE263817C941A8999ED0A874948E0C42CC0DB6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBBE263817C941A8999ED0A874948E0C42CC0DB6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/EBBE263817C941A8999ED0A874948E0C42CC0DB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:98:7a:3d:35:63:98:d2:cd:27:98:57:4b:ce:9e:65:18:c3: 0e:a3:d6:de:cf:af:ba:c9:2c:cc:70:b9:ec:56:c4:e7:65:9a: 81:9b:90:7a:8e:63:b2:54:0a:3d:0b:8a:ae:27:08:73:6e:b0: 86:2a:77:05:28:93:44:3e:1a:1d:b7:4c:29:30:ea:05:cd:0d: 86:4e:e5:98:8e:02:49:49:27:c0:41:0e:cb:76:25:60:4f:ea: 32:3d:0a:fe:6c:82:5f:b5:45:88:1d:58:5b:1c:b1:95:18:10: 5f:be:7d:7e:9e:8a:81:52:d3:25:33:67:4e:ab:bf:4b:29:01: 6e:9a:bb:57:32:5a:3f:af:7f:4e:61:42:a2:44:f5:64:ae:f6: 7b:d1:1b:db:d9:95:33:aa:63:42:e1:c5:33:98:39:91:85:fb: 4f:5e:a9:2c:d5:91:33:c7:16:cd:09:ee:fd:f7:de:91:25:59: 79:51:7a:c0:60:8b:96:86:26:18:26:2d:d5:cc:1b:40:11:28: cb:1a:61:36:f1:4d:5c:57:e8:b2:31:0d:f8:51:8a:1e:5f:2a: cf:09:79:b7:f8:4c:a9:1d:de:8b:15:36:2f:e4:c2:db:d2:78: c1:7a:de:a9:57:dd:72:16:23:46:88:60:b9:67:44:24:8a:c6: dd:cc:16:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTjZm4xonb7/0VGwfqL/IeY6mR/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJCRTI2MzgxN0M5NDFBODk5OUVEMEE4NzQ5NDhFMEM0 MkNDMERCNjAeFw0yNTEwMTkwODI3MDVaFw0yNTEwMjIxMzM0MDVaMDMxMTAvBgNV BAMTKEQ5QkQ2M0Y1RThGNDQ0ODlDNDk0QjA4NzgwNjU0RkMwN0Q0QzVDRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrGRmUhFor/w90WggRPvQ4irRf /m9sXFs/s13+r2UV+CaUmi7exv0rePCVXzap7OPBupDRVHCvMleriBVYg3T/ldt9 uIKkNxNTX1LMnd5VNwHyOVzqjjldNtcdsAUQE7EcdJqAoe4eHZ3ozpJkBeubZmaH BciEDMFppEUwc2wqYxZYpDnqRkgbMzvvhkx2T4IaksMM7NyfLaV0X9TZClKdggls nT5K6n0wlWelaJA/rWpsTLVvd4lPVGNk2hdc8Y6c4S3Z97UqF2Vzml6A1bcpd4NQ pYC6LkXLdPeUC25yidXlfLnlQVwafO7eM0qNAY4zz3csvILDYtehwzMCD97tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2b1j9ej0RInElLCHgGVPwH1MXNQwHwYDVR0j BBgwFoAU674mOBfJQaiZntCodJSODELMDbYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Njk1NDYzNi05ODI5LTRiYTgtOTZhZi02ZTAwYjcxYThlZjgvMC9FQkJFMjYzODE3 Qzk0MUE4OTk5RUQwQTg3NDk0OEUwQzQyQ0MwREI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUJCRTI2MzgxN0M5NDFBODk5OUVEMEE4NzQ5NDhFMEM0MkND MERCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY5NTQ2MzYtOTgyOS00YmE4LTk2 YWYtNmUwMGI3MWE4ZWY4LzAvRUJCRTI2MzgxN0M5NDFBODk5OUVEMEE4NzQ5NDhF MEM0MkNDMERCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAmYej01Y5jSzSeYV0vOnmUYww6j1t7Pr7rJ LMxwuexWxOdlmoGbkHqOY7JUCj0Liq4nCHNusIYqdwUok0Q+Gh23TCkw6gXNDYZO 5ZiOAklJJ8BBDst2JWBP6jI9Cv5sgl+1RYgdWFscsZUYEF++fX6eioFS0yUzZ06r v0spAW6au1cyWj+vf05hQqJE9WSu9nvRG9vZlTOqY0LhxTOYOZGF+09eqSzVkTPH Fs0J7v333pElWXlResBgi5aGJhgmLdXMG0ARKMsaYTbxTVxX6LIxDfhRih5fKs8J ebf4TKkd3osVNi/kwtvSeMF63qlX3XIWI0aIYLlnRCSKxt3MFiI= -----END CERTIFICATE-----Generated at Mon Oct 20 07:01:15 2025 by rpki-client