$ rpki-client -vvf repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft File: EBB7963402117E803037310CE98B392F968C3A9A.mft (raw, json) Hash identifier: Z10JidGGfx9L6WmsDenwX+jG58oaKmIwBJsiBUneg/A= Subject key identifier: 17:78:1F:2A:95:CE:94:60:A7:E6:0F:48:E0:45:1E:4B:EF:52:6D:F0 Authority key identifier: EB:B7:96:34:02:11:7E:80:30:37:31:0C:E9:8B:39:2F:96:8C:3A:9A Certificate issuer: /CN=EBB7963402117E803037310CE98B392F968C3A9A Certificate serial: 2F6B0CD723F8A5E57BBE31221FF818E1CAEA8DE4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft Manifest number: 01FF Signing time: Sun 19 Oct 2025 05:02:02 +0000 Manifest this update: Sun 19 Oct 2025 04:57:02 +0000 Manifest next update: Wed 22 Oct 2025 16:59:02 +0000 Files and hashes: 1: EBB7963402117E803037310CE98B392F968C3A9A.crl (hash: cxb/soTXLb9n0g23aspUUCrtB7+zdj+3dN+Suj/zIK4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.crl rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 16:59:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:6b:0c:d7:23:f8:a5:e5:7b:be:31:22:1f:f8:18:e1:ca:ea:8d:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBB7963402117E803037310CE98B392F968C3A9A Validity Not Before: Oct 19 04:57:02 2025 GMT Not After : Oct 22 16:59:02 2025 GMT Subject: CN=17781F2A95CE9460A7E60F48E0451E4BEF526DF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:02:be:43:95:e2:b9:5f:8f:41:25:20:6e:9d: 00:95:ef:3c:9e:ff:55:55:cd:bb:4a:6e:ef:9a:41: de:f1:05:cc:f6:26:84:04:36:8e:17:71:4c:39:3b: a5:c3:d9:9d:f0:46:2d:31:d4:0d:de:94:4f:4f:95: a4:b1:0d:dd:55:8b:ab:72:9e:6b:e0:eb:00:98:cb: 19:8d:21:57:38:8a:70:e0:62:87:ec:a9:90:0b:5d: ae:de:83:67:29:7c:16:28:da:31:02:a9:0b:a8:81: 48:03:24:28:60:9f:4f:0f:c9:25:27:4a:65:07:03: 09:64:00:d8:a6:8e:ec:67:1f:ad:e7:a9:4f:3e:85: b6:18:50:83:3a:bc:56:f9:a2:90:cd:1c:b3:5a:dc: 5a:a0:c2:fe:c2:10:0e:6a:64:11:37:9e:4b:b4:cb: 18:04:49:aa:b7:ae:be:a5:50:d0:c3:93:0d:44:b5: 24:79:19:b5:0a:1f:f7:42:b4:0b:a7:3d:a2:69:fe: e5:7b:f7:43:6c:5e:61:13:67:46:5e:e2:0e:4e:ab: c1:57:d3:2e:d8:f9:cb:a6:4d:db:d6:d1:4b:c5:b3: 99:b7:f9:6f:49:98:b2:db:a3:78:33:b6:d3:29:f8: 8c:91:6e:dc:87:ed:4a:1f:d0:48:68:9c:d8:5b:bc: 36:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:78:1F:2A:95:CE:94:60:A7:E6:0F:48:E0:45:1E:4B:EF:52:6D:F0 X509v3 Authority Key Identifier: keyid:EB:B7:96:34:02:11:7E:80:30:37:31:0C:E9:8B:39:2F:96:8C:3A:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:f2:75:2d:1d:d3:40:d6:9c:cf:d3:02:73:88:bd:9e:95:6c: b5:25:2b:6e:06:ea:90:e4:1d:fa:69:d6:1c:cc:69:d9:c4:29: fc:c9:cb:4a:e7:9b:ff:4d:76:d7:de:ae:2e:f6:7a:34:2d:e2: 0b:a8:5d:d0:5f:f2:96:4b:98:be:f9:98:a5:4a:8e:32:2a:9e: 84:8c:7f:e0:e1:1e:29:7d:78:60:38:d5:88:b2:5e:20:34:ad: ef:6a:8a:55:87:8e:0c:c4:35:dc:ed:5b:2e:1a:45:bf:9a:07: f7:c6:e1:43:bc:d4:de:2b:c7:20:d1:dd:f3:5d:c2:06:66:31: f4:cf:c5:07:b7:53:1e:e6:5a:49:ee:b7:af:57:35:1d:4f:cc: b2:1a:b8:b7:34:99:ae:c7:fc:e3:77:a1:db:2d:d7:8a:d4:c0: bb:48:d3:7f:d5:b4:a7:ad:83:7f:28:64:41:28:6c:e8:4f:de: 7b:7f:9b:07:5f:39:8a:de:c4:58:eb:2e:ec:2e:42:f9:3a:52: 9e:47:a4:c4:02:ee:f8:a2:2c:4f:13:d1:61:e3:bd:58:7f:a0: d0:b5:49:89:b1:02:85:10:f8:83:bc:42:e3:84:71:1c:9b:67: 0c:41:1c:bb:9e:55:0e:6f:be:49:08:ca:7d:19:a4:e4:09:57: f3:5c:fb:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL2sM1yP4peV7vjEiH/gY4crqjeQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJCNzk2MzQwMjExN0U4MDMwMzczMTBDRTk4QjM5MkY5 NjhDM0E5QTAeFw0yNTEwMTkwNDU3MDJaFw0yNTEwMjIxNjU5MDJaMDMxMTAvBgNV BAMTKDE3NzgxRjJBOTVDRTk0NjBBN0U2MEY0OEUwNDUxRTRCRUY1MjZERjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKAr5DleK5X49BJSBunQCV7zye /1VVzbtKbu+aQd7xBcz2JoQENo4XcUw5O6XD2Z3wRi0x1A3elE9PlaSxDd1Vi6ty nmvg6wCYyxmNIVc4inDgYofsqZALXa7eg2cpfBYo2jECqQuogUgDJChgn08PySUn SmUHAwlkANimjuxnH63nqU8+hbYYUIM6vFb5opDNHLNa3Fqgwv7CEA5qZBE3nku0 yxgESaq3rr6lUNDDkw1EtSR5GbUKH/dCtAunPaJp/uV790NsXmETZ0Ze4g5Oq8FX 0y7Y+cumTdvW0UvFs5m3+W9JmLLbo3gzttMp+IyRbtyH7Uof0EhonNhbvDYVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF3gfKpXOlGCn5g9I4EUeS+9SbfAwHwYDVR0j BBgwFoAU67eWNAIRfoAwNzEM6Ys5L5aMOpowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NWMyYzcxYy02YWU1LTRlYTktYjg1MC02MzAwZTJlMWJhZGYvMC9FQkI3OTYzNDAy MTE3RTgwMzAzNzMxMENFOThCMzkyRjk2OEMzQTlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUJCNzk2MzQwMjExN0U4MDMwMzczMTBDRTk4QjM5MkY5NjhD M0E5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDVjMmM3MWMtNmFlNS00ZWE5LWI4 NTAtNjMwMGUyZTFiYWRmLzAvRUJCNzk2MzQwMjExN0U4MDMwMzczMTBDRTk4QjM5 MkY5NjhDM0E5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEHydS0d00DWnM/TAnOIvZ6VbLUlK24G6pDk Hfpp1hzMadnEKfzJy0rnm/9Ndtferi72ejQt4guoXdBf8pZLmL75mKVKjjIqnoSM f+DhHil9eGA41YiyXiA0re9qilWHjgzENdztWy4aRb+aB/fG4UO81N4rxyDR3fNd wgZmMfTPxQe3Ux7mWknut69XNR1PzLIauLc0ma7H/ON3odst14rUwLtI03/VtKet g38oZEEobOhP3nt/mwdfOYrexFjrLuwuQvk6Up5HpMQC7viiLE8T0WHjvVh/oNC1 SYmxAoUQ+IO8QuOEcRybZwxBHLueVQ5vvkkIyn0ZpOQJV/Nc+1Q= -----END CERTIFICATE-----Generated at Tue Oct 21 04:45:58 2025 by rpki-client