$ rpki-client -vvf repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft File: EBB7963402117E803037310CE98B392F968C3A9A.mft (raw, json) Hash identifier: Bt+4XytLe2jysuqLR4S1bDh1hsETOPsMvVv54Qkf3Pc= Subject key identifier: 2E:FE:67:47:C1:0A:78:5C:16:A2:7B:5B:2D:CC:D9:6C:57:B5:DC:58 Authority key identifier: EB:B7:96:34:02:11:7E:80:30:37:31:0C:E9:8B:39:2F:96:8C:3A:9A Certificate issuer: /CN=EBB7963402117E803037310CE98B392F968C3A9A Certificate serial: 48B177D3D132A88CEF511E28395DBC33E9A9DCFE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft Manifest number: 01CE Signing time: Mon 30 Jun 2025 13:41:58 +0000 Manifest this update: Mon 30 Jun 2025 13:36:58 +0000 Manifest next update: Thu 03 Jul 2025 22:26:58 +0000 Files and hashes: 1: EBB7963402117E803037310CE98B392F968C3A9A.crl (hash: 37lNmKDJATShsJNVC4ui6eJrj2bRnil4xtXwaOfLrT4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.crl rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 22:26:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:b1:77:d3:d1:32:a8:8c:ef:51:1e:28:39:5d:bc:33:e9:a9:dc:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBB7963402117E803037310CE98B392F968C3A9A Validity Not Before: Jun 30 13:36:58 2025 GMT Not After : Jul 3 22:26:58 2025 GMT Subject: CN=2EFE6747C10A785C16A27B5B2DCCD96C57B5DC58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:af:c7:81:dd:86:c5:69:22:59:69:31:cc:f9: f8:98:27:ce:f8:2c:5b:46:a9:2d:11:f4:64:79:4a: f0:da:50:43:b8:e1:33:6a:50:c1:9d:b7:98:97:8c: eb:1e:77:7f:a9:97:98:14:84:96:c7:70:b6:93:8e: 38:72:3c:24:e9:c5:e1:bd:9f:6b:33:a3:e4:9a:b9: 20:b7:a2:bf:58:07:8c:d8:58:71:83:7e:18:33:b5: c8:56:23:ec:ca:7f:ff:eb:73:6b:82:4b:d1:30:bd: 53:f7:aa:32:4f:2e:5e:81:a5:22:bf:d1:67:fe:65: ec:14:a3:cf:9d:34:40:02:43:1e:a4:8e:cd:5b:36: e3:85:b0:67:84:d4:8b:3d:dd:c2:a6:8a:15:d3:11: 1e:fd:e1:b9:a4:a9:62:15:6f:ae:bb:bd:a6:70:57: 48:34:b7:f4:ab:ee:af:3b:0c:28:bb:5e:bd:45:f5: 40:d9:99:d9:25:62:01:cc:2a:d2:e7:b4:c7:cd:58: e8:fb:63:0f:de:21:0a:61:c8:17:5c:97:05:eb:15: 0d:a0:c2:f8:80:0a:c7:60:1e:c3:b9:3e:3f:8a:f7: 2f:2a:07:b0:49:a0:a2:a7:58:db:82:d0:c7:98:65: ae:6a:fb:6e:21:8e:8e:96:6c:46:66:a1:2b:a5:f4: b9:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:FE:67:47:C1:0A:78:5C:16:A2:7B:5B:2D:CC:D9:6C:57:B5:DC:58 X509v3 Authority Key Identifier: keyid:EB:B7:96:34:02:11:7E:80:30:37:31:0C:E9:8B:39:2F:96:8C:3A:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:06:7d:ed:79:a7:ff:ec:b7:1c:aa:93:f1:8d:8c:e7:fd:09: 52:46:a6:4f:f8:db:96:a2:22:43:6d:97:c2:aa:03:c4:01:cb: 68:c2:cd:ef:43:e1:01:df:1b:37:a6:4c:b3:16:91:f7:d9:8e: 47:cc:5a:cc:cb:cc:95:22:cb:c9:37:01:39:52:ac:8c:2b:5e: 9c:d8:31:c5:ef:3a:07:d2:e0:73:62:e8:47:cf:00:3f:e8:f5: a4:d9:b6:e7:3a:03:27:ba:58:c1:58:c3:ea:79:d6:5f:6e:d8: 24:dd:9f:78:fb:6a:a5:a0:8f:70:fb:1c:e9:f6:84:78:bd:65: 82:35:8b:fe:e4:cb:71:84:9c:8e:5a:57:ac:a1:89:ca:1e:1c: 52:67:5a:84:67:12:a6:83:bd:d6:0d:91:a2:71:98:77:6d:3c: c1:2d:15:c2:e9:55:68:1f:b9:a1:6f:2b:a3:f0:48:f5:6b:63: 22:cf:af:64:dd:00:e7:a7:f3:47:b2:89:c9:b6:47:1e:ea:7f: f6:a8:66:0a:57:0a:21:8d:b1:d7:f1:be:4f:ac:08:ec:3d:2b: 10:6f:0e:f9:3f:bc:14:03:9d:78:f3:7a:99:58:3c:bc:b8:f8: 8f:ae:15:bf:02:aa:e4:af:3f:f5:7d:9f:1a:8c:67:6d:4b:6d: d2:8d:81:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSLF309EyqIzvUR4oOV28M+mp3P4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJCNzk2MzQwMjExN0U4MDMwMzczMTBDRTk4QjM5MkY5 NjhDM0E5QTAeFw0yNTA2MzAxMzM2NThaFw0yNTA3MDMyMjI2NThaMDMxMTAvBgNV BAMTKDJFRkU2NzQ3QzEwQTc4NUMxNkEyN0I1QjJEQ0NEOTZDNTdCNURDNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOr8eB3YbFaSJZaTHM+fiYJ874 LFtGqS0R9GR5SvDaUEO44TNqUMGdt5iXjOsed3+pl5gUhJbHcLaTjjhyPCTpxeG9 n2szo+SauSC3or9YB4zYWHGDfhgztchWI+zKf//rc2uCS9EwvVP3qjJPLl6BpSK/ 0Wf+ZewUo8+dNEACQx6kjs1bNuOFsGeE1Is93cKmihXTER794bmkqWIVb667vaZw V0g0t/Sr7q87DCi7Xr1F9UDZmdklYgHMKtLntMfNWOj7Yw/eIQphyBdclwXrFQ2g wviACsdgHsO5Pj+K9y8qB7BJoKKnWNuC0MeYZa5q+24hjo6WbEZmoSul9LlhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULv5nR8EKeFwWontbLczZbFe13FgwHwYDVR0j BBgwFoAU67eWNAIRfoAwNzEM6Ys5L5aMOpowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NWMyYzcxYy02YWU1LTRlYTktYjg1MC02MzAwZTJlMWJhZGYvMC9FQkI3OTYzNDAy MTE3RTgwMzAzNzMxMENFOThCMzkyRjk2OEMzQTlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUJCNzk2MzQwMjExN0U4MDMwMzczMTBDRTk4QjM5MkY5NjhD M0E5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDVjMmM3MWMtNmFlNS00ZWE5LWI4 NTAtNjMwMGUyZTFiYWRmLzAvRUJCNzk2MzQwMjExN0U4MDMwMzczMTBDRTk4QjM5 MkY5NjhDM0E5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFUGfe15p//stxyqk/GNjOf9CVJGpk/425ai IkNtl8KqA8QBy2jCze9D4QHfGzemTLMWkffZjkfMWszLzJUiy8k3ATlSrIwrXpzY McXvOgfS4HNi6EfPAD/o9aTZtuc6Aye6WMFYw+p51l9u2CTdn3j7aqWgj3D7HOn2 hHi9ZYI1i/7ky3GEnI5aV6yhicoeHFJnWoRnEqaDvdYNkaJxmHdtPMEtFcLpVWgf uaFvK6PwSPVrYyLPr2TdAOen80eyicm2Rx7qf/aoZgpXCiGNsdfxvk+sCOw9KxBv Dvk/vBQDnXjzeplYPLy4+I+uFb8CquSvP/V9nxqMZ21LbdKNgVI= -----END CERTIFICATE-----Generated at Tue Jul 1 23:41:52 2025 by rpki-client