$ rpki-client -vvf repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft File: EBB7963402117E803037310CE98B392F968C3A9A.mft (raw, json) Hash identifier: w9PHCYwz5FNHiRb+iaIXoRiNdOQbIjZw6u/2z5MSNTY= Subject key identifier: 00:D8:02:33:3B:0A:1B:BE:29:D2:2C:3B:09:B6:22:39:A8:E0:2A:CF Authority key identifier: EB:B7:96:34:02:11:7E:80:30:37:31:0C:E9:8B:39:2F:96:8C:3A:9A Certificate issuer: /CN=EBB7963402117E803037310CE98B392F968C3A9A Certificate serial: 5426EB1F8D7629DAFD85F525E9F71B7DA6DBD285 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft Manifest number: 01B7 Signing time: Fri 09 May 2025 14:22:01 +0000 Manifest this update: Fri 09 May 2025 14:17:01 +0000 Manifest next update: Mon 12 May 2025 18:27:01 +0000 Files and hashes: 1: EBB7963402117E803037310CE98B392F968C3A9A.crl (hash: NLp7hUvTigIZrxiSW31KSchY2SBk2opvWemQXncErXI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.crl rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 14:30:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:26:eb:1f:8d:76:29:da:fd:85:f5:25:e9:f7:1b:7d:a6:db:d2:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBB7963402117E803037310CE98B392F968C3A9A Validity Not Before: May 9 14:17:01 2025 GMT Not After : May 12 18:27:01 2025 GMT Subject: CN=00D802333B0A1BBE29D22C3B09B62239A8E02ACF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cd:88:3d:c1:32:3a:fc:68:76:a0:3a:2e:67: 69:b1:08:5c:cb:0a:10:81:38:ec:01:02:b7:7d:4a: 55:1a:8d:61:e4:04:79:77:f5:3c:af:af:2b:82:dd: 6d:a4:4d:37:62:93:95:0c:49:2a:0c:b2:1d:b5:93: ac:31:ea:71:21:d1:a9:a5:f5:31:05:a6:2f:0e:44: ce:8f:3e:3c:a9:0e:e1:e7:d5:0e:ab:9d:5b:4f:8a: e6:78:ff:9d:52:38:a6:99:92:f5:f2:9b:fb:c4:f6: 96:a9:fb:4d:ab:90:bd:4f:7c:5e:23:a1:8d:e7:e9: 2b:c6:c9:2b:67:fa:50:f3:93:6e:b0:6c:14:34:2e: c6:ff:55:8f:da:43:89:96:1e:11:8d:ab:80:0d:17: d8:4b:93:54:86:ac:85:23:64:87:24:eb:1e:18:24: 14:0a:31:0b:67:17:da:1f:2c:c7:74:80:a8:b1:a1: a6:a0:d4:19:0b:1d:30:ef:b2:6d:c6:67:da:71:ac: ce:57:01:a7:6f:ee:8b:e1:14:b0:97:9d:d0:ec:84: df:d3:a7:55:71:a4:c4:41:2e:d7:aa:66:65:9e:b1: 9e:3a:1c:56:e5:e1:36:4d:5f:85:09:06:ff:bc:9c: 76:bc:d9:8f:75:4c:90:44:03:43:cd:c4:e7:58:a3: 42:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:D8:02:33:3B:0A:1B:BE:29:D2:2C:3B:09:B6:22:39:A8:E0:2A:CF X509v3 Authority Key Identifier: keyid:EB:B7:96:34:02:11:7E:80:30:37:31:0C:E9:8B:39:2F:96:8C:3A:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:8a:f7:c3:3b:39:03:cf:7a:9a:7f:42:e9:7d:90:08:4c:60: 0e:40:66:51:ea:51:f6:21:7f:87:ad:49:4c:33:5e:44:6a:36: 6d:ca:30:d7:19:99:cb:df:5d:48:62:67:6d:99:d7:dc:f8:9f: 1f:91:04:5e:8d:2a:7e:4e:be:46:ff:94:dd:e3:24:bd:61:5e: 7e:00:cf:08:08:f9:ff:7a:8c:1d:41:56:ce:84:af:3c:3d:c3: 5d:35:81:07:ea:f3:d3:ee:46:03:d7:b3:02:35:b3:76:db:74: 28:87:1a:8f:bc:cf:57:bb:42:48:35:73:43:59:b8:44:95:1b: 62:16:37:ad:1f:08:69:55:4e:c7:69:c0:e4:2f:00:bb:2c:bb: da:67:e7:75:37:cd:59:b2:ac:65:30:de:3a:7d:77:47:86:a3: 98:f7:9a:a3:8c:3a:1f:ea:38:78:6a:16:e7:e1:3f:ff:91:0d: 32:84:1c:90:52:d2:fc:c6:12:f8:03:75:28:75:d6:8f:4f:1a: 4b:c6:21:a8:35:a0:02:16:67:39:51:b8:24:73:c8:a4:a5:6b: 38:00:1f:c2:a0:3a:0e:ea:8e:32:0c:dd:7b:4f:a1:47:bb:5a: a8:74:be:41:ca:4f:c0:96:c8:82:75:a2:3d:c0:66:f8:d3:74: 3e:8e:76:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVCbrH412Kdr9hfUl6fcbfabb0oUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJCNzk2MzQwMjExN0U4MDMwMzczMTBDRTk4QjM5MkY5 NjhDM0E5QTAeFw0yNTA1MDkxNDE3MDFaFw0yNTA1MTIxODI3MDFaMDMxMTAvBgNV BAMTKDAwRDgwMjMzM0IwQTFCQkUyOUQyMkMzQjA5QjYyMjM5QThFMDJBQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwzYg9wTI6/Gh2oDouZ2mxCFzL ChCBOOwBArd9SlUajWHkBHl39TyvryuC3W2kTTdik5UMSSoMsh21k6wx6nEh0aml 9TEFpi8ORM6PPjypDuHn1Q6rnVtPiuZ4/51SOKaZkvXym/vE9pap+02rkL1PfF4j oY3n6SvGyStn+lDzk26wbBQ0Lsb/VY/aQ4mWHhGNq4ANF9hLk1SGrIUjZIck6x4Y JBQKMQtnF9ofLMd0gKixoaag1BkLHTDvsm3GZ9pxrM5XAadv7ovhFLCXndDshN/T p1VxpMRBLteqZmWesZ46HFbl4TZNX4UJBv+8nHa82Y91TJBEA0PNxOdYo0I3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUANgCMzsKG74p0iw7CbYiOajgKs8wHwYDVR0j BBgwFoAU67eWNAIRfoAwNzEM6Ys5L5aMOpowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NWMyYzcxYy02YWU1LTRlYTktYjg1MC02MzAwZTJlMWJhZGYvMC9FQkI3OTYzNDAy MTE3RTgwMzAzNzMxMENFOThCMzkyRjk2OEMzQTlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUJCNzk2MzQwMjExN0U4MDMwMzczMTBDRTk4QjM5MkY5NjhD M0E5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDVjMmM3MWMtNmFlNS00ZWE5LWI4 NTAtNjMwMGUyZTFiYWRmLzAvRUJCNzk2MzQwMjExN0U4MDMwMzczMTBDRTk4QjM5 MkY5NjhDM0E5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACKK98M7OQPPepp/Qul9kAhMYA5AZlHqUfYh f4etSUwzXkRqNm3KMNcZmcvfXUhiZ22Z19z4nx+RBF6NKn5Ovkb/lN3jJL1hXn4A zwgI+f96jB1BVs6Erzw9w101gQfq89PuRgPXswI1s3bbdCiHGo+8z1e7Qkg1c0NZ uESVG2IWN60fCGlVTsdpwOQvALssu9pn53U3zVmyrGUw3jp9d0eGo5j3mqOMOh/q OHhqFufhP/+RDTKEHJBS0vzGEvgDdSh11o9PGkvGIag1oAIWZzlRuCRzyKSlazgA H8KgOg7qjjIM3XtPoUe7Wqh0vkHKT8CWyIJ1oj3AZvjTdD6Odr4= -----END CERTIFICATE-----Generated at Fri May 9 18:49:28 2025 by rpki-client