$ rpki-client -vvf repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft File: EBB7963402117E803037310CE98B392F968C3A9A.mft (raw, json) Hash identifier: r+FXOqa/Cvh22vsCnPzo0TlNL5lG4pIZ60jCgWnhd1U= Subject key identifier: EC:EB:46:A2:D5:A8:61:EB:7C:57:C1:9E:97:CB:D6:46:EB:70:19:4F Authority key identifier: EB:B7:96:34:02:11:7E:80:30:37:31:0C:E9:8B:39:2F:96:8C:3A:9A Certificate issuer: /CN=EBB7963402117E803037310CE98B392F968C3A9A Certificate serial: 0EB6B4F2D6ADFD3DA47B9E154DF348D5A84D37F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft Manifest number: 01E6 Signing time: Sat 23 Aug 2025 04:22:02 +0000 Manifest this update: Sat 23 Aug 2025 04:17:02 +0000 Manifest next update: Tue 26 Aug 2025 13:36:02 +0000 Files and hashes: 1: EBB7963402117E803037310CE98B392F968C3A9A.crl (hash: Lbn3mWRxlac1cTJ42IlVAyr3BUbJ7tm8HB1oU8OKLZA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.crl rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 13:36:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:b6:b4:f2:d6:ad:fd:3d:a4:7b:9e:15:4d:f3:48:d5:a8:4d:37:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBB7963402117E803037310CE98B392F968C3A9A Validity Not Before: Aug 23 04:17:02 2025 GMT Not After : Aug 26 13:36:02 2025 GMT Subject: CN=ECEB46A2D5A861EB7C57C19E97CBD646EB70194F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:92:0b:f3:99:f4:0d:4f:8a:81:ab:f0:d9:75: 27:50:a7:41:8e:6e:fc:15:e1:75:3c:24:cd:65:70: da:7a:05:47:ab:7c:58:4c:ae:b3:bf:52:15:0b:d6: 01:26:11:d2:28:6b:10:08:28:7a:04:60:a9:55:d7: b9:e4:d2:f4:8d:36:c4:50:f5:5d:8b:fd:0c:b0:94: 01:51:e4:8e:ac:0d:57:b6:cd:7b:d0:64:9e:a3:0e: 86:ae:f2:bf:e5:5b:69:14:77:8c:c5:45:32:bc:10: 2f:7d:56:ff:b2:b5:19:66:17:dc:f5:af:b0:a8:90: 81:19:9b:17:73:ec:92:a7:81:df:f7:bf:22:33:b4: 88:9b:9f:d5:7c:c9:b9:f5:58:99:da:90:ae:04:30: ae:40:f7:e8:02:1f:19:f1:05:dc:d6:22:84:54:88: b7:de:21:7c:30:3e:ff:ee:92:81:de:1b:f1:82:b9: 79:ec:eb:8a:46:d5:d8:dd:ba:81:06:0f:d9:14:b8: 5b:32:67:a7:8a:0b:f0:51:ab:08:ca:c6:76:44:c8: c4:d7:3b:85:71:c4:6f:74:24:a2:1a:a9:5a:b7:d0: 85:2d:bc:7d:5d:ba:ca:ea:36:1d:4b:18:2f:77:d8: e6:e9:3c:27:11:bf:8d:88:67:07:9d:91:b3:56:88: 6f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:EB:46:A2:D5:A8:61:EB:7C:57:C1:9E:97:CB:D6:46:EB:70:19:4F X509v3 Authority Key Identifier: keyid:EB:B7:96:34:02:11:7E:80:30:37:31:0C:E9:8B:39:2F:96:8C:3A:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:d1:f0:be:29:7e:c4:f1:e4:d3:ad:bd:cf:e1:00:1e:2e:1f: 8e:13:55:ae:a2:99:62:f5:03:32:a1:e0:1a:4f:27:c2:6b:78: c4:be:73:dd:3a:5d:93:40:4e:33:83:63:9c:50:32:d5:60:55: fc:1b:8d:46:70:b7:2b:e0:71:45:e4:80:fd:bf:cd:7a:8a:93: 04:58:af:9e:2a:ad:08:97:91:91:34:eb:1c:e4:73:30:99:9a: a9:6c:4a:f3:72:23:50:a6:b9:3d:71:87:42:00:b2:4a:f7:6a: 5e:ed:ab:86:12:dd:4c:47:3b:30:7b:dc:ba:0a:a3:30:e3:0d: 5d:95:19:17:2c:6d:b3:44:b6:57:f3:a9:56:e1:d1:db:61:eb: 5a:9a:2c:04:20:09:48:f0:f7:68:28:f9:18:f1:dd:a8:9c:bc: b3:d6:df:12:1e:3a:2e:72:c2:49:4b:11:38:52:11:21:0b:a7: 9a:51:93:23:76:b6:90:1c:81:85:dd:d3:1e:dc:2c:8c:f4:85: 36:c5:15:8b:70:78:f5:b3:87:5f:fe:d4:f6:56:3f:20:64:fc: 62:a1:4f:fe:85:90:ce:b5:b2:76:af:a9:e6:10:03:0e:31:8b: 82:40:98:31:f7:c1:c5:b2:3d:58:4c:da:fa:1c:78:4a:0b:c3: b5:09:d8:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDra08tat/T2ke54VTfNI1ahNN/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJCNzk2MzQwMjExN0U4MDMwMzczMTBDRTk4QjM5MkY5 NjhDM0E5QTAeFw0yNTA4MjMwNDE3MDJaFw0yNTA4MjYxMzM2MDJaMDMxMTAvBgNV BAMTKEVDRUI0NkEyRDVBODYxRUI3QzU3QzE5RTk3Q0JENjQ2RUI3MDE5NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6kgvzmfQNT4qBq/DZdSdQp0GO bvwV4XU8JM1lcNp6BUerfFhMrrO/UhUL1gEmEdIoaxAIKHoEYKlV17nk0vSNNsRQ 9V2L/QywlAFR5I6sDVe2zXvQZJ6jDoau8r/lW2kUd4zFRTK8EC99Vv+ytRlmF9z1 r7CokIEZmxdz7JKngd/3vyIztIibn9V8ybn1WJnakK4EMK5A9+gCHxnxBdzWIoRU iLfeIXwwPv/ukoHeG/GCuXns64pG1djduoEGD9kUuFsyZ6eKC/BRqwjKxnZEyMTX O4VxxG90JKIaqVq30IUtvH1dusrqNh1LGC932ObpPCcRv42IZwedkbNWiG95AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7OtGotWoYet8V8Gel8vWRutwGU8wHwYDVR0j BBgwFoAU67eWNAIRfoAwNzEM6Ys5L5aMOpowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NWMyYzcxYy02YWU1LTRlYTktYjg1MC02MzAwZTJlMWJhZGYvMC9FQkI3OTYzNDAy MTE3RTgwMzAzNzMxMENFOThCMzkyRjk2OEMzQTlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUJCNzk2MzQwMjExN0U4MDMwMzczMTBDRTk4QjM5MkY5NjhD M0E5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDVjMmM3MWMtNmFlNS00ZWE5LWI4 NTAtNjMwMGUyZTFiYWRmLzAvRUJCNzk2MzQwMjExN0U4MDMwMzczMTBDRTk4QjM5 MkY5NjhDM0E5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABbR8L4pfsTx5NOtvc/hAB4uH44TVa6imWL1 AzKh4BpPJ8JreMS+c906XZNATjODY5xQMtVgVfwbjUZwtyvgcUXkgP2/zXqKkwRY r54qrQiXkZE06xzkczCZmqlsSvNyI1CmuT1xh0IAskr3al7tq4YS3UxHOzB73LoK ozDjDV2VGRcsbbNEtlfzqVbh0dth61qaLAQgCUjw92go+Rjx3aicvLPW3xIeOi5y wklLEThSESELp5pRkyN2tpAcgYXd0x7cLIz0hTbFFYtwePWzh1/+1PZWPyBk/GKh T/6FkM61snavqeYQAw4xi4JAmDH3wcWyPVhM2voceEoLw7UJ2Kc= -----END CERTIFICATE-----Generated at Sat Aug 23 10:36:04 2025 by rpki-client