$ rpki-client -vvf repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft File: EBB7963402117E803037310CE98B392F968C3A9A.mft (raw, json) Hash identifier: HxGVIXCr3cCWl9rJprRv+0AzDgYoDHSCmoc0OZFFsMg= Subject key identifier: A2:FB:FE:9F:83:3C:5B:2B:9E:F9:8A:48:AF:28:9A:99:62:AC:9B:77 Authority key identifier: EB:B7:96:34:02:11:7E:80:30:37:31:0C:E9:8B:39:2F:96:8C:3A:9A Certificate issuer: /CN=EBB7963402117E803037310CE98B392F968C3A9A Certificate serial: 0A2E4E0A5317DE9D51B40B33BD021D3E0E5823FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft Manifest number: 0245 Signing time: Thu 26 Mar 2026 11:02:27 +0000 Manifest this update: Thu 26 Mar 2026 10:57:27 +0000 Manifest next update: Sun 29 Mar 2026 17:14:27 +0000 Files and hashes: 1: EBB7963402117E803037310CE98B392F968C3A9A.crl (hash: 2JuNHO1iTBv9f9pjmT/c5LXSKSaO8rwNive8nFj9lGg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.crl rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:2e:4e:0a:53:17:de:9d:51:b4:0b:33:bd:02:1d:3e:0e:58:23:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBB7963402117E803037310CE98B392F968C3A9A Validity Not Before: Mar 26 10:57:27 2026 GMT Not After : Mar 29 17:14:27 2026 GMT Subject: CN=A2FBFE9F833C5B2B9EF98A48AF289A9962AC9B77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b2:05:9c:f9:d5:cd:0b:24:f8:6f:5f:cd:6c: 32:31:bb:d2:27:6e:c7:4b:35:5a:bb:d0:a3:cc:19: 3d:ac:dc:29:32:b6:a7:b7:d2:59:1c:85:11:a4:1c: 74:b9:82:02:7b:ca:8b:fb:e7:7c:2c:c0:a9:ff:63: 20:9c:e1:ae:38:61:bb:e3:8e:f1:b2:40:13:c1:45: 3a:f6:b3:71:f6:a3:06:57:7a:76:12:5e:fb:5d:71: c5:da:70:b9:c6:25:d1:af:4c:30:9d:83:c7:70:e2: d7:2a:36:91:f1:fb:53:6a:05:6b:54:11:d3:4c:eb: e9:cb:be:d8:25:82:62:20:9d:7b:1d:c2:a4:6d:63: 90:5d:fd:90:0e:c5:98:da:00:b5:eb:1a:f5:e6:3c: 5c:cb:c8:d8:aa:43:fe:30:a3:19:58:48:1c:a0:ae: 01:73:31:08:cc:53:22:31:5a:4d:09:82:dd:88:03: c0:df:b3:13:68:ee:89:f6:3c:af:52:6e:cb:66:da: ee:1f:8d:4a:31:c2:f5:ea:f1:8a:d5:06:32:f3:27: 27:97:c9:c2:12:d1:0a:5c:1a:1f:a0:41:97:fc:cb: af:0f:3e:fa:10:68:a3:cf:5e:ea:a6:05:3b:0e:e7: 27:77:17:0a:4c:a8:56:c6:41:e5:e8:6c:d5:61:26: c8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:FB:FE:9F:83:3C:5B:2B:9E:F9:8A:48:AF:28:9A:99:62:AC:9B:77 X509v3 Authority Key Identifier: keyid:EB:B7:96:34:02:11:7E:80:30:37:31:0C:E9:8B:39:2F:96:8C:3A:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:1c:1a:e8:fa:cd:a2:d2:6b:3a:a1:42:81:d2:28:c7:22:d9: b0:0c:7e:cc:6e:9a:14:03:65:db:88:aa:87:e4:5c:14:ae:20: 0d:35:31:ea:a9:47:20:54:fa:2d:6c:2e:2f:35:59:0b:71:06: e6:c3:60:9b:98:f5:eb:86:d4:d9:34:82:6c:f2:62:4d:07:20: a1:91:f3:38:dc:a6:9b:e0:17:a8:d6:ce:ad:d0:c2:09:d2:cb: ea:a8:53:c2:90:26:ec:26:5c:3a:41:c1:9b:a4:51:91:ef:db: eb:bc:9a:60:9a:6a:11:cc:0b:06:88:15:59:f9:cb:98:fe:b7: ea:18:db:c6:d1:79:c0:22:32:1f:d6:0b:06:ae:d0:99:08:d4: 7b:9b:d9:08:2e:18:39:7d:db:cb:96:3d:41:fd:1a:26:4a:cd: ad:7e:ba:ec:20:20:66:93:cd:84:1b:5d:53:68:e8:e4:a2:2e: 4c:f4:2b:6e:a5:cc:d9:ff:83:c1:a1:9c:8a:75:83:39:48:1b: ba:93:da:e8:95:84:9f:41:d7:7e:4e:4f:68:a2:93:e4:8f:df: 1d:39:84:c2:d2:0c:7b:41:a2:10:a5:29:e1:70:1a:09:3f:e3: 55:e3:06:13:46:70:43:17:8a:59:07:fc:3b:be:01:7e:bb:a9: cd:8a:ca:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCi5OClMX3p1RtAszvQIdPg5YI/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJCNzk2MzQwMjExN0U4MDMwMzczMTBDRTk4QjM5MkY5 NjhDM0E5QTAeFw0yNjAzMjYxMDU3MjdaFw0yNjAzMjkxNzE0MjdaMDMxMTAvBgNV BAMTKEEyRkJGRTlGODMzQzVCMkI5RUY5OEE0OEFGMjg5QTk5NjJBQzlCNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7sgWc+dXNCyT4b1/NbDIxu9In bsdLNVq70KPMGT2s3Ckytqe30lkchRGkHHS5ggJ7yov753wswKn/YyCc4a44Ybvj jvGyQBPBRTr2s3H2owZXenYSXvtdccXacLnGJdGvTDCdg8dw4tcqNpHx+1NqBWtU EdNM6+nLvtglgmIgnXsdwqRtY5Bd/ZAOxZjaALXrGvXmPFzLyNiqQ/4woxlYSByg rgFzMQjMUyIxWk0Jgt2IA8DfsxNo7on2PK9Sbstm2u4fjUoxwvXq8YrVBjLzJyeX ycIS0QpcGh+gQZf8y68PPvoQaKPPXuqmBTsO5yd3FwpMqFbGQeXobNVhJsjlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUovv+n4M8Wyue+YpIryiamWKsm3cwHwYDVR0j BBgwFoAU67eWNAIRfoAwNzEM6Ys5L5aMOpowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NWMyYzcxYy02YWU1LTRlYTktYjg1MC02MzAwZTJlMWJhZGYvMC9FQkI3OTYzNDAy MTE3RTgwMzAzNzMxMENFOThCMzkyRjk2OEMzQTlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUJCNzk2MzQwMjExN0U4MDMwMzczMTBDRTk4QjM5MkY5NjhD M0E5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDVjMmM3MWMtNmFlNS00ZWE5LWI4 NTAtNjMwMGUyZTFiYWRmLzAvRUJCNzk2MzQwMjExN0U4MDMwMzczMTBDRTk4QjM5 MkY5NjhDM0E5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIccGuj6zaLSazqhQoHSKMci2bAMfsxumhQD ZduIqofkXBSuIA01MeqpRyBU+i1sLi81WQtxBubDYJuY9euG1Nk0gmzyYk0HIKGR 8zjcppvgF6jWzq3QwgnSy+qoU8KQJuwmXDpBwZukUZHv2+u8mmCaahHMCwaIFVn5 y5j+t+oY28bRecAiMh/WCwau0JkI1Hub2QguGDl928uWPUH9GiZKza1+uuwgIGaT zYQbXVNo6OSiLkz0K26lzNn/g8GhnIp1gzlIG7qT2uiVhJ9B135OT2iik+SP3x05 hMLSDHtBohClKeFwGgk/41XjBhNGcEMXilkH/Du+AX67qc2KyrQ= -----END CERTIFICATE-----Generated at Thu Mar 26 15:31:11 2026 by rpki-client