$ rpki-client -vvf repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/EBBE263817C941A8999ED0A874948E0C42CC0DB6.mft File: EBBE263817C941A8999ED0A874948E0C42CC0DB6.mft (raw, json) Hash identifier: SqNpFRTDv2mqK/c+9pCdO6pKP6K0kUSrgsw7f0DsfFA= Subject key identifier: AB:82:5A:CD:57:A5:CB:AB:F7:A6:06:04:7E:D3:F0:CE:2C:47:90:EF Authority key identifier: EB:BE:26:38:17:C9:41:A8:99:9E:D0:A8:74:94:8E:0C:42:CC:0D:B6 Certificate issuer: /CN=EBBE263817C941A8999ED0A874948E0C42CC0DB6 Certificate serial: 4BCF7A0BB7E715C79FB55619FF4F36C8307E29A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBBE263817C941A8999ED0A874948E0C42CC0DB6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/EBBE263817C941A8999ED0A874948E0C42CC0DB6.mft Manifest number: 0218 Signing time: Sat 14 Jun 2025 21:52:04 +0000 Manifest this update: Sat 14 Jun 2025 21:47:04 +0000 Manifest next update: Tue 17 Jun 2025 22:04:04 +0000 Files and hashes: 1: EBBE263817C941A8999ED0A874948E0C42CC0DB6.crl (hash: ngbRPBpXBGgr7HOq1ia27lKnnoYyqxknV1njFg8zi0g=) 2: 3130332e3134362e32362e302f32332d3234203d3e20313339393834.roa (hash: 8IQ9LG3AzlybnsbCFsZuSxAen082EUpSqQEDIvI8Zyk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/EBBE263817C941A8999ED0A874948E0C42CC0DB6.crl rsync://repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/EBBE263817C941A8999ED0A874948E0C42CC0DB6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBBE263817C941A8999ED0A874948E0C42CC0DB6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 22:04:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:cf:7a:0b:b7:e7:15:c7:9f:b5:56:19:ff:4f:36:c8:30:7e:29:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBBE263817C941A8999ED0A874948E0C42CC0DB6 Validity Not Before: Jun 14 21:47:04 2025 GMT Not After : Jun 17 22:04:04 2025 GMT Subject: CN=AB825ACD57A5CBABF7A606047ED3F0CE2C4790EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e1:35:24:46:97:a9:eb:fb:70:6e:be:0d:b1: 15:e5:c0:a0:1a:6e:bb:72:e3:2c:19:61:fc:bb:d2: 44:2c:f0:6c:a0:50:23:19:6b:ed:5f:8d:80:3c:76: 77:d4:84:93:14:24:d2:40:91:45:26:03:db:42:44: 34:11:82:9d:c7:c8:5b:b5:af:84:b2:73:9f:84:4f: 0c:d2:f4:39:c7:e7:1b:14:40:7f:86:54:35:b3:3a: d1:e0:49:ef:00:22:78:4d:11:7e:dc:5c:49:97:8a: 9f:4e:a9:c9:c1:38:80:78:fe:57:d0:dd:cc:72:27: 8c:50:43:e7:64:ce:ee:ed:62:9c:dc:be:ac:b2:ea: c8:71:66:ad:97:a4:e6:61:e6:23:0f:5e:83:15:ac: 6e:50:05:3e:11:1e:96:93:42:33:4f:9f:5b:1d:6d: 68:ac:39:f6:c7:8e:41:15:fb:e9:01:5f:0f:f8:76: 74:c5:78:ce:2b:f0:b0:b7:06:01:e3:84:cd:84:e0: 3c:85:a2:0f:91:51:37:36:a1:19:fd:5b:8c:c2:80: 17:93:d3:cf:d6:65:36:7e:33:2d:9d:5a:97:87:5d: 47:ef:f2:72:a1:96:6b:d1:d5:56:7b:ca:c3:0f:e1: df:76:37:9b:93:a3:15:59:97:2a:f0:73:35:62:2d: 19:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:82:5A:CD:57:A5:CB:AB:F7:A6:06:04:7E:D3:F0:CE:2C:47:90:EF X509v3 Authority Key Identifier: keyid:EB:BE:26:38:17:C9:41:A8:99:9E:D0:A8:74:94:8E:0C:42:CC:0D:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/EBBE263817C941A8999ED0A874948E0C42CC0DB6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBBE263817C941A8999ED0A874948E0C42CC0DB6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/EBBE263817C941A8999ED0A874948E0C42CC0DB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:4c:7d:74:01:fb:3e:ba:47:fe:03:b5:bd:18:99:d3:85:19: c7:4d:ed:e8:d9:80:b8:59:8c:d4:53:b5:97:3a:e6:b4:c9:92: 8a:74:72:2c:72:4c:e5:90:31:e0:02:73:ce:11:58:d0:f5:3f: 5a:00:11:fe:cc:61:7f:83:74:68:d3:bb:31:3a:b1:d2:af:c6: d1:5a:d5:58:22:ad:0d:27:c5:d8:4a:bf:af:d9:76:fd:7d:37: 87:79:da:4e:1e:80:2a:a6:3d:64:d3:ca:de:a7:64:a2:c7:3e: 89:fd:95:63:3d:fc:c3:72:3d:db:a5:01:b8:2c:cf:0a:b9:b8: 90:9f:1a:bf:ac:b3:8c:2d:7e:d4:d2:12:5c:40:74:fe:9e:51: ac:fc:ed:01:e8:03:3a:7f:15:19:ee:f6:26:55:6f:73:e9:79: 0c:b1:50:74:a0:89:28:bb:c8:d7:18:43:6a:3a:b6:7a:d2:ed: ad:c1:f4:b0:65:0c:bb:4a:d9:95:86:af:af:ea:98:89:98:9e: 5c:16:84:e8:25:5d:00:9c:ac:af:56:66:71:33:9c:df:9d:21: f4:16:03:cf:98:19:67:8a:25:58:08:66:db:17:8e:05:b4:68: a9:9e:ec:1c:af:02:ff:27:fc:48:a8:bc:c2:8c:ca:cb:75:d2: e0:61:c8:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS896C7fnFceftVYZ/082yDB+KaEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJCRTI2MzgxN0M5NDFBODk5OUVEMEE4NzQ5NDhFMEM0 MkNDMERCNjAeFw0yNTA2MTQyMTQ3MDRaFw0yNTA2MTcyMjA0MDRaMDMxMTAvBgNV BAMTKEFCODI1QUNENTdBNUNCQUJGN0E2MDYwNDdFRDNGMENFMkM0NzkwRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC54TUkRpep6/twbr4NsRXlwKAa brty4ywZYfy70kQs8GygUCMZa+1fjYA8dnfUhJMUJNJAkUUmA9tCRDQRgp3HyFu1 r4Syc5+ETwzS9DnH5xsUQH+GVDWzOtHgSe8AInhNEX7cXEmXip9OqcnBOIB4/lfQ 3cxyJ4xQQ+dkzu7tYpzcvqyy6shxZq2XpOZh5iMPXoMVrG5QBT4RHpaTQjNPn1sd bWisOfbHjkEV++kBXw/4dnTFeM4r8LC3BgHjhM2E4DyFog+RUTc2oRn9W4zCgBeT 08/WZTZ+My2dWpeHXUfv8nKhlmvR1VZ7ysMP4d92N5uToxVZlyrwczViLRmTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq4JazVely6v3pgYEftPwzixHkO8wHwYDVR0j BBgwFoAU674mOBfJQaiZntCodJSODELMDbYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Njk1NDYzNi05ODI5LTRiYTgtOTZhZi02ZTAwYjcxYThlZjgvMC9FQkJFMjYzODE3 Qzk0MUE4OTk5RUQwQTg3NDk0OEUwQzQyQ0MwREI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUJCRTI2MzgxN0M5NDFBODk5OUVEMEE4NzQ5NDhFMEM0MkND MERCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY5NTQ2MzYtOTgyOS00YmE4LTk2 YWYtNmUwMGI3MWE4ZWY4LzAvRUJCRTI2MzgxN0M5NDFBODk5OUVEMEE4NzQ5NDhF MEM0MkNDMERCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABhMfXQB+z66R/4Dtb0YmdOFGcdN7ejZgLhZ jNRTtZc65rTJkop0cixyTOWQMeACc84RWND1P1oAEf7MYX+DdGjTuzE6sdKvxtFa 1VgirQ0nxdhKv6/Zdv19N4d52k4egCqmPWTTyt6nZKLHPon9lWM9/MNyPdulAbgs zwq5uJCfGr+ss4wtftTSElxAdP6eUaz87QHoAzp/FRnu9iZVb3PpeQyxUHSgiSi7 yNcYQ2o6tnrS7a3B9LBlDLtK2ZWGr6/qmImYnlwWhOglXQCcrK9WZnEznN+dIfQW A8+YGWeKJVgIZtsXjgW0aKme7ByvAv8n/EiovMKMyst10uBhyO4= -----END CERTIFICATE-----Generated at Mon Jun 16 19:29:29 2025 by rpki-client