$ rpki-client -vvf repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/EBBE263817C941A8999ED0A874948E0C42CC0DB6.mft File: EBBE263817C941A8999ED0A874948E0C42CC0DB6.mft (raw, json) Hash identifier: XhV3LtiWUMZ8r2HstQTEDWnR/vmmS5gb6RBZSK7ROjo= Subject key identifier: 51:C3:1E:40:C9:02:E6:72:F8:B6:0C:46:34:3B:06:6F:61:37:D5:6C Authority key identifier: EB:BE:26:38:17:C9:41:A8:99:9E:D0:A8:74:94:8E:0C:42:CC:0D:B6 Certificate issuer: /CN=EBBE263817C941A8999ED0A874948E0C42CC0DB6 Certificate serial: 162474267FDDADA8953E925A54F954FDE04A3BD2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBBE263817C941A8999ED0A874948E0C42CC0DB6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/EBBE263817C941A8999ED0A874948E0C42CC0DB6.mft Manifest number: 02A3 Signing time: Fri 17 Apr 2026 13:42:25 +0000 Manifest this update: Fri 17 Apr 2026 13:37:25 +0000 Manifest next update: Mon 20 Apr 2026 16:38:25 +0000 Files and hashes: 1: 3130332e3134362e32362e302f32332d3234203d3e20313339393834.roa (hash: 1wk6K0cNbtH08x4iJmFx550HbWAFQO6tmwxxHOAuLSM=) 2: EBBE263817C941A8999ED0A874948E0C42CC0DB6.crl (hash: tsedgXRZgYyykmoP4usrNRfc6AXoEPNXJHqS6TGIK7Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/EBBE263817C941A8999ED0A874948E0C42CC0DB6.crl rsync://repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/EBBE263817C941A8999ED0A874948E0C42CC0DB6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBBE263817C941A8999ED0A874948E0C42CC0DB6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 16:38:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:24:74:26:7f:dd:ad:a8:95:3e:92:5a:54:f9:54:fd:e0:4a:3b:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBBE263817C941A8999ED0A874948E0C42CC0DB6 Validity Not Before: Apr 17 13:37:25 2026 GMT Not After : Apr 20 16:38:25 2026 GMT Subject: CN=51C31E40C902E672F8B60C46343B066F6137D56C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f9:69:14:16:9f:29:ca:d6:08:f6:eb:15:8a: 0f:a4:de:30:07:24:c5:24:e6:6a:40:20:fe:0f:f8: 2b:15:cc:fd:b6:36:aa:b2:c6:9d:45:5c:ed:31:1a: d2:4f:fc:9d:f8:19:1d:44:61:fc:e9:d0:a9:da:fb: d3:cd:d5:ed:09:fe:3a:e5:14:20:74:9a:49:93:f4: cc:b3:d6:59:d4:60:a9:82:d3:a3:ad:7a:a5:f9:02: 76:fb:ee:ed:b5:39:fc:59:87:59:c0:22:bc:5a:39: 54:74:6c:b0:02:41:c2:62:b2:d1:15:fa:e3:11:c1: 79:cf:ac:f3:22:ea:55:70:f5:6b:f8:db:11:61:00: ab:d3:b6:81:bb:50:4e:a4:90:52:0b:9e:4b:1c:e2: ca:6d:a2:33:8e:4f:c3:30:88:e7:6f:18:28:4c:13: 67:9f:f8:ca:82:51:e2:29:c9:31:74:12:85:77:4b: 65:3b:d0:18:36:e2:44:48:d6:b0:39:71:af:50:00: 37:a3:96:1e:b2:1c:3d:08:41:82:4c:42:e4:f8:d0: dc:42:23:d2:f8:42:a9:d4:df:38:83:37:99:58:b8: 2b:36:9f:33:ca:c4:a1:df:a7:66:f6:7e:db:7a:fc: f3:cf:21:bd:fb:69:dc:ef:c2:85:7e:10:b1:37:a8: 8a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:C3:1E:40:C9:02:E6:72:F8:B6:0C:46:34:3B:06:6F:61:37:D5:6C X509v3 Authority Key Identifier: keyid:EB:BE:26:38:17:C9:41:A8:99:9E:D0:A8:74:94:8E:0C:42:CC:0D:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/EBBE263817C941A8999ED0A874948E0C42CC0DB6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBBE263817C941A8999ED0A874948E0C42CC0DB6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/EBBE263817C941A8999ED0A874948E0C42CC0DB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:ea:62:b5:76:60:ab:9e:9c:72:2e:65:a3:97:ea:c7:ee:8a: e2:ea:b3:7d:07:b9:fe:22:77:ae:1b:af:e0:b3:29:da:4d:9a: 16:4d:e4:2c:00:ae:a7:04:fc:c8:8e:88:8a:b5:12:98:82:96: 66:35:2b:6e:f8:a2:17:3c:0e:f9:bb:0d:d6:e5:4a:72:4c:a2: fb:36:ac:ef:03:1a:6a:82:4a:89:09:30:8a:23:94:cd:08:92: 0c:7c:4a:39:42:7d:e9:7d:aa:b0:d2:b5:30:f6:a4:7b:a5:ab: 4a:71:76:e5:6d:0b:30:e9:9b:c7:62:58:21:aa:7f:2f:67:1e: d0:2b:9e:a9:c4:fd:0d:51:e8:cb:d7:71:ef:5e:55:ec:e7:0c: e4:b6:14:e9:8e:ee:19:b4:68:f1:1f:3a:8b:04:6d:bd:fa:ae: 8a:da:95:d9:b5:50:e8:14:24:ba:98:a8:d1:89:e8:3d:f7:00: f5:d5:71:d9:24:35:16:2e:d6:42:ab:c9:86:13:a6:6d:9f:7c: d5:f4:e6:3f:b9:32:a9:4e:e2:f3:98:48:b3:d8:72:fe:19:b8: b7:42:0c:f1:ba:85:f5:0d:94:98:da:32:33:e9:37:14:5b:15: f3:95:99:bc:9b:ad:c8:26:4d:20:b7:36:c7:d2:96:d5:e6:4b: 7e:27:b0:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFiR0Jn/draiVPpJaVPlU/eBKO9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJCRTI2MzgxN0M5NDFBODk5OUVEMEE4NzQ5NDhFMEM0 MkNDMERCNjAeFw0yNjA0MTcxMzM3MjVaFw0yNjA0MjAxNjM4MjVaMDMxMTAvBgNV BAMTKDUxQzMxRTQwQzkwMkU2NzJGOEI2MEM0NjM0M0IwNjZGNjEzN0Q1NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG+WkUFp8pytYI9usVig+k3jAH JMUk5mpAIP4P+CsVzP22Nqqyxp1FXO0xGtJP/J34GR1EYfzp0Kna+9PN1e0J/jrl FCB0mkmT9Myz1lnUYKmC06OteqX5Anb77u21OfxZh1nAIrxaOVR0bLACQcJistEV +uMRwXnPrPMi6lVw9Wv42xFhAKvTtoG7UE6kkFILnksc4sptojOOT8MwiOdvGChM E2ef+MqCUeIpyTF0EoV3S2U70Bg24kRI1rA5ca9QADejlh6yHD0IQYJMQuT40NxC I9L4QqnU3ziDN5lYuCs2nzPKxKHfp2b2ftt6/PPPIb37adzvwoV+ELE3qIqZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUcMeQMkC5nL4tgxGNDsGb2E31WwwHwYDVR0j BBgwFoAU674mOBfJQaiZntCodJSODELMDbYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Njk1NDYzNi05ODI5LTRiYTgtOTZhZi02ZTAwYjcxYThlZjgvMC9FQkJFMjYzODE3 Qzk0MUE4OTk5RUQwQTg3NDk0OEUwQzQyQ0MwREI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUJCRTI2MzgxN0M5NDFBODk5OUVEMEE4NzQ5NDhFMEM0MkND MERCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY5NTQ2MzYtOTgyOS00YmE4LTk2 YWYtNmUwMGI3MWE4ZWY4LzAvRUJCRTI2MzgxN0M5NDFBODk5OUVEMEE4NzQ5NDhF MEM0MkNDMERCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALnqYrV2YKuenHIuZaOX6sfuiuLqs30Huf4i d64br+CzKdpNmhZN5CwArqcE/MiOiIq1EpiClmY1K274ohc8Dvm7DdblSnJMovs2 rO8DGmqCSokJMIojlM0Ikgx8SjlCfel9qrDStTD2pHulq0pxduVtCzDpm8diWCGq fy9nHtArnqnE/Q1R6MvXce9eVeznDOS2FOmO7hm0aPEfOosEbb36roraldm1UOgU JLqYqNGJ6D33APXVcdkkNRYu1kKryYYTpm2ffNX05j+5MqlO4vOYSLPYcv4ZuLdC DPG6hfUNlJjaMjPpNxRbFfOVmbybrcgmTSC3NsfSltXmS34nsG0= -----END CERTIFICATE-----Generated at Fri Apr 17 22:48:33 2026 by rpki-client