$ rpki-client -vvf repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/EBBE263817C941A8999ED0A874948E0C42CC0DB6.mft File: EBBE263817C941A8999ED0A874948E0C42CC0DB6.mft (raw, json) Hash identifier: thu5y3IebEsULDDTwWWMSCNi3++suYbB4MW9u4cTK0E= Subject key identifier: 41:E7:77:A1:57:77:A5:0F:21:2A:19:9D:5B:7F:E4:61:57:E0:A2:9E Authority key identifier: EB:BE:26:38:17:C9:41:A8:99:9E:D0:A8:74:94:8E:0C:42:CC:0D:B6 Certificate issuer: /CN=EBBE263817C941A8999ED0A874948E0C42CC0DB6 Certificate serial: 7D4968D3516DCC72C2C9C4516B8B4A497B04BD9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBBE263817C941A8999ED0A874948E0C42CC0DB6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/EBBE263817C941A8999ED0A874948E0C42CC0DB6.mft Manifest number: 028E Signing time: Mon 02 Mar 2026 06:12:20 +0000 Manifest this update: Mon 02 Mar 2026 06:07:20 +0000 Manifest next update: Thu 05 Mar 2026 15:26:20 +0000 Files and hashes: 1: EBBE263817C941A8999ED0A874948E0C42CC0DB6.crl (hash: DgtMhkiBok7x5N7sfALYkED6aQ5oEHbHow6FFu4q5dU=) 2: 3130332e3134362e32362e302f32332d3234203d3e20313339393834.roa (hash: 1wk6K0cNbtH08x4iJmFx550HbWAFQO6tmwxxHOAuLSM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/EBBE263817C941A8999ED0A874948E0C42CC0DB6.crl rsync://repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/EBBE263817C941A8999ED0A874948E0C42CC0DB6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBBE263817C941A8999ED0A874948E0C42CC0DB6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:49:68:d3:51:6d:cc:72:c2:c9:c4:51:6b:8b:4a:49:7b:04:bd:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBBE263817C941A8999ED0A874948E0C42CC0DB6 Validity Not Before: Mar 2 06:07:20 2026 GMT Not After : Mar 5 15:26:20 2026 GMT Subject: CN=41E777A15777A50F212A199D5B7FE46157E0A29E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a5:07:e2:ce:5b:5c:9c:76:b6:77:ad:20:a8: a0:23:8e:90:a5:d4:78:b8:e6:ac:15:2a:e6:8f:55: 82:a5:12:7c:c9:0f:67:ef:a1:cc:2a:1d:1e:c5:20: 5a:22:4e:ed:5f:5b:aa:6c:88:82:ee:63:1a:2b:e8: 9c:22:80:3c:e9:e0:7f:26:40:3e:3c:d4:44:54:e5: bc:5f:80:fd:23:b0:5a:7f:1a:3f:36:89:7b:54:5d: a9:ea:3c:ae:ba:a6:5e:15:ad:e5:c2:ad:b5:71:e0: 4e:93:90:b2:6f:36:31:92:1c:10:f3:b0:0d:a0:12: 4a:f0:70:56:19:1c:42:ae:df:e4:12:17:9e:9a:82: 40:18:9a:56:4f:75:57:e4:92:3f:28:04:4d:95:c5: b8:89:df:22:e8:f1:8f:e7:ad:93:f7:3b:85:2a:bb: 52:ae:52:e9:d2:79:e5:5c:44:ec:02:e1:57:a7:6a: 90:6e:e4:35:1c:88:b4:bb:fc:63:1d:7c:72:b5:37: e9:ff:7b:ad:d6:a1:1b:cd:87:c5:15:19:4a:23:18: 8a:50:06:9f:65:83:64:a0:66:59:d9:d1:8b:de:69: 75:f8:37:c5:20:b5:9f:5e:8e:5b:ed:7f:a0:02:b5: b2:a4:58:6d:08:bb:3e:67:89:7e:72:0f:c2:d7:f2: 5d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E7:77:A1:57:77:A5:0F:21:2A:19:9D:5B:7F:E4:61:57:E0:A2:9E X509v3 Authority Key Identifier: keyid:EB:BE:26:38:17:C9:41:A8:99:9E:D0:A8:74:94:8E:0C:42:CC:0D:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/EBBE263817C941A8999ED0A874948E0C42CC0DB6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBBE263817C941A8999ED0A874948E0C42CC0DB6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76954636-9829-4ba8-96af-6e00b71a8ef8/0/EBBE263817C941A8999ED0A874948E0C42CC0DB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:a3:a4:07:ed:b1:bd:45:50:ca:9b:a7:be:6e:89:03:ef:3f: 16:e4:e7:0d:ca:8b:74:bd:84:3b:3e:39:10:eb:6b:ef:79:79: ae:5a:15:69:d6:08:a9:3e:c1:91:3b:9b:f7:12:7a:30:08:7a: fe:6d:71:eb:b5:a4:5c:4c:f4:c2:db:2c:c4:f9:62:04:fe:01: 68:93:9e:b3:89:97:6f:42:51:a5:f7:5a:6e:c6:1f:aa:af:f3: c1:48:56:f6:da:b5:e5:98:9a:3a:50:56:06:28:7f:3d:97:3b: 71:eb:c8:14:dd:89:9b:42:86:64:29:6d:1b:39:76:86:5a:2e: b1:ee:63:e6:87:2d:d1:f3:45:34:27:a7:71:a1:5a:d1:5c:13: 26:cf:46:01:41:cb:3f:bc:65:12:bf:fd:15:62:1d:6d:84:b1: 5e:e8:3a:ab:22:9b:bf:7b:da:99:2d:a4:67:6e:c4:8a:57:5c: d6:d2:39:a5:45:d0:23:13:d4:05:5a:6b:b4:1b:54:5f:e8:cd: 02:b5:7c:ce:00:66:fe:4b:19:97:ef:9d:24:23:cf:dd:3d:f4: c1:26:6a:ce:8b:45:a1:d9:70:ec:cd:3f:35:97:22:8d:1f:e7: a9:15:5e:b9:06:c7:32:8e:50:53:04:df:6b:bd:4e:d1:ce:e3: a5:1b:8c:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfUlo01FtzHLCycRRa4tKSXsEvZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJCRTI2MzgxN0M5NDFBODk5OUVEMEE4NzQ5NDhFMEM0 MkNDMERCNjAeFw0yNjAzMDIwNjA3MjBaFw0yNjAzMDUxNTI2MjBaMDMxMTAvBgNV BAMTKDQxRTc3N0ExNTc3N0E1MEYyMTJBMTk5RDVCN0ZFNDYxNTdFMEEyOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXpQfizltcnHa2d60gqKAjjpCl 1Hi45qwVKuaPVYKlEnzJD2fvocwqHR7FIFoiTu1fW6psiILuYxor6JwigDzp4H8m QD481ERU5bxfgP0jsFp/Gj82iXtUXanqPK66pl4VreXCrbVx4E6TkLJvNjGSHBDz sA2gEkrwcFYZHEKu3+QSF56agkAYmlZPdVfkkj8oBE2VxbiJ3yLo8Y/nrZP3O4Uq u1KuUunSeeVcROwC4VenapBu5DUciLS7/GMdfHK1N+n/e63WoRvNh8UVGUojGIpQ Bp9lg2SgZlnZ0YveaXX4N8UgtZ9ejlvtf6ACtbKkWG0Iuz5niX5yD8LX8l33AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQed3oVd3pQ8hKhmdW3/kYVfgop4wHwYDVR0j BBgwFoAU674mOBfJQaiZntCodJSODELMDbYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Njk1NDYzNi05ODI5LTRiYTgtOTZhZi02ZTAwYjcxYThlZjgvMC9FQkJFMjYzODE3 Qzk0MUE4OTk5RUQwQTg3NDk0OEUwQzQyQ0MwREI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUJCRTI2MzgxN0M5NDFBODk5OUVEMEE4NzQ5NDhFMEM0MkND MERCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY5NTQ2MzYtOTgyOS00YmE4LTk2 YWYtNmUwMGI3MWE4ZWY4LzAvRUJCRTI2MzgxN0M5NDFBODk5OUVEMEE4NzQ5NDhF MEM0MkNDMERCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+jpAftsb1FUMqbp75uiQPvPxbk5w3Ki3S9 hDs+ORDra+95ea5aFWnWCKk+wZE7m/cSejAIev5tceu1pFxM9MLbLMT5YgT+AWiT nrOJl29CUaX3Wm7GH6qv88FIVvbateWYmjpQVgYofz2XO3HryBTdiZtChmQpbRs5 doZaLrHuY+aHLdHzRTQnp3GhWtFcEybPRgFByz+8ZRK//RViHW2EsV7oOqsim797 2pktpGduxIpXXNbSOaVF0CMT1AVaa7QbVF/ozQK1fM4AZv5LGZfvnSQjz9099MEm as6LRaHZcOzNPzWXIo0f56kVXrkGxzKOUFME32u9TtHO46UbjMQ= -----END CERTIFICATE-----Generated at Mon Mar 2 16:32:51 2026 by rpki-client