$ rpki-client -vvf repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft File: EBB7963402117E803037310CE98B392F968C3A9A.mft (raw, json) Hash identifier: LP+mhPK4AJI9P/uoPYjG4mhUtXVN/SogvU1EO70pnq4= Subject key identifier: 3B:7D:F0:DD:5B:3B:B9:0F:DA:F2:37:52:85:7C:44:2A:7F:94:6F:47 Authority key identifier: EB:B7:96:34:02:11:7E:80:30:37:31:0C:E9:8B:39:2F:96:8C:3A:9A Certificate issuer: /CN=EBB7963402117E803037310CE98B392F968C3A9A Certificate serial: 10E6E967E5997418D8CEC6CC603EE6CB3E2AB272 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft Manifest number: 01C8 Signing time: Tue 17 Jun 2025 11:52:28 +0000 Manifest this update: Tue 17 Jun 2025 11:47:28 +0000 Manifest next update: Fri 20 Jun 2025 15:48:28 +0000 Files and hashes: 1: EBB7963402117E803037310CE98B392F968C3A9A.crl (hash: 9MLsgUa2M5jrbFXYOMW58ME10XBKxFY4y2IS+y3wO1o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.crl rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 15:48:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:e6:e9:67:e5:99:74:18:d8:ce:c6:cc:60:3e:e6:cb:3e:2a:b2:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBB7963402117E803037310CE98B392F968C3A9A Validity Not Before: Jun 17 11:47:28 2025 GMT Not After : Jun 20 15:48:28 2025 GMT Subject: CN=3B7DF0DD5B3BB90FDAF23752857C442A7F946F47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:32:90:65:d4:03:c4:77:d3:22:88:36:4b:7a: d1:88:4e:71:ab:f6:f6:52:c3:13:c6:64:13:88:ef: f4:6d:2d:f1:6d:d9:26:25:41:d4:89:aa:29:e5:23: 09:5c:e8:cb:ca:24:97:60:e0:a8:2a:ff:9b:e5:00: 80:fd:be:a7:51:84:3b:e8:9c:13:71:39:02:98:9c: 41:29:49:71:ea:35:08:d0:7e:1b:5f:d4:bd:11:27: 31:65:88:ed:f6:af:4b:8a:45:a1:29:41:30:c0:99: ce:d6:eb:07:d3:3e:2a:6d:43:5e:85:79:24:00:fa: e3:10:4f:28:c0:09:90:3b:0b:49:43:ba:4c:45:48: 80:d1:f2:8f:40:f8:80:49:03:6c:a6:37:ce:ae:6d: 56:4f:4f:a2:e6:1a:bf:7a:4a:5a:eb:ff:ac:58:81: 58:35:79:50:02:ad:f9:b2:ec:76:7b:d1:22:3a:15: 9e:de:97:98:76:b2:7c:f9:80:a8:fe:3e:fe:a8:46: c1:a9:c2:7b:0e:5e:03:34:61:75:2d:5b:04:d8:6d: c7:2a:f4:b6:d2:a6:ee:43:0c:7e:0d:7e:ab:43:bb: aa:b0:82:d5:ff:00:c1:b6:3c:9c:64:40:6f:af:6f: 4d:fe:ed:b0:33:9a:20:3e:17:d8:7d:e5:29:82:85: 48:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:7D:F0:DD:5B:3B:B9:0F:DA:F2:37:52:85:7C:44:2A:7F:94:6F:47 X509v3 Authority Key Identifier: keyid:EB:B7:96:34:02:11:7E:80:30:37:31:0C:E9:8B:39:2F:96:8C:3A:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:00:b2:90:5c:fb:c0:05:62:86:0b:8e:84:e7:79:af:43:f4: 97:f2:dd:25:6a:0f:65:ed:f2:84:f8:d5:cf:da:7a:86:b3:1f: 8b:21:03:e6:8b:db:de:77:bb:a2:a0:ba:a5:79:12:e9:84:c9: 7a:d9:4f:09:b8:c1:2c:b8:b7:47:1f:63:bb:99:89:f4:62:17: 9d:ef:f7:58:65:ad:bd:07:45:d8:4f:9f:26:d0:0a:b6:3a:3d: e5:94:de:42:c8:3d:47:58:f6:a8:db:fe:1e:9a:b5:e3:dc:6f: b5:bb:ea:3d:c3:8a:9b:d7:af:b3:a3:f2:ab:61:e5:59:5b:c6: 10:e5:bb:f9:99:b2:4d:aa:08:a3:a2:02:7b:6a:37:a2:0a:00: 8b:de:97:3d:d5:ec:3e:2e:19:e7:bf:6e:a9:47:95:92:54:4b: 33:f3:61:f3:e4:a8:6d:5a:4a:0c:96:c2:45:b9:17:9a:c1:a6: 23:9c:ea:a8:3e:5a:10:c9:f3:b2:7a:96:31:27:91:c7:9a:8d: 46:a6:75:b3:7d:dd:f4:3f:fb:a3:9e:88:b7:bb:81:8a:b0:0e: f5:e7:5f:45:95:82:84:c6:75:85:e5:a4:cf:c9:8d:7b:45:4f: 2b:e9:6f:cd:41:d0:18:ec:c1:f8:5e:34:00:51:d3:aa:89:53: 9d:92:9c:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEObpZ+WZdBjYzsbMYD7myz4qsnIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJCNzk2MzQwMjExN0U4MDMwMzczMTBDRTk4QjM5MkY5 NjhDM0E5QTAeFw0yNTA2MTcxMTQ3MjhaFw0yNTA2MjAxNTQ4MjhaMDMxMTAvBgNV BAMTKDNCN0RGMERENUIzQkI5MEZEQUYyMzc1Mjg1N0M0NDJBN0Y5NDZGNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyMpBl1APEd9MiiDZLetGITnGr 9vZSwxPGZBOI7/RtLfFt2SYlQdSJqinlIwlc6MvKJJdg4Kgq/5vlAID9vqdRhDvo nBNxOQKYnEEpSXHqNQjQfhtf1L0RJzFliO32r0uKRaEpQTDAmc7W6wfTPiptQ16F eSQA+uMQTyjACZA7C0lDukxFSIDR8o9A+IBJA2ymN86ubVZPT6LmGr96Slrr/6xY gVg1eVACrfmy7HZ70SI6FZ7el5h2snz5gKj+Pv6oRsGpwnsOXgM0YXUtWwTYbccq 9LbSpu5DDH4NfqtDu6qwgtX/AMG2PJxkQG+vb03+7bAzmiA+F9h95SmChUgBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO33w3Vs7uQ/a8jdShXxEKn+Ub0cwHwYDVR0j BBgwFoAU67eWNAIRfoAwNzEM6Ys5L5aMOpowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NWMyYzcxYy02YWU1LTRlYTktYjg1MC02MzAwZTJlMWJhZGYvMC9FQkI3OTYzNDAy MTE3RTgwMzAzNzMxMENFOThCMzkyRjk2OEMzQTlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUJCNzk2MzQwMjExN0U4MDMwMzczMTBDRTk4QjM5MkY5NjhD M0E5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDVjMmM3MWMtNmFlNS00ZWE5LWI4 NTAtNjMwMGUyZTFiYWRmLzAvRUJCNzk2MzQwMjExN0U4MDMwMzczMTBDRTk4QjM5 MkY5NjhDM0E5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEoAspBc+8AFYoYLjoTnea9D9Jfy3SVqD2Xt 8oT41c/aeoazH4shA+aL2953u6KguqV5EumEyXrZTwm4wSy4t0cfY7uZifRiF53v 91hlrb0HRdhPnybQCrY6PeWU3kLIPUdY9qjb/h6atePcb7W76j3DipvXr7Oj8qth 5VlbxhDlu/mZsk2qCKOiAntqN6IKAIvelz3V7D4uGee/bqlHlZJUSzPzYfPkqG1a SgyWwkW5F5rBpiOc6qg+WhDJ87J6ljEnkceajUamdbN93fQ/+6OeiLe7gYqwDvXn X0WVgoTGdYXlpM/JjXtFTyvpb81B0BjswfheNABR06qJU52SnM4= -----END CERTIFICATE-----Generated at Wed Jun 18 15:51:10 2025 by rpki-client