$ rpki-client -vvf repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft File: EBB7963402117E803037310CE98B392F968C3A9A.mft (raw, json) Hash identifier: v1UgewTJh2ezSbyGabtf2Oc8YZWGiBoB7J4BNUF6bFk= Subject key identifier: AE:28:28:F3:BC:AF:5A:2E:3F:E1:C0:ED:32:2A:76:3F:B9:70:B2:9A Authority key identifier: EB:B7:96:34:02:11:7E:80:30:37:31:0C:E9:8B:39:2F:96:8C:3A:9A Certificate issuer: /CN=EBB7963402117E803037310CE98B392F968C3A9A Certificate serial: 0373BE6BB7D48B8CDFFD46AFDF83B2BB986FE0F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft Manifest number: 024E Signing time: Wed 15 Apr 2026 18:02:18 +0000 Manifest this update: Wed 15 Apr 2026 17:57:18 +0000 Manifest next update: Sun 19 Apr 2026 04:27:18 +0000 Files and hashes: 1: EBB7963402117E803037310CE98B392F968C3A9A.crl (hash: 4Hm/KbtbOmQ2O2lceHw2MhAGB3cTqGMjxRUgpnDbrDc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.crl rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 04:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:73:be:6b:b7:d4:8b:8c:df:fd:46:af:df:83:b2:bb:98:6f:e0:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBB7963402117E803037310CE98B392F968C3A9A Validity Not Before: Apr 15 17:57:18 2026 GMT Not After : Apr 19 04:27:18 2026 GMT Subject: CN=AE2828F3BCAF5A2E3FE1C0ED322A763FB970B29A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d8:65:27:91:0f:a3:c6:21:45:12:e7:27:5e: 7b:bb:4f:0f:c5:6a:09:6d:71:21:64:ac:99:aa:25: 29:6b:d0:4c:ef:09:ae:13:55:f3:f8:33:3d:cb:80: f7:67:02:f9:c1:72:28:ef:14:01:c8:95:b4:55:3f: 88:1b:8d:a3:c2:0c:7f:cb:ac:3e:f0:3a:52:4e:41: e9:52:05:32:c1:85:70:a2:b1:d9:0c:dd:ad:a8:80: e4:99:92:46:9c:e4:d2:c1:6e:7d:63:4c:23:f4:ed: be:6b:ed:45:41:e4:cd:d0:05:c3:cd:9b:79:df:2f: 71:49:92:a4:f1:fc:2e:6e:c8:86:d5:76:cb:03:42: 69:c6:1a:5d:c0:1f:2b:c3:a1:bd:27:c7:ee:1b:90: 57:27:33:f2:17:4c:3a:ea:0e:05:36:c9:f1:8e:07: 87:f8:f8:ba:22:9e:b9:45:f5:59:f9:62:b3:23:d3: 05:be:b1:65:f9:0e:23:28:96:2d:3b:24:16:76:a7: 8c:56:55:50:f2:3d:1a:bb:e6:a7:76:b5:e9:cb:07: 5d:f3:ec:cf:70:9b:76:d4:20:20:b1:f7:fc:79:69: 61:37:0b:e5:93:5d:d7:7a:e8:1e:25:0a:c5:ba:f0: 94:43:c8:07:19:10:30:f6:82:e0:f7:00:0c:e1:a8: ef:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:28:28:F3:BC:AF:5A:2E:3F:E1:C0:ED:32:2A:76:3F:B9:70:B2:9A X509v3 Authority Key Identifier: keyid:EB:B7:96:34:02:11:7E:80:30:37:31:0C:E9:8B:39:2F:96:8C:3A:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:48:86:7a:a0:0d:ee:8e:8a:63:d5:03:84:d0:a7:a4:3b:de: 9f:74:6c:a1:82:ed:8f:79:c5:6a:7d:5a:87:54:56:e1:47:cf: 1b:7a:59:0f:50:7c:87:3d:ff:96:b2:9c:70:a5:c5:b1:3c:c4: 92:18:fe:7f:12:47:ea:a5:7a:5c:00:10:ba:b5:7f:e1:1a:7b: b3:3a:d1:5c:08:67:7a:b3:a8:cc:17:db:28:be:8f:85:78:d8: 14:49:df:44:4c:dd:65:62:e8:2f:4f:7b:a4:2a:0d:59:0f:9c: 9b:1a:00:cf:f9:f7:25:80:df:3a:d6:c0:ba:4a:4f:94:1c:e0: 75:e6:25:98:d2:81:fa:b9:94:9c:f9:d3:e2:95:c3:5f:22:e8: 26:3e:34:2e:65:45:20:87:e7:2e:e1:44:25:8a:05:02:4c:24: 84:79:56:be:ba:63:0a:da:7c:f5:c7:9c:71:3a:a3:8e:41:56: 13:66:04:78:a0:91:5c:69:19:74:e8:1a:74:e8:e1:e9:82:f0: 8b:ce:97:70:d1:cc:75:0c:8a:6a:57:14:00:91:96:0b:03:c9: bf:e6:f8:75:31:cc:49:05:3d:03:5d:78:f8:84:48:6a:8f:77: b4:85:53:a0:ad:14:dd:82:43:e9:28:3d:e5:d9:18:7f:21:f5: 02:36:34:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA3O+a7fUi4zf/Uav34Oyu5hv4PAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJCNzk2MzQwMjExN0U4MDMwMzczMTBDRTk4QjM5MkY5 NjhDM0E5QTAeFw0yNjA0MTUxNzU3MThaFw0yNjA0MTkwNDI3MThaMDMxMTAvBgNV BAMTKEFFMjgyOEYzQkNBRjVBMkUzRkUxQzBFRDMyMkE3NjNGQjk3MEIyOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK2GUnkQ+jxiFFEucnXnu7Tw/F agltcSFkrJmqJSlr0EzvCa4TVfP4Mz3LgPdnAvnBcijvFAHIlbRVP4gbjaPCDH/L rD7wOlJOQelSBTLBhXCisdkM3a2ogOSZkkac5NLBbn1jTCP07b5r7UVB5M3QBcPN m3nfL3FJkqTx/C5uyIbVdssDQmnGGl3AHyvDob0nx+4bkFcnM/IXTDrqDgU2yfGO B4f4+LoinrlF9Vn5YrMj0wW+sWX5DiMoli07JBZ2p4xWVVDyPRq75qd2tenLB13z 7M9wm3bUICCx9/x5aWE3C+WTXdd66B4lCsW68JRDyAcZEDD2guD3AAzhqO/pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrigo87yvWi4/4cDtMip2P7lwspowHwYDVR0j BBgwFoAU67eWNAIRfoAwNzEM6Ys5L5aMOpowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NWMyYzcxYy02YWU1LTRlYTktYjg1MC02MzAwZTJlMWJhZGYvMC9FQkI3OTYzNDAy MTE3RTgwMzAzNzMxMENFOThCMzkyRjk2OEMzQTlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUJCNzk2MzQwMjExN0U4MDMwMzczMTBDRTk4QjM5MkY5NjhD M0E5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDVjMmM3MWMtNmFlNS00ZWE5LWI4 NTAtNjMwMGUyZTFiYWRmLzAvRUJCNzk2MzQwMjExN0U4MDMwMzczMTBDRTk4QjM5 MkY5NjhDM0E5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAApIhnqgDe6OimPVA4TQp6Q73p90bKGC7Y95 xWp9WodUVuFHzxt6WQ9QfIc9/5aynHClxbE8xJIY/n8SR+qlelwAELq1f+Eae7M6 0VwIZ3qzqMwX2yi+j4V42BRJ30RM3WVi6C9Pe6QqDVkPnJsaAM/59yWA3zrWwLpK T5Qc4HXmJZjSgfq5lJz50+KVw18i6CY+NC5lRSCH5y7hRCWKBQJMJIR5Vr66Ywra fPXHnHE6o45BVhNmBHigkVxpGXToGnTo4emC8IvOl3DRzHUMimpXFACRlgsDyb/m +HUxzEkFPQNdePiESGqPd7SFU6CtFN2CQ+koPeXZGH8h9QI2NBo= -----END CERTIFICATE-----Generated at Fri Apr 17 17:55:58 2026 by rpki-client