$ rpki-client -vvf repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft File: EBB7963402117E803037310CE98B392F968C3A9A.mft (raw, json) Hash identifier: xASX/Jo42P3bCfOcBUHKqYaAPilCAMliDPgkXu8v/Rs= Subject key identifier: F1:32:10:44:1F:6E:AE:43:3A:14:10:E8:32:46:EB:2C:D4:AE:03:C7 Authority key identifier: EB:B7:96:34:02:11:7E:80:30:37:31:0C:E9:8B:39:2F:96:8C:3A:9A Certificate issuer: /CN=EBB7963402117E803037310CE98B392F968C3A9A Certificate serial: 4C908C629C4B89C4C15E274EDE8FEE432C0874B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft Manifest number: 023A Signing time: Sun 01 Mar 2026 20:42:12 +0000 Manifest this update: Sun 01 Mar 2026 20:37:12 +0000 Manifest next update: Thu 05 Mar 2026 08:01:12 +0000 Files and hashes: 1: EBB7963402117E803037310CE98B392F968C3A9A.crl (hash: Cf/I2c3GcZrPiAW6cJ4b2S9IxJ8N/B4JFb+shAAlcXE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.crl rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:90:8c:62:9c:4b:89:c4:c1:5e:27:4e:de:8f:ee:43:2c:08:74:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBB7963402117E803037310CE98B392F968C3A9A Validity Not Before: Mar 1 20:37:12 2026 GMT Not After : Mar 5 08:01:12 2026 GMT Subject: CN=F13210441F6EAE433A1410E83246EB2CD4AE03C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2c:c2:53:30:f6:4d:da:62:1c:b8:cb:7b:50: 6f:ec:d0:91:97:d2:67:d6:41:5a:cd:a4:2d:f1:e5: 8f:2c:15:19:71:68:0a:12:5a:94:79:5e:cd:4a:dc: 20:12:99:32:ff:ba:fa:24:31:10:a7:ae:dc:98:03: b7:90:2b:64:ea:eb:a8:81:50:b1:39:f7:6d:ef:a8: 0c:c6:01:ad:66:37:b8:6a:54:65:d5:4b:45:f6:58: 4d:7a:d1:7c:4e:6c:69:51:05:c7:bb:74:6d:e3:81: 2c:15:ef:ec:18:8b:cb:79:57:1b:e5:21:1c:95:38: f3:1a:61:49:05:c1:10:f0:82:54:43:73:27:56:a0: e9:39:aa:f2:32:7c:96:80:6d:c4:e7:c2:06:aa:76: b2:ef:fd:be:20:d8:a6:15:8d:32:5f:b2:71:f1:22: 31:65:dd:7b:88:c7:47:3e:e5:79:b5:61:b3:04:fb: 86:61:88:a7:8c:82:19:b4:fa:9a:ca:8b:38:2e:f1: d2:5d:57:4e:0b:75:29:52:fb:7c:fc:4d:4f:86:65: 0c:5f:82:01:55:02:59:64:24:5c:f2:8b:b6:8e:29: 5b:32:c1:a7:44:42:bc:ac:d4:c2:84:fc:e4:d5:20: f2:2f:41:29:08:7d:b7:f5:0c:3d:21:74:13:88:38: 63:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:32:10:44:1F:6E:AE:43:3A:14:10:E8:32:46:EB:2C:D4:AE:03:C7 X509v3 Authority Key Identifier: keyid:EB:B7:96:34:02:11:7E:80:30:37:31:0C:E9:8B:39:2F:96:8C:3A:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBB7963402117E803037310CE98B392F968C3A9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d5c2c71c-6ae5-4ea9-b850-6300e2e1badf/0/EBB7963402117E803037310CE98B392F968C3A9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:4d:84:f1:e3:6e:7b:0a:ca:66:29:05:9d:14:0d:be:02:fd: 57:6b:0d:29:e7:04:36:3c:d5:e1:7e:04:fd:8e:a9:40:67:0f: 64:9d:51:0b:c4:7c:d9:61:2a:13:7c:01:15:ea:e3:68:d5:b2: 6c:13:95:75:7d:8f:8f:ef:25:e8:15:0b:df:b3:9c:f5:e8:83: 8c:23:5f:6e:f4:6e:49:96:b6:92:78:4f:b1:6b:9d:49:4f:cf: 08:a5:b4:67:c5:32:80:fa:76:ba:a0:02:1c:2f:a4:05:da:71: 75:ad:3c:0e:ae:f2:83:91:c4:3f:37:8b:83:ef:f9:42:65:8e: 78:12:36:f9:e9:15:6e:0c:a0:d9:1e:bd:5e:c5:27:dd:3b:a9: 8c:55:76:31:e4:b6:58:59:83:8e:6f:4a:19:fe:84:18:c2:95: 23:93:e6:67:41:a3:c0:ea:3c:f1:1d:ff:ae:ae:c1:70:7f:dd: 24:16:f7:b9:59:1e:0c:05:66:f0:ce:af:22:86:4e:1f:17:50: 2b:2f:a0:67:5b:e4:20:c2:57:4b:9c:87:60:53:4c:d4:0b:62: 05:16:db:90:a7:50:bf:0b:6f:3e:be:84:41:21:83:e1:4a:38: ff:fc:a6:d5:18:d1:9a:31:4d:1d:74:ad:b1:98:6f:ff:5c:0c: 5b:31:36:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTJCMYpxLicTBXidO3o/uQywIdLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJCNzk2MzQwMjExN0U4MDMwMzczMTBDRTk4QjM5MkY5 NjhDM0E5QTAeFw0yNjAzMDEyMDM3MTJaFw0yNjAzMDUwODAxMTJaMDMxMTAvBgNV BAMTKEYxMzIxMDQ0MUY2RUFFNDMzQTE0MTBFODMyNDZFQjJDRDRBRTAzQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHLMJTMPZN2mIcuMt7UG/s0JGX 0mfWQVrNpC3x5Y8sFRlxaAoSWpR5Xs1K3CASmTL/uvokMRCnrtyYA7eQK2Tq66iB ULE5923vqAzGAa1mN7hqVGXVS0X2WE160XxObGlRBce7dG3jgSwV7+wYi8t5Vxvl IRyVOPMaYUkFwRDwglRDcydWoOk5qvIyfJaAbcTnwgaqdrLv/b4g2KYVjTJfsnHx IjFl3XuIx0c+5Xm1YbME+4ZhiKeMghm0+prKizgu8dJdV04LdSlS+3z8TU+GZQxf ggFVAllkJFzyi7aOKVsywadEQrys1MKE/OTVIPIvQSkIfbf1DD0hdBOIOGNTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8TIQRB9urkM6FBDoMkbrLNSuA8cwHwYDVR0j BBgwFoAU67eWNAIRfoAwNzEM6Ys5L5aMOpowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NWMyYzcxYy02YWU1LTRlYTktYjg1MC02MzAwZTJlMWJhZGYvMC9FQkI3OTYzNDAy MTE3RTgwMzAzNzMxMENFOThCMzkyRjk2OEMzQTlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUJCNzk2MzQwMjExN0U4MDMwMzczMTBDRTk4QjM5MkY5NjhD M0E5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDVjMmM3MWMtNmFlNS00ZWE5LWI4 NTAtNjMwMGUyZTFiYWRmLzAvRUJCNzk2MzQwMjExN0U4MDMwMzczMTBDRTk4QjM5 MkY5NjhDM0E5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHFNhPHjbnsKymYpBZ0UDb4C/VdrDSnnBDY8 1eF+BP2OqUBnD2SdUQvEfNlhKhN8ARXq42jVsmwTlXV9j4/vJegVC9+znPXog4wj X270bkmWtpJ4T7FrnUlPzwiltGfFMoD6drqgAhwvpAXacXWtPA6u8oORxD83i4Pv +UJljngSNvnpFW4MoNkevV7FJ907qYxVdjHktlhZg45vShn+hBjClSOT5mdBo8Dq PPEd/66uwXB/3SQW97lZHgwFZvDOryKGTh8XUCsvoGdb5CDCV0uch2BTTNQLYgUW 25CnUL8Lbz6+hEEhg+FKOP/8ptUY0ZoxTR10rbGYb/9cDFsxNqQ= -----END CERTIFICATE-----Generated at Mon Mar 2 23:54:56 2026 by rpki-client