$ rpki-client -vvf rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.mft File: EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.mft (raw, json) Hash identifier: o6Y1EtaAQ5nHldn9s2p5FQF+PU6oxVOQL99D7pMtecw= Subject key identifier: F7:1B:E1:78:C3:E6:2A:87:21:50:F3:12:D0:F4:CF:0B:A3:86:09:AD Authority key identifier: EA:8B:1F:D5:4B:5A:4E:9B:79:5C:DD:92:9B:58:E7:BD:B2:DA:68:71 Certificate issuer: /CN=EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871 Certificate serial: 4908DF6DF0E29DB04F2A3067305DE9BDA22899C8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 17:18:09 +0000 Manifest this update: Tue 28 Jul 2026 17:13:09 +0000 Manifest next update: Wed 29 Jul 2026 20:43:09 +0000 Files and hashes: 1: 3130332e3136382e34342e302f32342d3234203d3e20313432333037.roa (hash: RIjxtB34QrKPBshyuKfeBsiSf1Tc4cR0KfHnQu3zHiw=) 2: EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.crl (hash: SyazE+BxQz0D7//snQ3Mlboh42vcFTciFtI1rAIv1cE=) 3: 3130332e3137392e38342e302f32342d3234203d3e20313432333037.roa (hash: 2LkAU6HFzcD+uMMYceohJGiq/c/yqAWAinLHczse+RU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.crl rsync://rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:43:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:08:df:6d:f0:e2:9d:b0:4f:2a:30:67:30:5d:e9:bd:a2:28:99:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871 Validity Not Before: Jul 28 17:13:09 2026 GMT Not After : Jul 29 20:43:09 2026 GMT Subject: CN=F71BE178C3E62A872150F312D0F4CF0BA38609AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a3:9e:36:64:55:a1:a9:3e:84:fb:91:32:46: f9:cf:1f:e4:18:2a:af:75:4a:aa:92:34:41:76:2b: d7:58:1d:a0:ab:89:92:e7:58:7d:f7:bf:06:68:09: 75:f5:55:65:e7:0b:ee:da:b6:81:34:32:e8:56:fb: f3:7c:25:c5:77:8d:99:8e:ea:df:e5:03:2c:88:75: 13:f1:0e:4f:93:5d:38:9b:0b:70:4c:7e:70:b0:e1: 40:d0:b1:8b:59:54:97:e6:db:5f:9a:f1:c2:31:65: c5:3d:eb:f4:97:cd:02:f4:88:0d:e5:a5:8b:3e:fa: 08:80:d5:48:c7:80:5d:b7:60:aa:71:47:ac:66:9a: 99:fd:36:af:76:9a:e2:e5:cb:21:b9:d8:84:f7:89: c3:96:f0:a2:df:cf:1c:7b:4f:b7:ff:a0:b1:8a:b2: f5:7d:bb:26:bd:23:59:4f:39:3d:59:bf:03:87:83: 97:82:3e:0d:cc:22:c6:80:15:cb:1e:f4:95:e4:60: ad:3a:c2:e4:4f:32:c4:09:46:71:15:7b:d1:d6:a5: d6:4d:bc:7d:17:57:ad:67:34:e1:75:0a:32:63:62: 6e:f3:d3:2b:73:91:95:6f:fb:3f:51:42:98:fa:c7: 4d:b6:ee:b0:9c:d6:84:49:fc:60:0a:8e:01:4b:c8: 25:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:1B:E1:78:C3:E6:2A:87:21:50:F3:12:D0:F4:CF:0B:A3:86:09:AD X509v3 Authority Key Identifier: keyid:EA:8B:1F:D5:4B:5A:4E:9B:79:5C:DD:92:9B:58:E7:BD:B2:DA:68:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:38:c9:4a:b6:6a:a8:38:c4:00:66:c3:6e:31:91:37:95:31: f1:08:47:37:d0:86:93:72:39:a5:89:41:6b:de:36:da:af:72: 96:94:e7:26:d1:eb:ee:60:d2:89:72:65:28:cd:25:58:18:03: 0f:94:92:8a:fe:96:00:71:7f:cb:00:a1:14:bb:d7:7a:1c:bc: 54:06:34:6f:04:a4:f3:86:02:12:c5:64:89:58:72:06:53:db: f5:8a:c0:a2:a0:e7:45:15:5c:1c:09:2f:62:86:0c:f9:97:e8: 41:e8:18:17:5f:fe:b3:29:46:f7:25:fc:90:c2:94:85:01:d3: 5b:ff:5e:77:71:81:5a:59:a5:5b:c0:6d:b3:34:16:6a:e2:4c: 9e:31:7a:29:a9:a0:56:5c:fe:01:cf:3e:d6:fd:8c:a2:47:cc: dc:be:b0:e8:df:9d:3f:26:cf:10:06:49:e4:ad:ed:95:10:9a: 0e:39:b7:fa:93:27:fc:42:90:0a:b0:c0:5d:76:44:bc:de:93: b9:6c:37:d4:a2:df:77:0d:e6:c2:48:74:f4:ec:ff:d1:6d:a1: 71:57:b4:3a:f9:3c:49:64:7f:41:83:95:c0:c1:55:52:af:93: 16:70:b2:98:b9:7e:c0:90:84:ba:55:8e:0f:92:56:bc:71:4b: 59:18:45:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSQjfbfDinbBPKjBnMF3pvaIomcgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUE4QjFGRDU0QjVBNEU5Qjc5NUNERDkyOUI1OEU3QkRC MkRBNjg3MTAeFw0yNjA3MjgxNzEzMDlaFw0yNjA3MjkyMDQzMDlaMDMxMTAvBgNV BAMTKEY3MUJFMTc4QzNFNjJBODcyMTUwRjMxMkQwRjRDRjBCQTM4NjA5QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCto542ZFWhqT6E+5EyRvnPH+QY Kq91SqqSNEF2K9dYHaCriZLnWH33vwZoCXX1VWXnC+7atoE0MuhW+/N8JcV3jZmO 6t/lAyyIdRPxDk+TXTibC3BMfnCw4UDQsYtZVJfm21+a8cIxZcU96/SXzQL0iA3l pYs++giA1UjHgF23YKpxR6xmmpn9Nq92muLlyyG52IT3icOW8KLfzxx7T7f/oLGK svV9uya9I1lPOT1ZvwOHg5eCPg3MIsaAFcse9JXkYK06wuRPMsQJRnEVe9HWpdZN vH0XV61nNOF1CjJjYm7z0ytzkZVv+z9RQpj6x0227rCc1oRJ/GAKjgFLyCU3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9xvheMPmKochUPMS0PTPC6OGCa0wHwYDVR0j BBgwFoAU6osf1UtaTpt5XN2Sm1jnvbLaaHEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDVmMjBiMmUtYTdhOC00MmZkLTkyZjgtOTQ5NjIzM2IyYzllLzAvRUE4QjFGRDU0 QjVBNEU5Qjc5NUNERDkyOUI1OEU3QkRCMkRBNjg3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQThCMUZENTRCNUE0RTlCNzk1Q0REOTI5QjU4RTdCREIyREE2 ODcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDVmMjBiMmUtYTdhOC00MmZkLTky ZjgtOTQ5NjIzM2IyYzllLzAvRUE4QjFGRDU0QjVBNEU5Qjc5NUNERDkyOUI1OEU3 QkRCMkRBNjg3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAw4yUq2aqg4xABmw24xkTeVMfEIRzfQhpNy OaWJQWveNtqvcpaU5ybR6+5g0olyZSjNJVgYAw+Ukor+lgBxf8sAoRS713ocvFQG NG8EpPOGAhLFZIlYcgZT2/WKwKKg50UVXBwJL2KGDPmX6EHoGBdf/rMpRvcl/JDC lIUB01v/XndxgVpZpVvAbbM0FmriTJ4xeimpoFZc/gHPPtb9jKJHzNy+sOjfnT8m zxAGSeSt7ZUQmg45t/qTJ/xCkAqwwF12RLzek7lsN9Si33cN5sJIdPTs/9FtoXFX tDr5PElkf0GDlcDBVVKvkxZwspi5fsCQhLpVjg+SVrxxS1kYRZY= -----END CERTIFICATE-----Generated at Wed Jul 29 06:36:33 2026 by rpki-client