$ rpki-client -vvf rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.mft File: EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.mft (raw, json) Hash identifier: urouxYhVtbOsrq7HbwavH6UkvhKiBtYi9NVZKmdNl0c= Subject key identifier: 31:B8:04:65:36:6F:CC:D3:80:26:DA:3B:CF:8E:AD:A9:73:99:9C:9A Authority key identifier: EA:8B:1F:D5:4B:5A:4E:9B:79:5C:DD:92:9B:58:E7:BD:B2:DA:68:71 Certificate issuer: /CN=EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871 Certificate serial: 39EC83121AE67A6BA60C4CFB4B22713EE13814BF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 11:59:10 +0000 Manifest this update: Sat 13 Jun 2026 11:54:10 +0000 Manifest next update: Sun 14 Jun 2026 15:55:10 +0000 Files and hashes: 1: EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.crl (hash: JKlpKSIrX5Rs7lLA5tT67Nt1E8pMLcKRKTrUpWHJw8I=) 2: 3130332e3136382e34342e302f32342d3234203d3e20313432333037.roa (hash: RIjxtB34QrKPBshyuKfeBsiSf1Tc4cR0KfHnQu3zHiw=) 3: 3130332e3137392e38342e302f32342d3234203d3e20313432333037.roa (hash: 2LkAU6HFzcD+uMMYceohJGiq/c/yqAWAinLHczse+RU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.crl rsync://rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ec:83:12:1a:e6:7a:6b:a6:0c:4c:fb:4b:22:71:3e:e1:38:14:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871 Validity Not Before: Jun 13 11:54:10 2026 GMT Not After : Jun 14 15:55:10 2026 GMT Subject: CN=31B80465366FCCD38026DA3BCF8EADA973999C9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:11:70:4d:d9:0c:5b:d1:4e:41:f8:aa:03:2a: c1:59:fc:f4:e5:36:f4:58:ae:aa:e2:53:ce:f8:77: 7c:02:dd:70:cd:a5:2a:84:38:0c:40:f3:96:c5:43: 66:74:1d:ca:4d:99:d1:ba:fb:8d:c2:cb:e6:f8:db: 1a:56:d6:9c:59:fd:a9:be:9e:8a:ad:a7:a3:b0:41: 64:98:ff:49:8d:f3:7f:9c:d5:74:d5:bc:35:ac:84: b0:60:82:ac:74:f9:81:17:2a:f5:cd:da:84:f4:4b: 95:5a:a7:46:a2:47:d7:fe:f0:08:03:34:ba:ae:42: 83:02:2b:67:c2:30:65:39:c1:4c:84:7f:dd:d6:c6: 7d:5e:01:17:e7:92:77:f0:71:38:95:10:24:7c:62: cf:26:e9:8a:7c:51:3b:04:fc:16:36:7a:96:80:2e: 53:33:a8:ae:8d:be:d1:f0:df:02:7e:b4:3c:f0:bc: 17:c0:65:a7:5e:0d:c9:a3:ee:b6:d8:31:ea:b9:12: 16:c8:4f:61:b1:c7:06:b1:c0:de:30:ff:fb:06:96: f5:69:fc:08:c1:79:40:50:68:eb:29:60:5c:c4:a0: 44:a3:9e:d4:66:28:9e:af:b1:7c:e0:4c:44:a3:be: c3:87:ae:9b:cb:8d:e7:57:d6:ca:a0:cf:54:9d:b0: c3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:B8:04:65:36:6F:CC:D3:80:26:DA:3B:CF:8E:AD:A9:73:99:9C:9A X509v3 Authority Key Identifier: keyid:EA:8B:1F:D5:4B:5A:4E:9B:79:5C:DD:92:9B:58:E7:BD:B2:DA:68:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:40:d9:88:f6:46:0d:ac:be:4b:a2:fb:4f:53:cb:0c:2d:de: 6b:c5:c1:75:42:f4:30:3c:3a:85:dc:22:1b:ce:99:59:66:7d: 0e:67:e9:13:7f:3a:af:62:7f:ee:21:48:9d:6d:75:9c:32:37: 91:04:41:08:68:67:59:fe:bb:e6:23:82:c7:9a:97:2d:08:50: 19:24:59:98:15:0a:33:31:88:fa:96:f6:ce:2a:cf:e1:f0:ff: b1:36:93:c6:24:3b:bc:d4:2c:bc:05:53:d0:f5:99:d4:45:90: 2d:8e:62:ef:fc:8c:82:b0:9f:dc:bb:7f:6f:bd:f4:5a:44:8e: 97:31:aa:0b:69:f3:1d:23:ed:13:11:da:6a:26:3b:0a:2f:9e: 01:23:94:98:00:2d:64:5c:72:e6:5e:bb:f2:c0:6b:27:7e:8d: 10:ae:36:37:04:7b:f6:6e:92:8d:b1:f2:6a:83:bc:a2:54:37: a8:34:88:d8:ee:b6:ae:5d:3c:9d:ec:00:96:bb:ee:1a:3b:11: 26:d5:ad:f1:ae:03:fe:b9:f5:0d:19:f1:d2:dc:c3:5d:90:11: 03:c4:f7:96:30:30:3c:6a:b7:ae:b3:ff:c6:c0:45:97:cc:8c: ff:a7:bf:6c:fb:d9:1f:13:7b:05:45:c0:ab:66:3c:6a:ed:65: 3a:1a:73:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOeyDEhrmemumDEz7SyJxPuE4FL8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUE4QjFGRDU0QjVBNEU5Qjc5NUNERDkyOUI1OEU3QkRC MkRBNjg3MTAeFw0yNjA2MTMxMTU0MTBaFw0yNjA2MTQxNTU1MTBaMDMxMTAvBgNV BAMTKDMxQjgwNDY1MzY2RkNDRDM4MDI2REEzQkNGOEVBREE5NzM5OTlDOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPEXBN2Qxb0U5B+KoDKsFZ/PTl NvRYrqriU874d3wC3XDNpSqEOAxA85bFQ2Z0HcpNmdG6+43Cy+b42xpW1pxZ/am+ noqtp6OwQWSY/0mN83+c1XTVvDWshLBggqx0+YEXKvXN2oT0S5Vap0aiR9f+8AgD NLquQoMCK2fCMGU5wUyEf93Wxn1eARfnknfwcTiVECR8Ys8m6Yp8UTsE/BY2epaA LlMzqK6NvtHw3wJ+tDzwvBfAZadeDcmj7rbYMeq5EhbIT2GxxwaxwN4w//sGlvVp /AjBeUBQaOspYFzEoESjntRmKJ6vsXzgTESjvsOHrpvLjedX1sqgz1SdsMNpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMbgEZTZvzNOAJto7z46tqXOZnJowHwYDVR0j BBgwFoAU6osf1UtaTpt5XN2Sm1jnvbLaaHEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDVmMjBiMmUtYTdhOC00MmZkLTkyZjgtOTQ5NjIzM2IyYzllLzAvRUE4QjFGRDU0 QjVBNEU5Qjc5NUNERDkyOUI1OEU3QkRCMkRBNjg3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQThCMUZENTRCNUE0RTlCNzk1Q0REOTI5QjU4RTdCREIyREE2 ODcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDVmMjBiMmUtYTdhOC00MmZkLTky ZjgtOTQ5NjIzM2IyYzllLzAvRUE4QjFGRDU0QjVBNEU5Qjc5NUNERDkyOUI1OEU3 QkRCMkRBNjg3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABRA2Yj2Rg2svkui+09Tywwt3mvFwXVC9DA8 OoXcIhvOmVlmfQ5n6RN/Oq9if+4hSJ1tdZwyN5EEQQhoZ1n+u+Yjgsealy0IUBkk WZgVCjMxiPqW9s4qz+Hw/7E2k8YkO7zULLwFU9D1mdRFkC2OYu/8jIKwn9y7f2+9 9FpEjpcxqgtp8x0j7RMR2momOwovngEjlJgALWRccuZeu/LAayd+jRCuNjcEe/Zu ko2x8mqDvKJUN6g0iNjutq5dPJ3sAJa77ho7ESbVrfGuA/659Q0Z8dLcw12QEQPE 95YwMDxqt66z/8bARZfMjP+nv2z72R8TewVFwKtmPGrtZToac6A= -----END CERTIFICATE-----Generated at Sat Jun 13 23:12:38 2026 by rpki-client