$ rpki-client -vvf rpki-rsync.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.mft File: EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.mft (raw, json) Hash identifier: +hP4giJaPrs/GUjkH+Kf6QoZnN4MuidG96Y6KGcOZ1Q= Subject key identifier: A9:D2:00:CC:52:8E:DE:03:61:42:86:73:63:A2:0E:0E:B1:76:44:C5 Authority key identifier: EB:65:C3:DE:94:49:F2:C3:42:B6:C2:8D:C0:0A:2D:7D:9F:CE:13:FC Certificate issuer: /CN=EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC Certificate serial: 16D01B99D58B72387854F0F5783B70133AE134DB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 07:52:22 +0000 Manifest this update: Wed 17 Jun 2026 07:47:22 +0000 Manifest next update: Thu 18 Jun 2026 11:20:22 +0000 Files and hashes: 1: EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.crl (hash: OVH6E6/gJdBpVklwxiifiW18jurwFnPNzWMwz5Kvjpg=) 2: 3130332e31382e34342e302f32332d3234203d3e20313530323735.roa (hash: 7XY8OJYBheI11wkRz8cVl6F/JT2mVgzHkajv0h3NaA4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.crl rsync://rpki-rsync.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:d0:1b:99:d5:8b:72:38:78:54:f0:f5:78:3b:70:13:3a:e1:34:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC Validity Not Before: Jun 17 07:47:22 2026 GMT Not After : Jun 18 11:20:22 2026 GMT Subject: CN=A9D200CC528EDE036142867363A20E0EB17644C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:fe:ca:51:87:2b:61:2e:f7:3f:5c:e3:64:bc: 8e:7a:5d:79:46:e1:46:54:fc:ae:ef:e9:30:5f:43: 8b:12:8c:18:11:1f:5c:4d:46:2c:e9:04:8c:d0:30: 0a:44:cb:93:07:98:81:a4:f0:43:ed:5e:78:4c:6e: 95:43:a3:13:59:22:46:8e:2c:ed:6d:da:fb:4c:17: 8b:fa:d6:fd:cf:be:1c:30:5f:9f:46:33:e9:21:fd: d7:85:50:18:7a:a2:35:1b:70:3d:49:f7:0d:ed:5a: e5:80:29:6d:e7:5e:18:7d:8b:cd:47:fc:08:c5:d8: 00:10:75:cc:e8:a9:67:71:05:6b:c3:21:23:af:e5: 6e:d5:df:02:94:e2:70:bd:9f:1b:90:cc:09:c1:9c: 87:22:75:89:ce:e0:84:36:13:bc:96:83:16:2d:17: 1c:f0:d2:4c:fe:7d:24:7b:52:96:03:0d:b3:59:7a: 2c:bc:44:89:59:cb:4f:80:e4:42:ef:21:6a:95:ee: 5e:30:7d:4d:39:0d:1a:55:d9:39:b5:11:9e:00:16: 92:16:60:71:ec:03:0b:89:8f:16:66:bc:0f:72:a4: 80:af:90:90:4c:4c:dd:f4:1f:68:a4:5c:b6:1d:6c: 7b:81:e6:44:dc:a9:b8:27:92:e3:c6:55:5b:9b:dc: a1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D2:00:CC:52:8E:DE:03:61:42:86:73:63:A2:0E:0E:B1:76:44:C5 X509v3 Authority Key Identifier: keyid:EB:65:C3:DE:94:49:F2:C3:42:B6:C2:8D:C0:0A:2D:7D:9F:CE:13:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e4:f5:63:6c:ff:98:cb:3c:2a:b4:48:ff:39:09:e2:d1:f4:53: 7e:8f:ee:4b:c9:fb:55:8a:c8:89:06:26:e8:89:59:e4:d6:70: 7a:91:80:ad:04:59:7d:6f:9d:ab:96:04:f4:de:0e:ed:c0:b6: 70:db:e1:61:2d:84:0f:df:72:74:58:25:de:c8:e6:aa:6a:1f: 31:74:41:9a:3e:67:4e:d9:01:f8:e0:59:85:de:84:8d:bd:9e: 06:5f:77:bd:1e:74:91:b0:82:e5:21:b2:5b:ac:46:b0:db:a2: 93:0f:d4:de:1f:9a:ee:c5:77:36:df:e1:73:35:d2:c2:f5:3f: 64:f0:1b:17:f6:1b:b8:e0:bb:08:07:d4:c9:f2:a9:43:74:23: 40:2a:e0:d2:9a:36:ef:4b:96:54:9f:d8:22:1a:9f:8c:40:9f: 20:8e:a9:33:8e:5d:ba:3f:63:ea:4c:8a:89:de:ab:83:2b:68: a2:30:f4:08:ef:b8:b6:bc:29:e7:ea:f5:01:39:8d:4e:43:46: c1:a4:a1:26:c8:46:69:a7:fc:17:ce:76:a5:0c:c5:32:4b:69: d0:46:5f:1a:e5:25:1f:39:22:a0:c4:36:3d:80:15:b7:87:07: b8:e1:6d:37:2e:59:1c:68:44:20:3b:71:b3:be:8e:ad:18:24: 90:41:7d:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFtAbmdWLcjh4VPD1eDtwEzrhNNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUI2NUMzREU5NDQ5RjJDMzQyQjZDMjhEQzAwQTJEN0Q5 RkNFMTNGQzAeFw0yNjA2MTcwNzQ3MjJaFw0yNjA2MTgxMTIwMjJaMDMxMTAvBgNV BAMTKEE5RDIwMENDNTI4RURFMDM2MTQyODY3MzYzQTIwRTBFQjE3NjQ0QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv/spRhythLvc/XONkvI56XXlG 4UZU/K7v6TBfQ4sSjBgRH1xNRizpBIzQMApEy5MHmIGk8EPtXnhMbpVDoxNZIkaO LO1t2vtMF4v61v3PvhwwX59GM+kh/deFUBh6ojUbcD1J9w3tWuWAKW3nXhh9i81H /AjF2AAQdczoqWdxBWvDISOv5W7V3wKU4nC9nxuQzAnBnIcidYnO4IQ2E7yWgxYt Fxzw0kz+fSR7UpYDDbNZeiy8RIlZy0+A5ELvIWqV7l4wfU05DRpV2Tm1EZ4AFpIW YHHsAwuJjxZmvA9ypICvkJBMTN30H2ikXLYdbHuB5kTcqbgnkuPGVVub3KElAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqdIAzFKO3gNhQoZzY6IODrF2RMUwHwYDVR0j BBgwFoAU62XD3pRJ8sNCtsKNwAotfZ/OE/wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWI2NGQ4YzEtYzcxNC00NTkyLThmYzUtZTM5MmViZmYxZTk4LzAvRUI2NUMzREU5 NDQ5RjJDMzQyQjZDMjhEQzAwQTJEN0Q5RkNFMTNGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQjY1QzNERTk0NDlGMkMzNDJCNkMyOERDMDBBMkQ3RDlGQ0Ux M0ZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWI2NGQ4YzEtYzcxNC00NTkyLThm YzUtZTM5MmViZmYxZTk4LzAvRUI2NUMzREU5NDQ5RjJDMzQyQjZDMjhEQzAwQTJE N0Q5RkNFMTNGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOT1Y2z/mMs8KrRI/zkJ4tH0U36P7kvJ+1WK yIkGJuiJWeTWcHqRgK0EWX1vnauWBPTeDu3AtnDb4WEthA/fcnRYJd7I5qpqHzF0 QZo+Z07ZAfjgWYXehI29ngZfd70edJGwguUhslusRrDbopMP1N4fmu7Fdzbf4XM1 0sL1P2TwGxf2G7jguwgH1MnyqUN0I0Aq4NKaNu9LllSf2CIan4xAnyCOqTOOXbo/ Y+pMioneq4MraKIw9AjvuLa8Kefq9QE5jU5DRsGkoSbIRmmn/BfOdqUMxTJLadBG XxrlJR85IqDENj2AFbeHB7jhbTcuWRxoRCA7cbO+jq0YJJBBfeU= -----END CERTIFICATE-----Generated at Wed Jun 17 09:43:14 2026 by rpki-client