$ rpki-client -vvf rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.mft File: EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.mft (raw, json) Hash identifier: ARC2ZFu08ph4JFauhVG9yesiU3i9aUUZqFLT/H6WZVo= Subject key identifier: 6C:25:CD:7C:B9:79:39:7F:D0:DE:71:10:2C:E9:C8:10:2D:34:FD:EA Authority key identifier: EA:8F:56:9A:74:05:BE:AB:A2:3F:9B:20:CF:1A:CD:2C:BD:5E:F5:79 Certificate issuer: /CN=EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579 Certificate serial: 0CEAA4551FCE886464A76B644EF306BB4170E5B5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 00:59:08 +0000 Manifest this update: Wed 17 Jun 2026 00:54:08 +0000 Manifest next update: Thu 18 Jun 2026 02:31:08 +0000 Files and hashes: 1: EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.crl (hash: GcZMhCZclhM5ShLwowiWkvbadvz0+y1fRYP7vku00JY=) 2: 3130332e3233302e3138382e302f32332d3234203d3e20313333333439.roa (hash: yCX5+Dxju6djsJMnbOlkqP9bGOuuQKBHDP9eW/sQSSc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.crl rsync://rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 02:31:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:ea:a4:55:1f:ce:88:64:64:a7:6b:64:4e:f3:06:bb:41:70:e5:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579 Validity Not Before: Jun 17 00:54:08 2026 GMT Not After : Jun 18 02:31:08 2026 GMT Subject: CN=6C25CD7CB979397FD0DE71102CE9C8102D34FDEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fa:f3:83:4e:ca:01:98:d7:3e:c3:5c:71:c2: df:bd:ed:f8:27:08:e1:7c:c7:4f:8a:71:4a:5e:22: 1c:12:46:e0:43:96:d2:44:98:44:d0:83:fd:13:b5: 22:9c:71:d0:b2:91:47:0f:53:7f:d0:b7:b0:74:c0: 1e:6a:dd:95:e1:47:03:d7:9a:40:90:ca:c1:e8:00: 33:b9:3a:5f:a0:61:65:eb:bb:6b:b2:17:8f:a3:e7: 9b:d2:e5:78:02:fd:98:2b:25:a7:4f:10:fe:25:c5: bc:f7:2d:26:dd:72:77:d3:db:3f:f8:0b:d1:69:d1: 8b:6d:84:8b:08:7d:cc:af:e4:4a:9a:78:c8:30:96: fc:a6:ce:d0:69:06:49:74:64:ce:8d:ee:f5:1f:d1: a0:34:ae:f0:6d:55:e9:2a:da:ec:42:d5:1f:2f:76: 1f:e5:52:8c:32:10:4d:53:e9:6b:11:aa:ff:43:7f: da:e6:22:81:56:32:5e:27:8d:62:32:b5:9c:c2:e2: c8:13:3e:44:41:40:53:2a:5d:25:7f:04:59:ac:3b: b0:01:4e:e8:47:1b:7d:c9:a7:11:a1:05:29:51:53: 78:e3:53:83:09:c8:c5:33:14:81:e7:e3:52:27:7c: 33:6e:dd:6f:00:4c:c8:61:61:2f:a6:ae:d6:a2:4a: 85:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:25:CD:7C:B9:79:39:7F:D0:DE:71:10:2C:E9:C8:10:2D:34:FD:EA X509v3 Authority Key Identifier: keyid:EA:8F:56:9A:74:05:BE:AB:A2:3F:9B:20:CF:1A:CD:2C:BD:5E:F5:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:87:d0:85:17:7e:4c:e7:73:ff:98:73:f7:80:71:50:39:e0: fd:fe:3a:d8:3f:2b:93:92:4b:c6:e7:0a:3f:76:cc:7a:d4:01: 2c:65:05:71:11:e7:f7:d0:57:34:eb:63:d2:82:e2:92:20:2e: 11:83:1a:2f:b0:60:eb:72:43:7a:a0:22:07:b6:aa:92:7e:8b: 5f:bf:88:59:7a:f9:64:15:6e:1a:ff:40:26:82:a4:bc:49:7a: 11:77:f9:83:23:60:93:f2:51:32:97:bf:08:09:cf:40:64:76: f1:9f:91:23:f8:09:47:72:da:bb:a0:f2:20:74:08:7e:1b:7a: 5e:0e:1a:c9:33:47:fe:77:e4:90:5e:9f:45:d1:b0:1e:37:fd: 46:77:90:59:12:c8:b7:fb:ce:c4:f4:74:46:84:7b:50:44:34: 0a:4c:ad:d0:8b:36:f1:0d:23:ad:53:0c:d2:a6:0c:fd:85:f2: b3:a9:a6:72:2f:e4:aa:ea:b9:a9:f3:5b:5c:f3:a1:0e:a7:2e: 9a:bb:43:2e:eb:9b:a3:35:ad:50:1c:ad:81:56:3a:e0:a0:af: c7:17:9e:af:a0:90:99:ee:7d:f2:74:db:fa:15:01:27:a0:5a: 46:04:84:5a:96:6d:a6:41:69:32:ec:ce:79:e6:51:89:7f:54: ef:4c:f7:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDOqkVR/OiGRkp2tkTvMGu0Fw5bUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUE4RjU2OUE3NDA1QkVBQkEyM0Y5QjIwQ0YxQUNEMkNC RDVFRjU3OTAeFw0yNjA2MTcwMDU0MDhaFw0yNjA2MTgwMjMxMDhaMDMxMTAvBgNV BAMTKDZDMjVDRDdDQjk3OTM5N0ZEMERFNzExMDJDRTlDODEwMkQzNEZERUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1+vODTsoBmNc+w1xxwt+97fgn COF8x0+KcUpeIhwSRuBDltJEmETQg/0TtSKccdCykUcPU3/Qt7B0wB5q3ZXhRwPX mkCQysHoADO5Ol+gYWXru2uyF4+j55vS5XgC/ZgrJadPEP4lxbz3LSbdcnfT2z/4 C9Fp0YtthIsIfcyv5EqaeMgwlvymztBpBkl0ZM6N7vUf0aA0rvBtVekq2uxC1R8v dh/lUowyEE1T6WsRqv9Df9rmIoFWMl4njWIytZzC4sgTPkRBQFMqXSV/BFmsO7AB TuhHG33JpxGhBSlRU3jjU4MJyMUzFIHn41InfDNu3W8ATMhhYS+mrtaiSoVNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbCXNfLl5OX/Q3nEQLOnIEC00/eowHwYDVR0j BBgwFoAU6o9WmnQFvquiP5sgzxrNLL1e9XkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDA0NTdkMjAtMDIzYS00NTA5LWJiNGEtNjJjODY5MjlkZDk3LzAvRUE4RjU2OUE3 NDA1QkVBQkEyM0Y5QjIwQ0YxQUNEMkNCRDVFRjU3OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQThGNTY5QTc0MDVCRUFCQTIzRjlCMjBDRjFBQ0QyQ0JENUVG NTc5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDA0NTdkMjAtMDIzYS00NTA5LWJi NGEtNjJjODY5MjlkZDk3LzAvRUE4RjU2OUE3NDA1QkVBQkEyM0Y5QjIwQ0YxQUNE MkNCRDVFRjU3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKmH0IUXfkznc/+Yc/eAcVA54P3+Otg/K5OS S8bnCj92zHrUASxlBXER5/fQVzTrY9KC4pIgLhGDGi+wYOtyQ3qgIge2qpJ+i1+/ iFl6+WQVbhr/QCaCpLxJehF3+YMjYJPyUTKXvwgJz0BkdvGfkSP4CUdy2rug8iB0 CH4bel4OGskzR/535JBen0XRsB43/UZ3kFkSyLf7zsT0dEaEe1BENApMrdCLNvEN I61TDNKmDP2F8rOppnIv5KrquanzW1zzoQ6nLpq7Qy7rm6M1rVAcrYFWOuCgr8cX nq+gkJnuffJ02/oVASegWkYEhFqWbaZBaTLsznnmUYl/VO9M9z4= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:32 2026 by rpki-client