$ rpki-client -vvf rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.mft File: EB05D5BB4356C8737A9AA4994302BCA8B46691CD.mft (raw, json) Hash identifier: R0+aqr7IlYzyIpPz4srnbIQ+yzNNHMBSK8vOrOwhbB0= Subject key identifier: 8C:0E:8B:AB:C9:78:89:E3:C1:EA:77:5B:B8:2F:2F:D3:68:B0:67:09 Authority key identifier: EB:05:D5:BB:43:56:C8:73:7A:9A:A4:99:43:02:BC:A8:B4:66:91:CD Certificate issuer: /CN=EB05D5BB4356C8737A9AA4994302BCA8B46691CD Certificate serial: 254EDF51F024B223605C6BCEAD3F0B6AFE647560 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 08:33:20 +0000 Manifest this update: Wed 17 Jun 2026 08:28:20 +0000 Manifest next update: Thu 18 Jun 2026 11:07:20 +0000 Files and hashes: 1: EB05D5BB4356C8737A9AA4994302BCA8B46691CD.crl (hash: 6U5dQR4DJvo+ZkRdrbhSzY0Vs5DtKp1vb56Cmi2p8Hg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.crl rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:4e:df:51:f0:24:b2:23:60:5c:6b:ce:ad:3f:0b:6a:fe:64:75:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB05D5BB4356C8737A9AA4994302BCA8B46691CD Validity Not Before: Jun 17 08:28:20 2026 GMT Not After : Jun 18 11:07:20 2026 GMT Subject: CN=8C0E8BABC97889E3C1EA775BB82F2FD368B06709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b6:3e:1f:fa:c7:d0:5e:47:95:be:ce:e4:b7: 60:ae:85:3d:5c:9d:95:c7:df:ea:6e:b8:6f:c4:0f: 18:1e:c6:13:b9:d0:85:db:0e:76:de:44:b5:ed:fc: 9c:a8:4a:a8:25:95:2a:da:6a:52:5a:a0:f7:a2:04: aa:03:c6:c6:c2:27:5f:a9:bb:20:5d:ff:00:16:5c: d1:46:14:31:68:b0:9a:61:15:5c:d2:fa:87:a1:90: 5e:7b:ae:6d:3b:65:37:56:95:20:7d:1f:eb:d2:bb: c6:b6:7c:0c:03:b5:ed:01:02:28:69:7b:b2:f7:6e: c7:2b:9c:77:ce:e2:3a:20:9c:fc:a6:3f:55:c1:ff: 1f:53:97:3d:f0:17:b1:63:63:67:d4:c7:ad:1a:50: 0a:27:a3:14:c7:dd:b9:a5:d0:89:5b:c5:69:1a:8c: 87:56:36:64:f7:c6:d4:93:7b:0d:a8:f3:1b:fe:60: 03:08:bb:d7:e4:b9:44:2e:4c:67:43:52:8a:a3:f1: 13:ac:41:c9:72:76:b3:6b:6a:53:50:e1:8f:89:70: 3d:9f:d1:2d:a4:ac:42:e6:ee:f1:7b:d9:bf:66:9f: ec:dd:43:b0:d6:48:ec:fa:29:5a:18:4f:02:0e:9a: a1:a9:02:e2:0c:22:53:3a:cb:b4:fa:92:c7:2b:e5: a0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:0E:8B:AB:C9:78:89:E3:C1:EA:77:5B:B8:2F:2F:D3:68:B0:67:09 X509v3 Authority Key Identifier: keyid:EB:05:D5:BB:43:56:C8:73:7A:9A:A4:99:43:02:BC:A8:B4:66:91:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:71:6c:e3:e7:f6:41:8e:2e:a7:2b:2a:7d:45:eb:cf:69:68: 0b:c7:08:46:21:ed:f4:bd:d0:cb:7f:e5:c8:2b:32:6e:0b:8d: c1:1b:b6:98:b2:53:d4:d4:cc:45:4d:99:9a:a1:26:cf:4b:9d: d8:c4:ad:3e:d7:57:4b:00:fa:22:2d:95:f5:9a:04:bb:7a:5e: 8b:43:38:2a:46:b3:5c:f9:1f:00:a0:14:0b:96:71:d5:66:48: de:85:c6:58:17:29:4b:7a:f0:1c:98:f9:9a:46:fd:6c:47:f1: d0:c0:0e:11:ca:17:e3:19:9b:6b:87:c7:9f:ae:45:e4:6f:2d: 9b:29:11:d1:45:66:7c:62:b0:1f:fd:95:61:2c:fb:59:8b:bc: c0:08:2a:59:7a:50:4b:5b:5f:19:59:b4:73:80:a4:50:98:4b: 27:ae:47:a1:70:13:1f:d1:29:48:ec:ef:07:26:cd:49:ae:3d: a1:be:74:2f:3e:7e:5d:0b:3c:e4:c2:0a:72:5c:99:1b:0f:78: a5:a3:2d:f9:13:f5:e2:41:1e:d4:b1:54:70:4c:34:0f:d0:29: 64:85:f6:cc:1c:8b:4b:05:dd:d6:4c:01:40:ae:75:d5:21:8b: 40:56:e0:db:07:2c:83:0c:8d:0e:d7:be:3a:63:10:c7:a0:db: 4f:e5:5d:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJU7fUfAksiNgXGvOrT8Lav5kdWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUIwNUQ1QkI0MzU2Qzg3MzdBOUFBNDk5NDMwMkJDQThC NDY2OTFDRDAeFw0yNjA2MTcwODI4MjBaFw0yNjA2MTgxMTA3MjBaMDMxMTAvBgNV BAMTKDhDMEU4QkFCQzk3ODg5RTNDMUVBNzc1QkI4MkYyRkQzNjhCMDY3MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDctj4f+sfQXkeVvs7kt2CuhT1c nZXH3+puuG/EDxgexhO50IXbDnbeRLXt/JyoSqgllSraalJaoPeiBKoDxsbCJ1+p uyBd/wAWXNFGFDFosJphFVzS+oehkF57rm07ZTdWlSB9H+vSu8a2fAwDte0BAihp e7L3bscrnHfO4jognPymP1XB/x9Tlz3wF7FjY2fUx60aUAonoxTH3bml0IlbxWka jIdWNmT3xtSTew2o8xv+YAMIu9fkuUQuTGdDUoqj8ROsQclydrNralNQ4Y+JcD2f 0S2krELm7vF72b9mn+zdQ7DWSOz6KVoYTwIOmqGpAuIMIlM6y7T6kscr5aC3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjA6Lq8l4iePB6ndbuC8v02iwZwkwHwYDVR0j BBgwFoAU6wXVu0NWyHN6mqSZQwK8qLRmkc0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGM1OGZiN2MtNjdiOC00YmNlLTk2ZDktYmU5MTJlM2Y3M2RkLzEvRUIwNUQ1QkI0 MzU2Qzg3MzdBOUFBNDk5NDMwMkJDQThCNDY2OTFDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQjA1RDVCQjQzNTZDODczN0E5QUE0OTk0MzAyQkNBOEI0NjY5 MUNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGM1OGZiN2MtNjdiOC00YmNlLTk2 ZDktYmU5MTJlM2Y3M2RkLzEvRUIwNUQ1QkI0MzU2Qzg3MzdBOUFBNDk5NDMwMkJD QThCNDY2OTFDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADhxbOPn9kGOLqcrKn1F689paAvHCEYh7fS9 0Mt/5cgrMm4LjcEbtpiyU9TUzEVNmZqhJs9LndjErT7XV0sA+iItlfWaBLt6XotD OCpGs1z5HwCgFAuWcdVmSN6FxlgXKUt68ByY+ZpG/WxH8dDADhHKF+MZm2uHx5+u ReRvLZspEdFFZnxisB/9lWEs+1mLvMAIKll6UEtbXxlZtHOApFCYSyeuR6FwEx/R KUjs7wcmzUmuPaG+dC8+fl0LPOTCCnJcmRsPeKWjLfkT9eJBHtSxVHBMNA/QKWSF 9swci0sF3dZMAUCuddUhi0BW4NsHLIMMjQ7XvjpjEMeg20/lXa8= -----END CERTIFICATE-----Generated at Wed Jun 17 10:32:17 2026 by rpki-client