$ rpki-client -vvf rpki-rsync.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/EBB94B4A4FC3917EE61D2764970CFCA1015BBCF1.mft File: EBB94B4A4FC3917EE61D2764970CFCA1015BBCF1.mft (raw, json) Hash identifier: b+IGqzqlIXa0aTJg0DUZ5j3geYqvFGqKdNARKxLUvMU= Subject key identifier: 96:38:9A:39:A0:DB:CE:0D:86:A8:B7:8C:2C:B2:00:F2:F0:2E:CD:CD Authority key identifier: EB:B9:4B:4A:4F:C3:91:7E:E6:1D:27:64:97:0C:FC:A1:01:5B:BC:F1 Certificate issuer: /CN=EBB94B4A4FC3917EE61D2764970CFCA1015BBCF1 Certificate serial: 509872BA63C5F1720B33648ABC751000137830CC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EBB94B4A4FC3917EE61D2764970CFCA1015BBCF1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/EBB94B4A4FC3917EE61D2764970CFCA1015BBCF1.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 19:53:13 +0000 Manifest this update: Tue 16 Jun 2026 19:48:13 +0000 Manifest next update: Wed 17 Jun 2026 22:33:13 +0000 Files and hashes: 1: EBB94B4A4FC3917EE61D2764970CFCA1015BBCF1.crl (hash: 0rSydSGv35Ir212bs4M4QkqMCoCr0Cem7isskEb4gio=) 2: 3136302e32352e3230332e302f32342d3234203d3e20313533313038.roa (hash: 6L2ENtgU1VjFwLGyNVrP8HYDZpGVtd4RKvsD3aKlBT4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/EBB94B4A4FC3917EE61D2764970CFCA1015BBCF1.crl rsync://rpki-rsync.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/EBB94B4A4FC3917EE61D2764970CFCA1015BBCF1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EBB94B4A4FC3917EE61D2764970CFCA1015BBCF1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:33:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:98:72:ba:63:c5:f1:72:0b:33:64:8a:bc:75:10:00:13:78:30:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBB94B4A4FC3917EE61D2764970CFCA1015BBCF1 Validity Not Before: Jun 16 19:48:13 2026 GMT Not After : Jun 17 22:33:13 2026 GMT Subject: CN=96389A39A0DBCE0D86A8B78C2CB200F2F02ECDCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9d:0a:72:c2:52:10:4a:2d:1e:5a:37:b7:5a: f9:f5:9b:cb:65:a2:67:42:94:9a:5c:ea:ed:72:0c: e0:9f:26:18:c9:df:5e:e1:df:03:b8:9a:8a:52:d1: 19:07:46:7f:f4:50:70:b3:50:9f:26:65:32:d9:88: 10:91:68:0d:85:4d:80:2b:8a:10:14:77:0a:df:2b: 79:9c:99:8b:d8:ba:9f:08:7e:c3:27:0e:64:ab:9d: 32:5d:28:6a:da:9e:a7:82:0d:a2:bc:8e:a1:97:b8: b9:02:e4:83:11:13:28:fb:ea:76:91:87:bd:0a:59: 29:9c:9f:f4:ae:20:6e:f6:e6:6d:c8:d6:97:17:4c: 0d:19:b7:8c:20:f1:88:99:45:d1:3c:51:5f:44:df: ae:e5:d8:95:1c:88:c6:5f:fc:53:f3:96:a7:d2:70: 82:c7:e6:dd:f4:aa:e1:cb:23:cd:a8:33:bc:64:ac: 80:3e:d6:66:9f:3d:f6:52:6b:c2:39:91:be:69:4e: 5a:db:28:29:7f:10:08:19:ab:ed:88:5c:1f:3b:81: 50:c3:81:ca:d0:98:b4:2f:b6:94:e3:07:25:c8:b5: a8:d7:3e:50:88:5b:7f:6b:f7:09:f6:3d:6b:90:72: 6a:7d:6c:ab:23:4a:e7:3c:54:13:48:d3:b6:48:fa: 60:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:38:9A:39:A0:DB:CE:0D:86:A8:B7:8C:2C:B2:00:F2:F0:2E:CD:CD X509v3 Authority Key Identifier: keyid:EB:B9:4B:4A:4F:C3:91:7E:E6:1D:27:64:97:0C:FC:A1:01:5B:BC:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/EBB94B4A4FC3917EE61D2764970CFCA1015BBCF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EBB94B4A4FC3917EE61D2764970CFCA1015BBCF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/EBB94B4A4FC3917EE61D2764970CFCA1015BBCF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:57:51:56:76:64:85:92:d5:ec:f0:5d:6c:1d:e2:20:e5:02: 29:52:52:02:ae:3b:61:75:46:c2:3c:dd:57:f9:24:ca:9f:fa: 90:7a:0f:2e:39:47:83:24:d7:c3:e3:94:49:e2:45:a3:b5:7e: d2:5f:af:52:de:70:2f:f9:71:0a:27:7d:06:a2:b3:18:21:31: 24:50:4f:ea:54:94:06:50:58:99:88:27:95:9d:6d:52:c5:40: 86:2a:74:a2:75:db:dd:90:4f:69:22:41:d4:61:25:8b:79:28: 44:70:51:0b:1f:a9:90:af:60:38:a4:1f:82:1d:7a:57:2a:49: 96:5a:f0:a0:58:2e:18:77:19:4a:c0:3c:42:03:c5:13:1f:77: bf:1d:78:a1:73:29:a5:a8:5e:4b:65:41:8e:a7:da:5b:5b:20: 40:b3:ff:7b:56:42:c7:c2:57:24:d1:11:fe:f7:b4:8f:36:8e: 82:4d:ce:87:6d:77:08:d8:35:1d:48:10:4e:52:05:e7:c8:bb: 3b:4d:fa:0b:5a:e6:0e:0a:8d:db:f0:ea:aa:4e:e3:42:d8:0f: c2:e4:0c:31:79:7b:66:6d:0e:b0:db:4f:87:ee:22:a5:fc:9e: de:9d:51:04:46:95:57:df:4d:23:6b:3b:3e:59:9d:f0:62:19: d5:54:9b:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUJhyumPF8XILM2SKvHUQABN4MMwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJCOTRCNEE0RkMzOTE3RUU2MUQyNzY0OTcwQ0ZDQTEw MTVCQkNGMTAeFw0yNjA2MTYxOTQ4MTNaFw0yNjA2MTcyMjMzMTNaMDMxMTAvBgNV BAMTKDk2Mzg5QTM5QTBEQkNFMEQ4NkE4Qjc4QzJDQjIwMEYyRjAyRUNEQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2nQpywlIQSi0eWje3Wvn1m8tl omdClJpc6u1yDOCfJhjJ317h3wO4mopS0RkHRn/0UHCzUJ8mZTLZiBCRaA2FTYAr ihAUdwrfK3mcmYvYup8IfsMnDmSrnTJdKGranqeCDaK8jqGXuLkC5IMREyj76naR h70KWSmcn/SuIG725m3I1pcXTA0Zt4wg8YiZRdE8UV9E367l2JUciMZf/FPzlqfS cILH5t30quHLI82oM7xkrIA+1mafPfZSa8I5kb5pTlrbKCl/EAgZq+2IXB87gVDD gcrQmLQvtpTjByXItajXPlCIW39r9wn2PWuQcmp9bKsjSuc8VBNI07ZI+mDPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUljiaOaDbzg2GqLeMLLIA8vAuzc0wHwYDVR0j BBgwFoAU67lLSk/DkX7mHSdklwz8oQFbvPEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWFjNjE1NWUtMmQyZi00ZjllLWIyMTgtZWI1MjViM2ExMTE5LzAvRUJCOTRCNEE0 RkMzOTE3RUU2MUQyNzY0OTcwQ0ZDQTEwMTVCQkNGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQkI5NEI0QTRGQzM5MTdFRTYxRDI3NjQ5NzBDRkNBMTAxNUJC Q0YxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWFjNjE1NWUtMmQyZi00ZjllLWIy MTgtZWI1MjViM2ExMTE5LzAvRUJCOTRCNEE0RkMzOTE3RUU2MUQyNzY0OTcwQ0ZD QTEwMTVCQkNGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACVXUVZ2ZIWS1ezwXWwd4iDlAilSUgKuO2F1 RsI83Vf5JMqf+pB6Dy45R4Mk18PjlEniRaO1ftJfr1LecC/5cQonfQaisxghMSRQ T+pUlAZQWJmIJ5WdbVLFQIYqdKJ1292QT2kiQdRhJYt5KERwUQsfqZCvYDikH4Id elcqSZZa8KBYLhh3GUrAPEIDxRMfd78deKFzKaWoXktlQY6n2ltbIECz/3tWQsfC VyTREf73tI82joJNzodtdwjYNR1IEE5SBefIuztN+gta5g4Kjdvw6qpO40LYD8Lk DDF5e2ZtDrDbT4fuIqX8nt6dUQRGlVffTSNrOz5ZnfBiGdVUm7Q= -----END CERTIFICATE-----Generated at Wed Jun 17 11:12:03 2026 by rpki-client