$ rpki-client -vvf rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft File: EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft (raw, json) Hash identifier: mBU7buNaIFlzWmNJMa/TiYHZv0oRBiktQfCPY3Geh90= Subject key identifier: 4E:4B:61:50:6C:48:04:81:A0:50:E0:B6:4A:35:6D:DF:D1:A7:61:E5 Authority key identifier: EA:F1:1A:8E:D0:35:AD:ED:15:9E:09:77:A5:5B:8A:13:5A:2D:BA:F0 Certificate issuer: /CN=EAF11A8ED035ADED159E0977A55B8A135A2DBAF0 Certificate serial: 6A5E46AAFBB26E67A07475604FE9B7D2C4B54AD5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft Manifest number: 3B Signing time: Mon 15 Jun 2026 06:29:13 +0000 Manifest this update: Mon 15 Jun 2026 06:24:13 +0000 Manifest next update: Tue 16 Jun 2026 09:01:13 +0000 Files and hashes: 1: 3132312e3130312e3138352e302f32342d3234203d3e203338373835.roa (hash: njy5/kh9KsnXyn0A9UeBHDQF9Tkk8vaMqIfNa9Qx8CA=) 2: 3132312e3130312e3139302e302f32342d3234203d3e203338373835.roa (hash: kOLyF61iZDyTGCpcXoqG6pGYD92Lf55fGKKsSX0XUdE=) 3: 3132312e3130312e3138342e302f32342d3234203d3e203338373835.roa (hash: 3mA7+mzgag84qW1ECVIx+vVoMA11/hm1+8F3im5FSgM=) 4: 3132312e3130312e3138372e302f32342d3234203d3e203338373835.roa (hash: eow5kZw+wlYHSjxq5MYrTPBsAbbgLnc6v4ENArx4+O8=) 5: 3132312e3130312e3139312e302f32342d3234203d3e203338373835.roa (hash: hd0faeOSPJPRBzPByoIXVnw8NPD4bzR2wSWzwHgoQPA=) 6: 3132312e3130312e3138362e302f32342d3234203d3e203338373835.roa (hash: o0yYhvbuoFqhEPym4z+ZdJk3Le3FK4ab18rxhmTiTA8=) 7: 3132312e3130312e3138382e302f32342d3234203d3e203338373835.roa (hash: jtsuDztEZ+UqFnwxVIum5heFrLrZtRBLCrlDOZVW974=) 8: EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.crl (hash: P43oREvswstlLz/JoA8PuYNmOIRKJAHvlRdNJYPU7Fg=) 9: 3132312e3130312e3138392e302f32342d3234203d3e203338373835.roa (hash: pWwlBOgo0c3x6IIcXfvg9KBIWmKkPWfxlYAnYQTVkEg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.crl rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Jun 2026 03:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:5e:46:aa:fb:b2:6e:67:a0:74:75:60:4f:e9:b7:d2:c4:b5:4a:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAF11A8ED035ADED159E0977A55B8A135A2DBAF0 Validity Not Before: Jun 15 06:24:13 2026 GMT Not After : Jun 16 09:01:13 2026 GMT Subject: CN=4E4B61506C480481A050E0B64A356DDFD1A761E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:57:d1:fa:f3:55:2a:8b:1d:c4:e4:01:6a:a6: 0f:fd:a9:62:d3:5c:b2:fa:79:26:90:98:92:92:0c: b3:42:82:b1:e9:3c:f5:e3:b7:38:5d:40:2e:fe:1f: 2f:0e:1c:6f:72:8b:c0:2a:4e:dc:ac:74:e7:f6:e0: 6a:94:cd:67:86:fa:0f:6b:e0:26:d2:4c:a6:26:75: f3:9e:96:9e:7b:17:48:eb:20:4d:61:ce:d8:a3:31: 4f:de:cd:2b:14:44:f6:75:c4:b5:22:79:20:8e:d5: 95:c2:8d:77:b4:40:8a:b7:d4:32:48:a5:fb:92:67: 0b:31:01:db:b9:85:1d:63:a4:e9:fa:9f:95:19:9d: ec:62:eb:49:e8:56:cb:e8:f5:cb:7b:b5:a4:f9:46: a7:53:1f:bb:03:ba:76:32:8f:8f:57:6b:9c:a8:e1: 70:a3:17:19:f6:61:9f:ca:ad:1c:26:e3:56:01:41: 61:59:3c:0b:b7:b1:25:e4:8f:a6:e2:19:bf:72:8f: 24:6f:45:c1:1a:49:e2:de:7f:2f:00:cf:3c:6d:ab: 45:6c:1a:e7:0c:5c:9f:63:1d:5c:53:3b:98:46:80: d1:b6:27:4d:33:df:ac:da:f0:39:87:80:35:c4:63: c0:12:ea:07:37:c0:ff:22:9b:22:46:68:98:0e:82: 58:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:4B:61:50:6C:48:04:81:A0:50:E0:B6:4A:35:6D:DF:D1:A7:61:E5 X509v3 Authority Key Identifier: keyid:EA:F1:1A:8E:D0:35:AD:ED:15:9E:09:77:A5:5B:8A:13:5A:2D:BA:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:76:3c:8b:bd:c8:99:34:ae:db:37:63:c6:2e:0d:f7:93:4e: cf:4b:d7:39:4d:73:07:2f:6d:ed:47:23:ab:41:af:9c:d4:09: fa:6e:31:01:4f:c2:1f:28:8e:df:26:de:f0:32:bb:d4:d2:ba: f5:48:d2:38:fd:7c:4d:ba:55:22:55:43:f3:dd:5a:f8:73:ab: 4a:e6:7a:11:6b:7f:ae:ea:8c:31:c1:19:4e:0d:1f:f8:1e:40: ba:3b:05:85:75:bc:fe:ef:35:03:7e:4e:f1:e9:fc:86:5c:c8: a9:16:24:84:60:73:fd:ab:e3:b8:5a:c5:b4:d3:72:86:c6:de: e5:4c:1a:71:da:f7:9c:4a:07:b5:19:11:56:fa:51:ae:a9:77: e8:7f:e5:f6:d9:ae:b7:58:4a:ef:ef:06:88:43:1f:ed:fe:89: f9:8e:69:72:84:7d:72:1b:c9:5c:ca:d5:e2:44:cf:e4:87:2c: 49:94:04:ea:5e:e0:4c:53:15:c5:55:19:5b:cd:ad:97:cc:b3: f4:18:37:40:07:f4:db:b5:c7:9d:18:c1:db:8e:20:39:71:04: fb:2c:ab:9a:63:94:b3:ff:de:08:ec:1f:50:37:ac:fa:fb:5c: 78:7c:1a:ff:91:a1:21:1a:18:24:5f:a8:3e:e1:e2:ce:11:84: 0f:2b:64:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUal5GqvuybmegdHVgT+m30sS1StUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFGMTFBOEVEMDM1QURFRDE1OUUwOTc3QTU1QjhBMTM1 QTJEQkFGMDAeFw0yNjA2MTUwNjI0MTNaFw0yNjA2MTYwOTAxMTNaMDMxMTAvBgNV BAMTKDRFNEI2MTUwNkM0ODA0ODFBMDUwRTBCNjRBMzU2RERGRDFBNzYxRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWV9H681Uqix3E5AFqpg/9qWLT XLL6eSaQmJKSDLNCgrHpPPXjtzhdQC7+Hy8OHG9yi8AqTtysdOf24GqUzWeG+g9r 4CbSTKYmdfOelp57F0jrIE1hztijMU/ezSsURPZ1xLUieSCO1ZXCjXe0QIq31DJI pfuSZwsxAdu5hR1jpOn6n5UZnexi60noVsvo9ct7taT5RqdTH7sDunYyj49Xa5yo 4XCjFxn2YZ/KrRwm41YBQWFZPAu3sSXkj6biGb9yjyRvRcEaSeLefy8Azzxtq0Vs GucMXJ9jHVxTO5hGgNG2J00z36za8DmHgDXEY8AS6gc3wP8imyJGaJgOglg/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTkthUGxIBIGgUOC2SjVt39GnYeUwHwYDVR0j BBgwFoAU6vEajtA1re0Vngl3pVuKE1otuvAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTU3MmRmYmUtNGNhMC00YTQ2LTgwMzctNDk2OGVkOTdjYWRjLzAvRUFGMTFBOEVE MDM1QURFRDE1OUUwOTc3QTU1QjhBMTM1QTJEQkFGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQUYxMUE4RUQwMzVBREVEMTU5RTA5NzdBNTVCOEExMzVBMkRC QUYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTU3MmRmYmUtNGNhMC00YTQ2LTgw MzctNDk2OGVkOTdjYWRjLzAvRUFGMTFBOEVEMDM1QURFRDE1OUUwOTc3QTU1QjhB MTM1QTJEQkFGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ52PIu9yJk0rts3Y8YuDfeTTs9L1zlNcwcv be1HI6tBr5zUCfpuMQFPwh8ojt8m3vAyu9TSuvVI0jj9fE26VSJVQ/PdWvhzq0rm ehFrf67qjDHBGU4NH/geQLo7BYV1vP7vNQN+TvHp/IZcyKkWJIRgc/2r47haxbTT cobG3uVMGnHa95xKB7UZEVb6Ua6pd+h/5fbZrrdYSu/vBohDH+3+ifmOaXKEfXIb yVzK1eJEz+SHLEmUBOpe4ExTFcVVGVvNrZfMs/QYN0AH9Nu1x50YwduOIDlxBPss q5pjlLP/3gjsH1A3rPr7XHh8Gv+RoSEaGCRfqD7h4s4RhA8rZFs= -----END CERTIFICATE-----Generated at Mon Jun 15 13:58:42 2026 by rpki-client