$ rpki-client -vvf rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft File: EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft (raw, json) Hash identifier: WIpXOwhJ9cEsKVXGm78yiftbVTgHmkJ3CSq6iBT4bec= Subject key identifier: 94:C7:D0:21:09:20:11:2F:72:77:D6:A2:7E:57:AA:40:AF:8C:05:0C Authority key identifier: EA:F1:BB:C2:E7:85:2A:08:EC:97:26:DF:03:7B:7A:90:02:0F:61:3C Certificate issuer: /CN=EAF1BBC2E7852A08EC9726DF037B7A90020F613C Certificate serial: 5E518478F59294BB884C0E6A20DC3943EE173056 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 23:47:52 +0000 Manifest this update: Tue 16 Jun 2026 23:42:52 +0000 Manifest next update: Thu 18 Jun 2026 02:37:52 +0000 Files and hashes: 1: 3130332e37362e3135302e302f32342d3234203d3e20313335343737.roa (hash: xYxE6IzCdxb+aq4Kkm/AnjYa+vu3xdG+mLXx5vkCP/U=) 2: 3130332e37362e3135312e302f32342d3234203d3e20313335343737.roa (hash: qw6OlEu48FrPsEmKgwHPSjOidfOJLUIet7s/2iStFrA=) 3: 3130332e37362e3134382e302f32342d3234203d3e20313335343737.roa (hash: Tsm6R3Ykoq+qGUHJdq4ks8X4b5Uy0ypiE0/txgdjmm4=) 4: 3130332e37362e3134392e302f32342d3234203d3e20313335343737.roa (hash: f59rz1HETJlgvZwIKtKFdh5XtKqyQqDaf24eWmjJW6o=) 5: EAF1BBC2E7852A08EC9726DF037B7A90020F613C.crl (hash: 5SXHmY2Y2E/BgCGIAui98UeZEsi9KjJToHDcfFMB5l0=) 6: 3132302e38392e39302e302f32332d3234203d3e20313335343737.roa (hash: L8OlDd+zcMlp2nj6z/A4ihQhVRTYQCBk+qSvJaFpcus=) 7: 3230332e32392e32362e302f32342d3234203d3e20313335343737.roa (hash: 5DkSgMYDvgEBxCCplmwfDoevI8VI5H/bGiFDzCRHnts=) 8: 3130332e332e35382e302f32342d3234203d3e20313335343737.roa (hash: 2zqd8AgBddwBm4KIXvjiblLxU15/BrCCnreac7skVlA=) 9: 323430373a366638303a3a2f33322d3438203d3e20313335343737.roa (hash: P366bIkTOlc69Ppfa9a3mTWNreZ6tb8vIXj7vOkMLBM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.crl rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 02:37:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:51:84:78:f5:92:94:bb:88:4c:0e:6a:20:dc:39:43:ee:17:30:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAF1BBC2E7852A08EC9726DF037B7A90020F613C Validity Not Before: Jun 16 23:42:52 2026 GMT Not After : Jun 18 02:37:52 2026 GMT Subject: CN=94C7D0210920112F7277D6A27E57AA40AF8C050C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ed:0c:a8:4c:d8:dd:2e:f7:66:15:75:36:b2: eb:1f:0a:5e:0d:63:a4:d4:b3:9f:9a:7a:12:3f:d2: c5:24:27:96:a2:59:ea:9b:75:c4:b6:d7:9e:12:1e: 9d:80:78:a6:10:7d:a4:4f:81:27:68:8e:8f:d8:b7: c9:fc:e7:f9:b3:ea:a8:f9:87:e4:cb:c1:fb:3b:48: da:c4:f3:a1:fe:a0:6d:a7:7e:f8:49:45:1c:ee:71: 3e:02:16:9f:31:e3:bd:89:cb:a3:85:dd:53:81:54: 19:a2:63:41:94:72:aa:9b:5d:60:b8:b1:db:3d:3c: 52:39:ed:b2:27:ba:fb:18:be:65:8a:c9:4a:9e:47: 94:b1:1a:9b:ff:e2:c3:1d:1f:4f:0b:dd:e3:1a:c4: 67:84:e9:66:09:fe:71:39:9c:53:cb:f0:a7:67:b5: 94:5c:6d:ac:1b:99:95:0a:ae:47:4c:1b:93:f5:2c: 7b:1a:79:36:61:f3:43:4f:57:45:af:a9:89:db:0a: ab:dc:62:33:c4:0c:6e:6c:78:50:68:1a:f6:40:44: c3:64:5b:88:11:77:a6:d5:15:5c:48:e6:1d:45:38: 11:02:5e:5b:19:01:e8:29:31:3c:69:33:a0:f6:bc: f7:f3:1a:58:2a:ff:34:19:d5:18:88:39:a2:77:b1: 49:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:C7:D0:21:09:20:11:2F:72:77:D6:A2:7E:57:AA:40:AF:8C:05:0C X509v3 Authority Key Identifier: keyid:EA:F1:BB:C2:E7:85:2A:08:EC:97:26:DF:03:7B:7A:90:02:0F:61:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:43:27:53:fe:01:a1:29:ff:8c:01:a3:20:60:00:d6:a9:e3: 85:93:11:3b:0b:87:26:6d:e9:72:1d:34:d0:b6:e2:de:c7:5b: e1:fa:ca:90:c3:3d:0d:e2:d9:a2:62:7f:c5:97:6f:f7:54:03: ed:72:d0:87:e4:36:4c:be:78:06:1e:f3:33:47:25:54:43:d8: 7a:c5:11:f8:3f:cf:05:0d:33:5b:c7:a7:5e:8c:cd:d5:d3:53: b0:c6:17:eb:63:9a:25:ad:e3:5b:d8:96:3e:37:5d:13:10:5e: 7a:dd:3d:d8:98:fe:9c:be:93:29:20:a0:39:55:36:51:ab:27: 3d:ad:06:ea:36:5e:f0:61:a6:c3:af:37:9b:79:ab:d4:06:f1: 4e:f0:91:0a:db:c3:4e:49:e4:78:ac:d9:fa:34:9c:2c:fb:1b: a0:43:12:af:78:89:fd:e2:9f:84:53:7d:65:86:41:ff:6e:e3: b9:a2:f8:f9:c8:3e:60:b5:05:3e:66:d1:da:ad:fe:90:f5:e0: d6:ed:37:8d:cd:5e:fe:a9:4b:01:fd:be:b7:bd:9a:93:e5:31: d3:2d:09:5d:13:95:b2:62:62:99:55:e5:7d:5f:97:62:b1:a7: cb:a7:04:67:c0:ed:f0:41:59:54:87:6a:76:23:75:fc:14:f0: ae:9d:0b:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXlGEePWSlLuITA5qINw5Q+4XMFYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFGMUJCQzJFNzg1MkEwOEVDOTcyNkRGMDM3QjdBOTAw MjBGNjEzQzAeFw0yNjA2MTYyMzQyNTJaFw0yNjA2MTgwMjM3NTJaMDMxMTAvBgNV BAMTKDk0QzdEMDIxMDkyMDExMkY3Mjc3RDZBMjdFNTdBQTQwQUY4QzA1MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv7QyoTNjdLvdmFXU2susfCl4N Y6TUs5+aehI/0sUkJ5aiWeqbdcS2154SHp2AeKYQfaRPgSdojo/Yt8n85/mz6qj5 h+TLwfs7SNrE86H+oG2nfvhJRRzucT4CFp8x472Jy6OF3VOBVBmiY0GUcqqbXWC4 sds9PFI57bInuvsYvmWKyUqeR5SxGpv/4sMdH08L3eMaxGeE6WYJ/nE5nFPL8Kdn tZRcbawbmZUKrkdMG5P1LHsaeTZh80NPV0WvqYnbCqvcYjPEDG5seFBoGvZARMNk W4gRd6bVFVxI5h1FOBECXlsZAegpMTxpM6D2vPfzGlgq/zQZ1RiIOaJ3sUnnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlMfQIQkgES9yd9aifleqQK+MBQwwHwYDVR0j BBgwFoAU6vG7wueFKgjslybfA3t6kAIPYTwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTdmZGY0M2UtNGE0Yy00ZGJjLWI3ODUtZGQ3Y2JmMWE2N2I3LzAvRUFGMUJCQzJF Nzg1MkEwOEVDOTcyNkRGMDM3QjdBOTAwMjBGNjEzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQUYxQkJDMkU3ODUyQTA4RUM5NzI2REYwMzdCN0E5MDAyMEY2 MTNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTdmZGY0M2UtNGE0Yy00ZGJjLWI3 ODUtZGQ3Y2JmMWE2N2I3LzAvRUFGMUJCQzJFNzg1MkEwOEVDOTcyNkRGMDM3QjdB OTAwMjBGNjEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHZDJ1P+AaEp/4wBoyBgANap44WTETsLhyZt 6XIdNNC24t7HW+H6ypDDPQ3i2aJif8WXb/dUA+1y0IfkNky+eAYe8zNHJVRD2HrF Efg/zwUNM1vHp16MzdXTU7DGF+tjmiWt41vYlj43XRMQXnrdPdiY/py+kykgoDlV NlGrJz2tBuo2XvBhpsOvN5t5q9QG8U7wkQrbw05J5His2fo0nCz7G6BDEq94if3i n4RTfWWGQf9u47mi+PnIPmC1BT5m0dqt/pD14NbtN43NXv6pSwH9vre9mpPlMdMt CV0TlbJiYplV5X1fl2Kxp8unBGfA7fBBWVSHanYjdfwU8K6dC4c= -----END CERTIFICATE-----Generated at Wed Jun 17 09:42:32 2026 by rpki-client