$ rpki-client -vvf rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.mft File: EBA1F4874C4867D2CAA214867052E9413088CD22.mft (raw, json) Hash identifier: +MLR9PWlAyHL1ar24ATxA0V6msAkV1Wh2VghxbpBeRs= Subject key identifier: FD:07:D4:3C:85:24:23:03:80:23:C0:01:8E:81:D4:69:FC:2E:89:F9 Authority key identifier: EB:A1:F4:87:4C:48:67:D2:CA:A2:14:86:70:52:E9:41:30:88:CD:22 Certificate issuer: /CN=EBA1F4874C4867D2CAA214867052E9413088CD22 Certificate serial: 3A2079C567050F7498DB24A2930FCB0B3DFD73F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EBA1F4874C4867D2CAA214867052E9413088CD22.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 01:39:46 +0000 Manifest this update: Wed 17 Jun 2026 01:34:46 +0000 Manifest next update: Thu 18 Jun 2026 02:10:46 +0000 Files and hashes: 1: 3136302e31392e3230362e302f32342d3234203d3e20313532373634.roa (hash: rkfIQLZH91MBngOR2XF3JSvb0x7kp9rSE9FoBc2wVuU=) 2: 3136302e31392e3230372e302f32342d3234203d3e20313532373634.roa (hash: Rsj+zG8fTbANuQe+LowjpWqzpy4Nr2I6Rkz77sVkBRk=) 3: EBA1F4874C4867D2CAA214867052E9413088CD22.crl (hash: HNHYhgoxdveLE2mk46xkgX9Y/z+wXQ6BSP30iFGh3XE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.crl rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EBA1F4874C4867D2CAA214867052E9413088CD22.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 02:10:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:20:79:c5:67:05:0f:74:98:db:24:a2:93:0f:cb:0b:3d:fd:73:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBA1F4874C4867D2CAA214867052E9413088CD22 Validity Not Before: Jun 17 01:34:46 2026 GMT Not After : Jun 18 02:10:46 2026 GMT Subject: CN=FD07D43C852423038023C0018E81D469FC2E89F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:21:4e:3f:16:76:36:f1:34:80:46:63:7c:cc: 51:44:42:d4:be:f7:af:8f:5b:59:59:b4:5c:d4:6f: a8:ef:d5:69:1e:26:a5:9e:15:22:44:1f:14:a0:fd: aa:d0:13:9f:81:10:59:9e:cf:f2:7f:0f:c7:28:fb: e4:6d:2a:2c:8f:41:21:bd:10:a2:ac:5d:fb:09:ab: 6c:a4:e4:81:0e:b1:4a:69:7d:6c:76:b9:e6:ab:5d: 02:81:4f:a2:ca:5e:8b:a6:1e:9d:0b:e0:23:f1:f6: 4b:c9:f2:09:4e:ba:b7:7e:9a:0f:f1:ed:eb:82:71: dd:d0:6f:42:39:50:1e:07:09:42:14:a7:3a:2f:c6: 9d:c9:e1:88:8a:f2:51:74:a5:67:79:d4:46:43:59: 6a:f7:36:a5:ac:a9:81:f3:14:a9:a8:12:bf:e4:a7: d8:a2:1d:14:e3:34:65:d0:af:dd:58:59:b8:f4:63: 41:dd:ef:84:c9:1a:0c:74:83:1b:98:e5:03:28:3c: e8:67:14:de:d4:e9:1f:7d:b3:43:41:4e:4d:ee:c6: 95:f3:23:b3:1f:b0:9b:63:13:88:68:c6:43:b2:07: 3a:7c:42:73:f3:bb:57:52:ab:d4:44:78:21:aa:0b: 5d:d9:05:8b:c9:6f:f2:b5:94:f0:0c:79:db:41:c9: 99:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:07:D4:3C:85:24:23:03:80:23:C0:01:8E:81:D4:69:FC:2E:89:F9 X509v3 Authority Key Identifier: keyid:EB:A1:F4:87:4C:48:67:D2:CA:A2:14:86:70:52:E9:41:30:88:CD:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EBA1F4874C4867D2CAA214867052E9413088CD22.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:02:95:9d:fb:a3:9d:fb:ab:8d:3a:44:32:6f:87:55:df:99: e0:b7:31:fc:6b:4e:48:6d:f3:41:5e:ce:64:f8:0d:a9:9b:d7: 66:bc:56:bb:a2:55:87:e0:cc:a6:1f:fa:fd:34:79:25:6e:25: 4e:ad:e3:ee:b9:1a:8b:f8:3b:04:69:ed:71:e9:f3:f2:4e:45: 04:3d:42:6c:e4:4f:fa:24:fc:41:b3:d8:3b:ec:14:f2:45:a8: b7:d8:a1:aa:42:6c:14:2a:f3:aa:e2:cf:97:67:40:55:60:3e: 56:42:3e:29:28:1e:39:4d:0d:8b:77:43:d5:a0:4c:60:87:29: e3:d6:39:da:a2:4c:e7:d2:9c:c4:6f:9e:9b:e3:9e:78:b4:ea: eb:5f:15:76:da:80:d5:1e:88:17:de:35:22:54:54:d6:b3:1b: 14:7d:4e:32:5d:99:e4:6a:fa:79:35:c1:92:c4:a5:3d:41:34: 0c:40:9b:c8:b6:b6:94:dd:e5:29:10:c9:14:fb:1e:29:c8:88: 70:ec:b8:21:42:10:37:40:03:7f:ec:0b:88:8c:30:c2:98:50: bb:9b:83:6a:75:7f:a0:c3:a9:b0:5c:90:17:c1:f2:dd:91:e2: 54:89:87:d8:d6:12:19:bc:b0:03:4e:6e:7a:35:b1:5b:6a:ba: d7:2e:b8:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOiB5xWcFD3SY2ySikw/LCz39c/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJBMUY0ODc0QzQ4NjdEMkNBQTIxNDg2NzA1MkU5NDEz MDg4Q0QyMjAeFw0yNjA2MTcwMTM0NDZaFw0yNjA2MTgwMjEwNDZaMDMxMTAvBgNV BAMTKEZEMDdENDNDODUyNDIzMDM4MDIzQzAwMThFODFENDY5RkMyRTg5RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9IU4/FnY28TSARmN8zFFEQtS+ 96+PW1lZtFzUb6jv1WkeJqWeFSJEHxSg/arQE5+BEFmez/J/D8co++RtKiyPQSG9 EKKsXfsJq2yk5IEOsUppfWx2uearXQKBT6LKXoumHp0L4CPx9kvJ8glOurd+mg/x 7euCcd3Qb0I5UB4HCUIUpzovxp3J4YiK8lF0pWd51EZDWWr3NqWsqYHzFKmoEr/k p9iiHRTjNGXQr91YWbj0Y0Hd74TJGgx0gxuY5QMoPOhnFN7U6R99s0NBTk3uxpXz I7MfsJtjE4hoxkOyBzp8QnPzu1dSq9REeCGqC13ZBYvJb/K1lPAMedtByZmrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/QfUPIUkIwOAI8ABjoHUafwuifkwHwYDVR0j BBgwFoAU66H0h0xIZ9LKohSGcFLpQTCIzSIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2IyYTkxNmEtYWQyMi00OTc5LWJlNDMtOTUxYzc2ZjJmOTIwLzAvRUJBMUY0ODc0 QzQ4NjdEMkNBQTIxNDg2NzA1MkU5NDEzMDg4Q0QyMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQkExRjQ4NzRDNDg2N0QyQ0FBMjE0ODY3MDUyRTk0MTMwODhD RDIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2IyYTkxNmEtYWQyMi00OTc5LWJl NDMtOTUxYzc2ZjJmOTIwLzAvRUJBMUY0ODc0QzQ4NjdEMkNBQTIxNDg2NzA1MkU5 NDEzMDg4Q0QyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHIClZ37o537q406RDJvh1XfmeC3MfxrTkht 80FezmT4Damb12a8VruiVYfgzKYf+v00eSVuJU6t4+65Gov4OwRp7XHp8/JORQQ9 QmzkT/ok/EGz2DvsFPJFqLfYoapCbBQq86riz5dnQFVgPlZCPikoHjlNDYt3Q9Wg TGCHKePWOdqiTOfSnMRvnpvjnni06utfFXbagNUeiBfeNSJUVNazGxR9TjJdmeRq +nk1wZLEpT1BNAxAm8i2tpTd5SkQyRT7HinIiHDsuCFCEDdAA3/sC4iMMMKYULub g2p1f6DDqbBckBfB8t2R4lSJh9jWEhm8sANObno1sVtqutcuuJ8= -----END CERTIFICATE-----Generated at Wed Jun 17 10:43:46 2026 by rpki-client