$ rpki-client -vvf rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.mft File: EB314E0C129A5CAF077447531422664A0DBA21EB.mft (raw, json) Hash identifier: E21IfTZxLvt1mmOCGIykAgrsL/1Hk5RfoICrKL8xp/s= Subject key identifier: DF:61:94:8B:51:85:80:22:39:59:91:32:5D:8E:20:D0:F5:FB:D8:09 Authority key identifier: EB:31:4E:0C:12:9A:5C:AF:07:74:47:53:14:22:66:4A:0D:BA:21:EB Certificate issuer: /CN=EB314E0C129A5CAF077447531422664A0DBA21EB Certificate serial: 06CBC46D9EB9A12513C1B810A691C1F16DB97B37 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB314E0C129A5CAF077447531422664A0DBA21EB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 08:28:12 +0000 Manifest this update: Wed 17 Jun 2026 08:23:12 +0000 Manifest next update: Thu 18 Jun 2026 12:27:12 +0000 Files and hashes: 1: 3130332e34392e3233302e302f32342d3234203d3e203633383638.roa (hash: XZkVD58+fA+9TgN/E8SS+oOsYxABbo9pdQXTqmdzBkg=) 2: EB314E0C129A5CAF077447531422664A0DBA21EB.crl (hash: w79H0e1Qb/QZZvVus3a1R/J5i/3M56chxBB1jKjYsps=) 3: 3130332e34392e3232382e302f32342d3234203d3e203633383638.roa (hash: un5/MncOqw/wwzU2UuxhsRYNEiAYmLczzv4yniu8AsM=) 4: 3130332e34392e3233312e302f32342d3234203d3e203633383638.roa (hash: Y2m4R38G71C4Yy/wcE7dbb3Q4JyEjJy1AWb7+OggzPM=) 5: 3130332e34392e3232392e302f32342d3234203d3e203633383638.roa (hash: A5PltxTRAuGwKx7Z5AFNGaTklePgssNYT6aD4qcBx0s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.crl rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB314E0C129A5CAF077447531422664A0DBA21EB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:cb:c4:6d:9e:b9:a1:25:13:c1:b8:10:a6:91:c1:f1:6d:b9:7b:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB314E0C129A5CAF077447531422664A0DBA21EB Validity Not Before: Jun 17 08:23:12 2026 GMT Not After : Jun 18 12:27:12 2026 GMT Subject: CN=DF61948B51858022395991325D8E20D0F5FBD809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f2:e9:87:58:e5:b1:af:8b:70:ad:7d:8e:07: 91:b8:37:cd:43:79:88:bf:5d:ba:1d:2e:0e:da:b9: 6f:05:20:94:14:df:8e:40:b5:b9:51:90:17:73:eb: 43:01:9e:f5:fa:fa:e8:85:63:1f:e1:fa:e8:92:e3: 43:48:d5:e7:36:fb:14:4c:4a:8f:0f:68:c0:59:b3: 49:b9:9c:4a:4a:59:dc:2c:c6:56:d7:3d:a5:d2:f1: 2d:28:4a:91:93:1a:db:1f:cb:be:69:2c:04:c1:6a: 17:9e:1f:92:20:38:66:e6:9a:e1:ae:1f:fb:c7:2c: 9e:ff:a6:5e:a7:e6:dc:03:08:4c:3d:b3:e8:b8:f8: 3b:74:a6:14:81:be:74:45:d0:c0:95:9c:de:d3:df: 0b:ba:6a:8c:d3:2a:65:94:47:51:6b:fd:dd:b3:33: 20:8f:1a:ac:12:32:42:dd:5e:46:de:b6:17:3a:2b: b8:25:54:80:57:56:21:d5:7e:58:2b:fc:5e:ea:2f: 59:58:32:4b:7f:86:b0:41:43:4a:6b:19:85:c7:37: 48:77:85:62:de:83:74:69:b7:b0:7d:3f:4f:67:a3: ac:ae:b7:72:c3:23:1e:b5:7e:15:4b:f0:d6:25:d7: 13:aa:24:fe:c5:87:ce:a1:0f:8c:10:07:18:1b:a8: e0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:61:94:8B:51:85:80:22:39:59:91:32:5D:8E:20:D0:F5:FB:D8:09 X509v3 Authority Key Identifier: keyid:EB:31:4E:0C:12:9A:5C:AF:07:74:47:53:14:22:66:4A:0D:BA:21:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB314E0C129A5CAF077447531422664A0DBA21EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:dc:45:71:ae:cf:a7:f4:c0:af:dd:ac:b7:9b:21:0b:36:38: 1b:f7:6b:fb:bf:20:ae:8a:be:f3:40:be:0f:8b:3f:9f:87:6f: 18:d8:86:d3:85:b0:9e:82:86:09:1b:76:fa:a6:c4:f5:47:2e: 85:62:58:19:3a:a0:3f:7a:92:a3:12:76:d5:56:b1:e7:1a:16: 4a:0b:24:cd:a9:57:6c:9f:57:54:39:8c:1e:9d:94:60:74:76: be:23:17:13:ee:90:81:04:00:4d:a7:4a:f8:cc:28:21:e2:c8: 8b:0d:71:fc:a2:22:28:37:81:07:e2:1a:91:2d:a5:4c:e7:6e: e5:60:1a:c5:2c:4b:ca:13:19:12:d2:6d:73:2d:0a:de:64:bc: d0:59:0e:a0:c4:d4:bf:8f:b6:49:b6:cc:9e:79:ab:3f:b1:59: 7e:8d:96:71:cb:b4:25:02:04:7e:39:26:55:fc:75:c5:ac:ce: ef:22:39:5c:f8:91:f4:81:c7:9a:98:25:57:3c:46:21:70:d3: 7d:78:e4:ef:8f:14:08:8a:29:61:2b:51:e2:7a:c9:54:e0:02: 89:5b:16:ed:de:88:72:70:76:95:a9:fb:68:dc:b8:53:a3:84: 29:95:68:08:11:2f:1a:76:40:cc:cb:b2:c9:c9:1d:a3:3a:cf: f2:ab:88:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBsvEbZ65oSUTwbgQppHB8W25ezcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUIzMTRFMEMxMjlBNUNBRjA3NzQ0NzUzMTQyMjY2NEEw REJBMjFFQjAeFw0yNjA2MTcwODIzMTJaFw0yNjA2MTgxMjI3MTJaMDMxMTAvBgNV BAMTKERGNjE5NDhCNTE4NTgwMjIzOTU5OTEzMjVEOEUyMEQwRjVGQkQ4MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt8umHWOWxr4twrX2OB5G4N81D eYi/XbodLg7auW8FIJQU345AtblRkBdz60MBnvX6+uiFYx/h+uiS40NI1ec2+xRM So8PaMBZs0m5nEpKWdwsxlbXPaXS8S0oSpGTGtsfy75pLATBaheeH5IgOGbmmuGu H/vHLJ7/pl6n5twDCEw9s+i4+Dt0phSBvnRF0MCVnN7T3wu6aozTKmWUR1Fr/d2z MyCPGqwSMkLdXkbethc6K7glVIBXViHVflgr/F7qL1lYMkt/hrBBQ0prGYXHN0h3 hWLeg3Rpt7B9P09no6yut3LDIx61fhVL8NYl1xOqJP7Fh86hD4wQBxgbqODTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU32GUi1GFgCI5WZEyXY4g0PX72AkwHwYDVR0j BBgwFoAU6zFODBKaXK8HdEdTFCJmSg26IeswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDM3MTkyOWQtYzNkMC00ZGFhLWI1ZmQtYTI0OTU2MGQ1ZDA0LzAvRUIzMTRFMEMx MjlBNUNBRjA3NzQ0NzUzMTQyMjY2NEEwREJBMjFFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQjMxNEUwQzEyOUE1Q0FGMDc3NDQ3NTMxNDIyNjY0QTBEQkEy MUVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDM3MTkyOWQtYzNkMC00ZGFhLWI1 ZmQtYTI0OTU2MGQ1ZDA0LzAvRUIzMTRFMEMxMjlBNUNBRjA3NzQ0NzUzMTQyMjY2 NEEwREJBMjFFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAITcRXGuz6f0wK/drLebIQs2OBv3a/u/IK6K vvNAvg+LP5+HbxjYhtOFsJ6ChgkbdvqmxPVHLoViWBk6oD96kqMSdtVWsecaFkoL JM2pV2yfV1Q5jB6dlGB0dr4jFxPukIEEAE2nSvjMKCHiyIsNcfyiIig3gQfiGpEt pUznbuVgGsUsS8oTGRLSbXMtCt5kvNBZDqDE1L+Ptkm2zJ55qz+xWX6NlnHLtCUC BH45JlX8dcWszu8iOVz4kfSBx5qYJVc8RiFw03145O+PFAiKKWErUeJ6yVTgAolb Fu3eiHJwdpWp+2jcuFOjhCmVaAgRLxp2QMzLssnJHaM6z/KriJI= -----END CERTIFICATE-----Generated at Wed Jun 17 10:40:17 2026 by rpki-client