$ rpki-client -vvf rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.mft File: EBF23572810F8726C4B72E50589964A910C50B4B.mft (raw, json) Hash identifier: Sied5xYsLfZN3GDSHfMKOwT8dLVzPxTPy0iQYV6bWWk= Subject key identifier: B3:96:BE:5A:8C:5C:91:EB:3D:E7:00:54:7A:34:E9:CE:2D:47:34:A8 Authority key identifier: EB:F2:35:72:81:0F:87:26:C4:B7:2E:50:58:99:64:A9:10:C5:0B:4B Certificate issuer: /CN=EBF23572810F8726C4B72E50589964A910C50B4B Certificate serial: 0B8EB92883A9F9C2326E70E129ABA9C50061632E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBF23572810F8726C4B72E50589964A910C50B4B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 16:49:31 +0000 Manifest this update: Tue 16 Jun 2026 16:44:31 +0000 Manifest next update: Wed 17 Jun 2026 19:30:31 +0000 Files and hashes: 1: 3130332e3135312e39322e302f32332d3234203d3e203435323935.roa (hash: l97XL+b3anmLCwyyq3iPYCEWOtlJt1r4AiG3G4acaMc=) 2: 323430373a343630303a3a2f33322d3438203d3e203435323935.roa (hash: pwFWQeeNE8aLdvpKEf3Cftf5A02g3uDsYu8O+3yCUbE=) 3: 3131332e3231322e3136302e302f32312d3234203d3e203435323935.roa (hash: sfi5wZHa7EFMZctUVQihd5OvgHWotWx/JrU33FAshF0=) 4: EBF23572810F8726C4B72E50589964A910C50B4B.crl (hash: WTNvk8wDrZGglaRvU6dIfmL+D1arIYpiaivuhjwwiY4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.crl rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBF23572810F8726C4B72E50589964A910C50B4B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:8e:b9:28:83:a9:f9:c2:32:6e:70:e1:29:ab:a9:c5:00:61:63:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBF23572810F8726C4B72E50589964A910C50B4B Validity Not Before: Jun 16 16:44:31 2026 GMT Not After : Jun 17 19:30:31 2026 GMT Subject: CN=B396BE5A8C5C91EB3DE700547A34E9CE2D4734A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:86:35:84:fb:ba:c1:fa:b8:6b:f4:25:f7:25: c7:ec:02:c5:99:07:97:f9:58:61:f9:a7:14:30:9a: a9:19:2a:e3:8c:2c:45:9d:36:7c:46:5a:2f:a9:93: 56:80:04:5e:4b:45:62:ad:c6:31:48:67:b9:7e:cb: 21:47:72:ee:49:f9:41:e3:b8:c2:40:71:02:dc:37: 1c:80:fc:05:6d:5f:e8:b8:9b:01:1a:2d:d5:67:7c: 5f:4b:f9:9f:a4:0f:6f:f6:44:46:69:b9:bc:e2:4e: 91:65:8d:08:8f:1e:7b:22:01:a4:a9:95:90:56:03: 4e:88:a4:c2:d3:bf:de:23:c2:db:06:d1:ef:43:a8: e8:ad:ff:d8:4d:ad:54:b2:17:6d:0d:03:e5:93:0a: a8:49:a9:7c:bc:b9:94:dd:40:06:c8:17:a6:c6:c5: e0:88:7c:cf:70:74:db:06:27:68:7c:de:00:05:fc: 27:cc:22:d8:de:e8:95:db:81:c9:83:23:39:a5:ce: 0f:37:a9:b0:fe:d1:a9:b4:1b:25:1b:2a:0f:fb:fb: 66:a5:6d:8a:7d:9a:30:3f:75:4f:41:da:24:62:a0: b4:07:5b:54:78:cc:59:5e:8b:70:c6:c8:aa:e6:89: 43:8c:36:51:bc:69:4f:df:8a:b0:55:c2:00:0f:85: 5c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:96:BE:5A:8C:5C:91:EB:3D:E7:00:54:7A:34:E9:CE:2D:47:34:A8 X509v3 Authority Key Identifier: keyid:EB:F2:35:72:81:0F:87:26:C4:B7:2E:50:58:99:64:A9:10:C5:0B:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBF23572810F8726C4B72E50589964A910C50B4B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:cd:de:27:4e:cf:47:ce:f5:1c:bf:12:15:a2:6a:af:88:94: d4:58:70:4e:97:12:ce:ac:af:61:14:cb:0a:8b:5c:4e:81:38: 56:32:dc:82:53:a0:4f:6a:18:2f:f1:2f:52:6b:93:c6:5a:c5: 8e:0d:58:07:1d:6a:34:ee:5f:95:45:86:2d:41:74:a6:92:fb: 7a:d0:88:6e:ba:11:d4:e2:97:91:75:3a:30:46:b5:c4:fe:54: 3d:d8:04:c8:70:63:5f:5e:25:5c:9e:8a:73:6b:b9:ae:2d:d6: 0a:93:5c:81:a0:52:82:90:cd:19:98:9e:e3:f6:fb:64:56:16: 2f:86:ba:90:bf:aa:b1:28:2f:51:c4:3d:39:d9:6a:34:8f:b2: 86:e0:b9:e7:63:90:0f:f3:67:06:80:d5:2a:25:a9:93:c6:c2: ec:87:5d:00:3e:a0:a6:cd:c1:6d:b3:d6:ff:89:23:f1:d9:c8: 8d:db:7a:e5:fe:84:fa:a6:5e:58:44:d5:33:41:3f:5b:a8:b9: 12:18:56:d7:bf:cf:8f:83:85:02:9b:3f:b8:e1:e5:da:01:96: 35:e0:ea:45:28:cd:55:b2:cc:91:5c:68:3a:bf:60:6e:36:10: 93:84:d1:ef:70:5e:1c:e0:03:29:89:13:41:6e:e7:a7:30:e4: 82:3e:9c:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC465KIOp+cIybnDhKaupxQBhYy4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJGMjM1NzI4MTBGODcyNkM0QjcyRTUwNTg5OTY0QTkx MEM1MEI0QjAeFw0yNjA2MTYxNjQ0MzFaFw0yNjA2MTcxOTMwMzFaMDMxMTAvBgNV BAMTKEIzOTZCRTVBOEM1QzkxRUIzREU3MDA1NDdBMzRFOUNFMkQ0NzM0QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCthjWE+7rB+rhr9CX3JcfsAsWZ B5f5WGH5pxQwmqkZKuOMLEWdNnxGWi+pk1aABF5LRWKtxjFIZ7l+yyFHcu5J+UHj uMJAcQLcNxyA/AVtX+i4mwEaLdVnfF9L+Z+kD2/2REZpubziTpFljQiPHnsiAaSp lZBWA06IpMLTv94jwtsG0e9DqOit/9hNrVSyF20NA+WTCqhJqXy8uZTdQAbIF6bG xeCIfM9wdNsGJ2h83gAF/CfMItje6JXbgcmDIzmlzg83qbD+0am0GyUbKg/7+2al bYp9mjA/dU9B2iRioLQHW1R4zFlei3DGyKrmiUOMNlG8aU/firBVwgAPhVznAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs5a+Woxckes95wBUejTpzi1HNKgwHwYDVR0j BBgwFoAU6/I1coEPhybEty5QWJlkqRDFC0swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDRmNDhhODktOTBjNS00ZjVhLTgwMTUtMzZmMTE5NmE3MWM4LzAvRUJGMjM1NzI4 MTBGODcyNkM0QjcyRTUwNTg5OTY0QTkxMEM1MEI0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQkYyMzU3MjgxMEY4NzI2QzRCNzJFNTA1ODk5NjRBOTEwQzUw QjRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDRmNDhhODktOTBjNS00ZjVhLTgw MTUtMzZmMTE5NmE3MWM4LzAvRUJGMjM1NzI4MTBGODcyNkM0QjcyRTUwNTg5OTY0 QTkxMEM1MEI0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAETN3idOz0fO9Ry/EhWiaq+IlNRYcE6XEs6s r2EUywqLXE6BOFYy3IJToE9qGC/xL1Jrk8ZaxY4NWAcdajTuX5VFhi1BdKaS+3rQ iG66EdTil5F1OjBGtcT+VD3YBMhwY19eJVyeinNrua4t1gqTXIGgUoKQzRmYnuP2 +2RWFi+GupC/qrEoL1HEPTnZajSPsobguedjkA/zZwaA1SolqZPGwuyHXQA+oKbN wW2z1v+JI/HZyI3beuX+hPqmXlhE1TNBP1uouRIYVte/z4+DhQKbP7jh5doBljXg 6kUozVWyzJFcaDq/YG42EJOE0e9wXhzgAymJE0Fu56cw5II+nMs= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:40 2026 by rpki-client