$ rpki-client -vvf rpki-rsync.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.mft File: EBA9D784E9CC3F2A70EB526976A01F48F5F52951.mft (raw, json) Hash identifier: gILtIxTxhIhICRdCfPgSmcT380bB5tZG2Xrge06Wy5o= Subject key identifier: 45:DA:7F:0F:0F:C0:02:87:EB:8C:DD:F1:EC:C3:AF:B3:30:35:9E:92 Authority key identifier: EB:A9:D7:84:E9:CC:3F:2A:70:EB:52:69:76:A0:1F:48:F5:F5:29:51 Certificate issuer: /CN=EBA9D784E9CC3F2A70EB526976A01F48F5F52951 Certificate serial: 74532F081104DB66061B9FC380AC77AC0884069F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.mft Manifest number: 0E Signing time: Tue 12 May 2026 08:09:32 +0000 Manifest this update: Tue 12 May 2026 08:04:32 +0000 Manifest next update: Wed 13 May 2026 10:30:32 +0000 Files and hashes: 1: 3230332e3136312e32342e302f32312d3234203d3e20313338383233.roa (hash: YX70OIsu7iTqiI3a5soFelDVlujYH0j+VtFdThdooz4=) 2: EBA9D784E9CC3F2A70EB526976A01F48F5F52951.crl (hash: 1FM+3o4BL0NEfgANrDWoSf0gW8CvcfNfl0dr1jw8drc=) 3: 323430353a633963303a3a2f33322d3438203d3e20313338383233.roa (hash: v/BF9ieKxX28NjyPdn3fATuRAfuqobz/pNI/KB0vc9o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.crl rsync://rpki-rsync.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:53:2f:08:11:04:db:66:06:1b:9f:c3:80:ac:77:ac:08:84:06:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBA9D784E9CC3F2A70EB526976A01F48F5F52951 Validity Not Before: May 12 08:04:32 2026 GMT Not After : May 13 10:30:32 2026 GMT Subject: CN=45DA7F0F0FC00287EB8CDDF1ECC3AFB330359E92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:24:37:47:32:7d:e2:97:ad:b8:bf:37:20:33: 0e:8d:43:4a:71:b2:80:b8:14:af:7f:e1:c7:f6:c8: 42:74:ff:aa:7c:a7:13:37:93:ba:c9:43:5e:09:cd: 34:38:25:2b:0a:de:d8:81:1c:ce:91:21:6a:bb:9a: a4:6e:73:41:3d:7b:60:b5:b4:15:42:1e:d4:fc:dc: 44:67:7c:59:97:02:f4:4d:bc:01:da:66:0b:bc:9d: 1c:4b:19:6c:1d:b5:2f:53:41:df:63:01:0d:e9:61: 17:92:01:a0:54:8f:f5:92:b9:1c:ba:38:16:74:a4: f4:20:30:ae:0a:8c:e8:18:c8:e1:61:9a:5b:18:54: ff:6e:5f:9e:43:92:94:43:7b:ea:ea:35:a2:5a:b6: a6:06:06:62:8e:f7:ed:26:e1:4f:77:50:70:e9:c5: cc:63:64:24:0e:3c:7d:2d:20:73:5d:b9:f6:94:4e: 76:1c:4e:c7:4f:72:ad:2c:3e:8f:7c:20:ce:0a:e9: 04:f4:8a:73:ac:63:97:9e:9b:4b:91:6c:b8:81:28: 9f:71:b5:ac:7f:64:51:01:2a:26:32:83:4c:d4:13: 0a:d8:24:e3:82:8f:3a:15:85:ed:76:8f:c7:48:46: 28:f4:e8:a4:1c:f0:c5:42:75:f0:f3:b5:ce:a5:a5: 5a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:DA:7F:0F:0F:C0:02:87:EB:8C:DD:F1:EC:C3:AF:B3:30:35:9E:92 X509v3 Authority Key Identifier: keyid:EB:A9:D7:84:E9:CC:3F:2A:70:EB:52:69:76:A0:1F:48:F5:F5:29:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:65:5d:e3:18:b1:b0:62:80:5a:c3:b7:ce:86:d6:87:71:4b: e3:78:e4:a8:22:99:8e:5a:96:02:21:93:92:81:33:c0:f4:ab: 62:1b:8e:8d:29:e1:26:3a:27:e3:df:16:e0:d9:39:25:e0:cb: 17:f1:94:b5:e9:59:25:5e:77:38:1c:82:a0:ea:51:9b:2d:7c: 44:82:70:45:cd:84:b6:4a:0e:ea:c2:65:c8:fe:87:0c:77:8c: 95:19:c4:41:bf:b1:76:36:c2:c0:83:50:e8:3a:ea:58:d6:b0: 23:3f:a1:7e:8a:3f:50:b0:34:fd:30:7c:c9:4a:dd:2c:ff:2b: fa:3b:ff:b4:bb:4c:aa:77:91:15:28:3e:14:15:6d:27:35:79: 6b:f4:02:da:42:37:63:68:b7:2b:94:d5:db:f0:50:7f:1b:23: 15:14:54:33:bd:07:c5:82:2d:63:28:48:72:ac:5b:b5:2b:92: 83:87:87:64:e1:82:13:6e:52:e4:4e:d8:03:8e:e1:57:4a:7c: d0:b3:dd:bf:0c:f3:66:c0:ff:f1:a3:d5:cf:01:d0:bf:fe:d7: 8f:09:33:c1:6b:c0:71:eb:4a:9b:bc:e9:6b:9e:00:a0:2c:fc: ea:a9:57:5e:c6:c0:09:ec:c6:39:cd:9f:eb:0b:15:03:d5:28: 5d:db:89:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdFMvCBEE22YGG5/DgKx3rAiEBp8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJBOUQ3ODRFOUNDM0YyQTcwRUI1MjY5NzZBMDFGNDhG NUY1Mjk1MTAeFw0yNjA1MTIwODA0MzJaFw0yNjA1MTMxMDMwMzJaMDMxMTAvBgNV BAMTKDQ1REE3RjBGMEZDMDAyODdFQjhDRERGMUVDQzNBRkIzMzAzNTlFOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtJDdHMn3il624vzcgMw6NQ0px soC4FK9/4cf2yEJ0/6p8pxM3k7rJQ14JzTQ4JSsK3tiBHM6RIWq7mqRuc0E9e2C1 tBVCHtT83ERnfFmXAvRNvAHaZgu8nRxLGWwdtS9TQd9jAQ3pYReSAaBUj/WSuRy6 OBZ0pPQgMK4KjOgYyOFhmlsYVP9uX55DkpRDe+rqNaJatqYGBmKO9+0m4U93UHDp xcxjZCQOPH0tIHNdufaUTnYcTsdPcq0sPo98IM4K6QT0inOsY5eem0uRbLiBKJ9x tax/ZFEBKiYyg0zUEwrYJOOCjzoVhe12j8dIRij06KQc8MVCdfDztc6lpVplAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURdp/Dw/AAofrjN3x7MOvszA1npIwHwYDVR0j BBgwFoAU66nXhOnMPypw61JpdqAfSPX1KVEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDIxNThhZWMtNTI4MS00MmU2LTk3OWItZmNhNjFkNDdjODQ1LzAvRUJBOUQ3ODRF OUNDM0YyQTcwRUI1MjY5NzZBMDFGNDhGNUY1Mjk1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQkE5RDc4NEU5Q0MzRjJBNzBFQjUyNjk3NkEwMUY0OEY1RjUy OTUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDIxNThhZWMtNTI4MS00MmU2LTk3 OWItZmNhNjFkNDdjODQ1LzAvRUJBOUQ3ODRFOUNDM0YyQTcwRUI1MjY5NzZBMDFG NDhGNUY1Mjk1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9lXeMYsbBigFrDt86G1odxS+N45KgimY5a lgIhk5KBM8D0q2Ibjo0p4SY6J+PfFuDZOSXgyxfxlLXpWSVedzgcgqDqUZstfESC cEXNhLZKDurCZcj+hwx3jJUZxEG/sXY2wsCDUOg66ljWsCM/oX6KP1CwNP0wfMlK 3Sz/K/o7/7S7TKp3kRUoPhQVbSc1eWv0AtpCN2NotyuU1dvwUH8bIxUUVDO9B8WC LWMoSHKsW7UrkoOHh2ThghNuUuRO2AOO4VdKfNCz3b8M82bA//Gj1c8B0L/+148J M8FrwHHrSpu86WueAKAs/OqpV17GwAnsxjnNn+sLFQPVKF3bifg= -----END CERTIFICATE-----Generated at Wed May 13 01:37:18 2026 by rpki-client