$ rpki-client -vvf rpki-rsync.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.mft File: EBA9D784E9CC3F2A70EB526976A01F48F5F52951.mft (raw, json) Hash identifier: YkP20hUAubyk5W1i0IsNTiXoN1RdVk/qyfRdwaNCHTo= Subject key identifier: 2C:07:07:0B:EB:DB:1E:31:3B:8C:91:3F:1B:9B:2D:F6:ED:F4:57:00 Authority key identifier: EB:A9:D7:84:E9:CC:3F:2A:70:EB:52:69:76:A0:1F:48:F5:F5:29:51 Certificate issuer: /CN=EBA9D784E9CC3F2A70EB526976A01F48F5F52951 Certificate serial: 166E1CC554814DFCA0C2C638F8E1A51C13162147 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.mft Manifest number: 71 Signing time: Thu 23 Jul 2026 22:52:44 +0000 Manifest this update: Thu 23 Jul 2026 22:47:44 +0000 Manifest next update: Sat 25 Jul 2026 02:44:44 +0000 Files and hashes: 1: 323430353a633963303a3a2f33322d3438203d3e20313338383233.roa (hash: v/BF9ieKxX28NjyPdn3fATuRAfuqobz/pNI/KB0vc9o=) 2: 3230332e3136312e32342e302f32312d3234203d3e20313338383233.roa (hash: YX70OIsu7iTqiI3a5soFelDVlujYH0j+VtFdThdooz4=) 3: EBA9D784E9CC3F2A70EB526976A01F48F5F52951.crl (hash: tKOpv5BRMfgtvDBW1uzQffE5Xl9ln9T8hN7bUR+RqD8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.crl rsync://rpki-rsync.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:6e:1c:c5:54:81:4d:fc:a0:c2:c6:38:f8:e1:a5:1c:13:16:21:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBA9D784E9CC3F2A70EB526976A01F48F5F52951 Validity Not Before: Jul 23 22:47:44 2026 GMT Not After : Jul 25 02:44:44 2026 GMT Subject: CN=2C07070BEBDB1E313B8C913F1B9B2DF6EDF45700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:33:41:c5:fd:ce:44:0e:f5:5c:4d:14:ff:04: 8c:e5:bf:57:0c:06:27:56:41:22:b5:68:78:ab:31: e3:9f:23:fa:7f:b8:0b:34:f8:dc:2e:41:d3:07:21: 99:77:ff:af:66:f5:81:e3:bc:81:74:39:19:09:a5: 2b:9e:dc:c3:52:dd:0b:12:46:fe:bd:37:87:74:8f: 70:7b:48:b2:c7:90:06:02:75:6d:18:3b:87:9e:ec: f2:c1:f3:15:d0:d2:d5:55:6e:4d:c8:58:2c:54:c2: 65:41:32:31:3b:0b:46:99:25:81:42:e3:27:43:ef: 74:9a:34:e6:48:cf:dc:01:df:9f:ec:7f:a7:3d:5d: d6:3d:7d:9f:87:50:69:16:3e:07:7b:58:7d:8f:8d: 47:62:be:fa:a4:7b:96:e6:8b:d8:64:b6:1c:67:e5: 88:52:84:81:06:8a:04:59:0c:c7:94:1d:d5:90:a4: 7a:b1:ec:01:ec:68:5f:37:fa:bb:54:9f:8a:d5:e8: f3:67:79:3e:c3:76:35:a5:be:c8:9f:28:a1:d4:cc: 16:79:86:ef:81:b8:19:25:df:6d:81:ae:bd:40:01: db:44:28:84:ef:90:e2:0e:2a:13:24:6c:a5:46:be: af:58:29:4f:ac:db:37:05:b4:bb:49:54:bf:83:93: ea:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:07:07:0B:EB:DB:1E:31:3B:8C:91:3F:1B:9B:2D:F6:ED:F4:57:00 X509v3 Authority Key Identifier: keyid:EB:A9:D7:84:E9:CC:3F:2A:70:EB:52:69:76:A0:1F:48:F5:F5:29:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:f2:6d:27:78:14:9a:9f:2f:ef:63:ee:38:70:8a:64:8c:6f: fa:49:7c:7b:af:82:17:0e:86:05:f4:a5:c0:48:58:23:cd:91: 84:55:13:78:93:2b:9a:00:54:a2:44:ac:50:2c:9b:11:a8:3b: 96:b9:ab:70:82:fb:94:49:eb:d6:5d:76:0d:49:f3:cc:d2:bb: 11:dc:06:0c:d1:75:d7:d9:2a:da:42:62:44:70:aa:01:01:c2: ba:f2:2a:83:46:8b:16:26:6d:51:bf:57:ae:b4:78:09:98:dc: 29:27:15:33:cf:e7:d9:fd:77:1c:8b:fb:de:66:e9:c4:a4:b0: 73:78:c5:bd:cb:07:32:09:7d:1e:13:66:6f:6b:8e:fa:57:66: 52:d1:09:b5:41:16:13:77:38:6b:ba:44:f2:2e:be:8e:83:a8: 19:18:82:c1:fa:8b:2a:c8:39:6c:fd:59:fa:5b:b6:3f:52:0b: c9:d1:60:79:9e:f7:50:f8:e4:f8:9f:7c:42:bf:09:ba:3f:a4: 37:36:19:4c:12:80:42:6d:ed:59:cc:12:aa:f4:5d:84:45:0c: ed:30:63:86:08:35:b4:6f:fa:a1:c6:32:d4:b9:10:48:31:7c: 9c:1c:04:2f:ff:9f:b7:e2:da:20:58:f1:d3:d6:c1:f6:18:f3: 34:fb:93:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFm4cxVSBTfygwsY4+OGlHBMWIUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJBOUQ3ODRFOUNDM0YyQTcwRUI1MjY5NzZBMDFGNDhG NUY1Mjk1MTAeFw0yNjA3MjMyMjQ3NDRaFw0yNjA3MjUwMjQ0NDRaMDMxMTAvBgNV BAMTKDJDMDcwNzBCRUJEQjFFMzEzQjhDOTEzRjFCOUIyREY2RURGNDU3MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDM0HF/c5EDvVcTRT/BIzlv1cM BidWQSK1aHirMeOfI/p/uAs0+NwuQdMHIZl3/69m9YHjvIF0ORkJpSue3MNS3QsS Rv69N4d0j3B7SLLHkAYCdW0YO4ee7PLB8xXQ0tVVbk3IWCxUwmVBMjE7C0aZJYFC 4ydD73SaNOZIz9wB35/sf6c9XdY9fZ+HUGkWPgd7WH2PjUdivvqke5bmi9hkthxn 5YhShIEGigRZDMeUHdWQpHqx7AHsaF83+rtUn4rV6PNneT7DdjWlvsifKKHUzBZ5 hu+BuBkl322Brr1AAdtEKITvkOIOKhMkbKVGvq9YKU+s2zcFtLtJVL+Dk+r5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULAcHC+vbHjE7jJE/G5st9u30VwAwHwYDVR0j BBgwFoAU66nXhOnMPypw61JpdqAfSPX1KVEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDIxNThhZWMtNTI4MS00MmU2LTk3OWItZmNhNjFkNDdjODQ1LzAvRUJBOUQ3ODRF OUNDM0YyQTcwRUI1MjY5NzZBMDFGNDhGNUY1Mjk1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQkE5RDc4NEU5Q0MzRjJBNzBFQjUyNjk3NkEwMUY0OEY1RjUy OTUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDIxNThhZWMtNTI4MS00MmU2LTk3 OWItZmNhNjFkNDdjODQ1LzAvRUJBOUQ3ODRFOUNDM0YyQTcwRUI1MjY5NzZBMDFG NDhGNUY1Mjk1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHnybSd4FJqfL+9j7jhwimSMb/pJfHuvghcO hgX0pcBIWCPNkYRVE3iTK5oAVKJErFAsmxGoO5a5q3CC+5RJ69Zddg1J88zSuxHc BgzRddfZKtpCYkRwqgEBwrryKoNGixYmbVG/V660eAmY3CknFTPP59n9dxyL+95m 6cSksHN4xb3LBzIJfR4TZm9rjvpXZlLRCbVBFhN3OGu6RPIuvo6DqBkYgsH6iyrI OWz9Wfpbtj9SC8nRYHme91D45PiffEK/Cbo/pDc2GUwSgEJt7VnMEqr0XYRFDO0w Y4YINbRv+qHGMtS5EEgxfJwcBC//n7fi2iBY8dPWwfYY8zT7kwE= -----END CERTIFICATE-----Generated at Fri Jul 24 02:39:24 2026 by rpki-client