$ rpki-client -vvf rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.mft File: EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.mft (raw, json) Hash identifier: F8K1w+YDuhGP1IHx7AOxPTr4gwao5Nbk8yGWnHoaxoE= Subject key identifier: A2:37:B8:AD:B6:16:E2:9A:CD:EE:AD:30:AD:92:0C:16:CE:F5:F1:F1 Authority key identifier: EA:8B:1F:D5:4B:5A:4E:9B:79:5C:DD:92:9B:58:E7:BD:B2:DA:68:71 Certificate issuer: /CN=EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871 Certificate serial: 7939227AE387D2C78CCECA00A67DA2A79235350A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:25:26 +0000 Manifest this update: Tue 12 May 2026 19:20:26 +0000 Manifest next update: Wed 13 May 2026 23:09:26 +0000 Files and hashes: 1: 3130332e3137392e38342e302f32342d3234203d3e20313432333037.roa (hash: 2LkAU6HFzcD+uMMYceohJGiq/c/yqAWAinLHczse+RU=) 2: EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.crl (hash: eMDTD2fexgBOJcX3rimkDyMsalZGTnSmEDzIbYCTkmY=) 3: 3130332e3136382e34342e302f32342d3234203d3e20313432333037.roa (hash: RIjxtB34QrKPBshyuKfeBsiSf1Tc4cR0KfHnQu3zHiw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.crl rsync://rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:39:22:7a:e3:87:d2:c7:8c:ce:ca:00:a6:7d:a2:a7:92:35:35:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871 Validity Not Before: May 12 19:20:26 2026 GMT Not After : May 13 23:09:26 2026 GMT Subject: CN=A237B8ADB616E29ACDEEAD30AD920C16CEF5F1F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:bc:42:c0:35:d3:98:bf:86:37:4c:78:e8:ae: 34:6b:19:04:25:b9:3b:59:b3:6a:da:18:f3:c9:35: b9:35:ff:ba:4e:f6:e2:6f:44:2b:1f:4a:df:22:d5: c5:e8:fd:70:fc:b4:08:2e:31:c8:14:b3:26:08:d1: 98:06:c8:8c:ae:02:7c:94:4b:da:50:aa:d1:02:39: 53:1c:2f:fc:0e:f3:60:03:f7:9a:01:72:f6:cb:72: bd:69:89:0a:c1:18:8f:5f:aa:b4:20:72:b9:ee:ff: f3:33:16:03:50:3c:bf:be:1d:2b:20:59:f0:02:f5: 6d:a6:ca:4f:37:33:64:8e:08:49:9b:3e:a8:a7:6d: e8:4a:ae:5c:83:76:9e:d7:88:cd:1a:d5:33:9a:4f: 58:ac:29:26:4c:58:6d:84:e9:f9:cf:7e:d1:e1:b5: 95:dd:2b:1c:93:af:71:c8:d3:d0:97:dc:fd:48:c5: 9a:46:da:87:64:cb:50:24:9a:58:6a:33:8a:07:2c: 49:22:b6:a5:66:38:70:68:8a:c6:e7:f2:74:0b:1b: 57:4c:53:dd:c8:43:ea:44:f0:87:43:cc:b8:6a:a0: c9:86:2f:0b:c6:7f:c3:1a:27:c4:32:71:dd:96:11: b4:32:9a:5b:c3:6c:16:f5:f2:8b:5e:40:3e:32:c1: bb:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:37:B8:AD:B6:16:E2:9A:CD:EE:AD:30:AD:92:0C:16:CE:F5:F1:F1 X509v3 Authority Key Identifier: keyid:EA:8B:1F:D5:4B:5A:4E:9B:79:5C:DD:92:9B:58:E7:BD:B2:DA:68:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:49:be:5d:1c:97:e7:11:e8:72:ca:d2:3f:bd:9c:f3:5c:eb: 50:99:4d:ae:69:61:9b:95:0f:81:02:3e:7a:f6:b2:d5:97:74: 98:4d:76:53:b5:da:e4:5a:ca:26:8d:43:65:11:4d:e4:3f:82: 20:6f:5b:36:38:a2:55:88:78:cc:65:98:d3:0b:da:d5:ee:3b: a3:77:13:4c:4d:81:b7:b1:7d:f2:3c:a4:6c:d5:fa:ea:bf:69: ac:64:7e:cf:94:a7:43:19:3a:8b:7b:3d:8f:c6:0c:4f:29:ab: a3:a3:e7:41:e7:07:21:ca:12:38:42:43:33:12:35:0f:93:25: 93:72:ee:11:89:a3:0a:0f:21:99:6f:e8:2f:f9:3d:72:89:56: ed:56:1a:0a:ef:aa:df:cb:69:60:9c:ca:45:7f:e2:49:d8:63: 44:5d:d1:a2:b0:08:39:94:76:6b:69:27:6d:f4:94:c6:81:a9: 9d:c2:db:52:6f:77:78:f9:10:2f:2e:bd:5a:36:d8:ab:d6:d7: fb:34:fb:c4:55:04:ce:aa:ea:ee:1e:b4:6a:d9:1c:25:09:a6: 10:a8:2d:c4:e1:25:a9:2a:dd:d1:cc:ca:e4:15:47:61:b1:4c: 15:e0:16:a4:ef:af:48:d2:70:c5:88:c8:1f:f3:f7:af:ee:a9: ea:86:03:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeTkieuOH0seMzsoApn2ip5I1NQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUE4QjFGRDU0QjVBNEU5Qjc5NUNERDkyOUI1OEU3QkRC MkRBNjg3MTAeFw0yNjA1MTIxOTIwMjZaFw0yNjA1MTMyMzA5MjZaMDMxMTAvBgNV BAMTKEEyMzdCOEFEQjYxNkUyOUFDREVFQUQzMEFEOTIwQzE2Q0VGNUYxRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjvELANdOYv4Y3THjorjRrGQQl uTtZs2raGPPJNbk1/7pO9uJvRCsfSt8i1cXo/XD8tAguMcgUsyYI0ZgGyIyuAnyU S9pQqtECOVMcL/wO82AD95oBcvbLcr1piQrBGI9fqrQgcrnu//MzFgNQPL++HSsg WfAC9W2myk83M2SOCEmbPqinbehKrlyDdp7XiM0a1TOaT1isKSZMWG2E6fnPftHh tZXdKxyTr3HI09CX3P1IxZpG2odky1AkmlhqM4oHLEkitqVmOHBoisbn8nQLG1dM U93IQ+pE8IdDzLhqoMmGLwvGf8MaJ8Qycd2WEbQymlvDbBb18oteQD4ywbulAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoje4rbYW4prN7q0wrZIMFs718fEwHwYDVR0j BBgwFoAU6osf1UtaTpt5XN2Sm1jnvbLaaHEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDVmMjBiMmUtYTdhOC00MmZkLTkyZjgtOTQ5NjIzM2IyYzllLzAvRUE4QjFGRDU0 QjVBNEU5Qjc5NUNERDkyOUI1OEU3QkRCMkRBNjg3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQThCMUZENTRCNUE0RTlCNzk1Q0REOTI5QjU4RTdCREIyREE2 ODcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDVmMjBiMmUtYTdhOC00MmZkLTky ZjgtOTQ5NjIzM2IyYzllLzAvRUE4QjFGRDU0QjVBNEU5Qjc5NUNERDkyOUI1OEU3 QkRCMkRBNjg3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADhJvl0cl+cR6HLK0j+9nPNc61CZTa5pYZuV D4ECPnr2stWXdJhNdlO12uRayiaNQ2URTeQ/giBvWzY4olWIeMxlmNML2tXuO6N3 E0xNgbexffI8pGzV+uq/aaxkfs+Up0MZOot7PY/GDE8pq6Oj50HnByHKEjhCQzMS NQ+TJZNy7hGJowoPIZlv6C/5PXKJVu1WGgrvqt/LaWCcykV/4knYY0Rd0aKwCDmU dmtpJ230lMaBqZ3C21Jvd3j5EC8uvVo22KvW1/s0+8RVBM6q6u4etGrZHCUJphCo LcThJakq3dHMyuQVR2GxTBXgFqTvr0jScMWIyB/z96/uqeqGA70= -----END CERTIFICATE-----Generated at Tue May 12 23:45:55 2026 by rpki-client