$ rpki-client -vvf rpki-rsync.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.mft File: EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.mft (raw, json) Hash identifier: 4kkgTbasNmOOWAhUkEjcVGAp77Or1eISDjf/To3g7HY= Subject key identifier: 89:A9:CF:E4:9C:E3:40:89:E7:80:36:2F:95:7A:82:47:A3:23:10:D1 Authority key identifier: EB:65:C3:DE:94:49:F2:C3:42:B6:C2:8D:C0:0A:2D:7D:9F:CE:13:FC Certificate issuer: /CN=EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC Certificate serial: 5B3B4B7D44C4EF8D71EDB16810632D6899C3FCC3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:32:33 +0000 Manifest this update: Tue 12 May 2026 20:27:33 +0000 Manifest next update: Wed 13 May 2026 20:49:33 +0000 Files and hashes: 1: EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.crl (hash: tnV64GfhhvOnQklPZj1Gq7cuYPL7p8Xhaxxey05BRBg=) 2: 3130332e31382e34342e302f32332d3234203d3e20313530323735.roa (hash: 7XY8OJYBheI11wkRz8cVl6F/JT2mVgzHkajv0h3NaA4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.crl rsync://rpki-rsync.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:3b:4b:7d:44:c4:ef:8d:71:ed:b1:68:10:63:2d:68:99:c3:fc:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC Validity Not Before: May 12 20:27:33 2026 GMT Not After : May 13 20:49:33 2026 GMT Subject: CN=89A9CFE49CE34089E780362F957A8247A32310D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2f:3f:72:eb:04:3d:d0:a1:bd:ae:3a:5c:47: fc:eb:8c:27:01:af:04:22:99:b8:03:44:c0:47:23: 49:3e:98:b8:35:0b:62:1b:a6:82:4c:55:39:5d:16: 2f:37:39:ce:41:46:a8:86:b2:36:d5:18:94:49:c3: c3:52:77:f2:23:be:7d:95:1e:c7:99:8f:13:c1:2e: 22:da:17:a0:16:6e:0a:f5:8c:b9:e8:4a:1a:16:40: b1:0a:f7:c2:69:4e:e6:f1:53:00:d3:e5:a2:0b:c1: 6f:11:75:87:17:6e:ff:d7:0d:51:c2:40:72:3d:c3: c2:8c:ba:70:bf:02:25:ce:5e:f9:23:8c:36:6c:10: 7d:12:cb:e5:31:ab:4c:78:c8:89:aa:ed:e1:7f:37: 50:ee:ba:46:38:45:4a:45:11:58:d9:c2:37:bb:0c: 4b:82:42:f7:c4:1f:a9:fa:e2:45:97:03:67:d5:a3: 1e:ce:38:2d:fe:c0:9a:a9:f6:ab:52:e3:84:a0:aa: 32:2f:f3:96:fb:71:8d:51:f4:9e:e4:0f:43:de:51: 3c:60:34:9e:93:36:b1:f1:0b:70:9a:2b:a1:af:84: e5:44:cf:37:c1:3f:54:51:86:cc:e0:f3:fe:5e:7e: 02:00:8a:57:b0:30:b6:2b:ba:13:e5:0a:fb:8b:08: f1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A9:CF:E4:9C:E3:40:89:E7:80:36:2F:95:7A:82:47:A3:23:10:D1 X509v3 Authority Key Identifier: keyid:EB:65:C3:DE:94:49:F2:C3:42:B6:C2:8D:C0:0A:2D:7D:9F:CE:13:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:ed:1b:42:92:0a:d8:a7:dd:58:a6:b9:ca:d0:a7:05:b1:35: 67:27:29:fa:24:de:49:6d:e6:39:85:54:90:68:8d:56:c4:49: 8b:ed:0c:b6:60:20:ea:51:12:54:90:ea:db:6f:5c:08:97:e9: 20:13:35:d0:1b:17:a7:7a:1d:58:2c:d9:b8:f8:25:d2:56:b6: 49:fb:9a:e4:78:11:0c:04:5e:54:7e:0e:0a:94:99:23:1b:6e: 6a:b4:29:30:e1:d1:6c:6c:e0:cc:87:8a:65:8b:ad:62:e1:2b: 0b:ea:ff:8f:11:ca:6c:d2:b8:a0:6a:28:12:b3:59:90:1c:f3: 68:28:e3:76:a3:0c:f9:97:7a:c8:54:20:a7:7e:dc:30:db:df: 71:00:58:88:52:c8:8a:14:5a:8e:e2:0d:af:f2:5b:8f:66:79: d2:0f:e1:37:d8:09:07:6a:d4:ce:94:39:b7:ad:9e:7e:8a:4c: 5e:bc:76:bb:78:5a:33:9b:f2:11:4f:66:79:b9:39:be:7a:9d: 9d:a8:ff:81:09:c9:53:25:ee:11:d1:20:c4:bd:dd:2a:9d:8e: 61:3a:a0:47:a2:f6:d7:f7:2d:9b:f2:36:74:44:05:bb:62:27: 20:61:16:bb:37:00:ea:aa:05:02:37:17:07:33:d9:bb:86:a4: c3:42:b3:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWztLfUTE741x7bFoEGMtaJnD/MMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUI2NUMzREU5NDQ5RjJDMzQyQjZDMjhEQzAwQTJEN0Q5 RkNFMTNGQzAeFw0yNjA1MTIyMDI3MzNaFw0yNjA1MTMyMDQ5MzNaMDMxMTAvBgNV BAMTKDg5QTlDRkU0OUNFMzQwODlFNzgwMzYyRjk1N0E4MjQ3QTMyMzEwRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Lz9y6wQ90KG9rjpcR/zrjCcB rwQimbgDRMBHI0k+mLg1C2IbpoJMVTldFi83Oc5BRqiGsjbVGJRJw8NSd/Ijvn2V HseZjxPBLiLaF6AWbgr1jLnoShoWQLEK98JpTubxUwDT5aILwW8RdYcXbv/XDVHC QHI9w8KMunC/AiXOXvkjjDZsEH0Sy+Uxq0x4yImq7eF/N1DuukY4RUpFEVjZwje7 DEuCQvfEH6n64kWXA2fVox7OOC3+wJqp9qtS44SgqjIv85b7cY1R9J7kD0PeUTxg NJ6TNrHxC3CaK6GvhOVEzzfBP1RRhszg8/5efgIAilewMLYruhPlCvuLCPEBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUianP5JzjQInngDYvlXqCR6MjENEwHwYDVR0j BBgwFoAU62XD3pRJ8sNCtsKNwAotfZ/OE/wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWI2NGQ4YzEtYzcxNC00NTkyLThmYzUtZTM5MmViZmYxZTk4LzAvRUI2NUMzREU5 NDQ5RjJDMzQyQjZDMjhEQzAwQTJEN0Q5RkNFMTNGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQjY1QzNERTk0NDlGMkMzNDJCNkMyOERDMDBBMkQ3RDlGQ0Ux M0ZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWI2NGQ4YzEtYzcxNC00NTkyLThm YzUtZTM5MmViZmYxZTk4LzAvRUI2NUMzREU5NDQ5RjJDMzQyQjZDMjhEQzAwQTJE N0Q5RkNFMTNGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANztG0KSCtin3VimucrQpwWxNWcnKfok3klt 5jmFVJBojVbESYvtDLZgIOpRElSQ6ttvXAiX6SATNdAbF6d6HVgs2bj4JdJWtkn7 muR4EQwEXlR+DgqUmSMbbmq0KTDh0Wxs4MyHimWLrWLhKwvq/48RymzSuKBqKBKz WZAc82go43ajDPmXeshUIKd+3DDb33EAWIhSyIoUWo7iDa/yW49medIP4TfYCQdq 1M6UObetnn6KTF68drt4WjOb8hFPZnm5Ob56nZ2o/4EJyVMl7hHRIMS93SqdjmE6 oEei9tf3LZvyNnREBbtiJyBhFrs3AOqqBQI3Fwcz2buGpMNCs6Y= -----END CERTIFICATE-----Generated at Tue May 12 22:47:35 2026 by rpki-client