$ rpki-client -vvf rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.mft File: EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.mft (raw, json) Hash identifier: qMkGcMncNDTnh5xXB+U1Jc+o4qunwVKLbGR8fY1b+m0= Subject key identifier: 07:36:FA:18:59:2C:68:ED:DC:3F:14:7F:E1:DA:0B:C1:1D:32:B6:E0 Authority key identifier: EB:0B:E2:F2:F4:9F:0E:2E:D0:DC:A4:50:CC:7A:70:E3:7E:6C:44:79 Certificate issuer: /CN=EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479 Certificate serial: 453B235767F64983564F98276B553079903DD03D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 17:31:33 +0000 Manifest this update: Thu 23 Jul 2026 17:26:33 +0000 Manifest next update: Fri 24 Jul 2026 20:36:33 +0000 Files and hashes: 1: 323430333a626163303a3a2f33322d3438203d3e20313333383135.roa (hash: HEWIf8VBw+80Q4rp+6Ysujhm51rVLU6tXVKj84ErweQ=) 2: 3130332e35322e34342e302f32322d3234203d3e20313333383135.roa (hash: Nq+2Vf2Sjui286xvlwdV6qhYVII60AjIdtuhfdXAxbY=) 3: 3130332e3133302e3133362e302f32322d3234203d3e20313333383135.roa (hash: eU4i0Mhd/q+mYMVjCXIfd0DHyb4s/+BNKr0BLfdT+jA=) 4: 323430333a353763303a3a2f33322d3438203d3e20313333383135.roa (hash: 3BwTC01USPfsaxqOFoR8OqcTiLHcsXU9wo2BTdmt5ZU=) 5: EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.crl (hash: YljmzuLHQbGpBBr4w2dyTUQ6Wn2gwPvuX0K+jh4zD8A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.crl rsync://rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:36:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:3b:23:57:67:f6:49:83:56:4f:98:27:6b:55:30:79:90:3d:d0:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479 Validity Not Before: Jul 23 17:26:33 2026 GMT Not After : Jul 24 20:36:33 2026 GMT Subject: CN=0736FA18592C68EDDC3F147FE1DA0BC11D32B6E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3a:a2:d0:c4:88:7e:c0:50:26:1d:e6:5b:30: d1:0c:d7:c7:98:d2:6a:a4:bf:70:38:2e:77:b1:24: 58:b3:64:f8:74:c7:6e:39:30:8d:ff:37:9b:57:b2: 23:ea:f8:46:4e:ee:88:dd:4e:af:01:3a:3d:6d:d6: 87:ec:cd:a4:be:c9:72:4f:50:dd:52:07:a2:d6:50: 22:dd:01:85:61:93:d7:5f:75:2c:6d:2b:9c:ab:7a: 71:26:c2:5d:3a:a0:07:d0:f1:c0:3e:a0:63:d5:92: 06:0d:94:cb:2b:cf:12:e9:a0:a4:66:0c:0f:1a:ad: 31:a1:ce:d1:40:9a:b6:80:80:b8:2f:bc:71:5c:3d: ff:18:cb:ba:03:16:b4:cd:4b:9e:ae:bf:67:32:6b: 5e:53:1a:19:b3:6f:15:e8:b1:08:b7:ad:21:b0:94: 05:1e:fd:36:82:81:91:7b:c4:89:1b:38:39:78:e0: 84:e9:75:73:18:01:09:65:42:66:c7:a4:a6:91:c1: eb:0b:77:24:57:54:68:5a:98:ce:b3:c5:d2:42:af: 8e:7e:fd:aa:13:ab:43:2f:d3:b0:33:77:ff:e1:eb: c2:49:77:70:29:6a:35:56:6c:34:e9:ad:34:cc:4e: 2b:02:c7:39:5f:00:cd:22:4a:45:11:ad:e2:08:aa: 8b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:36:FA:18:59:2C:68:ED:DC:3F:14:7F:E1:DA:0B:C1:1D:32:B6:E0 X509v3 Authority Key Identifier: keyid:EB:0B:E2:F2:F4:9F:0E:2E:D0:DC:A4:50:CC:7A:70:E3:7E:6C:44:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:c3:b5:29:9b:5b:16:3a:c5:7a:cb:50:2a:f4:0f:1c:0a:cb: 70:d6:27:5f:15:94:9b:0d:a5:cc:12:8a:08:b1:60:d2:0e:17: 43:01:10:bb:a1:14:27:ba:f1:76:8d:27:ee:f5:35:cb:67:0a: 85:d7:4e:eb:30:60:2b:93:e2:b6:4e:20:8a:66:9a:04:3e:ca: 06:c9:df:48:5e:95:80:bb:e0:c0:25:70:c1:54:8c:55:2f:44: 4d:1f:15:a3:71:76:0a:c8:df:57:c6:35:fb:c5:c9:e6:03:1a: 49:33:ed:01:ea:d3:71:25:13:92:0c:be:a0:d0:ce:45:75:d4: 40:31:1e:45:ea:25:98:a2:4a:b3:00:65:78:02:8c:fb:13:e1: ff:d9:e9:08:f5:cb:52:f6:2a:95:d6:2d:e2:85:4d:b6:ba:af: fa:41:88:08:cf:e4:de:d5:91:e3:8f:81:12:d3:eb:03:67:6b: 33:3b:f6:9d:9d:0f:a5:28:55:81:45:02:a4:94:3c:7d:d8:68: c4:1c:8c:38:98:79:9d:76:6e:d8:76:60:14:04:8a:ef:c0:54: 61:e8:b6:36:66:77:ae:f7:ea:7f:45:7e:1c:7d:e5:34:d8:e8: a0:cf:c3:cb:e8:7c:b9:c0:2d:11:2e:94:f1:f9:9c:79:f1:22: ec:c7:64:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURTsjV2f2SYNWT5gna1UweZA90D0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUIwQkUyRjJGNDlGMEUyRUQwRENBNDUwQ0M3QTcwRTM3 RTZDNDQ3OTAeFw0yNjA3MjMxNzI2MzNaFw0yNjA3MjQyMDM2MzNaMDMxMTAvBgNV BAMTKDA3MzZGQTE4NTkyQzY4RUREQzNGMTQ3RkUxREEwQkMxMUQzMkI2RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwOqLQxIh+wFAmHeZbMNEM18eY 0mqkv3A4LnexJFizZPh0x245MI3/N5tXsiPq+EZO7ojdTq8BOj1t1ofszaS+yXJP UN1SB6LWUCLdAYVhk9dfdSxtK5yrenEmwl06oAfQ8cA+oGPVkgYNlMsrzxLpoKRm DA8arTGhztFAmraAgLgvvHFcPf8Yy7oDFrTNS56uv2cya15TGhmzbxXosQi3rSGw lAUe/TaCgZF7xIkbODl44ITpdXMYAQllQmbHpKaRwesLdyRXVGhamM6zxdJCr45+ /aoTq0Mv07Azd//h68JJd3ApajVWbDTprTTMTisCxzlfAM0iSkURreIIqovRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBzb6GFksaO3cPxR/4doLwR0ytuAwHwYDVR0j BBgwFoAU6wvi8vSfDi7Q3KRQzHpw435sRHkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmEzYWU0ODUtYTY1OC00YzVjLWFiZTItMWU3ZmQ4YjAzOGEwLzAvRUIwQkUyRjJG NDlGMEUyRUQwRENBNDUwQ0M3QTcwRTM3RTZDNDQ3OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQjBCRTJGMkY0OUYwRTJFRDBEQ0E0NTBDQzdBNzBFMzdFNkM0 NDc5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmEzYWU0ODUtYTY1OC00YzVjLWFi ZTItMWU3ZmQ4YjAzOGEwLzAvRUIwQkUyRjJGNDlGMEUyRUQwRENBNDUwQ0M3QTcw RTM3RTZDNDQ3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG3DtSmbWxY6xXrLUCr0DxwKy3DWJ18VlJsN pcwSigixYNIOF0MBELuhFCe68XaNJ+71NctnCoXXTuswYCuT4rZOIIpmmgQ+ygbJ 30helYC74MAlcMFUjFUvRE0fFaNxdgrI31fGNfvFyeYDGkkz7QHq03ElE5IMvqDQ zkV11EAxHkXqJZiiSrMAZXgCjPsT4f/Z6Qj1y1L2KpXWLeKFTba6r/pBiAjP5N7V keOPgRLT6wNnazM79p2dD6UoVYFFAqSUPH3YaMQcjDiYeZ12bth2YBQEiu/AVGHo tjZmd6736n9Ffhx95TTY6KDPw8vofLnALREulPH5nHnxIuzHZOo= -----END CERTIFICATE-----Generated at Fri Jul 24 04:15:12 2026 by rpki-client