$ rpki-client -vvf rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.mft File: EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.mft (raw, json) Hash identifier: hTeqmy1++/RiW8jcgxH698Fl/TKXY2tZsVpbPSV3dVc= Subject key identifier: BA:A4:BB:2B:D0:21:30:CC:90:85:93:20:B6:E3:BD:AF:3B:D7:57:1D Authority key identifier: EA:8F:56:9A:74:05:BE:AB:A2:3F:9B:20:CF:1A:CD:2C:BD:5E:F5:79 Certificate issuer: /CN=EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579 Certificate serial: 73588AD1F30C1EA6AB1344A8D5273ED17A2D34C2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 21:26:13 +0000 Manifest this update: Thu 23 Jul 2026 21:21:13 +0000 Manifest next update: Fri 24 Jul 2026 22:50:13 +0000 Files and hashes: 1: 3130332e3233302e3138382e302f32332d3234203d3e20313333333439.roa (hash: yCX5+Dxju6djsJMnbOlkqP9bGOuuQKBHDP9eW/sQSSc=) 2: EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.crl (hash: KlSAf41ryvO4dL40f4yyq9+A3F+TBHUg4jSgP/igezk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.crl rsync://rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:58:8a:d1:f3:0c:1e:a6:ab:13:44:a8:d5:27:3e:d1:7a:2d:34:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579 Validity Not Before: Jul 23 21:21:13 2026 GMT Not After : Jul 24 22:50:13 2026 GMT Subject: CN=BAA4BB2BD02130CC90859320B6E3BDAF3BD7571D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:70:5c:3c:da:54:53:13:bd:04:e6:bb:69:ff: d8:44:e0:a1:96:7c:bf:97:8e:cf:52:17:61:2c:01: 6d:e3:ae:a9:6f:7a:1c:fb:2e:ba:05:f4:01:b9:e0: fe:e6:99:8c:fb:4a:ca:37:13:61:49:d7:a7:94:19: 46:bc:b8:87:fc:4c:23:71:54:85:59:a4:d9:32:1a: 43:e3:8d:af:bc:59:47:1c:e0:88:ea:a9:4a:d6:0d: 3e:7c:c4:62:e7:d5:83:7a:7c:3f:06:0e:57:dc:7c: 60:03:8c:0d:59:c3:bd:d5:14:8a:7b:62:be:34:5d: d8:1e:a7:a0:eb:55:af:be:ad:96:a1:15:b7:54:fc: 97:60:e7:71:02:de:1e:85:06:76:a0:8e:1a:4f:f3: b9:69:1e:6e:b4:48:b5:f2:df:c7:c2:a3:de:7d:03: d4:9e:81:30:4e:ae:75:a3:8e:de:08:b2:c9:ca:f8: 9d:15:e3:f2:70:cd:3f:10:0d:da:79:e4:a8:f5:07: 58:db:aa:d0:d8:91:b0:c5:7f:b1:63:3e:8a:6a:ac: 05:d2:b9:84:17:eb:99:56:98:33:ca:55:c8:03:50: e4:8e:cf:e3:4f:e9:f7:36:bb:bb:26:01:f2:e4:f0: 07:45:e5:45:b1:01:33:1d:12:69:3b:44:06:d6:92: 01:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A4:BB:2B:D0:21:30:CC:90:85:93:20:B6:E3:BD:AF:3B:D7:57:1D X509v3 Authority Key Identifier: keyid:EA:8F:56:9A:74:05:BE:AB:A2:3F:9B:20:CF:1A:CD:2C:BD:5E:F5:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:e1:7d:71:ea:b9:62:ac:aa:61:02:ac:bb:4f:0d:08:1a:a1: dc:e9:c5:5f:a9:bd:0a:57:23:24:04:83:f7:8f:b0:9e:22:61: b5:94:c5:a0:00:ee:24:e4:bb:e7:28:65:e7:5e:e2:ce:c0:22: 31:ed:a7:0f:8a:01:20:c3:8b:30:a4:b2:53:e0:c1:4b:cf:99: 0e:fd:ed:15:00:dc:d6:96:72:af:d5:29:85:da:5e:14:ab:fc: 0c:b4:bc:ac:6c:e0:55:0c:45:25:68:04:b1:04:a4:84:66:5c: 71:99:08:7e:21:23:b4:a1:d2:3d:56:cd:bf:e8:f3:ed:4b:41: c4:6f:17:40:56:78:b2:29:1f:e5:54:ee:4e:8e:8b:4d:59:7e: 91:21:6b:39:3f:a1:e7:14:60:83:8c:94:bd:64:9f:ab:fb:b7: 65:03:12:7a:84:74:4b:16:09:91:c0:0d:1f:aa:08:a4:ce:9f: 90:84:5f:2e:64:66:e4:fa:f4:fd:50:a3:e1:77:33:e7:f6:39: d7:e1:fa:40:c2:7f:21:fd:71:10:b8:13:79:51:60:3f:53:e9: a7:74:13:12:51:91:a6:61:ef:b8:d8:f5:be:15:b6:11:ef:be: 57:f0:50:dd:d5:69:4e:ed:95:af:2a:eb:88:52:06:59:d3:c3: 95:03:cb:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc1iK0fMMHqarE0So1Sc+0XotNMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUE4RjU2OUE3NDA1QkVBQkEyM0Y5QjIwQ0YxQUNEMkNC RDVFRjU3OTAeFw0yNjA3MjMyMTIxMTNaFw0yNjA3MjQyMjUwMTNaMDMxMTAvBgNV BAMTKEJBQTRCQjJCRDAyMTMwQ0M5MDg1OTMyMEI2RTNCREFGM0JENzU3MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqcFw82lRTE70E5rtp/9hE4KGW fL+Xjs9SF2EsAW3jrqlvehz7LroF9AG54P7mmYz7Sso3E2FJ16eUGUa8uIf8TCNx VIVZpNkyGkPjja+8WUcc4IjqqUrWDT58xGLn1YN6fD8GDlfcfGADjA1Zw73VFIp7 Yr40Xdgep6DrVa++rZahFbdU/Jdg53EC3h6FBnagjhpP87lpHm60SLXy38fCo959 A9SegTBOrnWjjt4IssnK+J0V4/JwzT8QDdp55Kj1B1jbqtDYkbDFf7FjPopqrAXS uYQX65lWmDPKVcgDUOSOz+NP6fc2u7smAfLk8AdF5UWxATMdEmk7RAbWkgH1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuqS7K9AhMMyQhZMgtuO9rzvXVx0wHwYDVR0j BBgwFoAU6o9WmnQFvquiP5sgzxrNLL1e9XkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDA0NTdkMjAtMDIzYS00NTA5LWJiNGEtNjJjODY5MjlkZDk3LzAvRUE4RjU2OUE3 NDA1QkVBQkEyM0Y5QjIwQ0YxQUNEMkNCRDVFRjU3OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQThGNTY5QTc0MDVCRUFCQTIzRjlCMjBDRjFBQ0QyQ0JENUVG NTc5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDA0NTdkMjAtMDIzYS00NTA5LWJi NGEtNjJjODY5MjlkZDk3LzAvRUE4RjU2OUE3NDA1QkVBQkEyM0Y5QjIwQ0YxQUNE MkNCRDVFRjU3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK3hfXHquWKsqmECrLtPDQgaodzpxV+pvQpX IyQEg/ePsJ4iYbWUxaAA7iTku+coZede4s7AIjHtpw+KASDDizCkslPgwUvPmQ79 7RUA3NaWcq/VKYXaXhSr/Ay0vKxs4FUMRSVoBLEEpIRmXHGZCH4hI7Sh0j1Wzb/o 8+1LQcRvF0BWeLIpH+VU7k6Oi01ZfpEhazk/oecUYIOMlL1kn6v7t2UDEnqEdEsW CZHADR+qCKTOn5CEXy5kZuT69P1Qo+F3M+f2Odfh+kDCfyH9cRC4E3lRYD9T6ad0 ExJRkaZh77jY9b4VthHvvlfwUN3VaU7tla8q64hSBlnTw5UDy38= -----END CERTIFICATE-----Generated at Fri Jul 24 11:32:23 2026 by rpki-client