$ rpki-client -vvf rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft File: EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft (raw, json) Hash identifier: UDUkcmKXVkZMNljIlcHk8zYWNQQUfnTVJJz/bJssKs8= Subject key identifier: 6B:AD:CD:82:8D:83:5B:EB:9F:3D:4C:FA:45:7B:F7:E7:C5:25:D2:08 Authority key identifier: EA:1F:A0:A5:CF:DA:8B:5A:6F:64:2F:58:87:FD:67:22:D7:53:10:0D Certificate issuer: /CN=EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D Certificate serial: 5F14C1F273D70D5F70A6D05B3BDBBF47A6A29EF1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:27:17 +0000 Manifest this update: Tue 12 May 2026 17:22:17 +0000 Manifest next update: Wed 13 May 2026 18:46:17 +0000 Files and hashes: 1: EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.crl (hash: N26yA5KXRiIRi/+xJhtPxF8sgBSmAE4OGoF5Eb6sZ/4=) 2: 3136302e3138372e3139362e302f32342d3234203d3e20313533313234.roa (hash: S4hauyuLw7/w8jvKs8EoZ1L3na+uvt8Vo0vCOD48FJ4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.crl rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:14:c1:f2:73:d7:0d:5f:70:a6:d0:5b:3b:db:bf:47:a6:a2:9e:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D Validity Not Before: May 12 17:22:17 2026 GMT Not After : May 13 18:46:17 2026 GMT Subject: CN=6BADCD828D835BEB9F3D4CFA457BF7E7C525D208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:52:61:4b:1f:ac:3d:8c:6f:50:53:17:a5:dc: 08:45:f3:ae:23:d1:76:16:45:ff:2b:13:13:1b:3b: 00:18:3b:8d:e5:60:4d:2d:52:a4:5c:16:88:c6:58: 6c:f7:ba:6f:5e:10:c2:d4:9a:fc:1c:31:25:f0:39: 84:d0:cd:a6:17:0b:58:cc:c1:1c:ad:ff:1f:28:ff: 3c:89:2d:31:e6:dd:ee:f1:88:97:01:ab:1c:d8:fe: 67:49:59:1e:05:50:2c:2a:52:8d:ee:b2:05:6c:f1: 29:7e:37:db:8b:b9:b7:10:d2:d4:c1:36:17:0c:54: 45:d9:bc:d5:d8:53:fa:ed:f4:60:bb:5b:19:b4:25: df:a1:73:50:c6:27:06:88:43:7d:95:65:7e:c0:a0: e7:7e:7e:1c:c7:74:89:93:48:47:b4:1d:a7:16:b9: 64:dc:78:8d:c6:24:f6:8c:fc:89:23:34:a6:69:2c: 0d:95:41:d7:cc:41:3e:ea:8e:45:ac:8e:a5:04:1b: 00:b2:91:cb:cb:9b:9f:71:ca:51:32:16:8e:74:58: 49:6f:ac:8b:e2:36:d3:0e:3f:0d:23:02:40:25:10: 11:dc:f1:70:bf:41:f3:41:21:39:c6:a8:1f:26:38: 86:56:1f:0d:d0:06:58:f6:b2:87:ce:59:b3:52:8c: 0b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:AD:CD:82:8D:83:5B:EB:9F:3D:4C:FA:45:7B:F7:E7:C5:25:D2:08 X509v3 Authority Key Identifier: keyid:EA:1F:A0:A5:CF:DA:8B:5A:6F:64:2F:58:87:FD:67:22:D7:53:10:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:9c:7e:e9:f2:80:ab:d9:ae:12:38:76:c1:ce:8b:25:3e:52: 78:1e:97:dd:be:ea:07:83:0a:87:4f:2b:86:09:bf:14:66:a4: 10:f7:13:9d:8f:6f:63:00:91:18:e9:9c:f7:48:89:93:ba:fc: 95:0e:37:54:5e:bf:27:8c:99:13:1f:89:e7:c0:5d:89:e0:32: 83:63:27:7c:25:01:a9:8b:31:f7:5b:26:27:b6:53:59:8c:5f: 28:7c:48:e9:9a:60:07:9c:e1:c4:cd:aa:74:87:d1:44:85:46: 03:3a:b4:12:c6:28:c3:0e:51:4e:1f:49:d3:af:95:ca:13:55: 65:35:43:3d:36:26:bd:4a:5f:85:49:e9:3a:f7:6b:f2:87:3a: 2e:c2:36:a2:20:c1:72:68:74:95:f2:3d:85:99:b5:43:f7:7b: 81:26:45:5c:31:6d:0e:ae:17:b4:67:63:c9:0c:a8:89:83:c2: a2:41:e3:3d:1a:30:e0:26:02:c5:f7:3f:4f:24:08:6a:c3:5c: 16:4e:61:4c:15:73:89:cc:19:fe:ba:b8:c7:27:c3:d8:77:1f: fd:a9:ab:c6:b9:c2:5a:ac:ac:b0:9f:20:49:84:c2:fa:0f:e2: e1:78:ee:d4:e9:9a:4e:b1:9d:66:10:db:74:e7:fa:51:b5:17: d1:98:d5:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXxTB8nPXDV9wptBbO9u/R6ainvEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUExRkEwQTVDRkRBOEI1QTZGNjQyRjU4ODdGRDY3MjJE NzUzMTAwRDAeFw0yNjA1MTIxNzIyMTdaFw0yNjA1MTMxODQ2MTdaMDMxMTAvBgNV BAMTKDZCQURDRDgyOEQ4MzVCRUI5RjNENENGQTQ1N0JGN0U3QzUyNUQyMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGUmFLH6w9jG9QUxel3AhF864j 0XYWRf8rExMbOwAYO43lYE0tUqRcFojGWGz3um9eEMLUmvwcMSXwOYTQzaYXC1jM wRyt/x8o/zyJLTHm3e7xiJcBqxzY/mdJWR4FUCwqUo3usgVs8Sl+N9uLubcQ0tTB NhcMVEXZvNXYU/rt9GC7Wxm0Jd+hc1DGJwaIQ32VZX7AoOd+fhzHdImTSEe0HacW uWTceI3GJPaM/IkjNKZpLA2VQdfMQT7qjkWsjqUEGwCykcvLm59xylEyFo50WElv rIviNtMOPw0jAkAlEBHc8XC/QfNBITnGqB8mOIZWHw3QBlj2sofOWbNSjAtvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa63Ngo2DW+ufPUz6RXv358Ul0ggwHwYDVR0j BBgwFoAU6h+gpc/ai1pvZC9Yh/1nItdTEA0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGM1OGZiN2MtNjdiOC00YmNlLTk2ZDktYmU5MTJlM2Y3M2RkLzAvRUExRkEwQTVD RkRBOEI1QTZGNjQyRjU4ODdGRDY3MjJENzUzMTAwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQTFGQTBBNUNGREE4QjVBNkY2NDJGNTg4N0ZENjcyMkQ3NTMx MDBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGM1OGZiN2MtNjdiOC00YmNlLTk2 ZDktYmU5MTJlM2Y3M2RkLzAvRUExRkEwQTVDRkRBOEI1QTZGNjQyRjU4ODdGRDY3 MjJENzUzMTAwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFCcfunygKvZrhI4dsHOiyU+Ungel92+6geD CodPK4YJvxRmpBD3E52Pb2MAkRjpnPdIiZO6/JUON1RevyeMmRMfiefAXYngMoNj J3wlAamLMfdbJie2U1mMXyh8SOmaYAec4cTNqnSH0USFRgM6tBLGKMMOUU4fSdOv lcoTVWU1Qz02Jr1KX4VJ6Tr3a/KHOi7CNqIgwXJodJXyPYWZtUP3e4EmRVwxbQ6u F7RnY8kMqImDwqJB4z0aMOAmAsX3P08kCGrDXBZOYUwVc4nMGf66uMcnw9h3H/2p q8a5wlqsrLCfIEmEwvoP4uF47tTpmk6xnWYQ23Tn+lG1F9GY1Zc= -----END CERTIFICATE-----Generated at Tue May 12 22:49:58 2026 by rpki-client