$ rpki-client -vvf rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft File: EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft (raw, json) Hash identifier: lGtQqQ2XacAXgTpRL6DuwT78TV5noddSdCM4B0oFgDA= Subject key identifier: C2:BA:6A:E8:67:38:C1:DA:3A:49:99:92:21:82:D3:A9:14:3E:5A:EC Authority key identifier: EA:1F:A0:A5:CF:DA:8B:5A:6F:64:2F:58:87:FD:67:22:D7:53:10:0D Certificate issuer: /CN=EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D Certificate serial: 31B4538DECA916FAF351416231D55E4C45514F7E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 07:54:11 +0000 Manifest this update: Fri 24 Jul 2026 07:49:11 +0000 Manifest next update: Sat 25 Jul 2026 08:46:11 +0000 Files and hashes: 1: 3136302e3138372e3139362e302f32342d3234203d3e20313533313234.roa (hash: S4hauyuLw7/w8jvKs8EoZ1L3na+uvt8Vo0vCOD48FJ4=) 2: EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.crl (hash: 4qX4ljugkNFu6huazL/kX+nFWe3kvAetQqV9qkwT+VQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.crl rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 08:46:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:b4:53:8d:ec:a9:16:fa:f3:51:41:62:31:d5:5e:4c:45:51:4f:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D Validity Not Before: Jul 24 07:49:11 2026 GMT Not After : Jul 25 08:46:11 2026 GMT Subject: CN=C2BA6AE86738C1DA3A4999922182D3A9143E5AEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:77:a6:82:55:02:99:30:dd:38:46:12:76:02: b2:ba:f5:1d:e8:f3:99:da:6d:6a:f1:92:31:e3:c5: 8e:f9:db:72:de:c6:1b:52:75:3a:a7:78:2b:86:2e: 0e:ab:45:be:a3:ad:6e:5a:5a:f4:c6:aa:94:79:d1: bb:b3:2b:14:e9:8f:56:19:75:3e:11:a4:b2:71:58: 47:30:05:0b:90:ee:e9:26:8c:34:1e:ca:2b:c9:b9: fe:c7:f5:ea:18:02:a0:3f:7e:c4:a5:84:77:3b:88: 54:9f:c7:40:07:21:03:2e:a5:2b:71:ab:58:c2:c0: 0b:e8:74:c9:3f:8c:ad:aa:73:15:24:ac:04:10:ab: b2:16:91:45:e6:0e:ed:a3:3d:d8:7d:bb:c9:8a:96: 68:ea:83:03:50:4e:b6:b7:a8:b8:56:1a:9a:ca:44: 4e:1a:bc:37:28:eb:fb:e9:0e:5b:95:b7:9f:ba:9f: c0:5f:be:4a:cb:2a:d4:83:39:bf:62:05:d8:b1:91: c5:7f:5a:69:93:22:42:3c:28:23:53:19:9b:c4:88: 7b:ab:df:a7:60:e0:07:c6:af:97:34:ab:ac:91:44: 92:56:3e:7f:99:34:75:7e:8a:dd:51:02:0a:5c:ba: d9:92:a7:9f:9c:e9:9f:77:85:2a:a9:f4:1d:0b:72: 2b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:BA:6A:E8:67:38:C1:DA:3A:49:99:92:21:82:D3:A9:14:3E:5A:EC X509v3 Authority Key Identifier: keyid:EA:1F:A0:A5:CF:DA:8B:5A:6F:64:2F:58:87:FD:67:22:D7:53:10:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:ee:e7:90:61:56:1d:7e:57:cc:c5:e1:2f:79:1f:3a:53:95: be:8f:03:88:5b:b3:d3:8f:7b:e3:3f:e3:b1:2a:51:1d:da:08: e1:e5:e3:d5:d3:e6:6c:01:b2:5f:4e:55:92:1a:31:01:3d:35: 0a:b5:bd:c2:52:c1:bb:bc:50:c9:9b:c1:34:f9:5b:c5:cd:b8: 13:94:fd:ee:7f:4c:67:cc:2a:87:08:db:8a:fe:69:3c:22:6c: 56:c6:9f:b7:71:7b:31:fb:54:21:41:7d:37:3d:b3:39:e9:c5: ee:a2:23:7e:e2:23:b6:e1:7f:90:53:6d:77:44:34:43:47:f6: 13:fc:1d:d4:ad:1f:d7:45:c2:e0:54:37:15:ed:9c:75:5f:13: a3:ec:85:a0:47:cd:d6:bb:a7:91:b4:b9:33:b8:86:5d:17:25: 69:3c:05:b8:be:fc:56:0a:fc:49:54:f3:3b:1b:3e:9e:f0:24: e5:1b:04:07:78:82:32:e2:a9:aa:f8:0e:69:8d:aa:a4:09:f2: ff:a1:4d:02:dd:ee:4a:10:76:91:ca:c6:d6:5d:bc:b8:b8:8a: 99:3c:e1:f2:fa:49:3b:82:a0:68:95:e8:74:cb:62:5f:4a:23: 6a:f2:8d:bb:36:cf:7e:9b:57:eb:4f:f8:0c:15:26:ef:ed:10: 1d:e3:89:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMbRTjeypFvrzUUFiMdVeTEVRT34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUExRkEwQTVDRkRBOEI1QTZGNjQyRjU4ODdGRDY3MjJE NzUzMTAwRDAeFw0yNjA3MjQwNzQ5MTFaFw0yNjA3MjUwODQ2MTFaMDMxMTAvBgNV BAMTKEMyQkE2QUU4NjczOEMxREEzQTQ5OTk5MjIxODJEM0E5MTQzRTVBRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzd6aCVQKZMN04RhJ2ArK69R3o 85nabWrxkjHjxY7523LexhtSdTqneCuGLg6rRb6jrW5aWvTGqpR50buzKxTpj1YZ dT4RpLJxWEcwBQuQ7ukmjDQeyivJuf7H9eoYAqA/fsSlhHc7iFSfx0AHIQMupStx q1jCwAvodMk/jK2qcxUkrAQQq7IWkUXmDu2jPdh9u8mKlmjqgwNQTra3qLhWGprK RE4avDco6/vpDluVt5+6n8BfvkrLKtSDOb9iBdixkcV/WmmTIkI8KCNTGZvEiHur 36dg4AfGr5c0q6yRRJJWPn+ZNHV+it1RAgpcutmSp5+c6Z93hSqp9B0LcitzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwrpq6Gc4wdo6SZmSIYLTqRQ+WuwwHwYDVR0j BBgwFoAU6h+gpc/ai1pvZC9Yh/1nItdTEA0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGM1OGZiN2MtNjdiOC00YmNlLTk2ZDktYmU5MTJlM2Y3M2RkLzAvRUExRkEwQTVD RkRBOEI1QTZGNjQyRjU4ODdGRDY3MjJENzUzMTAwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQTFGQTBBNUNGREE4QjVBNkY2NDJGNTg4N0ZENjcyMkQ3NTMx MDBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGM1OGZiN2MtNjdiOC00YmNlLTk2 ZDktYmU5MTJlM2Y3M2RkLzAvRUExRkEwQTVDRkRBOEI1QTZGNjQyRjU4ODdGRDY3 MjJENzUzMTAwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKHu55BhVh1+V8zF4S95HzpTlb6PA4hbs9OP e+M/47EqUR3aCOHl49XT5mwBsl9OVZIaMQE9NQq1vcJSwbu8UMmbwTT5W8XNuBOU /e5/TGfMKocI24r+aTwibFbGn7dxezH7VCFBfTc9sznpxe6iI37iI7bhf5BTbXdE NENH9hP8HdStH9dFwuBUNxXtnHVfE6PshaBHzda7p5G0uTO4hl0XJWk8Bbi+/FYK /ElU8zsbPp7wJOUbBAd4gjLiqar4DmmNqqQJ8v+hTQLd7koQdpHKxtZdvLi4ipk8 4fL6STuCoGiV6HTLYl9KI2ryjbs2z36bV+tP+AwVJu/tEB3jifM= -----END CERTIFICATE-----Generated at Fri Jul 24 11:16:28 2026 by rpki-client