$ rpki-client -vvf rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.mft File: EB05D5BB4356C8737A9AA4994302BCA8B46691CD.mft (raw, json) Hash identifier: nXLh7dbim7Kl2r8qqS6+teyN78HihaWX+ApAce9R67o= Subject key identifier: F6:7C:74:53:2B:15:06:20:25:4A:6D:79:13:2D:48:94:50:C6:C1:47 Authority key identifier: EB:05:D5:BB:43:56:C8:73:7A:9A:A4:99:43:02:BC:A8:B4:66:91:CD Certificate issuer: /CN=EB05D5BB4356C8737A9AA4994302BCA8B46691CD Certificate serial: 4EF17D09E7BF50D14D5EFDADE199EFFAFC61B623 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 16:50:31 +0000 Manifest this update: Thu 23 Jul 2026 16:45:31 +0000 Manifest next update: Fri 24 Jul 2026 19:46:31 +0000 Files and hashes: 1: EB05D5BB4356C8737A9AA4994302BCA8B46691CD.crl (hash: 6savTwZ1voH1pT5/a+lGvwONA3p0ChnEx7gmQ48b+Os=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.crl rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:46:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:f1:7d:09:e7:bf:50:d1:4d:5e:fd:ad:e1:99:ef:fa:fc:61:b6:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB05D5BB4356C8737A9AA4994302BCA8B46691CD Validity Not Before: Jul 23 16:45:31 2026 GMT Not After : Jul 24 19:46:31 2026 GMT Subject: CN=F67C74532B150620254A6D79132D489450C6C147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:49:45:4f:a8:b2:ef:94:06:48:f2:fb:94:53: 3e:f7:eb:7e:86:76:4e:f4:78:b0:7d:5b:1c:4f:bd: 4c:c9:1a:e0:fa:1c:37:74:98:36:cd:0a:e1:e9:8d: e4:37:e4:23:dd:ad:77:e2:4d:7f:f9:06:85:1c:a6: 2d:46:2f:c6:64:c7:12:7b:cc:59:f1:e0:a7:6f:32: 6f:1d:ec:fa:e5:a2:53:e5:3f:d5:7a:03:01:1e:50: d0:9f:f3:d2:43:fe:aa:5c:c2:45:6a:2b:57:00:f2: d2:ea:ed:94:c1:b1:e2:f8:1b:07:e8:77:92:3f:eb: 37:0c:d3:f6:a6:18:28:f8:37:2f:bc:49:82:75:bc: dd:78:70:df:1d:7f:3b:e6:7f:3b:a6:31:ba:ba:27: 1b:64:9b:4e:0b:f2:ed:d1:de:cf:10:8e:fe:cf:ea: d2:77:c5:e9:0b:52:04:be:af:19:c6:a4:d3:ba:c5: 31:cf:96:8a:80:29:7e:04:a2:56:87:d9:fd:ad:8a: 4f:c7:d1:56:4e:bb:a8:0f:9b:0d:f4:67:44:b5:bd: e0:69:de:fe:cc:0f:fc:c4:a2:42:82:9b:7b:9e:45: 7e:51:00:1f:1a:68:ed:b5:85:07:78:57:2f:c3:0b: 55:a9:52:a7:3f:02:18:27:bc:7f:a4:d9:9b:fb:16: bf:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:7C:74:53:2B:15:06:20:25:4A:6D:79:13:2D:48:94:50:C6:C1:47 X509v3 Authority Key Identifier: keyid:EB:05:D5:BB:43:56:C8:73:7A:9A:A4:99:43:02:BC:A8:B4:66:91:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:da:62:d8:69:bb:c4:96:2a:48:a8:77:02:0d:5e:bb:22:24: 69:75:4c:40:e0:01:1b:69:87:20:61:a1:66:58:6f:1b:56:17: 79:26:16:24:b5:92:2e:3f:a5:18:54:79:91:49:90:8e:bb:5e: 3e:e7:c4:e1:31:4a:51:1b:5a:7e:56:cf:6a:f2:b6:c0:5f:9d: e1:1c:2e:3a:f6:df:54:2a:1c:b7:13:a1:98:3d:2b:cc:f6:ac: e0:9c:09:a6:68:79:92:4a:55:35:e8:56:bd:bc:ad:40:39:f6: db:14:be:4a:9b:ef:a4:43:9a:cb:7b:11:06:bc:01:5f:7d:a6: 0f:32:95:3d:0d:0d:d0:b6:08:03:b8:0b:81:af:5c:d6:99:45: 24:a7:dc:83:3b:a1:cd:c6:1f:91:1e:27:8a:52:c3:f2:3b:64: 18:16:93:a6:19:4d:40:8e:71:e3:96:39:d1:a1:a6:e6:39:a7: 2e:e4:5e:51:16:93:b7:ca:68:89:d4:d5:e4:a3:6b:e9:e2:2e: 38:c6:c8:10:fd:bc:e7:f1:ae:f8:b0:3c:c7:2a:98:45:35:fd: e2:2c:2c:21:17:2b:44:07:60:1a:ba:9c:d2:5b:2d:81:e8:df: 6d:f8:ee:8d:8f:cf:0e:0d:c3:de:1d:e5:79:1e:8b:e4:bd:00: ff:ca:18:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTvF9Cee/UNFNXv2t4Znv+vxhtiMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUIwNUQ1QkI0MzU2Qzg3MzdBOUFBNDk5NDMwMkJDQThC NDY2OTFDRDAeFw0yNjA3MjMxNjQ1MzFaFw0yNjA3MjQxOTQ2MzFaMDMxMTAvBgNV BAMTKEY2N0M3NDUzMkIxNTA2MjAyNTRBNkQ3OTEzMkQ0ODk0NTBDNkMxNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoSUVPqLLvlAZI8vuUUz73636G dk70eLB9WxxPvUzJGuD6HDd0mDbNCuHpjeQ35CPdrXfiTX/5BoUcpi1GL8ZkxxJ7 zFnx4KdvMm8d7PrlolPlP9V6AwEeUNCf89JD/qpcwkVqK1cA8tLq7ZTBseL4Gwfo d5I/6zcM0/amGCj4Ny+8SYJ1vN14cN8dfzvmfzumMbq6Jxtkm04L8u3R3s8Qjv7P 6tJ3xekLUgS+rxnGpNO6xTHPloqAKX4EolaH2f2tik/H0VZOu6gPmw30Z0S1veBp 3v7MD/zEokKCm3ueRX5RAB8aaO21hQd4Vy/DC1WpUqc/AhgnvH+k2Zv7Fr8XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9nx0UysVBiAlSm15Ey1IlFDGwUcwHwYDVR0j BBgwFoAU6wXVu0NWyHN6mqSZQwK8qLRmkc0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGM1OGZiN2MtNjdiOC00YmNlLTk2ZDktYmU5MTJlM2Y3M2RkLzEvRUIwNUQ1QkI0 MzU2Qzg3MzdBOUFBNDk5NDMwMkJDQThCNDY2OTFDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQjA1RDVCQjQzNTZDODczN0E5QUE0OTk0MzAyQkNBOEI0NjY5 MUNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGM1OGZiN2MtNjdiOC00YmNlLTk2 ZDktYmU5MTJlM2Y3M2RkLzEvRUIwNUQ1QkI0MzU2Qzg3MzdBOUFBNDk5NDMwMkJD QThCNDY2OTFDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADLaYthpu8SWKkiodwINXrsiJGl1TEDgARtp hyBhoWZYbxtWF3kmFiS1ki4/pRhUeZFJkI67Xj7nxOExSlEbWn5Wz2rytsBfneEc Ljr231QqHLcToZg9K8z2rOCcCaZoeZJKVTXoVr28rUA59tsUvkqb76RDmst7EQa8 AV99pg8ylT0NDdC2CAO4C4GvXNaZRSSn3IM7oc3GH5EeJ4pSw/I7ZBgWk6YZTUCO ceOWOdGhpuY5py7kXlEWk7fKaInU1eSja+niLjjGyBD9vOfxrviwPMcqmEU1/eIs LCEXK0QHYBq6nNJbLYHo32347o2Pzw4Nw94d5Xkei+S9AP/KGOM= -----END CERTIFICATE-----Generated at Fri Jul 24 10:02:05 2026 by rpki-client