$ rpki-client -vvf rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.mft File: EB05D5BB4356C8737A9AA4994302BCA8B46691CD.mft (raw, json) Hash identifier: LAK3bwMZQsiMJyetdmeqdgUGVHFz1OK+ThlyICmo3dI= Subject key identifier: D7:93:BD:E8:0A:54:33:4C:09:09:47:4C:D3:BD:FA:01:64:08:C1:42 Authority key identifier: EB:05:D5:BB:43:56:C8:73:7A:9A:A4:99:43:02:BC:A8:B4:66:91:CD Certificate issuer: /CN=EB05D5BB4356C8737A9AA4994302BCA8B46691CD Certificate serial: 2861A0151AAD4AAC261D61F67BB667C999DE3303 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:46:04 +0000 Manifest this update: Tue 12 May 2026 19:41:04 +0000 Manifest next update: Wed 13 May 2026 22:37:04 +0000 Files and hashes: 1: EB05D5BB4356C8737A9AA4994302BCA8B46691CD.crl (hash: 8h+kEN14vvtehGAa6iMvf1XRzHs5ZtAPKH75urL7uO8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.crl rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:61:a0:15:1a:ad:4a:ac:26:1d:61:f6:7b:b6:67:c9:99:de:33:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB05D5BB4356C8737A9AA4994302BCA8B46691CD Validity Not Before: May 12 19:41:04 2026 GMT Not After : May 13 22:37:04 2026 GMT Subject: CN=D793BDE80A54334C0909474CD3BDFA016408C142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ee:d3:47:e4:aa:1f:a2:ab:92:f4:c6:d6:16: 72:ac:3b:0a:1e:e0:99:5f:9e:78:72:8a:68:19:47: 2c:93:ba:94:d2:5a:c1:1e:3f:cd:e5:a0:5b:4e:58: 73:66:d4:18:22:ec:cd:18:e6:13:91:b1:66:01:31: 3a:ef:29:20:8b:72:33:07:11:29:e0:78:2e:51:a9: 93:c6:e5:ac:a5:d2:64:82:c7:3e:6f:e4:5e:2c:a7: 42:9e:48:43:65:3e:12:43:18:e5:29:0f:62:ba:96: 8e:0f:8b:5e:28:f9:b4:29:0a:66:c6:86:80:40:8a: ad:17:f6:66:a5:4f:40:cb:72:ec:15:be:1d:f3:8c: 2f:4d:3c:e3:e3:c6:35:36:ad:3f:dd:7e:4a:db:9d: ec:65:71:b5:84:da:56:a8:ab:05:50:65:73:71:49: b3:45:0d:80:50:98:14:83:0e:53:26:e7:11:6f:a7: 80:b0:ed:37:a9:e0:79:5e:80:c2:fa:54:e4:3b:df: 46:ed:9b:a1:3f:14:38:33:92:79:d3:4d:81:04:1a: ad:e1:eb:cb:4d:35:6f:da:eb:f7:f1:55:97:b0:8c: 33:a9:52:c6:69:f0:b0:2a:2f:1c:08:a1:1a:ab:17: b8:ee:44:01:ef:af:75:50:99:55:e4:bb:1d:72:3c: 4e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:93:BD:E8:0A:54:33:4C:09:09:47:4C:D3:BD:FA:01:64:08:C1:42 X509v3 Authority Key Identifier: keyid:EB:05:D5:BB:43:56:C8:73:7A:9A:A4:99:43:02:BC:A8:B4:66:91:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:c1:86:0d:2e:87:d9:c7:f8:99:1e:f4:ef:bd:69:50:4f:9c: 3d:6c:6b:e4:e9:67:19:a3:8c:2e:79:99:4c:70:97:9b:19:cc: f4:64:d5:36:23:a3:77:be:f1:26:ff:0e:eb:9f:ce:11:c0:46: 7b:99:91:f8:a4:3a:bb:a0:c9:9c:b5:e0:32:04:cb:79:7e:7f: a4:f9:c8:42:4c:90:90:0c:55:d3:f3:a3:87:d9:2a:55:88:3e: 50:45:93:86:d5:12:1e:20:21:f6:56:52:0a:6a:82:ec:b5:47: 68:40:f1:8b:b9:e0:11:71:f8:18:c6:6f:4e:7c:23:d7:bc:db: ce:72:5d:5a:0c:44:e2:21:9b:12:c8:80:b1:6d:fd:e4:fd:bf: 88:05:58:2d:8d:ba:4e:54:99:38:71:7f:89:2a:4e:c0:cd:af: 75:d2:97:da:97:8e:18:24:b1:e4:69:85:de:50:9c:b1:6e:24: 41:89:22:a0:d6:3f:e1:37:9b:89:8d:f7:25:ce:48:b8:39:69: 30:89:04:10:35:ac:fc:c3:02:f6:9b:c8:7d:25:44:a1:e6:80: 50:94:ee:f6:fe:ff:57:4a:a2:a4:3a:7a:8f:70:9e:6e:d9:f7: 98:c8:d1:9b:f4:1f:3a:be:86:0f:8b:8e:93:fb:36:b7:54:71: 94:3c:19:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKGGgFRqtSqwmHWH2e7ZnyZneMwMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUIwNUQ1QkI0MzU2Qzg3MzdBOUFBNDk5NDMwMkJDQThC NDY2OTFDRDAeFw0yNjA1MTIxOTQxMDRaFw0yNjA1MTMyMjM3MDRaMDMxMTAvBgNV BAMTKEQ3OTNCREU4MEE1NDMzNEMwOTA5NDc0Q0QzQkRGQTAxNjQwOEMxNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB7tNH5KofoquS9MbWFnKsOwoe 4JlfnnhyimgZRyyTupTSWsEeP83loFtOWHNm1Bgi7M0Y5hORsWYBMTrvKSCLcjMH ESngeC5RqZPG5ayl0mSCxz5v5F4sp0KeSENlPhJDGOUpD2K6lo4Pi14o+bQpCmbG hoBAiq0X9malT0DLcuwVvh3zjC9NPOPjxjU2rT/dfkrbnexlcbWE2laoqwVQZXNx SbNFDYBQmBSDDlMm5xFvp4Cw7Tep4HlegML6VOQ730btm6E/FDgzknnTTYEEGq3h 68tNNW/a6/fxVZewjDOpUsZp8LAqLxwIoRqrF7juRAHvr3VQmVXkux1yPE7NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU15O96ApUM0wJCUdM0736AWQIwUIwHwYDVR0j BBgwFoAU6wXVu0NWyHN6mqSZQwK8qLRmkc0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGM1OGZiN2MtNjdiOC00YmNlLTk2ZDktYmU5MTJlM2Y3M2RkLzEvRUIwNUQ1QkI0 MzU2Qzg3MzdBOUFBNDk5NDMwMkJDQThCNDY2OTFDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQjA1RDVCQjQzNTZDODczN0E5QUE0OTk0MzAyQkNBOEI0NjY5 MUNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGM1OGZiN2MtNjdiOC00YmNlLTk2 ZDktYmU5MTJlM2Y3M2RkLzEvRUIwNUQ1QkI0MzU2Qzg3MzdBOUFBNDk5NDMwMkJD QThCNDY2OTFDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEbBhg0uh9nH+Jke9O+9aVBPnD1sa+TpZxmj jC55mUxwl5sZzPRk1TYjo3e+8Sb/DuufzhHARnuZkfikOrugyZy14DIEy3l+f6T5 yEJMkJAMVdPzo4fZKlWIPlBFk4bVEh4gIfZWUgpqguy1R2hA8Yu54BFx+BjGb058 I9e8285yXVoMROIhmxLIgLFt/eT9v4gFWC2Nuk5UmThxf4kqTsDNr3XSl9qXjhgk seRphd5QnLFuJEGJIqDWP+E3m4mN9yXOSLg5aTCJBBA1rPzDAvabyH0lRKHmgFCU 7vb+/1dKoqQ6eo9wnm7Z95jI0Zv0Hzq+hg+LjpP7NrdUcZQ8GXY= -----END CERTIFICATE-----Generated at Wed May 13 02:18:58 2026 by rpki-client