$ rpki-client -vvf rpki-rsync.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/EBB94B4A4FC3917EE61D2764970CFCA1015BBCF1.mft File: EBB94B4A4FC3917EE61D2764970CFCA1015BBCF1.mft (raw, json) Hash identifier: pvEsjcGpvn51Gm8G0N9FnUuo28V5rnKxu1wS3UiTWos= Subject key identifier: 78:22:17:48:C4:AC:52:5E:8F:F6:92:60:69:52:CA:B8:CD:BC:2C:1B Authority key identifier: EB:B9:4B:4A:4F:C3:91:7E:E6:1D:27:64:97:0C:FC:A1:01:5B:BC:F1 Certificate issuer: /CN=EBB94B4A4FC3917EE61D2764970CFCA1015BBCF1 Certificate serial: 70A9B331172E7FDE8003E576C576611C0309C745 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EBB94B4A4FC3917EE61D2764970CFCA1015BBCF1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/EBB94B4A4FC3917EE61D2764970CFCA1015BBCF1.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:56:22 +0000 Manifest this update: Tue 12 May 2026 19:51:22 +0000 Manifest next update: Wed 13 May 2026 22:58:22 +0000 Files and hashes: 1: EBB94B4A4FC3917EE61D2764970CFCA1015BBCF1.crl (hash: rAMhmhQacH3Nrh9ebeVttm1T+hcxP7j//CNsDDdSDVU=) 2: 3136302e32352e3230332e302f32342d3234203d3e20313533313038.roa (hash: 6L2ENtgU1VjFwLGyNVrP8HYDZpGVtd4RKvsD3aKlBT4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/EBB94B4A4FC3917EE61D2764970CFCA1015BBCF1.crl rsync://rpki-rsync.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/EBB94B4A4FC3917EE61D2764970CFCA1015BBCF1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EBB94B4A4FC3917EE61D2764970CFCA1015BBCF1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:a9:b3:31:17:2e:7f:de:80:03:e5:76:c5:76:61:1c:03:09:c7:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBB94B4A4FC3917EE61D2764970CFCA1015BBCF1 Validity Not Before: May 12 19:51:22 2026 GMT Not After : May 13 22:58:22 2026 GMT Subject: CN=78221748C4AC525E8FF692606952CAB8CDBC2C1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:07:76:4a:14:f1:68:33:d5:c1:db:20:32:64: 79:d6:89:63:87:99:7d:05:a5:48:a8:70:86:f6:7b: e4:ea:31:d0:3c:3b:23:67:c5:2f:8e:fc:f3:31:c8: a3:bd:db:ea:b9:87:d2:49:49:8e:13:6c:bd:a5:1a: 3f:e0:99:60:a2:2b:b6:e9:bb:a4:29:db:78:a9:b2: 96:cc:30:de:42:44:d0:44:84:7f:25:e0:1b:0f:8d: cd:ab:9a:f1:80:31:49:e3:d0:b7:9b:7f:7c:1f:3d: 20:bc:b8:64:bd:aa:c6:73:7d:91:7b:1c:a6:de:e7: 1a:e1:a9:62:b6:eb:16:10:a3:c9:c6:72:c7:8f:c1: e9:f4:cb:7e:66:5e:f2:8b:3b:8c:7c:0c:0c:8b:c6: 7a:a7:5a:9b:89:55:58:23:eb:d3:fe:e0:38:20:d3: a6:b3:65:14:8e:b8:2c:41:07:d6:64:93:6b:10:f1: d5:1f:9a:67:3f:8f:f2:ea:33:ce:21:14:b4:3b:ec: ed:4d:5a:bd:f7:f3:ca:ed:ba:c0:e0:6b:9c:ee:a2: 8a:22:98:0b:ea:42:ee:43:57:52:40:18:3a:64:17: f7:7f:21:2b:e6:4c:62:1d:31:bf:4f:e6:76:da:87: 58:c2:b6:47:ae:bd:d3:7d:7b:67:43:f4:09:e1:80: 36:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:22:17:48:C4:AC:52:5E:8F:F6:92:60:69:52:CA:B8:CD:BC:2C:1B X509v3 Authority Key Identifier: keyid:EB:B9:4B:4A:4F:C3:91:7E:E6:1D:27:64:97:0C:FC:A1:01:5B:BC:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/EBB94B4A4FC3917EE61D2764970CFCA1015BBCF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EBB94B4A4FC3917EE61D2764970CFCA1015BBCF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/EBB94B4A4FC3917EE61D2764970CFCA1015BBCF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:5f:cd:ef:f8:0c:62:d9:ca:08:ef:c4:c0:f3:9c:4a:23:d6: f1:8f:fb:93:e8:20:5b:30:81:7b:23:c5:a5:38:bb:93:0d:cd: 3c:c6:a1:7d:82:9a:28:73:e5:11:67:db:2e:33:aa:89:7b:9e: 53:ae:dd:92:fb:db:7c:b8:de:9e:f7:0c:a5:27:f3:53:63:42: 78:59:50:30:bd:d6:89:73:ea:7a:4c:a7:85:13:44:52:43:3f: 99:c5:3d:24:5e:cb:b3:82:23:d6:b1:7e:c7:11:c7:2a:d9:e1: d1:cd:c7:d0:ad:16:f4:76:5f:9c:9e:e9:e6:1e:87:12:9a:ac: e3:5b:17:f1:b7:8a:d0:71:55:d0:0b:3e:b3:34:eb:75:7a:9d: 8c:fe:64:4a:0a:8d:ce:8a:11:c3:25:3d:7b:7c:3b:24:49:aa: 79:dd:6d:97:fa:03:7d:e5:1f:02:4c:9d:43:3e:ea:9c:89:e2: 31:cf:72:9f:c9:5c:9a:b4:93:cf:50:6d:19:c5:2c:8f:05:08: 37:8d:0e:ce:aa:62:f3:f1:97:1a:57:26:30:ce:3d:31:ec:a7: 81:4c:a5:af:e9:88:d5:da:d6:4a:e3:60:ec:3d:81:4e:e2:0d: 96:51:f4:6a:1b:9a:50:d6:56:c1:2f:8d:b6:71:27:bc:2d:06: 82:44:02:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcKmzMRcuf96AA+V2xXZhHAMJx0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJCOTRCNEE0RkMzOTE3RUU2MUQyNzY0OTcwQ0ZDQTEw MTVCQkNGMTAeFw0yNjA1MTIxOTUxMjJaFw0yNjA1MTMyMjU4MjJaMDMxMTAvBgNV BAMTKDc4MjIxNzQ4QzRBQzUyNUU4RkY2OTI2MDY5NTJDQUI4Q0RCQzJDMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtB3ZKFPFoM9XB2yAyZHnWiWOH mX0FpUiocIb2e+TqMdA8OyNnxS+O/PMxyKO92+q5h9JJSY4TbL2lGj/gmWCiK7bp u6Qp23ipspbMMN5CRNBEhH8l4BsPjc2rmvGAMUnj0Lebf3wfPSC8uGS9qsZzfZF7 HKbe5xrhqWK26xYQo8nGcsePwen0y35mXvKLO4x8DAyLxnqnWpuJVVgj69P+4Dgg 06azZRSOuCxBB9Zkk2sQ8dUfmmc/j/LqM84hFLQ77O1NWr3388rtusDga5zuoooi mAvqQu5DV1JAGDpkF/d/ISvmTGIdMb9P5nbah1jCtkeuvdN9e2dD9AnhgDZVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeCIXSMSsUl6P9pJgaVLKuM28LBswHwYDVR0j BBgwFoAU67lLSk/DkX7mHSdklwz8oQFbvPEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWFjNjE1NWUtMmQyZi00ZjllLWIyMTgtZWI1MjViM2ExMTE5LzAvRUJCOTRCNEE0 RkMzOTE3RUU2MUQyNzY0OTcwQ0ZDQTEwMTVCQkNGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQkI5NEI0QTRGQzM5MTdFRTYxRDI3NjQ5NzBDRkNBMTAxNUJC Q0YxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWFjNjE1NWUtMmQyZi00ZjllLWIy MTgtZWI1MjViM2ExMTE5LzAvRUJCOTRCNEE0RkMzOTE3RUU2MUQyNzY0OTcwQ0ZD QTEwMTVCQkNGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADFfze/4DGLZygjvxMDznEoj1vGP+5PoIFsw gXsjxaU4u5MNzTzGoX2Cmihz5RFn2y4zqol7nlOu3ZL723y43p73DKUn81NjQnhZ UDC91olz6npMp4UTRFJDP5nFPSRey7OCI9axfscRxyrZ4dHNx9CtFvR2X5ye6eYe hxKarONbF/G3itBxVdALPrM063V6nYz+ZEoKjc6KEcMlPXt8OyRJqnndbZf6A33l HwJMnUM+6pyJ4jHPcp/JXJq0k89QbRnFLI8FCDeNDs6qYvPxlxpXJjDOPTHsp4FM pa/piNXa1krjYOw9gU7iDZZR9GobmlDWVsEvjbZxJ7wtBoJEAqs= -----END CERTIFICATE-----Generated at Wed May 13 00:45:07 2026 by rpki-client