$ rpki-client -vvf rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft File: EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft (raw, json) Hash identifier: xdz1Ye0jeadlDMdSXghIZeIreXIQH5rnMAj2HWrLGZg= Subject key identifier: 22:E1:3D:F1:EB:7A:CD:5C:4D:37:F6:4F:65:F9:70:11:FF:9A:D0:A2 Authority key identifier: EA:F1:BB:C2:E7:85:2A:08:EC:97:26:DF:03:7B:7A:90:02:0F:61:3C Certificate issuer: /CN=EAF1BBC2E7852A08EC9726DF037B7A90020F613C Certificate serial: 5B3086DCA5879F77C043E27F2156C62F3444E037 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft Manifest number: 0E Signing time: Tue 12 May 2026 03:53:28 +0000 Manifest this update: Tue 12 May 2026 03:48:28 +0000 Manifest next update: Wed 13 May 2026 05:44:28 +0000 Files and hashes: 1: 3132302e38392e39302e302f32332d3234203d3e20313335343737.roa (hash: L8OlDd+zcMlp2nj6z/A4ihQhVRTYQCBk+qSvJaFpcus=) 2: 3130332e37362e3135302e302f32342d3234203d3e20313335343737.roa (hash: xYxE6IzCdxb+aq4Kkm/AnjYa+vu3xdG+mLXx5vkCP/U=) 3: 3130332e332e35382e302f32342d3234203d3e20313335343737.roa (hash: 2zqd8AgBddwBm4KIXvjiblLxU15/BrCCnreac7skVlA=) 4: 323430373a366638303a3a2f33322d3438203d3e20313335343737.roa (hash: P366bIkTOlc69Ppfa9a3mTWNreZ6tb8vIXj7vOkMLBM=) 5: 3130332e37362e3135312e302f32342d3234203d3e20313335343737.roa (hash: qw6OlEu48FrPsEmKgwHPSjOidfOJLUIet7s/2iStFrA=) 6: EAF1BBC2E7852A08EC9726DF037B7A90020F613C.crl (hash: 4aw2/cQcjKjRh3p0C8qUvn6Pado6A4EzxC6gaZnqK1g=) 7: 3230332e32392e32362e302f32342d3234203d3e20313335343737.roa (hash: 5DkSgMYDvgEBxCCplmwfDoevI8VI5H/bGiFDzCRHnts=) 8: 3130332e37362e3134382e302f32342d3234203d3e20313335343737.roa (hash: Tsm6R3Ykoq+qGUHJdq4ks8X4b5Uy0ypiE0/txgdjmm4=) 9: 3130332e37362e3134392e302f32342d3234203d3e20313335343737.roa (hash: f59rz1HETJlgvZwIKtKFdh5XtKqyQqDaf24eWmjJW6o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.crl rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 05:44:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:30:86:dc:a5:87:9f:77:c0:43:e2:7f:21:56:c6:2f:34:44:e0:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAF1BBC2E7852A08EC9726DF037B7A90020F613C Validity Not Before: May 12 03:48:28 2026 GMT Not After : May 13 05:44:28 2026 GMT Subject: CN=22E13DF1EB7ACD5C4D37F64F65F97011FF9AD0A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2d:05:72:67:53:f0:3a:45:cc:87:c8:da:21: 86:83:6f:3b:c4:89:35:03:75:ca:da:21:9a:49:9c: 77:28:77:aa:4d:2e:ea:2c:fd:60:63:be:34:2b:85: 7d:83:e6:f7:e0:26:36:d2:b3:af:c4:dc:d5:65:47: 0b:b3:85:7f:51:fa:7e:c4:c8:19:1d:e8:7f:67:af: c0:97:8e:a9:6e:69:d5:b7:6f:58:72:fe:ba:1a:f6: ca:17:bf:dd:ce:49:03:13:dd:5e:13:5e:a7:8c:37: 15:15:17:27:3d:ed:66:bb:b9:78:49:6b:3a:9b:83: 65:78:ba:e9:41:0a:16:b5:03:16:e3:30:16:d0:b5: f3:5e:27:71:fb:1b:08:45:d6:25:36:54:15:9d:75: ba:0b:28:53:61:0f:88:f2:73:be:82:8d:75:44:35: 28:43:ff:7a:38:d2:ac:cd:fe:36:81:48:95:e4:ac: a7:70:34:59:92:88:2b:3a:1b:29:85:bf:71:77:b8: e4:69:70:a5:28:c1:23:83:1b:3b:0f:d4:d2:9f:6f: e3:f1:ee:7a:eb:91:b7:5a:20:c3:fc:e8:cb:54:55: 70:a4:69:c0:60:90:02:03:d9:1b:ec:0f:81:d2:78: 58:ff:45:91:87:84:34:7c:c3:2b:43:f4:74:f0:54: 24:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E1:3D:F1:EB:7A:CD:5C:4D:37:F6:4F:65:F9:70:11:FF:9A:D0:A2 X509v3 Authority Key Identifier: keyid:EA:F1:BB:C2:E7:85:2A:08:EC:97:26:DF:03:7B:7A:90:02:0F:61:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:a8:ce:02:d5:40:6b:18:0f:7f:a6:18:16:a0:3c:ca:d4:0b: 0c:0e:a3:c0:c5:49:af:5e:7d:0d:9e:a9:9b:cf:02:7c:16:c2: e1:f8:41:75:6f:d0:6e:15:d8:e0:c0:22:0d:27:66:2e:26:e7: 70:27:28:8a:ad:5c:a9:fe:36:0d:52:05:3a:df:05:b5:18:56: bd:90:48:e4:e0:ac:e4:0a:85:64:50:a3:74:4f:db:37:a8:46: 72:14:6f:7e:aa:95:fa:92:93:94:d4:0c:6c:1b:6f:3f:60:6f: 91:66:e9:e2:c8:c1:04:28:ed:8a:b1:ea:8e:d4:d9:84:e0:29: ba:1e:b3:e5:0b:1e:8d:b5:6b:d6:70:ba:16:4c:c9:0b:0b:ec: a6:00:72:03:6a:8d:af:9c:6d:e3:30:b7:89:f7:28:a7:9d:95: 81:e5:4d:86:31:2b:12:92:07:10:7d:33:47:9e:00:52:03:94: 57:87:ed:84:c3:7d:8b:a1:9f:15:c2:ef:85:6a:36:b6:77:a3: b9:4c:27:53:57:64:df:27:91:c2:af:b9:da:45:80:6a:d7:0e: e3:d1:f1:68:6e:d2:cd:ae:63:ff:79:64:2b:5d:b3:b3:f1:ff: 30:14:cb:70:a7:ab:eb:6e:4a:47:41:19:dd:c9:22:c9:54:1d: a0:f0:74:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWzCG3KWHn3fAQ+J/IVbGLzRE4DcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFGMUJCQzJFNzg1MkEwOEVDOTcyNkRGMDM3QjdBOTAw MjBGNjEzQzAeFw0yNjA1MTIwMzQ4MjhaFw0yNjA1MTMwNTQ0MjhaMDMxMTAvBgNV BAMTKDIyRTEzREYxRUI3QUNENUM0RDM3RjY0RjY1Rjk3MDExRkY5QUQwQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXLQVyZ1PwOkXMh8jaIYaDbzvE iTUDdcraIZpJnHcod6pNLuos/WBjvjQrhX2D5vfgJjbSs6/E3NVlRwuzhX9R+n7E yBkd6H9nr8CXjqluadW3b1hy/roa9soXv93OSQMT3V4TXqeMNxUVFyc97Wa7uXhJ azqbg2V4uulBCha1AxbjMBbQtfNeJ3H7GwhF1iU2VBWddboLKFNhD4jyc76CjXVE NShD/3o40qzN/jaBSJXkrKdwNFmSiCs6GymFv3F3uORpcKUowSODGzsP1NKfb+Px 7nrrkbdaIMP86MtUVXCkacBgkAID2RvsD4HSeFj/RZGHhDR8wytD9HTwVCSxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIuE98et6zVxNN/ZPZflwEf+a0KIwHwYDVR0j BBgwFoAU6vG7wueFKgjslybfA3t6kAIPYTwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTdmZGY0M2UtNGE0Yy00ZGJjLWI3ODUtZGQ3Y2JmMWE2N2I3LzAvRUFGMUJCQzJF Nzg1MkEwOEVDOTcyNkRGMDM3QjdBOTAwMjBGNjEzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQUYxQkJDMkU3ODUyQTA4RUM5NzI2REYwMzdCN0E5MDAyMEY2 MTNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTdmZGY0M2UtNGE0Yy00ZGJjLWI3 ODUtZGQ3Y2JmMWE2N2I3LzAvRUFGMUJCQzJFNzg1MkEwOEVDOTcyNkRGMDM3QjdB OTAwMjBGNjEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADGozgLVQGsYD3+mGBagPMrUCwwOo8DFSa9e fQ2eqZvPAnwWwuH4QXVv0G4V2ODAIg0nZi4m53AnKIqtXKn+Ng1SBTrfBbUYVr2Q SOTgrOQKhWRQo3RP2zeoRnIUb36qlfqSk5TUDGwbbz9gb5Fm6eLIwQQo7Yqx6o7U 2YTgKboes+ULHo21a9ZwuhZMyQsL7KYAcgNqja+cbeMwt4n3KKedlYHlTYYxKxKS BxB9M0eeAFIDlFeH7YTDfYuhnxXC74VqNrZ3o7lMJ1NXZN8nkcKvudpFgGrXDuPR 8Whu0s2uY/95ZCtds7Px/zAUy3Cnq+tuSkdBGd3JIslUHaDwdCE= -----END CERTIFICATE-----Generated at Tue May 12 22:39:15 2026 by rpki-client