$ rpki-client -vvf rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.mft File: EBA1F4874C4867D2CAA214867052E9413088CD22.mft (raw, json) Hash identifier: BlWk13a7Qbx8jxil1Q5NUetcoxxHuefbf6/8GpYiN54= Subject key identifier: CA:FD:AF:5F:84:48:5C:5E:8B:B3:34:78:BC:76:E8:80:99:B4:B1:CE Authority key identifier: EB:A1:F4:87:4C:48:67:D2:CA:A2:14:86:70:52:E9:41:30:88:CD:22 Certificate issuer: /CN=EBA1F4874C4867D2CAA214867052E9413088CD22 Certificate serial: 1DA648179E997C2005F53219FAE9491690A075C7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EBA1F4874C4867D2CAA214867052E9413088CD22.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.mft Manifest number: 0F Signing time: Tue 12 May 2026 09:20:43 +0000 Manifest this update: Tue 12 May 2026 09:15:43 +0000 Manifest next update: Wed 13 May 2026 13:09:43 +0000 Files and hashes: 1: EBA1F4874C4867D2CAA214867052E9413088CD22.crl (hash: NoKNmy/Mh69SQQvD/rAu38RLPAxeZ8ZKE7m60IdOLfo=) 2: 3136302e31392e3230372e302f32342d3234203d3e20313532373634.roa (hash: Rsj+zG8fTbANuQe+LowjpWqzpy4Nr2I6Rkz77sVkBRk=) 3: 3136302e31392e3230362e302f32342d3234203d3e20313532373634.roa (hash: rkfIQLZH91MBngOR2XF3JSvb0x7kp9rSE9FoBc2wVuU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.crl rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EBA1F4874C4867D2CAA214867052E9413088CD22.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 13:09:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:a6:48:17:9e:99:7c:20:05:f5:32:19:fa:e9:49:16:90:a0:75:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBA1F4874C4867D2CAA214867052E9413088CD22 Validity Not Before: May 12 09:15:43 2026 GMT Not After : May 13 13:09:43 2026 GMT Subject: CN=CAFDAF5F84485C5E8BB33478BC76E88099B4B1CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:31:0f:aa:1f:1a:e2:f5:5c:98:b3:40:44:22: b9:df:41:cb:1d:e1:bb:b7:09:9a:cf:c8:c6:99:72: 93:a5:c1:f9:f4:32:fb:01:1f:b4:06:10:7c:ad:10: e3:11:18:4a:36:79:5b:62:e7:c1:60:10:fb:92:ad: 38:70:53:24:a4:9d:8e:97:e0:ec:b2:5f:0b:0e:8f: 4e:dd:49:90:a8:e0:1c:a8:a3:20:43:5e:7c:ce:80: 17:6c:3d:3f:09:95:1a:61:4e:80:93:9d:cd:d6:11: 96:45:11:c4:ac:c7:f5:b7:58:2b:bf:12:93:e7:3c: 4c:d5:fc:f9:ae:7f:f8:68:fc:d3:4b:e4:f0:05:d6: d3:62:57:ee:c9:37:81:cf:18:15:55:b7:66:fe:b7: 48:e8:5e:c1:73:f9:ce:c1:42:74:da:ab:1e:ce:20: bd:e1:fb:13:a9:42:96:15:5e:a5:cc:83:c8:32:92: 42:af:99:2f:34:0a:1f:07:c8:50:37:c5:47:62:93: 1c:da:2c:7b:47:62:f4:3a:6a:2d:75:a4:9c:d6:3e: 7e:0c:02:90:b9:bd:67:b2:34:a3:3f:94:af:8e:23: 03:00:78:55:af:64:35:97:9e:bf:41:52:b6:ba:94: 75:2f:85:d6:af:cc:61:d4:e9:68:4f:a3:c3:91:26: 0f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:FD:AF:5F:84:48:5C:5E:8B:B3:34:78:BC:76:E8:80:99:B4:B1:CE X509v3 Authority Key Identifier: keyid:EB:A1:F4:87:4C:48:67:D2:CA:A2:14:86:70:52:E9:41:30:88:CD:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EBA1F4874C4867D2CAA214867052E9413088CD22.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:b5:0d:97:8a:ca:aa:05:5c:99:03:22:bc:90:15:9f:ee:28: 14:68:2d:0f:82:9d:6d:56:f5:5d:96:21:b7:88:99:24:e6:33: 58:51:70:14:84:d7:45:39:19:a6:21:56:a2:cc:dc:54:d8:6f: e8:4f:75:7b:a6:5b:b6:b6:6c:1e:0e:9e:6b:d7:f5:d3:6e:ff: fc:39:f3:8a:1e:6d:5f:d7:b0:9a:73:73:e2:ef:8c:b4:f8:82: db:4c:4f:2d:25:36:a0:18:aa:29:7e:fa:47:1c:da:52:5b:b1: b8:ee:62:28:fd:27:19:83:3a:46:2d:4e:15:25:49:71:36:f7: ca:7a:fe:02:2b:bd:86:ad:7c:a9:dd:71:4a:c7:2d:fd:2a:f0: c7:df:a6:c8:1e:ab:f3:a3:b5:ba:69:6f:b4:f3:f4:ad:88:38: 40:54:f2:d1:40:7f:0b:1e:8f:8f:bc:29:d1:0a:ca:7c:51:83: 6f:d3:e6:64:b5:4d:f2:5d:d7:fe:71:c4:00:5f:c7:c1:59:f6: f0:e8:62:14:33:c3:f6:5a:f1:d9:09:97:3f:29:b4:b6:d8:45: 32:a2:b2:44:b9:ef:89:10:17:7a:5f:f2:88:81:8e:b2:11:35: d4:58:98:e9:44:67:b0:0b:9a:ce:96:49:4c:a1:a9:94:4b:d0: 1c:78:9a:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHaZIF56ZfCAF9TIZ+ulJFpCgdccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJBMUY0ODc0QzQ4NjdEMkNBQTIxNDg2NzA1MkU5NDEz MDg4Q0QyMjAeFw0yNjA1MTIwOTE1NDNaFw0yNjA1MTMxMzA5NDNaMDMxMTAvBgNV BAMTKENBRkRBRjVGODQ0ODVDNUU4QkIzMzQ3OEJDNzZFODgwOTlCNEIxQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjMQ+qHxri9VyYs0BEIrnfQcsd 4bu3CZrPyMaZcpOlwfn0MvsBH7QGEHytEOMRGEo2eVti58FgEPuSrThwUySknY6X 4OyyXwsOj07dSZCo4ByooyBDXnzOgBdsPT8JlRphToCTnc3WEZZFEcSsx/W3WCu/ EpPnPEzV/Pmuf/ho/NNL5PAF1tNiV+7JN4HPGBVVt2b+t0joXsFz+c7BQnTaqx7O IL3h+xOpQpYVXqXMg8gykkKvmS80Ch8HyFA3xUdikxzaLHtHYvQ6ai11pJzWPn4M ApC5vWeyNKM/lK+OIwMAeFWvZDWXnr9BUra6lHUvhdavzGHU6WhPo8ORJg+TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyv2vX4RIXF6LszR4vHbogJm0sc4wHwYDVR0j BBgwFoAU66H0h0xIZ9LKohSGcFLpQTCIzSIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2IyYTkxNmEtYWQyMi00OTc5LWJlNDMtOTUxYzc2ZjJmOTIwLzAvRUJBMUY0ODc0 QzQ4NjdEMkNBQTIxNDg2NzA1MkU5NDEzMDg4Q0QyMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQkExRjQ4NzRDNDg2N0QyQ0FBMjE0ODY3MDUyRTk0MTMwODhD RDIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2IyYTkxNmEtYWQyMi00OTc5LWJl NDMtOTUxYzc2ZjJmOTIwLzAvRUJBMUY0ODc0QzQ4NjdEMkNBQTIxNDg2NzA1MkU5 NDEzMDg4Q0QyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI61DZeKyqoFXJkDIryQFZ/uKBRoLQ+CnW1W 9V2WIbeImSTmM1hRcBSE10U5GaYhVqLM3FTYb+hPdXumW7a2bB4OnmvX9dNu//w5 84oebV/XsJpzc+LvjLT4gttMTy0lNqAYqil++kcc2lJbsbjuYij9JxmDOkYtThUl SXE298p6/gIrvYatfKndcUrHLf0q8Mffpsgeq/Ojtbppb7Tz9K2IOEBU8tFAfwse j4+8KdEKynxRg2/T5mS1TfJd1/5xxABfx8FZ9vDoYhQzw/Za8dkJlz8ptLbYRTKi skS574kQF3pf8oiBjrIRNdRYmOlEZ7ALms6WSUyhqZRL0Bx4mn8= -----END CERTIFICATE-----Generated at Wed May 13 02:25:33 2026 by rpki-client