$ rpki-client -vvf rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.mft File: EBF23572810F8726C4B72E50589964A910C50B4B.mft (raw, json) Hash identifier: GfkvFdlc8/9DRrcV74A7jo6AIm+FcdCFUDsoWgivJrk= Subject key identifier: 09:FE:F9:2C:35:D5:92:95:6F:8E:BA:03:86:C6:7E:0D:21:E4:5B:5D Authority key identifier: EB:F2:35:72:81:0F:87:26:C4:B7:2E:50:58:99:64:A9:10:C5:0B:4B Certificate issuer: /CN=EBF23572810F8726C4B72E50589964A910C50B4B Certificate serial: 5E00BF518F0516755CC7EB554BC39BDB5285FF3F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBF23572810F8726C4B72E50589964A910C50B4B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 21:00:38 +0000 Manifest this update: Thu 23 Jul 2026 20:55:38 +0000 Manifest next update: Sat 25 Jul 2026 00:49:38 +0000 Files and hashes: 1: 323430373a343630303a3a2f33322d3438203d3e203435323935.roa (hash: pwFWQeeNE8aLdvpKEf3Cftf5A02g3uDsYu8O+3yCUbE=) 2: EBF23572810F8726C4B72E50589964A910C50B4B.crl (hash: w//jmcvZ+vbnvhTNPvC844ru23fbAouEXH4IEAyMoE8=) 3: 3130332e3135312e39322e302f32332d3234203d3e203435323935.roa (hash: l97XL+b3anmLCwyyq3iPYCEWOtlJt1r4AiG3G4acaMc=) 4: 3131332e3231322e3136302e302f32312d3234203d3e203435323935.roa (hash: sfi5wZHa7EFMZctUVQihd5OvgHWotWx/JrU33FAshF0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.crl rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBF23572810F8726C4B72E50589964A910C50B4B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:00:bf:51:8f:05:16:75:5c:c7:eb:55:4b:c3:9b:db:52:85:ff:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBF23572810F8726C4B72E50589964A910C50B4B Validity Not Before: Jul 23 20:55:38 2026 GMT Not After : Jul 25 00:49:38 2026 GMT Subject: CN=09FEF92C35D592956F8EBA0386C67E0D21E45B5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:f0:77:21:2f:a3:a8:c5:b1:f3:be:9f:b8:d6: e5:1c:ec:51:3c:69:8f:39:35:22:11:4b:d2:1f:21: b6:fe:a2:aa:fa:be:73:45:07:51:75:e1:e1:4a:94: dc:d7:cd:ed:a8:e9:a6:0d:78:5a:f1:b9:e7:a0:8b: 4a:72:e9:78:da:ca:e6:32:c1:0c:ff:b9:87:6f:97: d1:42:8e:24:84:fc:a7:30:81:04:6f:d7:2e:0d:0e: 09:e9:9a:bb:9f:1b:c3:6f:b5:d7:82:64:1d:89:c5: c0:c4:b2:83:be:dd:ed:2b:c1:c6:f5:38:d6:28:4a: 98:1c:48:33:9e:6d:c5:c0:85:d3:61:21:5a:ea:14: a2:46:9d:61:6f:e0:bb:bd:90:dc:b7:19:0a:e0:27: d2:fd:59:af:26:73:d4:cf:a1:c6:51:83:08:e6:c9: 13:85:66:24:c9:74:2b:8b:58:c5:de:1c:b7:e4:a9: 0e:14:71:3c:05:6e:69:c1:61:af:df:2d:ce:69:d5: 8b:57:38:d4:26:ef:19:ad:a1:75:27:15:58:56:b2: 81:4c:ed:b4:5e:b2:b5:26:10:53:ff:43:15:e2:9c: da:bb:63:72:28:07:cc:e7:09:7f:87:07:9d:43:7e: 6d:43:04:19:d8:f8:23:cc:3d:bd:cc:50:1f:47:6f: 51:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:FE:F9:2C:35:D5:92:95:6F:8E:BA:03:86:C6:7E:0D:21:E4:5B:5D X509v3 Authority Key Identifier: keyid:EB:F2:35:72:81:0F:87:26:C4:B7:2E:50:58:99:64:A9:10:C5:0B:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBF23572810F8726C4B72E50589964A910C50B4B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:0f:8a:e0:fd:b6:31:cd:1a:bd:bb:f5:54:d5:ee:75:2a:55: a8:cb:5a:e9:8c:44:d7:c9:4f:b7:42:3d:fc:5b:a7:36:21:2e: b4:c9:ca:8a:e7:b2:06:57:17:94:98:33:9e:8d:df:2c:6c:46: 71:b7:29:77:ea:e2:70:bc:d1:98:b6:ad:2e:87:cb:bf:1c:fd: 0e:cf:d2:57:35:a0:ca:50:57:f8:09:fd:1b:63:e8:d8:ae:4c: 56:06:69:a5:94:0d:43:e5:be:43:59:e4:19:5b:32:aa:5d:60: d0:58:1a:ee:4d:ca:b8:4c:7d:a6:98:46:a9:7a:1b:8c:19:1b: d9:6b:7b:7a:0a:a8:e9:45:72:31:50:26:65:0f:a6:b2:f9:40: db:c0:dc:6e:d7:46:48:56:95:3d:69:fd:3c:84:8a:3e:57:0a: f0:0d:d5:84:ca:fa:8b:14:4c:a0:f1:09:2b:31:cc:c6:05:ab: c7:c3:00:9b:05:8f:03:e4:de:e4:e3:63:4a:bc:e3:fa:96:8f: 48:e4:23:5f:cb:81:ee:fd:ab:82:ac:52:ad:8f:bb:96:6a:6c: 78:a2:90:3c:14:dd:df:8f:5b:4d:4e:af:9e:61:c4:fc:f5:d5: 08:64:d5:f8:8a:0d:e4:60:e5:e4:c3:c3:c2:73:8b:f7:dc:31: 45:46:80:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXgC/UY8FFnVcx+tVS8Ob21KF/z8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJGMjM1NzI4MTBGODcyNkM0QjcyRTUwNTg5OTY0QTkx MEM1MEI0QjAeFw0yNjA3MjMyMDU1MzhaFw0yNjA3MjUwMDQ5MzhaMDMxMTAvBgNV BAMTKDA5RkVGOTJDMzVENTkyOTU2RjhFQkEwMzg2QzY3RTBEMjFFNDVCNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDx8HchL6OoxbHzvp+41uUc7FE8 aY85NSIRS9IfIbb+oqr6vnNFB1F14eFKlNzXze2o6aYNeFrxueegi0py6XjayuYy wQz/uYdvl9FCjiSE/KcwgQRv1y4NDgnpmrufG8NvtdeCZB2JxcDEsoO+3e0rwcb1 ONYoSpgcSDOebcXAhdNhIVrqFKJGnWFv4Lu9kNy3GQrgJ9L9Wa8mc9TPocZRgwjm yROFZiTJdCuLWMXeHLfkqQ4UcTwFbmnBYa/fLc5p1YtXONQm7xmtoXUnFVhWsoFM 7bResrUmEFP/QxXinNq7Y3IoB8znCX+HB51Dfm1DBBnY+CPMPb3MUB9Hb1F9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCf75LDXVkpVvjroDhsZ+DSHkW10wHwYDVR0j BBgwFoAU6/I1coEPhybEty5QWJlkqRDFC0swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDRmNDhhODktOTBjNS00ZjVhLTgwMTUtMzZmMTE5NmE3MWM4LzAvRUJGMjM1NzI4 MTBGODcyNkM0QjcyRTUwNTg5OTY0QTkxMEM1MEI0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQkYyMzU3MjgxMEY4NzI2QzRCNzJFNTA1ODk5NjRBOTEwQzUw QjRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDRmNDhhODktOTBjNS00ZjVhLTgw MTUtMzZmMTE5NmE3MWM4LzAvRUJGMjM1NzI4MTBGODcyNkM0QjcyRTUwNTg5OTY0 QTkxMEM1MEI0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADoPiuD9tjHNGr279VTV7nUqVajLWumMRNfJ T7dCPfxbpzYhLrTJyornsgZXF5SYM56N3yxsRnG3KXfq4nC80Zi2rS6Hy78c/Q7P 0lc1oMpQV/gJ/Rtj6NiuTFYGaaWUDUPlvkNZ5BlbMqpdYNBYGu5NyrhMfaaYRql6 G4wZG9lre3oKqOlFcjFQJmUPprL5QNvA3G7XRkhWlT1p/TyEij5XCvAN1YTK+osU TKDxCSsxzMYFq8fDAJsFjwPk3uTjY0q84/qWj0jkI1/Lge79q4KsUq2Pu5ZqbHii kDwU3d+PW01Or55hxPz11Qhk1fiKDeRg5eTDw8Jzi/fcMUVGgMI= -----END CERTIFICATE-----Generated at Fri Jul 24 09:31:55 2026 by rpki-client