$ rpki-client -vvf rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.mft File: 1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.mft (raw, json) Hash identifier: /JkVU2k4tVZHHtVPgqBEGUStwMf2G4e5KU1rRketLfM= Subject key identifier: B9:4E:39:29:D0:26:A6:6C:AD:55:B3:8B:B9:70:95:73:5C:CC:EB:E9 Authority key identifier: 1E:BB:23:22:03:FD:54:32:F4:FF:5F:50:C7:CA:7F:67:25:52:ED:3F Certificate issuer: /CN=1EBB232203FD5432F4FF5F50C7CA7F672552ED3F Certificate serial: 23AE50774AE4530CBB0C264DB0192968679C7D67 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 20:24:57 +0000 Manifest this update: Thu 23 Jul 2026 20:19:57 +0000 Manifest next update: Fri 24 Jul 2026 23:32:57 +0000 Files and hashes: 1: 1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.crl (hash: 5DST63PsKTsrnM4pscwq7lCWfs/QlLdznmN8cbCYHrQ=) 2: 3130332e31302e3134342e302f32342d3234203d3e203436303537.roa (hash: jBCASy1F6Hwq7/RSM0DnwGAyM9nsMAfX8PewBvtkG60=) 3: 3230322e35322e35322e302f32342d3234203d3e203436303537.roa (hash: B12SJCFtXXNNoUXjwCcqgBMFjVn7huHWD2lTe7WyRQA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.crl rsync://rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:ae:50:77:4a:e4:53:0c:bb:0c:26:4d:b0:19:29:68:67:9c:7d:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EBB232203FD5432F4FF5F50C7CA7F672552ED3F Validity Not Before: Jul 23 20:19:57 2026 GMT Not After : Jul 24 23:32:57 2026 GMT Subject: CN=B94E3929D026A66CAD55B38BB97095735CCCEBE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:17:fe:3d:1c:43:00:81:39:8a:df:40:5b:d4: d1:2b:0c:43:d6:7b:0b:6f:c4:5a:85:df:20:ce:99: 48:ea:38:7c:79:75:89:e8:55:ad:39:1d:a4:4e:c5: 25:5c:4b:45:fe:5c:67:96:73:ea:8c:ad:46:e1:01: ed:a0:93:2c:80:cb:02:ae:d4:6d:dd:20:e3:74:89: 7c:5a:cb:c7:0a:30:d1:b6:56:37:e3:98:ef:a2:f2: ae:b4:11:c2:5b:5f:f0:96:16:ec:33:da:09:43:cc: 05:10:87:55:fe:be:b6:ab:a9:a9:34:8c:5f:ff:2c: c9:81:55:28:fc:f5:45:a7:4d:83:ad:3f:52:92:2c: 92:28:d9:8b:a5:bf:33:b5:dc:66:27:77:7a:1d:5a: 3a:d4:0d:0f:4c:e1:2d:ad:ef:f2:ea:d3:6d:76:a1: d9:92:d2:fc:c9:47:62:96:a8:9e:66:5b:14:19:26: 6c:ba:2d:86:fc:b6:f6:b0:cc:f4:47:e2:5e:63:2c: 75:db:9f:d3:3f:78:4a:ea:82:cf:2e:61:1c:de:df: a6:85:d4:3f:d6:6d:eb:db:a1:96:6c:ea:66:01:39: f4:04:b5:cf:2c:a2:28:e8:db:12:32:d0:d9:84:f3: d7:8c:6e:e3:d8:ed:86:45:70:bf:11:21:f9:6e:96: f2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:4E:39:29:D0:26:A6:6C:AD:55:B3:8B:B9:70:95:73:5C:CC:EB:E9 X509v3 Authority Key Identifier: keyid:1E:BB:23:22:03:FD:54:32:F4:FF:5F:50:C7:CA:7F:67:25:52:ED:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:d0:6b:35:42:96:0b:43:cd:ed:64:fe:12:79:0f:b1:95:42: 7f:12:08:b5:ae:c7:5c:c7:33:8b:b4:9f:9e:22:de:a1:1b:59: 86:3e:b9:8e:80:66:55:0e:b3:75:9c:82:40:f7:33:b8:1a:fc: 58:29:62:58:43:46:7d:7a:74:dc:38:f3:f4:e1:b6:bb:d1:e5: d8:35:dc:df:fa:ad:4e:21:b5:b4:ac:06:9e:3d:ab:2d:81:2b: 77:07:f3:1f:93:4e:14:f8:57:84:c4:07:6d:53:de:27:90:5e: 1f:6a:d1:13:3d:39:6a:0f:d4:71:31:d2:1f:6f:b0:59:be:95: b0:4d:de:6d:ca:4b:d7:d1:0e:9a:4c:16:98:ed:d2:f1:e2:78: e6:b7:89:fe:d5:e5:6a:78:df:11:02:78:b7:ca:97:bd:48:d3: e5:bd:26:d1:97:2b:5c:ec:7e:af:dd:a4:72:d3:7d:ce:01:0e: e3:d9:e8:97:ae:8b:93:c3:df:ed:e5:49:35:7c:a1:7c:89:e5: 23:6d:5b:e3:2f:3d:93:52:0b:df:22:21:c2:47:56:38:c4:52: 45:9d:34:09:7f:28:0c:7e:6a:33:57:1b:59:23:55:13:ec:61: 34:ee:68:af:44:86:7e:f4:f2:35:fa:1e:a8:fd:87:bb:e8:7c: 16:e9:2a:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI65Qd0rkUwy7DCZNsBkpaGecfWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVCQjIzMjIwM0ZENTQzMkY0RkY1RjUwQzdDQTdGNjcy NTUyRUQzRjAeFw0yNjA3MjMyMDE5NTdaFw0yNjA3MjQyMzMyNTdaMDMxMTAvBgNV BAMTKEI5NEUzOTI5RDAyNkE2NkNBRDU1QjM4QkI5NzA5NTczNUNDQ0VCRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnF/49HEMAgTmK30Bb1NErDEPW ewtvxFqF3yDOmUjqOHx5dYnoVa05HaROxSVcS0X+XGeWc+qMrUbhAe2gkyyAywKu 1G3dION0iXxay8cKMNG2VjfjmO+i8q60EcJbX/CWFuwz2glDzAUQh1X+vrarqak0 jF//LMmBVSj89UWnTYOtP1KSLJIo2YulvzO13GYnd3odWjrUDQ9M4S2t7/Lq0212 odmS0vzJR2KWqJ5mWxQZJmy6LYb8tvawzPRH4l5jLHXbn9M/eErqgs8uYRze36aF 1D/WbevboZZs6mYBOfQEtc8soijo2xIy0NmE89eMbuPY7YZFcL8RIflulvLFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuU45KdAmpmytVbOLuXCVc1zM6+kwHwYDVR0j BBgwFoAUHrsjIgP9VDL0/19Qx8p/ZyVS7T8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTc1ZDdkZWYtNWViOS00MDU0LWEzYWItZDdlY2Y0ODYzNzlhLzAvMUVCQjIzMjIw M0ZENTQzMkY0RkY1RjUwQzdDQTdGNjcyNTUyRUQzRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRUJCMjMyMjAzRkQ1NDMyRjRGRjVGNTBDN0NBN0Y2NzI1NTJF RDNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTc1ZDdkZWYtNWViOS00MDU0LWEz YWItZDdlY2Y0ODYzNzlhLzAvMUVCQjIzMjIwM0ZENTQzMkY0RkY1RjUwQzdDQTdG NjcyNTUyRUQzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABfQazVClgtDze1k/hJ5D7GVQn8SCLWux1zH M4u0n54i3qEbWYY+uY6AZlUOs3WcgkD3M7ga/FgpYlhDRn16dNw48/ThtrvR5dg1 3N/6rU4htbSsBp49qy2BK3cH8x+TThT4V4TEB21T3ieQXh9q0RM9OWoP1HEx0h9v sFm+lbBN3m3KS9fRDppMFpjt0vHieOa3if7V5Wp43xECeLfKl71I0+W9JtGXK1zs fq/dpHLTfc4BDuPZ6Jeui5PD3+3lSTV8oXyJ5SNtW+MvPZNSC98iIcJHVjjEUkWd NAl/KAx+ajNXG1kjVRPsYTTuaK9Ehn708jX6Hqj9h7vofBbpKjk= -----END CERTIFICATE-----Generated at Fri Jul 24 05:13:02 2026 by rpki-client