$ rpki-client -vvf rpki-rsync.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.mft File: EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.mft (raw, json) Hash identifier: deXQrmzEMeFmLGQDeaWsmsIlcXOWokrz5gqHSnJvMHc= Subject key identifier: 8A:2E:86:02:72:4B:A7:75:A5:45:72:50:B3:EE:06:EB:E7:5C:80:7C Authority key identifier: EB:65:C3:DE:94:49:F2:C3:42:B6:C2:8D:C0:0A:2D:7D:9F:CE:13:FC Certificate issuer: /CN=EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC Certificate serial: 3D843564962C455E454FB4E0C8ED2AD069512C0D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 09:26:45 +0000 Manifest this update: Tue 02 Jun 2026 09:21:45 +0000 Manifest next update: Wed 03 Jun 2026 12:25:45 +0000 Files and hashes: 1: 3130332e31382e34342e302f32332d3234203d3e20313530323735.roa (hash: 7XY8OJYBheI11wkRz8cVl6F/JT2mVgzHkajv0h3NaA4=) 2: EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.crl (hash: 13lc0xl9e9hO53gSubb+w0x3zhIy8DnOauatFEsuEGI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.crl rsync://rpki-rsync.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:84:35:64:96:2c:45:5e:45:4f:b4:e0:c8:ed:2a:d0:69:51:2c:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC Validity Not Before: Jun 2 09:21:45 2026 GMT Not After : Jun 3 12:25:45 2026 GMT Subject: CN=8A2E8602724BA775A5457250B3EE06EBE75C807C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0f:a8:af:1a:d7:05:35:28:ac:29:a6:8a:9f: 70:31:fe:c6:81:5d:9d:a1:15:c8:ca:77:31:13:2e: 9b:6a:20:db:be:3d:45:68:f6:d1:c9:91:65:3d:e5: cf:49:16:21:73:75:4c:c9:7f:9c:b0:19:f8:86:ec: 9d:00:ef:01:15:f4:4f:e3:37:2f:d7:6d:b7:8b:da: 53:46:9f:9c:c9:0d:3c:2e:b5:ce:64:fc:48:eb:94: 13:e0:78:61:8e:29:8b:2d:c7:bc:ea:47:cd:f3:c4: ad:c4:31:b6:11:02:50:5c:06:c9:94:49:4c:5c:e9: b3:33:f7:1c:db:4b:77:79:7f:20:48:b5:52:3d:37: 6e:7e:9d:b6:85:b1:06:39:39:11:93:8d:5e:94:c4: ee:3f:1e:1f:21:88:13:10:60:d1:88:6f:8c:5f:c4: a9:ee:74:3a:2e:97:4e:e4:6a:7e:c5:b0:73:df:63: bf:6a:70:dc:1c:9b:5d:9b:24:6e:7e:00:77:02:e3: 4c:3e:66:10:60:66:35:b8:6a:e3:6a:82:d2:07:6c: a8:31:c9:8e:0a:30:72:02:7c:54:2f:3b:10:8f:61: 36:51:8f:20:c9:47:91:35:eb:97:b4:ac:ef:91:bf: 3e:ed:90:46:36:d9:9b:d7:f3:56:85:a1:a6:50:d7: bc:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:2E:86:02:72:4B:A7:75:A5:45:72:50:B3:EE:06:EB:E7:5C:80:7C X509v3 Authority Key Identifier: keyid:EB:65:C3:DE:94:49:F2:C3:42:B6:C2:8D:C0:0A:2D:7D:9F:CE:13:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:1f:34:22:91:0d:e2:a4:4e:4e:48:9d:f9:47:45:cb:98:87: 56:fb:79:4d:46:3a:22:e5:4d:79:59:f8:c7:2d:99:a3:1a:83: 9c:f5:8f:41:ac:d6:ea:b4:c9:52:22:f4:84:7d:5b:e8:40:30: a3:07:1f:1d:a3:e5:c4:28:fd:aa:e0:84:a0:e4:ca:84:0c:fa: 02:17:d9:e6:70:2c:25:72:34:d5:c1:e3:74:df:cb:c1:1a:8d: af:b4:89:5a:28:9f:49:3b:15:7b:c5:f5:69:ee:21:dd:13:b9: 41:da:b1:1f:95:50:8f:ca:7e:3e:f5:97:d2:91:43:9e:fc:d9: 4b:be:4e:f8:1f:54:e4:f8:b9:41:53:0b:bb:c3:ef:19:fa:4e: c8:27:bb:41:a6:1f:2d:52:f9:89:19:b0:84:de:11:ac:80:06: bd:74:91:b3:2d:75:e6:60:66:b2:22:85:ec:a5:94:b1:28:ae: 0f:a9:cc:b9:e6:0a:d1:dd:e4:0d:3e:f2:65:91:66:fe:ff:26: 50:a8:df:50:5f:ea:63:13:cc:d0:ec:17:0e:5a:c8:61:55:3c: ff:ee:d3:ef:d7:4a:e8:b5:0d:6d:a1:77:f7:d7:2d:80:e0:28: 36:9c:ba:70:50:c3:db:d0:8f:f8:50:f9:9b:ad:ad:19:d8:99: e8:d5:8a:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPYQ1ZJYsRV5FT7TgyO0q0GlRLA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUI2NUMzREU5NDQ5RjJDMzQyQjZDMjhEQzAwQTJEN0Q5 RkNFMTNGQzAeFw0yNjA2MDIwOTIxNDVaFw0yNjA2MDMxMjI1NDVaMDMxMTAvBgNV BAMTKDhBMkU4NjAyNzI0QkE3NzVBNTQ1NzI1MEIzRUUwNkVCRTc1QzgwN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDND6ivGtcFNSisKaaKn3Ax/saB XZ2hFcjKdzETLptqINu+PUVo9tHJkWU95c9JFiFzdUzJf5ywGfiG7J0A7wEV9E/j Ny/XbbeL2lNGn5zJDTwutc5k/EjrlBPgeGGOKYstx7zqR83zxK3EMbYRAlBcBsmU SUxc6bMz9xzbS3d5fyBItVI9N25+nbaFsQY5ORGTjV6UxO4/Hh8hiBMQYNGIb4xf xKnudDoul07kan7FsHPfY79qcNwcm12bJG5+AHcC40w+ZhBgZjW4auNqgtIHbKgx yY4KMHICfFQvOxCPYTZRjyDJR5E165e0rO+Rvz7tkEY22ZvX81aFoaZQ17yJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUii6GAnJLp3WlRXJQs+4G6+dcgHwwHwYDVR0j BBgwFoAU62XD3pRJ8sNCtsKNwAotfZ/OE/wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWI2NGQ4YzEtYzcxNC00NTkyLThmYzUtZTM5MmViZmYxZTk4LzAvRUI2NUMzREU5 NDQ5RjJDMzQyQjZDMjhEQzAwQTJEN0Q5RkNFMTNGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQjY1QzNERTk0NDlGMkMzNDJCNkMyOERDMDBBMkQ3RDlGQ0Ux M0ZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWI2NGQ4YzEtYzcxNC00NTkyLThm YzUtZTM5MmViZmYxZTk4LzAvRUI2NUMzREU5NDQ5RjJDMzQyQjZDMjhEQzAwQTJE N0Q5RkNFMTNGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALwfNCKRDeKkTk5InflHRcuYh1b7eU1GOiLl TXlZ+MctmaMag5z1j0Gs1uq0yVIi9IR9W+hAMKMHHx2j5cQo/arghKDkyoQM+gIX 2eZwLCVyNNXB43Tfy8Eaja+0iVoon0k7FXvF9WnuId0TuUHasR+VUI/Kfj71l9KR Q5782Uu+TvgfVOT4uUFTC7vD7xn6Tsgnu0GmHy1S+YkZsITeEayABr10kbMtdeZg ZrIiheyllLEorg+pzLnmCtHd5A0+8mWRZv7/JlCo31Bf6mMTzNDsFw5ayGFVPP/u 0+/XSui1DW2hd/fXLYDgKDacunBQw9vQj/hQ+ZutrRnYmejVii8= -----END CERTIFICATE-----Generated at Wed Jun 3 04:22:17 2026 by rpki-client