$ rpki-client -vvf rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.mft File: EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.mft (raw, json) Hash identifier: 1U+z7OCVOXfXGLXiu9521QpcK0C7ZLtBovioDLCfv74= Subject key identifier: 5C:01:04:5D:20:63:9A:D8:52:A8:98:69:8E:70:B3:99:7D:29:07:9F Authority key identifier: EB:0B:E2:F2:F4:9F:0E:2E:D0:DC:A4:50:CC:7A:70:E3:7E:6C:44:79 Certificate issuer: /CN=EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479 Certificate serial: 083D8DF1CCCA33C5C8A6EF436CF65053761EDCEA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.mft Manifest number: 5A Signing time: Tue 07 Jul 2026 17:57:18 +0000 Manifest this update: Tue 07 Jul 2026 17:52:18 +0000 Manifest next update: Wed 08 Jul 2026 19:06:18 +0000 Files and hashes: 1: 3130332e35322e34342e302f32322d3234203d3e20313333383135.roa (hash: Nq+2Vf2Sjui286xvlwdV6qhYVII60AjIdtuhfdXAxbY=) 2: 3130332e3133302e3133362e302f32322d3234203d3e20313333383135.roa (hash: eU4i0Mhd/q+mYMVjCXIfd0DHyb4s/+BNKr0BLfdT+jA=) 3: EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.crl (hash: E22/nWp2hcm11hYaP0Hrkt4ps/inUEpf+PSssntZTeo=) 4: 323430333a353763303a3a2f33322d3438203d3e20313333383135.roa (hash: 3BwTC01USPfsaxqOFoR8OqcTiLHcsXU9wo2BTdmt5ZU=) 5: 323430333a626163303a3a2f33322d3438203d3e20313333383135.roa (hash: HEWIf8VBw+80Q4rp+6Ysujhm51rVLU6tXVKj84ErweQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.crl rsync://rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 Jul 2026 19:06:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:3d:8d:f1:cc:ca:33:c5:c8:a6:ef:43:6c:f6:50:53:76:1e:dc:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479 Validity Not Before: Jul 7 17:52:18 2026 GMT Not After : Jul 8 19:06:18 2026 GMT Subject: CN=5C01045D20639AD852A898698E70B3997D29079F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:94:a5:2c:de:59:f2:2e:b2:49:f4:a4:24:f9: 8f:29:3a:a0:a7:84:05:d8:ad:a9:f4:a5:5d:4a:92: 42:de:0a:d7:4d:2f:81:87:73:79:a6:85:ae:fd:38: d0:4c:e1:1f:d9:56:d6:1d:e0:72:51:5c:33:4b:73: ea:5d:0d:36:36:7e:5f:c6:fa:e2:e8:60:01:ea:61: 3a:c7:24:92:75:fc:e7:72:56:ca:c1:d2:0c:62:b8: 2d:5d:b3:c7:4f:57:ef:17:5a:82:84:06:61:ef:3c: 7c:6f:f4:c8:25:cd:19:02:ab:d4:83:c3:d8:6b:f1: bd:9f:4e:ab:4c:60:d7:ea:c3:c4:eb:f4:ec:bc:ef: 4f:a3:5a:b0:f0:5b:87:36:93:c1:03:a5:3c:8a:49: 6c:47:6d:72:c6:a6:75:e3:29:0c:d3:51:b4:47:4e: f9:79:a9:f1:b3:fa:4d:fc:67:38:e0:f0:6d:c1:d4: 62:2e:3a:19:51:b4:df:83:f5:a7:c5:92:82:44:bc: b8:4f:14:b6:55:a5:4e:34:f6:79:d4:6e:e0:82:b7: 11:6f:20:fd:32:95:ab:a8:80:49:b9:ad:62:f9:ac: 6f:e3:b8:50:c5:1b:fa:dd:3a:48:3e:9c:bf:33:37: fc:0c:90:2c:f3:9a:65:7a:5f:32:19:cc:f3:31:4f: c1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:01:04:5D:20:63:9A:D8:52:A8:98:69:8E:70:B3:99:7D:29:07:9F X509v3 Authority Key Identifier: keyid:EB:0B:E2:F2:F4:9F:0E:2E:D0:DC:A4:50:CC:7A:70:E3:7E:6C:44:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:a0:9e:68:bf:64:69:24:81:34:18:bf:c9:3b:ec:9d:37:03: 5f:42:0d:4e:4f:31:5b:95:5f:bd:38:62:ac:e3:e9:af:f3:ab: 5e:fb:4d:64:40:28:29:f3:a2:01:9a:1b:37:1e:3c:b9:75:bf: 25:97:c6:85:f9:60:8e:d7:e6:e3:3e:3a:d1:44:fb:09:06:e9: ed:94:a1:1f:e4:90:36:d2:21:b9:d6:83:18:bf:96:99:9f:a6: 2f:41:59:34:77:0d:c3:d4:e4:22:6c:80:3f:f8:0c:dc:dc:43: 0a:cf:b9:8c:31:44:a4:92:a3:e4:0e:d3:ff:4d:63:69:8e:e4: 3c:b7:66:f3:4f:e4:32:cc:9e:f5:f2:15:a5:a2:ae:f8:ae:d9: 17:1c:4e:27:a0:a5:a7:3e:75:01:9d:50:dc:87:80:e9:f2:5f: bd:bf:08:f5:25:c7:49:42:2e:ce:9c:eb:47:d5:f4:98:72:de: 87:37:f0:b2:f8:66:95:65:b5:3d:b1:74:7d:d0:35:e6:f2:fb: 54:e0:6f:61:5e:aa:94:62:be:8b:9d:8a:76:69:f1:89:3d:1e: 66:e6:d1:7b:c5:e8:bc:cc:92:ff:c9:f9:68:3b:82:ee:42:73: a3:fc:84:01:a3:50:9f:18:8c:17:b6:de:3b:2d:85:66:68:7f: 01:41:d0:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCD2N8czKM8XIpu9DbPZQU3Ye3OowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUIwQkUyRjJGNDlGMEUyRUQwRENBNDUwQ0M3QTcwRTM3 RTZDNDQ3OTAeFw0yNjA3MDcxNzUyMThaFw0yNjA3MDgxOTA2MThaMDMxMTAvBgNV BAMTKDVDMDEwNDVEMjA2MzlBRDg1MkE4OTg2OThFNzBCMzk5N0QyOTA3OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjlKUs3lnyLrJJ9KQk+Y8pOqCn hAXYran0pV1KkkLeCtdNL4GHc3mmha79ONBM4R/ZVtYd4HJRXDNLc+pdDTY2fl/G +uLoYAHqYTrHJJJ1/OdyVsrB0gxiuC1ds8dPV+8XWoKEBmHvPHxv9MglzRkCq9SD w9hr8b2fTqtMYNfqw8Tr9Oy870+jWrDwW4c2k8EDpTyKSWxHbXLGpnXjKQzTUbRH Tvl5qfGz+k38Zzjg8G3B1GIuOhlRtN+D9afFkoJEvLhPFLZVpU409nnUbuCCtxFv IP0ylauogEm5rWL5rG/juFDFG/rdOkg+nL8zN/wMkCzzmmV6XzIZzPMxT8HNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXAEEXSBjmthSqJhpjnCzmX0pB58wHwYDVR0j BBgwFoAU6wvi8vSfDi7Q3KRQzHpw435sRHkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmEzYWU0ODUtYTY1OC00YzVjLWFiZTItMWU3ZmQ4YjAzOGEwLzAvRUIwQkUyRjJG NDlGMEUyRUQwRENBNDUwQ0M3QTcwRTM3RTZDNDQ3OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQjBCRTJGMkY0OUYwRTJFRDBEQ0E0NTBDQzdBNzBFMzdFNkM0 NDc5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmEzYWU0ODUtYTY1OC00YzVjLWFi ZTItMWU3ZmQ4YjAzOGEwLzAvRUIwQkUyRjJGNDlGMEUyRUQwRENBNDUwQ0M3QTcw RTM3RTZDNDQ3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACWgnmi/ZGkkgTQYv8k77J03A19CDU5PMVuV X704Yqzj6a/zq177TWRAKCnzogGaGzcePLl1vyWXxoX5YI7X5uM+OtFE+wkG6e2U oR/kkDbSIbnWgxi/lpmfpi9BWTR3DcPU5CJsgD/4DNzcQwrPuYwxRKSSo+QO0/9N Y2mO5Dy3ZvNP5DLMnvXyFaWirviu2RccTiegpac+dQGdUNyHgOnyX72/CPUlx0lC Ls6c60fV9Jhy3oc38LL4ZpVltT2xdH3QNeby+1Tgb2FeqpRivoudinZp8Yk9Hmbm 0XvF6LzMkv/J+Wg7gu5Cc6P8hAGjUJ8YjBe23jsthWZofwFB0Aw= -----END CERTIFICATE-----Generated at Tue Jul 7 22:05:00 2026 by rpki-client