$ rpki-client -vvf rpki-rsync.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.mft File: EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.mft (raw, json) Hash identifier: HX8T+xzYs4sBni1UeeHMyyBsw8cgHHGTpQfq6VHff4U= Subject key identifier: 2B:DE:6A:05:D1:AB:83:A1:ED:BD:3A:CA:E5:C9:EE:FB:43:39:CA:E8 Authority key identifier: EA:A4:FE:45:19:5D:51:4C:CA:75:9D:E1:CF:21:24:DC:D8:40:A8:DB Certificate issuer: /CN=EAA4FE45195D514CCA759DE1CF2124DCD840A8DB Certificate serial: 7D4EA0615FD26FA4B8F1CFEBC11E000CC600D7E8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.mft Manifest number: 69 Signing time: Mon 20 Jul 2026 16:52:21 +0000 Manifest this update: Mon 20 Jul 2026 16:47:21 +0000 Manifest next update: Tue 21 Jul 2026 17:10:21 +0000 Files and hashes: 1: EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.crl (hash: HMLj1U6Iw2QXX2DDMREBZPtaxCEYFD1DocYTfpB7sL8=) 2: 3130332e3136312e3131342e302f32332d3234203d3e20313431363132.roa (hash: AuCdih88NSq35lOqDy4yw7F/uYDNOpEkZusC24B4jX8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.crl rsync://rpki-rsync.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 17:10:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:4e:a0:61:5f:d2:6f:a4:b8:f1:cf:eb:c1:1e:00:0c:c6:00:d7:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAA4FE45195D514CCA759DE1CF2124DCD840A8DB Validity Not Before: Jul 20 16:47:21 2026 GMT Not After : Jul 21 17:10:21 2026 GMT Subject: CN=2BDE6A05D1AB83A1EDBD3ACAE5C9EEFB4339CAE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:27:69:44:21:7c:3e:2c:cf:7e:2c:7b:5c:8f: e8:e7:15:c6:f9:e1:7f:02:0b:84:ec:1d:f3:84:98: 60:f2:7b:ef:22:d8:1d:3f:66:d4:27:ec:04:6b:9e: b3:3c:b0:27:20:c3:f7:d2:14:22:3d:26:47:7e:79: ff:67:dd:e8:3b:ad:59:42:d3:4e:90:9c:59:69:10: 83:d7:3b:33:36:d8:a4:f3:45:cf:0d:30:cd:55:a0: ce:94:5f:be:af:54:bb:0e:a2:e5:42:cf:e2:49:14: 68:cc:58:f5:46:a8:2a:3c:22:39:81:d7:73:23:a5: ad:53:e7:b3:ff:27:fe:58:b0:d5:17:d8:ab:1c:f1: 51:86:e1:c2:e0:02:5a:28:84:28:80:10:0d:76:b7: 5e:aa:0c:aa:ca:c9:18:fe:67:9e:6d:f6:b5:71:41: 05:56:2c:ca:c0:fa:f7:ef:b4:61:63:c2:1a:7d:37: fa:e7:ad:00:eb:84:e9:c1:b8:90:71:71:b9:58:46: ce:a8:f3:e0:af:d4:d8:b4:92:d4:69:6a:24:a7:37: 88:d7:e7:55:cf:85:21:a3:85:57:59:7d:3d:fb:94: 6f:9d:9c:b6:2b:76:f5:1d:b4:76:cf:41:bb:e1:79: b2:d2:19:25:53:25:a3:69:34:e2:b0:cd:c7:b4:22: 7b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:DE:6A:05:D1:AB:83:A1:ED:BD:3A:CA:E5:C9:EE:FB:43:39:CA:E8 X509v3 Authority Key Identifier: keyid:EA:A4:FE:45:19:5D:51:4C:CA:75:9D:E1:CF:21:24:DC:D8:40:A8:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:1d:dc:1f:46:64:45:93:94:42:67:27:44:26:b5:3b:b8:29: 71:05:c6:bb:1c:50:48:ee:58:9e:f3:12:47:4e:99:17:51:cc: 9d:ae:97:13:d0:96:c0:8b:5d:94:e9:ea:50:c4:82:df:78:f2: 08:84:e9:5c:4a:bc:24:1b:24:b1:90:80:2e:07:e2:76:72:c3: 77:37:31:b9:b6:db:4c:f3:6c:f9:48:ed:29:44:05:f0:59:35: 08:05:03:2b:0d:78:27:66:45:e7:50:f4:4d:8f:16:71:df:f9: 77:36:c0:69:19:a3:bd:7f:a7:c1:b8:c0:a1:28:f9:63:cc:5f: e7:65:42:66:00:32:bb:d6:8d:74:20:29:7f:08:5e:f2:33:a1: 93:6d:18:c1:26:63:5a:f1:38:90:66:a0:38:84:a6:f9:a2:0c: fd:ef:d1:d1:8d:72:64:77:e4:6a:29:11:1a:c5:04:d6:65:f5: 34:08:b0:fd:38:6c:52:86:fe:ee:54:e5:01:de:25:92:f5:98: c2:3b:df:f1:98:b6:37:75:73:70:63:25:22:c9:b0:76:58:9f: 80:b0:4f:59:52:6a:ea:b0:27:6c:99:3c:98:11:36:8a:b4:61: a4:6f:fa:c7:57:08:0a:43:d0:58:3c:ac:69:a2:ed:82:ff:9f: ba:87:e4:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfU6gYV/Sb6S48c/rwR4ADMYA1+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFBNEZFNDUxOTVENTE0Q0NBNzU5REUxQ0YyMTI0RENE ODQwQThEQjAeFw0yNjA3MjAxNjQ3MjFaFw0yNjA3MjExNzEwMjFaMDMxMTAvBgNV BAMTKDJCREU2QTA1RDFBQjgzQTFFREJEM0FDQUU1QzlFRUZCNDMzOUNBRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRJ2lEIXw+LM9+LHtcj+jnFcb5 4X8CC4TsHfOEmGDye+8i2B0/ZtQn7ARrnrM8sCcgw/fSFCI9Jkd+ef9n3eg7rVlC 006QnFlpEIPXOzM22KTzRc8NMM1VoM6UX76vVLsOouVCz+JJFGjMWPVGqCo8IjmB 13Mjpa1T57P/J/5YsNUX2Ksc8VGG4cLgAloohCiAEA12t16qDKrKyRj+Z55t9rVx QQVWLMrA+vfvtGFjwhp9N/rnrQDrhOnBuJBxcblYRs6o8+Cv1Ni0ktRpaiSnN4jX 51XPhSGjhVdZfT37lG+dnLYrdvUdtHbPQbvhebLSGSVTJaNpNOKwzce0InsFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK95qBdGrg6HtvTrK5cnu+0M5yugwHwYDVR0j BBgwFoAU6qT+RRldUUzKdZ3hzyEk3NhAqNswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTc5NWEzNzgtZDY5ZS00NTJlLWFjNjctM2I3NDkwMzlhOGM4LzAvRUFBNEZFNDUx OTVENTE0Q0NBNzU5REUxQ0YyMTI0RENEODQwQThEQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQUE0RkU0NTE5NUQ1MTRDQ0E3NTlERTFDRjIxMjREQ0Q4NDBB OERCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTc5NWEzNzgtZDY5ZS00NTJlLWFj NjctM2I3NDkwMzlhOGM4LzAvRUFBNEZFNDUxOTVENTE0Q0NBNzU5REUxQ0YyMTI0 RENEODQwQThEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAod3B9GZEWTlEJnJ0QmtTu4KXEFxrscUEju WJ7zEkdOmRdRzJ2ulxPQlsCLXZTp6lDEgt948giE6VxKvCQbJLGQgC4H4nZyw3c3 Mbm220zzbPlI7SlEBfBZNQgFAysNeCdmRedQ9E2PFnHf+Xc2wGkZo71/p8G4wKEo +WPMX+dlQmYAMrvWjXQgKX8IXvIzoZNtGMEmY1rxOJBmoDiEpvmiDP3v0dGNcmR3 5GopERrFBNZl9TQIsP04bFKG/u5U5QHeJZL1mMI73/GYtjd1c3BjJSLJsHZYn4Cw T1lSauqwJ2yZPJgRNoq0YaRv+sdXCApD0Fg8rGmi7YL/n7qH5Nk= -----END CERTIFICATE-----Generated at Tue Jul 21 06:46:58 2026 by rpki-client