$ rpki-client -vvf rpki-rsync.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.mft File: EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.mft (raw, json) Hash identifier: IhHerpuHURzXtk9mFVoSqvhEf7w8XVfaVqS2BwtZPlA= Subject key identifier: 9B:20:49:8F:7D:3E:F6:8A:66:AA:5E:6D:C1:23:71:73:10:B3:46:DA Authority key identifier: EA:A4:FE:45:19:5D:51:4C:CA:75:9D:E1:CF:21:24:DC:D8:40:A8:DB Certificate issuer: /CN=EAA4FE45195D514CCA759DE1CF2124DCD840A8DB Certificate serial: 395A28C0004BDA7DE477B472063EF4D8DF61F11F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 18:32:24 +0000 Manifest this update: Tue 02 Jun 2026 18:27:24 +0000 Manifest next update: Wed 03 Jun 2026 22:03:24 +0000 Files and hashes: 1: EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.crl (hash: 3i9Ik69WeZxVqgkDRbZUkuuHpleptGybiaR2ITlLEuY=) 2: 3130332e3136312e3131342e302f32332d3234203d3e20313431363132.roa (hash: AuCdih88NSq35lOqDy4yw7F/uYDNOpEkZusC24B4jX8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.crl rsync://rpki-rsync.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:5a:28:c0:00:4b:da:7d:e4:77:b4:72:06:3e:f4:d8:df:61:f1:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAA4FE45195D514CCA759DE1CF2124DCD840A8DB Validity Not Before: Jun 2 18:27:24 2026 GMT Not After : Jun 3 22:03:24 2026 GMT Subject: CN=9B20498F7D3EF68A66AA5E6DC123717310B346DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fc:bb:6c:5b:d0:aa:36:2a:e6:16:32:6d:d6: 3e:1c:55:4d:b7:57:c9:f7:e4:22:b8:3b:f2:c9:6f: 89:0a:bb:2d:d3:a3:63:f3:3c:bf:c7:75:d5:f4:0a: f8:56:ea:8b:f0:02:99:06:95:3c:2d:70:a5:2f:63: c1:c8:18:2d:cd:6e:c1:3e:f7:17:4e:ae:e9:39:a2: db:59:86:19:a6:52:35:09:76:f3:ab:c9:ad:32:4d: 6f:54:98:42:49:e4:c1:7c:ae:f4:19:d8:f2:64:75: e0:0a:95:d8:0e:06:73:4a:0b:20:2c:de:3e:ab:e7: f2:74:81:7e:5f:94:d5:d7:f7:92:34:5d:7e:e9:d4: ab:9c:4e:a5:1a:a8:97:e7:0f:3d:57:10:e7:1e:1b: 3d:0a:92:45:d3:63:40:46:a2:d1:78:4e:81:01:b2: 50:e9:d6:9c:77:30:e8:63:9b:0f:e5:b2:7a:7e:df: fd:47:1f:34:38:61:2c:b7:20:1c:a5:03:9c:a3:92: 0a:60:12:32:93:b5:01:04:b0:08:0a:85:46:c6:51: f2:84:af:58:63:a9:c6:2b:2d:a9:1d:b7:e6:47:f4: 8c:03:f8:1d:2b:4e:ac:66:05:30:d7:55:b2:3c:c7: cb:ff:35:da:ae:f9:dc:ec:28:c9:2c:b4:37:2e:9a: 34:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:20:49:8F:7D:3E:F6:8A:66:AA:5E:6D:C1:23:71:73:10:B3:46:DA X509v3 Authority Key Identifier: keyid:EA:A4:FE:45:19:5D:51:4C:CA:75:9D:E1:CF:21:24:DC:D8:40:A8:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9795a378-d69e-452e-ac67-3b749039a8c8/0/EAA4FE45195D514CCA759DE1CF2124DCD840A8DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:8e:d7:88:46:14:53:39:86:5f:5d:c8:34:c6:79:95:2b:39: 25:51:93:4a:b1:59:66:f5:dd:05:d9:b1:5b:b4:e0:ff:2a:d2: 40:45:24:7f:25:54:aa:fa:2b:c1:5f:89:c7:d4:7f:8d:05:16: 21:8d:18:a9:ea:87:2e:5d:cb:ec:34:0d:45:dd:58:4e:06:08: 11:7d:5b:d8:36:51:6b:75:9e:f9:58:38:f5:53:d0:1a:e7:04: 94:ec:ad:f3:c3:c9:90:5a:42:4f:26:5f:7c:88:37:30:8f:7f: 7d:2a:32:1d:2b:65:07:76:da:77:bb:a2:e0:48:60:03:7c:02: bc:3f:0b:e3:80:b4:8b:b8:99:4e:fa:b4:17:ce:fe:f1:0a:3a: a6:a6:6f:10:ef:d1:74:61:2e:ed:79:a1:2d:6a:d1:b9:ba:34: 25:d1:28:97:32:b1:82:b1:de:e3:f1:81:86:87:33:21:56:88: e1:86:d1:c7:85:39:b3:94:60:5d:51:b6:e2:73:9c:75:98:38: d6:f0:d3:04:b1:25:c0:ee:9d:eb:71:98:72:d7:77:7c:8c:94: 30:54:0c:4b:dd:d5:58:4f:78:f6:a8:9b:ec:0e:6c:ee:70:ff: 38:93:f3:d6:5a:19:11:e9:df:14:b5:e7:a7:8b:69:40:39:64: df:f7:a7:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOVoowABL2n3kd7RyBj702N9h8R8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFBNEZFNDUxOTVENTE0Q0NBNzU5REUxQ0YyMTI0RENE ODQwQThEQjAeFw0yNjA2MDIxODI3MjRaFw0yNjA2MDMyMjAzMjRaMDMxMTAvBgNV BAMTKDlCMjA0OThGN0QzRUY2OEE2NkFBNUU2REMxMjM3MTczMTBCMzQ2REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT/LtsW9CqNirmFjJt1j4cVU23 V8n35CK4O/LJb4kKuy3To2PzPL/HddX0CvhW6ovwApkGlTwtcKUvY8HIGC3NbsE+ 9xdOruk5ottZhhmmUjUJdvOrya0yTW9UmEJJ5MF8rvQZ2PJkdeAKldgOBnNKCyAs 3j6r5/J0gX5flNXX95I0XX7p1KucTqUaqJfnDz1XEOceGz0KkkXTY0BGotF4ToEB slDp1px3MOhjmw/lsnp+3/1HHzQ4YSy3IBylA5yjkgpgEjKTtQEEsAgKhUbGUfKE r1hjqcYrLakdt+ZH9IwD+B0rTqxmBTDXVbI8x8v/Ndqu+dzsKMkstDcumjQTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmyBJj30+9opmql5twSNxcxCzRtowHwYDVR0j BBgwFoAU6qT+RRldUUzKdZ3hzyEk3NhAqNswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTc5NWEzNzgtZDY5ZS00NTJlLWFjNjctM2I3NDkwMzlhOGM4LzAvRUFBNEZFNDUx OTVENTE0Q0NBNzU5REUxQ0YyMTI0RENEODQwQThEQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQUE0RkU0NTE5NUQ1MTRDQ0E3NTlERTFDRjIxMjREQ0Q4NDBB OERCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTc5NWEzNzgtZDY5ZS00NTJlLWFj NjctM2I3NDkwMzlhOGM4LzAvRUFBNEZFNDUxOTVENTE0Q0NBNzU5REUxQ0YyMTI0 RENEODQwQThEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJmO14hGFFM5hl9dyDTGeZUrOSVRk0qxWWb1 3QXZsVu04P8q0kBFJH8lVKr6K8FficfUf40FFiGNGKnqhy5dy+w0DUXdWE4GCBF9 W9g2UWt1nvlYOPVT0BrnBJTsrfPDyZBaQk8mX3yINzCPf30qMh0rZQd22ne7ouBI YAN8Arw/C+OAtIu4mU76tBfO/vEKOqambxDv0XRhLu15oS1q0bm6NCXRKJcysYKx 3uPxgYaHMyFWiOGG0ceFObOUYF1RtuJznHWYONbw0wSxJcDunetxmHLXd3yMlDBU DEvd1VhPePaom+wObO5w/ziT89ZaGRHp3xS156eLaUA5ZN/3p5g= -----END CERTIFICATE-----Generated at Wed Jun 3 03:54:02 2026 by rpki-client