$ rpki-client -vvf rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft File: EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft (raw, json) Hash identifier: etLCtBWRO6ovNK+T7GVZNg87vAhddTMCpSyTeDEXK18= Subject key identifier: 2A:05:B1:65:5B:A6:06:B4:D1:AC:C5:64:04:24:09:4E:7F:ED:7D:47 Authority key identifier: EA:F1:1A:8E:D0:35:AD:ED:15:9E:09:77:A5:5B:8A:13:5A:2D:BA:F0 Certificate issuer: /CN=EAF11A8ED035ADED159E0977A55B8A135A2DBAF0 Certificate serial: 1349C778FFAA8BE0AF72A4DA965B7808791EC0FD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 23:19:48 +0000 Manifest this update: Mon 20 Jul 2026 23:14:48 +0000 Manifest next update: Wed 22 Jul 2026 02:52:48 +0000 Files and hashes: 1: 3132312e3130312e3139312e302f32342d3234203d3e203338373835.roa (hash: hd0faeOSPJPRBzPByoIXVnw8NPD4bzR2wSWzwHgoQPA=) 2: EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.crl (hash: lIC/mTXu2Cyu6XBwL/X1mYw4zU9RpVPasvj19xmXGpY=) 3: 3132312e3130312e3139302e302f32342d3234203d3e203338373835.roa (hash: kOLyF61iZDyTGCpcXoqG6pGYD92Lf55fGKKsSX0XUdE=) 4: 3132312e3130312e3138362e302f32342d3234203d3e203338373835.roa (hash: o0yYhvbuoFqhEPym4z+ZdJk3Le3FK4ab18rxhmTiTA8=) 5: 3132312e3130312e3138342e302f32342d3234203d3e203338373835.roa (hash: 3mA7+mzgag84qW1ECVIx+vVoMA11/hm1+8F3im5FSgM=) 6: 3132312e3130312e3138392e302f32342d3234203d3e203338373835.roa (hash: pWwlBOgo0c3x6IIcXfvg9KBIWmKkPWfxlYAnYQTVkEg=) 7: 3132312e3130312e3138352e302f32342d3234203d3e203338373835.roa (hash: njy5/kh9KsnXyn0A9UeBHDQF9Tkk8vaMqIfNa9Qx8CA=) 8: 3132312e3130312e3138372e302f32342d3234203d3e203338373835.roa (hash: eow5kZw+wlYHSjxq5MYrTPBsAbbgLnc6v4ENArx4+O8=) 9: 3132312e3130312e3138382e302f32342d3234203d3e203338373835.roa (hash: jtsuDztEZ+UqFnwxVIum5heFrLrZtRBLCrlDOZVW974=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.crl rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:49:c7:78:ff:aa:8b:e0:af:72:a4:da:96:5b:78:08:79:1e:c0:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAF11A8ED035ADED159E0977A55B8A135A2DBAF0 Validity Not Before: Jul 20 23:14:48 2026 GMT Not After : Jul 22 02:52:48 2026 GMT Subject: CN=2A05B1655BA606B4D1ACC5640424094E7FED7D47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:21:74:d2:5c:d9:ac:b6:97:78:7a:83:9b:af: ae:40:9d:41:cc:0c:5d:fc:0a:11:45:0f:2e:ad:ea: ee:77:2b:05:ed:b8:fd:da:32:e6:58:9c:5d:03:5a: 2a:0e:ce:5a:35:59:00:97:60:d0:62:7f:18:77:fc: 40:36:a5:88:be:f4:31:30:f3:1c:2a:57:ff:8c:8d: a5:8b:ab:6e:ae:be:65:a5:34:a9:4b:d9:74:f1:10: 5a:a5:45:45:49:25:53:be:5e:fb:b2:7e:b1:af:ce: 3d:86:cc:88:65:dd:de:60:57:b4:2f:10:69:a9:d5: 21:73:43:f6:16:fe:63:52:45:d6:4b:2f:39:c3:93: 8e:da:61:e2:cd:aa:8b:29:e6:8b:3c:a9:b9:39:0f: 8e:f6:e0:68:20:bf:31:d5:38:99:b0:6a:ab:f7:ef: cf:8c:76:f1:4d:96:b2:af:e6:87:d3:51:3b:df:35: 0d:22:6a:ce:a4:1e:60:9a:d1:b7:20:ca:5a:af:22: 1e:94:37:3b:c0:f6:cf:86:39:5d:67:fb:ff:53:96: 15:fb:c8:3c:ba:f4:08:c0:da:aa:37:f9:6e:71:7e: b3:21:7e:ad:3a:9b:7a:88:0a:6c:6f:ae:a9:a9:a3: 0f:3e:52:67:e6:c8:47:bd:d4:6f:f9:9d:50:c2:9e: c4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:05:B1:65:5B:A6:06:B4:D1:AC:C5:64:04:24:09:4E:7F:ED:7D:47 X509v3 Authority Key Identifier: keyid:EA:F1:1A:8E:D0:35:AD:ED:15:9E:09:77:A5:5B:8A:13:5A:2D:BA:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:61:01:33:14:01:5c:fe:26:ac:5e:98:3f:64:b5:8c:5b:a0: eb:97:0c:d4:4f:59:0b:04:59:51:cc:67:c8:64:6c:aa:23:96: 85:3b:35:4a:d2:ad:ba:71:c8:94:be:e5:66:09:31:73:e7:47: 36:44:79:b4:d4:47:76:6f:e7:f2:fb:16:a9:93:53:71:72:db: 84:f7:6c:32:4b:b4:17:dc:3b:37:70:4d:64:7f:57:4f:2b:a2: f1:29:44:f3:0c:37:f2:5c:2f:73:dd:db:01:6c:81:fd:84:11: cc:41:8d:44:59:cb:49:a1:78:b6:48:5a:8a:4e:aa:5b:55:d0: 3c:bd:c1:95:27:73:01:02:8b:0f:da:08:e4:d9:26:ea:fa:ee: 2e:42:d8:01:e5:6b:e7:bf:f2:f4:3b:1c:b0:a3:69:58:e4:51: 8a:63:f4:05:f5:45:4c:8a:1c:e2:ba:d0:8f:b2:4b:c3:03:b4: 63:e1:95:97:67:43:54:48:ea:0c:1a:f0:28:b3:a3:52:25:8e: 47:12:85:e9:ea:ad:67:79:6b:9b:81:16:03:83:da:a6:2d:27: 8c:52:03:c7:12:9e:c7:d3:f2:f5:7a:cf:1e:5f:09:a1:b5:43: 4f:29:ff:e9:05:15:03:30:a8:a0:79:50:da:38:93:70:eb:f8: 50:95:b5:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE0nHeP+qi+CvcqTallt4CHkewP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFGMTFBOEVEMDM1QURFRDE1OUUwOTc3QTU1QjhBMTM1 QTJEQkFGMDAeFw0yNjA3MjAyMzE0NDhaFw0yNjA3MjIwMjUyNDhaMDMxMTAvBgNV BAMTKDJBMDVCMTY1NUJBNjA2QjREMUFDQzU2NDA0MjQwOTRFN0ZFRDdENDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBIXTSXNmstpd4eoObr65AnUHM DF38ChFFDy6t6u53KwXtuP3aMuZYnF0DWioOzlo1WQCXYNBifxh3/EA2pYi+9DEw 8xwqV/+MjaWLq26uvmWlNKlL2XTxEFqlRUVJJVO+XvuyfrGvzj2GzIhl3d5gV7Qv EGmp1SFzQ/YW/mNSRdZLLznDk47aYeLNqosp5os8qbk5D4724GggvzHVOJmwaqv3 78+MdvFNlrKv5ofTUTvfNQ0ias6kHmCa0bcgylqvIh6UNzvA9s+GOV1n+/9TlhX7 yDy69AjA2qo3+W5xfrMhfq06m3qICmxvrqmpow8+UmfmyEe91G/5nVDCnsQPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKgWxZVumBrTRrMVkBCQJTn/tfUcwHwYDVR0j BBgwFoAU6vEajtA1re0Vngl3pVuKE1otuvAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTU3MmRmYmUtNGNhMC00YTQ2LTgwMzctNDk2OGVkOTdjYWRjLzAvRUFGMTFBOEVE MDM1QURFRDE1OUUwOTc3QTU1QjhBMTM1QTJEQkFGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQUYxMUE4RUQwMzVBREVEMTU5RTA5NzdBNTVCOEExMzVBMkRC QUYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTU3MmRmYmUtNGNhMC00YTQ2LTgw MzctNDk2OGVkOTdjYWRjLzAvRUFGMTFBOEVEMDM1QURFRDE1OUUwOTc3QTU1QjhB MTM1QTJEQkFGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJhATMUAVz+JqxemD9ktYxboOuXDNRPWQsE WVHMZ8hkbKojloU7NUrSrbpxyJS+5WYJMXPnRzZEebTUR3Zv5/L7FqmTU3Fy24T3 bDJLtBfcOzdwTWR/V08rovEpRPMMN/JcL3Pd2wFsgf2EEcxBjURZy0mheLZIWopO qltV0Dy9wZUncwECiw/aCOTZJur67i5C2AHla+e/8vQ7HLCjaVjkUYpj9AX1RUyK HOK60I+yS8MDtGPhlZdnQ1RI6gwa8Cizo1IljkcShenqrWd5a5uBFgOD2qYtJ4xS A8cSnsfT8vV6zx5fCaG1Q08p/+kFFQMwqKB5UNo4k3Dr+FCVtXU= -----END CERTIFICATE-----Generated at Tue Jul 21 06:46:11 2026 by rpki-client