$ rpki-client -vvf rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft File: EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft (raw, json) Hash identifier: 53e5f4Z0n8xIWJ3SPIP81LzgkC49bvuvH0Zhm6PZtdo= Subject key identifier: 5D:18:36:CC:9C:C4:53:EA:0C:BA:1C:98:51:BD:9E:18:4C:58:45:ED Authority key identifier: EA:F1:1A:8E:D0:35:AD:ED:15:9E:09:77:A5:5B:8A:13:5A:2D:BA:F0 Certificate issuer: /CN=EAF11A8ED035ADED159E0977A55B8A135A2DBAF0 Certificate serial: 7F5129981CECBAA655C8D753296F558F56759125 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 11:44:32 +0000 Manifest this update: Tue 02 Jun 2026 11:39:32 +0000 Manifest next update: Wed 03 Jun 2026 15:00:32 +0000 Files and hashes: 1: 3132312e3130312e3138392e302f32342d3234203d3e203338373835.roa (hash: pWwlBOgo0c3x6IIcXfvg9KBIWmKkPWfxlYAnYQTVkEg=) 2: 3132312e3130312e3138342e302f32342d3234203d3e203338373835.roa (hash: 3mA7+mzgag84qW1ECVIx+vVoMA11/hm1+8F3im5FSgM=) 3: 3132312e3130312e3139312e302f32342d3234203d3e203338373835.roa (hash: hd0faeOSPJPRBzPByoIXVnw8NPD4bzR2wSWzwHgoQPA=) 4: 3132312e3130312e3138372e302f32342d3234203d3e203338373835.roa (hash: eow5kZw+wlYHSjxq5MYrTPBsAbbgLnc6v4ENArx4+O8=) 5: 3132312e3130312e3138352e302f32342d3234203d3e203338373835.roa (hash: njy5/kh9KsnXyn0A9UeBHDQF9Tkk8vaMqIfNa9Qx8CA=) 6: 3132312e3130312e3139302e302f32342d3234203d3e203338373835.roa (hash: kOLyF61iZDyTGCpcXoqG6pGYD92Lf55fGKKsSX0XUdE=) 7: EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.crl (hash: BAGUrqhvkhCWb2SazoBycr+Qe7T5yNzQW23N4Bd5+4M=) 8: 3132312e3130312e3138362e302f32342d3234203d3e203338373835.roa (hash: o0yYhvbuoFqhEPym4z+ZdJk3Le3FK4ab18rxhmTiTA8=) 9: 3132312e3130312e3138382e302f32342d3234203d3e203338373835.roa (hash: jtsuDztEZ+UqFnwxVIum5heFrLrZtRBLCrlDOZVW974=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.crl rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 15:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:51:29:98:1c:ec:ba:a6:55:c8:d7:53:29:6f:55:8f:56:75:91:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAF11A8ED035ADED159E0977A55B8A135A2DBAF0 Validity Not Before: Jun 2 11:39:32 2026 GMT Not After : Jun 3 15:00:32 2026 GMT Subject: CN=5D1836CC9CC453EA0CBA1C9851BD9E184C5845ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:bb:33:c7:4e:9c:37:a7:9a:94:b5:c1:c9:38: 0d:81:f9:cc:be:3c:64:22:58:f0:46:39:02:64:dd: 01:44:42:3b:c0:28:f3:e3:3f:7a:56:42:de:77:0b: 60:04:de:bc:52:64:c1:b1:ca:28:2b:57:f8:a2:87: fe:d7:d6:cb:38:29:83:43:64:bc:7e:4a:9f:86:29: 0e:84:2c:63:92:91:ed:c9:6b:f1:36:91:2b:69:4a: d7:2e:a9:65:7d:87:91:44:e4:82:fc:71:9b:98:18: ed:5c:85:57:e1:a4:0a:9a:db:b6:9c:0b:62:45:7d: d5:a4:0d:6c:a8:3f:ae:00:64:0c:f8:1d:f2:f4:20: 54:43:6e:e4:1a:9f:e1:67:cf:22:a6:bd:d8:b0:18: a6:cb:2e:a7:2f:a6:84:02:c2:07:e7:49:dd:ed:cb: c7:d7:59:08:61:10:18:9f:6f:b1:fa:53:c7:cb:31: 40:14:cd:c4:94:e0:a3:0c:cc:3f:e8:27:4a:5d:89: d1:07:3c:cd:24:7e:15:91:2d:5b:75:29:d7:b0:5e: ed:07:0f:00:2c:b6:d8:50:7d:75:12:7f:ff:6b:d3: 42:7e:62:4a:dd:01:12:a9:78:d2:65:56:15:3d:e1: 0b:18:ca:0f:2b:59:ab:92:44:47:3a:7b:d8:fe:ee: 91:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:18:36:CC:9C:C4:53:EA:0C:BA:1C:98:51:BD:9E:18:4C:58:45:ED X509v3 Authority Key Identifier: keyid:EA:F1:1A:8E:D0:35:AD:ED:15:9E:09:77:A5:5B:8A:13:5A:2D:BA:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:28:0f:5b:22:77:b4:58:52:42:44:88:b5:23:69:6b:dd:58: 49:c9:57:77:d2:60:e9:67:94:91:0b:06:74:46:ff:16:47:7d: 18:66:dc:35:f3:a2:13:26:d1:27:ce:46:dc:c4:45:a3:6b:21: 97:be:cd:07:af:b2:65:10:ba:76:a4:0c:75:44:6d:a4:6d:a2: 23:b7:df:eb:c9:4b:43:44:43:1c:3d:36:0e:5c:c3:23:29:8a: 0d:48:fe:ce:83:cb:4d:d6:66:33:48:0d:3a:18:e4:4c:71:a5: b5:87:6c:f5:95:b0:8c:da:a8:d9:cd:39:f5:89:f5:f4:22:22: bc:26:3c:fe:94:3a:26:df:f4:1f:b0:fd:3b:8c:f3:2c:8e:43: a6:6a:fa:d4:95:f1:26:82:17:8e:a8:c1:29:11:04:a2:e2:b3: ee:72:72:23:1a:3e:d9:b8:8c:f9:0b:e9:e7:ff:58:c6:60:48: a7:cb:42:2a:59:09:2e:e1:9a:17:cd:29:8a:e5:90:4c:ae:15: ed:d8:bf:cb:d7:44:3d:6c:d6:c2:5b:30:c2:12:ee:b6:63:63: 26:93:a8:69:cc:32:94:cd:3a:be:2f:e5:da:3a:8f:d4:b5:e1: a0:ba:bd:15:9b:e8:fc:4e:fd:67:cd:8b:2f:0b:9f:8f:ec:e3: 2e:8d:36:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf1EpmBzsuqZVyNdTKW9Vj1Z1kSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFGMTFBOEVEMDM1QURFRDE1OUUwOTc3QTU1QjhBMTM1 QTJEQkFGMDAeFw0yNjA2MDIxMTM5MzJaFw0yNjA2MDMxNTAwMzJaMDMxMTAvBgNV BAMTKDVEMTgzNkNDOUNDNDUzRUEwQ0JBMUM5ODUxQkQ5RTE4NEM1ODQ1RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiuzPHTpw3p5qUtcHJOA2B+cy+ PGQiWPBGOQJk3QFEQjvAKPPjP3pWQt53C2AE3rxSZMGxyigrV/iih/7X1ss4KYND ZLx+Sp+GKQ6ELGOSke3Ja/E2kStpStcuqWV9h5FE5IL8cZuYGO1chVfhpAqa27ac C2JFfdWkDWyoP64AZAz4HfL0IFRDbuQan+FnzyKmvdiwGKbLLqcvpoQCwgfnSd3t y8fXWQhhEBifb7H6U8fLMUAUzcSU4KMMzD/oJ0pdidEHPM0kfhWRLVt1KdewXu0H DwAstthQfXUSf/9r00J+YkrdARKpeNJlVhU94QsYyg8rWauSREc6e9j+7pFXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXRg2zJzEU+oMuhyYUb2eGExYRe0wHwYDVR0j BBgwFoAU6vEajtA1re0Vngl3pVuKE1otuvAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTU3MmRmYmUtNGNhMC00YTQ2LTgwMzctNDk2OGVkOTdjYWRjLzAvRUFGMTFBOEVE MDM1QURFRDE1OUUwOTc3QTU1QjhBMTM1QTJEQkFGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQUYxMUE4RUQwMzVBREVEMTU5RTA5NzdBNTVCOEExMzVBMkRC QUYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTU3MmRmYmUtNGNhMC00YTQ2LTgw MzctNDk2OGVkOTdjYWRjLzAvRUFGMTFBOEVEMDM1QURFRDE1OUUwOTc3QTU1QjhB MTM1QTJEQkFGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHIoD1sid7RYUkJEiLUjaWvdWEnJV3fSYOln lJELBnRG/xZHfRhm3DXzohMm0SfORtzERaNrIZe+zQevsmUQunakDHVEbaRtoiO3 3+vJS0NEQxw9Ng5cwyMpig1I/s6Dy03WZjNIDToY5ExxpbWHbPWVsIzaqNnNOfWJ 9fQiIrwmPP6UOibf9B+w/TuM8yyOQ6Zq+tSV8SaCF46owSkRBKLis+5yciMaPtm4 jPkL6ef/WMZgSKfLQipZCS7hmhfNKYrlkEyuFe3Yv8vXRD1s1sJbMMIS7rZjYyaT qGnMMpTNOr4v5do6j9S14aC6vRWb6PxO/WfNiy8Ln4/s4y6NNqI= -----END CERTIFICATE-----Generated at Wed Jun 3 04:21:01 2026 by rpki-client