$ rpki-client -vvf rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.mft File: E1CBE571A9B35E54880250F3C035E3A2C5EA3688.mft (raw, json) Hash identifier: hr1eklSAxr/2TdCpkESkMpi6o7lK9L3V7S3rLNsnoS0= Subject key identifier: 8E:B5:B4:B3:57:FB:BC:D2:5D:EE:DB:0B:2A:50:57:88:82:EA:8F:83 Authority key identifier: E1:CB:E5:71:A9:B3:5E:54:88:02:50:F3:C0:35:E3:A2:C5:EA:36:88 Certificate issuer: /CN=E1CBE571A9B35E54880250F3C035E3A2C5EA3688 Certificate serial: 52646835070EF31879C65E4DF63E66A1F68BCB62 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 14:34:41 +0000 Manifest this update: Mon 20 Jul 2026 14:29:41 +0000 Manifest next update: Tue 21 Jul 2026 17:02:41 +0000 Files and hashes: 1: E1CBE571A9B35E54880250F3C035E3A2C5EA3688.crl (hash: uVeTIIE1JmrWcK8D9LxZl0IJBAtB1Zv9CWMFWT0WgnM=) 2: 3130332e3130362e3131322e302f32322d3234203d3e20313336383830.roa (hash: sb2b0BvTmrzj1UZrNAjcbapczR2THwPhTn7rFLIGhwc=) 3: 323430323a343234303a3a2f33322d3332203d3e20313336383830.roa (hash: P320z9KUFpWQ3fuDHhMBAn5wP+R8TtjEv0OQMaUZbt0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.crl rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 17:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:64:68:35:07:0e:f3:18:79:c6:5e:4d:f6:3e:66:a1:f6:8b:cb:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1CBE571A9B35E54880250F3C035E3A2C5EA3688 Validity Not Before: Jul 20 14:29:41 2026 GMT Not After : Jul 21 17:02:41 2026 GMT Subject: CN=8EB5B4B357FBBCD25DEEDB0B2A50578882EA8F83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5c:3c:a7:cd:bf:51:15:b7:54:34:42:9f:a4: ed:6d:b2:ea:f4:f0:3c:76:98:7c:70:fe:91:3c:8a: 2f:7e:49:b8:0e:b0:b8:4a:4d:8c:22:61:2d:88:20: e6:91:70:2a:10:bf:e8:b9:18:98:0c:8e:e6:92:12: a4:04:7f:3c:59:7f:4e:ba:5a:70:dc:13:2f:75:fa: 4e:3b:96:52:45:4b:d3:57:6b:7e:3f:9c:4e:47:3a: ce:03:03:1e:86:9b:22:0c:44:f6:c6:c3:ae:b4:ec: 5a:2b:66:fc:91:e3:81:a4:31:45:54:e0:0c:eb:36: 10:e0:b0:b6:00:a5:de:f6:1d:73:22:07:5e:0e:14: 38:79:6c:b4:1e:a3:d5:21:63:61:6e:fc:84:bd:c0: 9b:c7:80:df:47:73:9a:3b:6e:33:e2:8b:ac:83:f3: ba:20:ba:4c:5a:21:cd:f7:38:3c:34:fd:30:47:84: eb:3a:2e:fc:96:6f:8e:5a:a7:e3:9a:db:02:af:c0: a5:cb:c9:b3:6f:f0:fc:ca:5a:38:df:7c:24:c0:e7: 4f:9a:c7:6a:91:22:6a:ce:37:8e:a2:39:13:76:a9: 94:b8:00:be:3c:b8:74:09:75:d5:74:e7:6f:56:e1: c3:b8:72:ec:70:39:d6:98:a8:8f:8f:a8:0f:f8:07: 34:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B5:B4:B3:57:FB:BC:D2:5D:EE:DB:0B:2A:50:57:88:82:EA:8F:83 X509v3 Authority Key Identifier: keyid:E1:CB:E5:71:A9:B3:5E:54:88:02:50:F3:C0:35:E3:A2:C5:EA:36:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/E1CBE571A9B35E54880250F3C035E3A2C5EA3688.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:fb:ea:25:a3:92:e6:db:66:59:27:b6:39:2c:37:97:52:1e: a6:b2:d5:2b:86:50:77:d2:e4:16:d8:f6:14:35:2b:46:c3:01: 48:ea:3b:a4:00:24:50:e9:f6:2f:aa:fd:9b:32:95:6c:9c:b8: 34:15:a3:e2:e2:9b:52:40:49:9b:d6:bc:a9:e4:88:1c:37:d9: f3:1a:8e:08:35:ff:ed:62:02:1f:a1:ca:14:71:35:77:40:c2: 62:cc:81:ac:ee:51:2b:2d:32:05:45:9c:e1:29:40:0f:fa:33: 5d:14:d1:f2:1a:78:c6:02:2e:ca:95:7b:23:3a:6f:38:45:db: 0b:28:10:7b:51:6a:27:8e:fd:89:5c:ca:af:30:13:8c:a2:b6: 0b:5d:dd:7f:6c:f1:51:9c:ec:ff:26:ab:29:2f:c0:12:5d:d4: 8f:6f:58:4e:16:ab:c7:bf:d1:c3:65:aa:2f:44:5c:6b:94:0f: 8d:55:23:2d:1e:d1:00:0d:7a:56:37:7e:43:90:c9:79:4e:cd: ec:09:e5:97:24:8c:fa:2d:11:73:30:66:57:eb:b2:84:04:b7: 66:9b:3a:b9:fe:b3:9a:4b:5a:36:72:94:f2:af:86:5b:9e:4e: 6e:17:fc:ef:3a:30:17:f4:61:83:2f:54:ca:d3:8b:b7:d8:6d: c5:2d:a3:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUmRoNQcO8xh5xl5N9j5mofaLy2IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFDQkU1NzFBOUIzNUU1NDg4MDI1MEYzQzAzNUUzQTJD NUVBMzY4ODAeFw0yNjA3MjAxNDI5NDFaFw0yNjA3MjExNzAyNDFaMDMxMTAvBgNV BAMTKDhFQjVCNEIzNTdGQkJDRDI1REVFREIwQjJBNTA1Nzg4ODJFQThGODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9XDynzb9RFbdUNEKfpO1tsur0 8Dx2mHxw/pE8ii9+SbgOsLhKTYwiYS2IIOaRcCoQv+i5GJgMjuaSEqQEfzxZf066 WnDcEy91+k47llJFS9NXa34/nE5HOs4DAx6GmyIMRPbGw6607ForZvyR44GkMUVU 4AzrNhDgsLYApd72HXMiB14OFDh5bLQeo9UhY2Fu/IS9wJvHgN9Hc5o7bjPii6yD 87ogukxaIc33ODw0/TBHhOs6LvyWb45ap+Oa2wKvwKXLybNv8PzKWjjffCTA50+a x2qRImrON46iORN2qZS4AL48uHQJddV0529W4cO4cuxwOdaYqI+PqA/4BzQFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjrW0s1f7vNJd7tsLKlBXiILqj4MwHwYDVR0j BBgwFoAU4cvlcamzXlSIAlDzwDXjosXqNogwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmIwN2IzN2MtMDUwNy00OTEzLTgzMjktM2YxNjFiNmFmZjU2LzAvRTFDQkU1NzFB OUIzNUU1NDg4MDI1MEYzQzAzNUUzQTJDNUVBMzY4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FMUNCRTU3MUE5QjM1RTU0ODgwMjUwRjNDMDM1RTNBMkM1RUEz Njg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmIwN2IzN2MtMDUwNy00OTEzLTgz MjktM2YxNjFiNmFmZjU2LzAvRTFDQkU1NzFBOUIzNUU1NDg4MDI1MEYzQzAzNUUz QTJDNUVBMzY4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/76iWjkubbZlkntjksN5dSHqay1SuGUHfS 5BbY9hQ1K0bDAUjqO6QAJFDp9i+q/ZsylWycuDQVo+Lim1JASZvWvKnkiBw32fMa jgg1/+1iAh+hyhRxNXdAwmLMgazuUSstMgVFnOEpQA/6M10U0fIaeMYCLsqVeyM6 bzhF2wsoEHtRaieO/Ylcyq8wE4yitgtd3X9s8VGc7P8mqykvwBJd1I9vWE4Wq8e/ 0cNlqi9EXGuUD41VIy0e0QANelY3fkOQyXlOzewJ5ZckjPotEXMwZlfrsoQEt2ab Orn+s5pLWjZylPKvhlueTm4X/O86MBf0YYMvVMrTi7fYbcUto4k= -----END CERTIFICATE-----Generated at Tue Jul 21 08:35:33 2026 by rpki-client