$ rpki-client -vvf rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.mft File: EB314E0C129A5CAF077447531422664A0DBA21EB.mft (raw, json) Hash identifier: ttbHwtb/j/c3Y0Hya2/W7VckEEa9C28oeTdjBvgF5yQ= Subject key identifier: 33:97:6A:3B:CF:7D:47:DB:A6:2F:8F:C4:8D:12:A5:20:7D:5E:63:E0 Authority key identifier: EB:31:4E:0C:12:9A:5C:AF:07:74:47:53:14:22:66:4A:0D:BA:21:EB Certificate issuer: /CN=EB314E0C129A5CAF077447531422664A0DBA21EB Certificate serial: 04995944C3BE4A253DD77578BDE7B65A83973653 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB314E0C129A5CAF077447531422664A0DBA21EB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 16:26:50 +0000 Manifest this update: Mon 20 Jul 2026 16:21:50 +0000 Manifest next update: Tue 21 Jul 2026 17:18:50 +0000 Files and hashes: 1: 3130332e34392e3232382e302f32342d3234203d3e203633383638.roa (hash: un5/MncOqw/wwzU2UuxhsRYNEiAYmLczzv4yniu8AsM=) 2: 3130332e34392e3232392e302f32342d3234203d3e203633383638.roa (hash: A5PltxTRAuGwKx7Z5AFNGaTklePgssNYT6aD4qcBx0s=) 3: EB314E0C129A5CAF077447531422664A0DBA21EB.crl (hash: fptuWAnrYFELe7KHsiAp+GWulMZfF5n5GLsT4Zu00no=) 4: 3130332e34392e3233302e302f32342d3234203d3e203633383638.roa (hash: XZkVD58+fA+9TgN/E8SS+oOsYxABbo9pdQXTqmdzBkg=) 5: 3130332e34392e3233312e302f32342d3234203d3e203633383638.roa (hash: Y2m4R38G71C4Yy/wcE7dbb3Q4JyEjJy1AWb7+OggzPM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.crl rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB314E0C129A5CAF077447531422664A0DBA21EB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 17:18:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:99:59:44:c3:be:4a:25:3d:d7:75:78:bd:e7:b6:5a:83:97:36:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB314E0C129A5CAF077447531422664A0DBA21EB Validity Not Before: Jul 20 16:21:50 2026 GMT Not After : Jul 21 17:18:50 2026 GMT Subject: CN=33976A3BCF7D47DBA62F8FC48D12A5207D5E63E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:94:b8:d7:a0:ff:3a:4d:a3:6e:f8:0b:cb:2e: 8f:dc:bf:e5:73:de:b6:c9:61:a0:fc:4d:1a:a3:dd: ee:e0:25:55:0b:0e:23:73:7f:ee:3c:ad:dd:a6:ee: b6:ed:64:f2:b9:f5:11:49:79:d9:6f:72:19:38:ad: b5:e7:29:6c:ed:bd:2d:6c:39:dd:02:d7:01:dd:b4: 94:07:4c:74:7e:05:03:fa:82:6b:8f:f0:50:3d:c2: 86:7e:e1:3d:3d:e0:4e:73:90:8f:e6:16:3a:c8:5c: ce:9b:8a:fe:5a:63:9d:2b:d0:4d:98:0c:9c:c5:8e: d3:d9:84:e9:af:81:6e:f8:49:e8:69:54:9f:9e:a0: 7c:5d:5d:37:2c:f6:a2:9d:18:64:83:1a:21:c0:0e: c2:f0:c5:8a:f3:50:e0:ba:ed:40:9f:ea:6f:0f:d0: d0:5f:f8:09:3a:4d:1d:cf:a8:77:04:32:47:c8:5d: 69:af:b0:76:41:cc:c1:f5:db:0c:92:25:65:0b:19: 5f:b1:4a:bb:0a:01:42:86:d0:d7:e7:21:42:3d:3a: 40:ba:c1:0b:78:84:24:d5:20:11:8f:07:09:08:43: e3:1d:9f:fe:9a:a5:3e:de:23:31:a8:38:ea:ed:d6: 21:1c:c2:85:5e:ef:03:b2:0e:2b:96:0b:74:c0:45: 81:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:97:6A:3B:CF:7D:47:DB:A6:2F:8F:C4:8D:12:A5:20:7D:5E:63:E0 X509v3 Authority Key Identifier: keyid:EB:31:4E:0C:12:9A:5C:AF:07:74:47:53:14:22:66:4A:0D:BA:21:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB314E0C129A5CAF077447531422664A0DBA21EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:ee:c6:dd:17:1a:a6:df:36:e7:d8:00:af:e0:c9:10:9b:42: 24:d6:ca:0f:75:b2:60:7d:c9:83:2b:cc:f9:42:94:11:a1:7f: 14:d8:d5:10:3f:a7:26:fe:fc:43:ee:62:ba:3b:27:c8:1a:d7: b9:0a:15:f7:1b:fc:22:8d:44:ad:4c:b0:f6:4c:03:45:fd:08: 42:b4:09:de:70:bb:41:b3:c9:e3:03:37:9f:2b:62:14:5c:17: c5:87:23:44:c3:9e:a6:45:4b:df:85:77:a5:9c:69:fc:ea:d8: b8:c1:53:cd:ac:55:66:2d:ea:d3:db:e1:64:11:cd:d9:7b:0a: 0f:6d:b1:32:4c:df:46:50:90:11:9c:33:52:61:39:0e:65:2e: c3:63:c8:ce:db:93:03:ab:17:2c:2d:d1:6d:fc:16:4d:0e:2a: 3e:c2:1e:d4:7b:bd:57:d7:80:2a:79:b8:37:16:76:9e:b3:eb: 41:a5:66:4c:6e:36:53:38:b0:63:4a:90:3e:e5:5e:4d:f8:fa: 5c:5a:86:1c:b3:7a:47:4f:d1:79:e0:14:e4:75:66:35:eb:7b: 6a:37:bc:59:ed:37:11:be:24:7c:fb:90:50:df:9e:11:51:06: 46:9d:8c:67:44:f4:b7:49:a1:10:88:9e:8c:a5:5a:b0:b1:3e: bf:52:c2:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBJlZRMO+SiU913V4vee2WoOXNlMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUIzMTRFMEMxMjlBNUNBRjA3NzQ0NzUzMTQyMjY2NEEw REJBMjFFQjAeFw0yNjA3MjAxNjIxNTBaFw0yNjA3MjExNzE4NTBaMDMxMTAvBgNV BAMTKDMzOTc2QTNCQ0Y3RDQ3REJBNjJGOEZDNDhEMTJBNTIwN0Q1RTYzRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2lLjXoP86TaNu+AvLLo/cv+Vz 3rbJYaD8TRqj3e7gJVULDiNzf+48rd2m7rbtZPK59RFJedlvchk4rbXnKWztvS1s Od0C1wHdtJQHTHR+BQP6gmuP8FA9woZ+4T094E5zkI/mFjrIXM6biv5aY50r0E2Y DJzFjtPZhOmvgW74SehpVJ+eoHxdXTcs9qKdGGSDGiHADsLwxYrzUOC67UCf6m8P 0NBf+Ak6TR3PqHcEMkfIXWmvsHZBzMH12wySJWULGV+xSrsKAUKG0NfnIUI9OkC6 wQt4hCTVIBGPBwkIQ+Mdn/6apT7eIzGoOOrt1iEcwoVe7wOyDiuWC3TARYFBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM5dqO899R9umL4/EjRKlIH1eY+AwHwYDVR0j BBgwFoAU6zFODBKaXK8HdEdTFCJmSg26IeswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDM3MTkyOWQtYzNkMC00ZGFhLWI1ZmQtYTI0OTU2MGQ1ZDA0LzAvRUIzMTRFMEMx MjlBNUNBRjA3NzQ0NzUzMTQyMjY2NEEwREJBMjFFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQjMxNEUwQzEyOUE1Q0FGMDc3NDQ3NTMxNDIyNjY0QTBEQkEy MUVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDM3MTkyOWQtYzNkMC00ZGFhLWI1 ZmQtYTI0OTU2MGQ1ZDA0LzAvRUIzMTRFMEMxMjlBNUNBRjA3NzQ0NzUzMTQyMjY2 NEEwREJBMjFFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEDuxt0XGqbfNufYAK/gyRCbQiTWyg91smB9 yYMrzPlClBGhfxTY1RA/pyb+/EPuYro7J8ga17kKFfcb/CKNRK1MsPZMA0X9CEK0 Cd5wu0GzyeMDN58rYhRcF8WHI0TDnqZFS9+Fd6Wcafzq2LjBU82sVWYt6tPb4WQR zdl7Cg9tsTJM30ZQkBGcM1JhOQ5lLsNjyM7bkwOrFywt0W38Fk0OKj7CHtR7vVfX gCp5uDcWdp6z60GlZkxuNlM4sGNKkD7lXk34+lxahhyzekdP0XngFOR1ZjXre2o3 vFntNxG+JHz7kFDfnhFRBkadjGdE9LdJoRCInoylWrCxPr9SwsA= -----END CERTIFICATE-----Generated at Tue Jul 21 06:52:08 2026 by rpki-client