$ rpki-client -vvf rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.mft File: EB314E0C129A5CAF077447531422664A0DBA21EB.mft (raw, json) Hash identifier: cNvcHg/spjcXoq/q1zmzFY6oy6ALnwagmNKdj2K4uts= Subject key identifier: BB:DA:6D:10:2B:71:41:21:BE:CA:5B:B2:E6:99:21:FC:9C:3F:21:76 Authority key identifier: EB:31:4E:0C:12:9A:5C:AF:07:74:47:53:14:22:66:4A:0D:BA:21:EB Certificate issuer: /CN=EB314E0C129A5CAF077447531422664A0DBA21EB Certificate serial: 5B3993199C6DBA8EFBE111679C4FE5B34D9F5274 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB314E0C129A5CAF077447531422664A0DBA21EB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 02:12:23 +0000 Manifest this update: Wed 03 Jun 2026 02:07:23 +0000 Manifest next update: Thu 04 Jun 2026 04:56:23 +0000 Files and hashes: 1: 3130332e34392e3233302e302f32342d3234203d3e203633383638.roa (hash: XZkVD58+fA+9TgN/E8SS+oOsYxABbo9pdQXTqmdzBkg=) 2: 3130332e34392e3232392e302f32342d3234203d3e203633383638.roa (hash: A5PltxTRAuGwKx7Z5AFNGaTklePgssNYT6aD4qcBx0s=) 3: 3130332e34392e3232382e302f32342d3234203d3e203633383638.roa (hash: un5/MncOqw/wwzU2UuxhsRYNEiAYmLczzv4yniu8AsM=) 4: 3130332e34392e3233312e302f32342d3234203d3e203633383638.roa (hash: Y2m4R38G71C4Yy/wcE7dbb3Q4JyEjJy1AWb7+OggzPM=) 5: EB314E0C129A5CAF077447531422664A0DBA21EB.crl (hash: UMU1+oblsS8XfRaAL0OiMTFda5nov1VreDZzT6vMW10=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.crl rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB314E0C129A5CAF077447531422664A0DBA21EB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 04:41:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:39:93:19:9c:6d:ba:8e:fb:e1:11:67:9c:4f:e5:b3:4d:9f:52:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB314E0C129A5CAF077447531422664A0DBA21EB Validity Not Before: Jun 3 02:07:23 2026 GMT Not After : Jun 4 04:56:23 2026 GMT Subject: CN=BBDA6D102B714121BECA5BB2E69921FC9C3F2176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a1:d5:f3:8f:dc:ed:5c:a4:cb:bf:73:a5:0d: 22:e1:72:58:30:83:b7:29:f3:d7:b4:da:e0:69:3f: 44:b3:5e:76:47:c1:6e:d6:7c:48:b0:52:4c:b9:b9: b5:02:ef:89:e5:6c:3c:61:a4:29:98:66:c7:b6:47: e6:20:6c:08:4a:df:97:de:33:fa:54:39:07:44:9e: 3b:4d:25:48:45:1a:75:b5:0f:26:a2:7d:67:e7:95: 3e:49:45:76:fb:3e:1e:76:ca:0f:a2:b1:79:37:8f: 52:ee:76:26:ef:8a:04:8b:49:c2:a4:2c:58:61:1a: 11:fe:7d:4c:d9:f6:8c:e4:b3:29:7d:db:8f:0d:d4: ae:82:17:50:59:f4:e0:0a:33:de:60:c7:45:88:a9: 12:0e:74:18:1b:15:8f:44:96:e3:d4:29:df:1f:64: c7:16:4a:ab:ce:32:90:27:a9:47:43:ce:d2:8a:f5: 4f:39:fa:7d:90:21:51:d8:bb:f3:c8:1b:78:dd:55: c8:b0:c5:29:fa:9e:2d:ca:1e:ba:a6:7f:7e:9e:cf: d8:4a:8f:3c:f9:41:4a:f5:a9:2b:f1:3e:5b:f9:a6: db:5d:21:c3:63:e8:5a:b3:4e:d3:33:dd:95:cd:1c: 57:85:0d:4a:05:10:6c:6e:3c:ea:db:49:b8:2b:b0: f0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:DA:6D:10:2B:71:41:21:BE:CA:5B:B2:E6:99:21:FC:9C:3F:21:76 X509v3 Authority Key Identifier: keyid:EB:31:4E:0C:12:9A:5C:AF:07:74:47:53:14:22:66:4A:0D:BA:21:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB314E0C129A5CAF077447531422664A0DBA21EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:76:37:da:39:b4:5c:05:b2:cf:fe:4d:ba:bd:df:1d:3a:8a: 7b:18:9e:c8:ab:d3:d1:a9:31:e0:be:09:3e:0b:a0:3a:03:cf: 44:17:fa:3b:53:c5:42:30:34:4a:23:d9:59:1e:d1:aa:d0:48: 97:e2:7d:3c:63:bc:f0:b1:11:6e:93:ee:05:25:87:d6:03:3e: 82:95:a8:64:82:2d:a7:4a:ea:2c:e4:d1:23:e9:a1:36:d3:8d: 85:d0:8d:ba:a6:db:f1:ba:be:be:f4:37:30:c3:48:f4:a3:fe: c8:fb:69:83:1f:4c:1e:8c:fb:df:31:60:a7:d8:d7:76:04:b6: ae:3b:69:4c:37:26:34:0c:d4:a8:c3:37:df:b3:95:b0:e9:d1: 71:d6:6c:bf:98:47:da:c5:d6:fa:a2:35:97:6d:05:a1:70:e1: 51:bb:b5:72:0a:d1:b0:b2:fe:0a:c7:5c:62:6f:9d:91:ef:d0: c5:a1:00:7f:e9:9f:75:b5:10:42:f9:08:25:e4:3a:ae:0d:ce: 90:c7:d2:d2:c0:75:ce:7b:d9:46:f0:fa:1c:35:be:fb:a3:f9: 9d:dd:bb:9a:89:2c:f6:fa:bc:35:7c:e6:c9:b9:c4:2d:5e:1a: 4d:79:60:76:4c:b9:2b:a7:cb:c1:9c:2c:60:4d:d3:42:37:b5: 80:8b:ca:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWzmTGZxtuo774RFnnE/ls02fUnQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUIzMTRFMEMxMjlBNUNBRjA3NzQ0NzUzMTQyMjY2NEEw REJBMjFFQjAeFw0yNjA2MDMwMjA3MjNaFw0yNjA2MDQwNDU2MjNaMDMxMTAvBgNV BAMTKEJCREE2RDEwMkI3MTQxMjFCRUNBNUJCMkU2OTkyMUZDOUMzRjIxNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAodXzj9ztXKTLv3OlDSLhclgw g7cp89e02uBpP0SzXnZHwW7WfEiwUky5ubUC74nlbDxhpCmYZse2R+YgbAhK35fe M/pUOQdEnjtNJUhFGnW1DyaifWfnlT5JRXb7Ph52yg+isXk3j1LudibvigSLScKk LFhhGhH+fUzZ9ozksyl9248N1K6CF1BZ9OAKM95gx0WIqRIOdBgbFY9EluPUKd8f ZMcWSqvOMpAnqUdDztKK9U85+n2QIVHYu/PIG3jdVciwxSn6ni3KHrqmf36ez9hK jzz5QUr1qSvxPlv5pttdIcNj6FqzTtMz3ZXNHFeFDUoFEGxuPOrbSbgrsPBLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu9ptECtxQSG+yluy5pkh/Jw/IXYwHwYDVR0j BBgwFoAU6zFODBKaXK8HdEdTFCJmSg26IeswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDM3MTkyOWQtYzNkMC00ZGFhLWI1ZmQtYTI0OTU2MGQ1ZDA0LzAvRUIzMTRFMEMx MjlBNUNBRjA3NzQ0NzUzMTQyMjY2NEEwREJBMjFFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQjMxNEUwQzEyOUE1Q0FGMDc3NDQ3NTMxNDIyNjY0QTBEQkEy MUVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDM3MTkyOWQtYzNkMC00ZGFhLWI1 ZmQtYTI0OTU2MGQ1ZDA0LzAvRUIzMTRFMEMxMjlBNUNBRjA3NzQ0NzUzMTQyMjY2 NEEwREJBMjFFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGR2N9o5tFwFss/+Tbq93x06insYnsir09Gp MeC+CT4LoDoDz0QX+jtTxUIwNEoj2Vke0arQSJfifTxjvPCxEW6T7gUlh9YDPoKV qGSCLadK6izk0SPpoTbTjYXQjbqm2/G6vr70NzDDSPSj/sj7aYMfTB6M+98xYKfY 13YEtq47aUw3JjQM1KjDN9+zlbDp0XHWbL+YR9rF1vqiNZdtBaFw4VG7tXIK0bCy /grHXGJvnZHv0MWhAH/pn3W1EEL5CCXkOq4NzpDH0tLAdc572Ubw+hw1vvuj+Z3d u5qJLPb6vDV85sm5xC1eGk15YHZMuSuny8GcLGBN00I3tYCLymo= -----END CERTIFICATE-----Generated at Wed Jun 3 04:08:26 2026 by rpki-client