$ rpki-client -vvf rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft File: EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft (raw, json) Hash identifier: 2fuc+kj/0E2tbgJigW6Ak9ipqi88jNQ4Wyi2Bzo/5f0= Subject key identifier: EC:B4:C9:E1:1D:FF:4E:77:32:D9:F6:30:96:D1:39:1C:AC:AD:D0:C5 Authority key identifier: EA:41:3F:BC:BE:2B:F7:36:52:D8:51:02:49:5E:CE:33:E9:33:0D:0F Certificate issuer: /CN=EA413FBCBE2BF73652D85102495ECE33E9330D0F Certificate serial: 6B579B3CA86F5C3949710DF28D67FB7301350B07 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA413FBCBE2BF73652D85102495ECE33E9330D0F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 14:04:03 +0000 Manifest this update: Mon 20 Jul 2026 13:59:03 +0000 Manifest next update: Tue 21 Jul 2026 16:30:03 +0000 Files and hashes: 1: 3130332e3135332e3133352e302f32342d3234203d3e20313430343634.roa (hash: WSddUG6Ud+EGXAnyjU+LN6Z0WaSOYhJ8p87PY2mBdmk=) 2: 323430363a343534303a3a2f33322d3332203d3e20313430343634.roa (hash: g38q9LaZAq4No+F6g8orw8HsN+5ba4Mi+pwZw+eZ3w8=) 3: 3130332e3135332e3133342e302f32342d3234203d3e20313430343634.roa (hash: PJ6SYnJsMTtu1EVv401gG2I/mMRasJM6zvehsyeEO6I=) 4: 3130332e3135332e3133342e302f32332d3233203d3e20313430343634.roa (hash: wrEWuCEXvYyJtUKLCBlrSkqSpEscz1bfuLgaervIG1M=) 5: EA413FBCBE2BF73652D85102495ECE33E9330D0F.crl (hash: tRTSrARAtsLh2Tbc62avntvwUsgiSnrZy14aZW1Rclg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.crl rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA413FBCBE2BF73652D85102495ECE33E9330D0F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 16:30:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:57:9b:3c:a8:6f:5c:39:49:71:0d:f2:8d:67:fb:73:01:35:0b:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA413FBCBE2BF73652D85102495ECE33E9330D0F Validity Not Before: Jul 20 13:59:03 2026 GMT Not After : Jul 21 16:30:03 2026 GMT Subject: CN=ECB4C9E11DFF4E7732D9F63096D1391CACADD0C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:dd:40:dd:e8:72:9a:ee:fe:00:32:6f:97:29: 82:71:e7:1e:b0:00:02:49:18:4f:5d:a1:d8:52:4c: af:ca:8b:18:66:5b:61:46:2e:04:a8:77:9e:90:0c: 8b:16:ad:c5:37:dc:7c:94:b6:1a:cd:b5:41:54:97: 27:b0:db:68:83:e2:a0:e0:a7:74:17:85:07:5c:a5: 91:b6:70:40:40:49:49:75:62:ba:88:70:64:51:b7: 8a:d7:49:8d:c7:2e:9b:20:21:b9:6d:31:61:b4:a7: 85:f7:79:b9:7a:7a:df:5f:52:dd:eb:c9:fe:0d:0d: 52:c2:18:2b:20:cf:62:a3:a2:04:f0:4f:df:78:5d: 6e:da:86:be:dd:4b:84:8b:61:8c:88:83:7f:1a:50: cf:9b:5c:c7:0a:d4:58:64:6f:2a:05:b6:59:10:56: c3:7f:0c:f7:f3:94:22:82:67:f4:ef:ec:16:07:1c: 36:a6:5b:71:05:b1:c4:46:5e:68:88:d1:91:70:bc: 4e:41:e9:26:b0:b8:78:8f:fa:e0:2f:c9:a6:ed:0f: f0:7a:9c:53:9d:3b:1d:33:93:15:2b:c5:a9:ff:9c: 54:38:eb:76:06:47:0d:d2:74:82:b9:92:2a:02:fa: b8:c4:78:6d:94:07:57:38:a0:c1:51:04:9a:fb:84: 00:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:B4:C9:E1:1D:FF:4E:77:32:D9:F6:30:96:D1:39:1C:AC:AD:D0:C5 X509v3 Authority Key Identifier: keyid:EA:41:3F:BC:BE:2B:F7:36:52:D8:51:02:49:5E:CE:33:E9:33:0D:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA413FBCBE2BF73652D85102495ECE33E9330D0F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:e2:d1:ca:b3:77:53:6a:71:09:91:b2:d1:03:04:85:fd:7a: 53:54:ee:ee:cc:b9:ba:a2:78:b4:08:a6:0f:f5:54:b6:7e:64: 3c:ba:a9:41:07:8d:1d:9c:c3:dd:36:72:bb:04:5d:12:09:da: 58:4a:f5:03:fe:a8:e6:99:a4:19:89:dd:f2:d4:15:50:60:f4: 08:3d:1d:a4:6f:49:d7:66:04:ed:aa:c4:b4:66:db:52:30:a9: 70:a5:29:37:de:7f:6d:c2:42:d7:1a:f6:23:2a:ee:c8:77:5d: 58:e4:9a:e2:4d:05:fc:bc:55:e7:a7:94:59:7b:9d:c0:60:a8: a4:c5:5f:e2:32:b7:ee:31:b5:f0:3f:7e:87:da:39:52:fe:95: 7d:3c:ba:21:78:a3:cf:bd:65:7a:f6:e5:c1:56:0e:6b:60:83: 7a:eb:93:bb:56:c9:b1:12:ab:ce:71:83:c6:df:de:70:35:0b: 69:21:25:62:1c:5a:de:00:e4:39:fb:6c:39:f3:28:91:35:fb: 79:e9:37:d8:50:f0:f8:ca:b2:19:c5:e5:16:84:93:b3:fb:0e: 22:6f:98:06:d3:36:7a:60:3b:de:54:9b:4e:6e:24:91:26:85: 87:e1:9e:7a:e2:68:b7:79:d7:04:59:14:ba:b8:51:1a:7e:f8: bc:73:b6:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa1ebPKhvXDlJcQ3yjWf7cwE1CwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUE0MTNGQkNCRTJCRjczNjUyRDg1MTAyNDk1RUNFMzNF OTMzMEQwRjAeFw0yNjA3MjAxMzU5MDNaFw0yNjA3MjExNjMwMDNaMDMxMTAvBgNV BAMTKEVDQjRDOUUxMURGRjRFNzczMkQ5RjYzMDk2RDEzOTFDQUNBREQwQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC33UDd6HKa7v4AMm+XKYJx5x6w AAJJGE9dodhSTK/KixhmW2FGLgSod56QDIsWrcU33HyUthrNtUFUlyew22iD4qDg p3QXhQdcpZG2cEBASUl1YrqIcGRRt4rXSY3HLpsgIbltMWG0p4X3ebl6et9fUt3r yf4NDVLCGCsgz2KjogTwT994XW7ahr7dS4SLYYyIg38aUM+bXMcK1FhkbyoFtlkQ VsN/DPfzlCKCZ/Tv7BYHHDamW3EFscRGXmiI0ZFwvE5B6SawuHiP+uAvyabtD/B6 nFOdOx0zkxUrxan/nFQ463YGRw3SdIK5kioC+rjEeG2UB1c4oMFRBJr7hABNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7LTJ4R3/Tncy2fYwltE5HKyt0MUwHwYDVR0j BBgwFoAU6kE/vL4r9zZS2FECSV7OM+kzDQ8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGI4YmU5MDUtZjI5Ni00NWQxLWE4NzktNGE0ZGU1MmNiMmQ2LzAvRUE0MTNGQkNC RTJCRjczNjUyRDg1MTAyNDk1RUNFMzNFOTMzMEQwRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQTQxM0ZCQ0JFMkJGNzM2NTJEODUxMDI0OTVFQ0UzM0U5MzMw RDBGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGI4YmU5MDUtZjI5Ni00NWQxLWE4 NzktNGE0ZGU1MmNiMmQ2LzAvRUE0MTNGQkNCRTJCRjczNjUyRDg1MTAyNDk1RUNF MzNFOTMzMEQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGDi0cqzd1NqcQmRstEDBIX9elNU7u7Mubqi eLQIpg/1VLZ+ZDy6qUEHjR2cw902crsEXRIJ2lhK9QP+qOaZpBmJ3fLUFVBg9Ag9 HaRvSddmBO2qxLRm21IwqXClKTfef23CQtca9iMq7sh3XVjkmuJNBfy8VeenlFl7 ncBgqKTFX+Iyt+4xtfA/fofaOVL+lX08uiF4o8+9ZXr25cFWDmtgg3rrk7tWybES q85xg8bf3nA1C2khJWIcWt4A5Dn7bDnzKJE1+3npN9hQ8PjKshnF5RaEk7P7DiJv mAbTNnpgO95Um05uJJEmhYfhnnriaLd51wRZFLq4URp++Lxzto4= -----END CERTIFICATE-----Generated at Tue Jul 21 06:50:45 2026 by rpki-client