$ rpki-client -vvf rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.mft File: EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.mft (raw, json) Hash identifier: ThqADNxy0x7U+oZzwcaB9S/wJqNinAh96eUO2mg1jq8= Subject key identifier: DD:A8:41:CE:8B:E5:F2:B3:9D:2B:A8:BF:E4:1E:78:DF:34:9D:FD:3C Authority key identifier: EA:8B:1F:D5:4B:5A:4E:9B:79:5C:DD:92:9B:58:E7:BD:B2:DA:68:71 Certificate issuer: /CN=EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871 Certificate serial: 571F45A1F9E2D1A68CFE1E3E69FD66B58740ED1D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.mft Manifest number: 74 Signing time: Mon 27 Jul 2026 21:29:00 +0000 Manifest this update: Mon 27 Jul 2026 21:24:00 +0000 Manifest next update: Wed 29 Jul 2026 01:15:00 +0000 Files and hashes: 1: EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.crl (hash: 5hetL6e8RdOf3IjHfPkeJVE8KyJkgWoBLmoA0fs58R4=) 2: 3130332e3137392e38342e302f32342d3234203d3e20313432333037.roa (hash: 2LkAU6HFzcD+uMMYceohJGiq/c/yqAWAinLHczse+RU=) 3: 3130332e3136382e34342e302f32342d3234203d3e20313432333037.roa (hash: RIjxtB34QrKPBshyuKfeBsiSf1Tc4cR0KfHnQu3zHiw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.crl rsync://rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 23:59:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:1f:45:a1:f9:e2:d1:a6:8c:fe:1e:3e:69:fd:66:b5:87:40:ed:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871 Validity Not Before: Jul 27 21:24:00 2026 GMT Not After : Jul 29 01:15:00 2026 GMT Subject: CN=DDA841CE8BE5F2B39D2BA8BFE41E78DF349DFD3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ae:b3:dd:ee:fa:ba:77:16:78:ef:67:7e:24: d7:37:a2:54:a5:92:22:a9:ed:0f:93:20:28:ee:0d: f5:6d:c0:28:0b:57:04:3e:af:67:23:b8:22:38:bc: 8c:78:ba:6f:50:45:68:ef:d5:c2:45:c9:03:d2:66: e7:7c:59:91:3d:5b:88:b5:52:fe:1a:60:e2:a1:3d: e8:87:95:92:a9:df:bf:b7:1b:1c:7e:d8:8d:df:d2: 2a:59:86:91:8c:64:31:22:2f:52:a2:95:61:c0:47: 17:ba:ab:80:8a:7a:60:48:fb:ff:42:22:30:68:e8: e0:e7:fb:72:cf:88:03:68:b2:57:17:cf:b7:d9:8f: 44:c7:5c:c9:46:c7:b8:b1:ac:aa:60:8d:c4:79:39: f0:81:95:07:6b:ee:8c:6b:5c:63:bc:a4:9b:7e:83: 39:01:2a:05:6f:1c:8d:e7:62:49:75:1d:7d:a7:90: 4e:7a:07:a7:32:9c:c8:82:43:5e:19:b8:96:92:68: b8:e6:76:2e:a7:09:be:50:e7:84:5c:81:e4:17:86: f6:8a:34:13:f1:b7:b4:b9:67:80:67:d4:10:b9:68: d2:6c:af:fb:64:d3:c9:c5:0d:56:ab:85:ee:d8:1c: bd:ae:f5:2b:45:23:92:48:cc:43:ce:da:92:35:29: 12:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A8:41:CE:8B:E5:F2:B3:9D:2B:A8:BF:E4:1E:78:DF:34:9D:FD:3C X509v3 Authority Key Identifier: keyid:EA:8B:1F:D5:4B:5A:4E:9B:79:5C:DD:92:9B:58:E7:BD:B2:DA:68:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:15:bb:fd:02:a8:c4:62:fd:dc:44:08:cf:81:c5:4e:c2:b3: 27:fd:26:20:fb:d2:b1:ca:4f:86:b7:80:02:84:fd:05:d5:ed: 92:ad:ef:d0:7f:9a:87:52:91:79:56:e1:35:2c:f8:4d:e5:06: 41:48:de:f7:9c:21:4f:46:47:40:4c:90:a2:d1:89:f5:c0:90: 2c:66:41:60:ce:13:04:3c:7c:f7:60:25:54:ec:88:12:7f:31: 98:ba:e7:1f:4f:15:d6:17:cc:56:e4:4a:d5:c2:78:97:ae:55: eb:b3:95:1a:1d:89:2a:27:3e:91:69:6b:2b:36:9e:59:68:cf: 86:a6:81:e9:56:ad:0a:7d:9f:19:5f:67:a3:31:95:1b:ac:ee: 7c:ec:8d:3d:99:51:4e:11:92:27:1e:dc:bc:8c:75:4f:26:96: 1e:3e:f4:70:4a:9f:b3:81:eb:d7:d8:c0:45:b4:b6:2e:03:ff: 36:db:54:7f:59:92:c3:b5:73:62:e6:07:18:a2:f6:56:d7:ab: 68:fc:46:bd:53:21:b3:16:ef:60:86:14:85:69:4f:22:c9:d0: b3:37:8b:f4:47:ab:08:4f:7a:8e:19:29:62:7f:6d:e0:d8:b7: ae:a4:ba:3b:a4:10:92:9a:d0:73:80:52:0c:a3:31:44:87:a5: d3:8c:6a:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVx9Fofni0aaM/h4+af1mtYdA7R0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUE4QjFGRDU0QjVBNEU5Qjc5NUNERDkyOUI1OEU3QkRC MkRBNjg3MTAeFw0yNjA3MjcyMTI0MDBaFw0yNjA3MjkwMTE1MDBaMDMxMTAvBgNV BAMTKEREQTg0MUNFOEJFNUYyQjM5RDJCQThCRkU0MUU3OERGMzQ5REZEM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhrrPd7vq6dxZ472d+JNc3olSl kiKp7Q+TICjuDfVtwCgLVwQ+r2cjuCI4vIx4um9QRWjv1cJFyQPSZud8WZE9W4i1 Uv4aYOKhPeiHlZKp37+3Gxx+2I3f0ipZhpGMZDEiL1KilWHARxe6q4CKemBI+/9C IjBo6ODn+3LPiANoslcXz7fZj0THXMlGx7ixrKpgjcR5OfCBlQdr7oxrXGO8pJt+ gzkBKgVvHI3nYkl1HX2nkE56B6cynMiCQ14ZuJaSaLjmdi6nCb5Q54RcgeQXhvaK NBPxt7S5Z4Bn1BC5aNJsr/tk08nFDVarhe7YHL2u9StFI5JIzEPO2pI1KRLnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3ahBzovl8rOdK6i/5B543zSd/TwwHwYDVR0j BBgwFoAU6osf1UtaTpt5XN2Sm1jnvbLaaHEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDVmMjBiMmUtYTdhOC00MmZkLTkyZjgtOTQ5NjIzM2IyYzllLzAvRUE4QjFGRDU0 QjVBNEU5Qjc5NUNERDkyOUI1OEU3QkRCMkRBNjg3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQThCMUZENTRCNUE0RTlCNzk1Q0REOTI5QjU4RTdCREIyREE2 ODcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDVmMjBiMmUtYTdhOC00MmZkLTky ZjgtOTQ5NjIzM2IyYzllLzAvRUE4QjFGRDU0QjVBNEU5Qjc5NUNERDkyOUI1OEU3 QkRCMkRBNjg3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAgVu/0CqMRi/dxECM+BxU7Csyf9JiD70rHK T4a3gAKE/QXV7ZKt79B/modSkXlW4TUs+E3lBkFI3vecIU9GR0BMkKLRifXAkCxm QWDOEwQ8fPdgJVTsiBJ/MZi65x9PFdYXzFbkStXCeJeuVeuzlRodiSonPpFpays2 nlloz4amgelWrQp9nxlfZ6MxlRus7nzsjT2ZUU4Rkice3LyMdU8mlh4+9HBKn7OB 69fYwEW0ti4D/zbbVH9ZksO1c2LmBxii9lbXq2j8Rr1TIbMW72CGFIVpTyLJ0LM3 i/RHqwhPeo4ZKWJ/beDYt66kujukEJKa0HOAUgyjMUSHpdOMar0= -----END CERTIFICATE-----Generated at Tue Jul 28 03:25:49 2026 by rpki-client