$ rpki-client -vvf rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.mft File: EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.mft (raw, json) Hash identifier: XR7lfCYZGD/9OXweWImaDkI2OS6RJ8nSE31WjmZq+n0= Subject key identifier: 18:3A:9C:63:10:46:4D:BB:5F:C8:4A:36:BB:E7:65:93:D2:2D:09:DA Authority key identifier: EB:0B:E2:F2:F4:9F:0E:2E:D0:DC:A4:50:CC:7A:70:E3:7E:6C:44:79 Certificate issuer: /CN=EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479 Certificate serial: 3711A72062C77E434A13F6829336B2890FE53D16 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.mft Manifest number: 14 Signing time: Sat 16 May 2026 12:29:11 +0000 Manifest this update: Sat 16 May 2026 12:24:11 +0000 Manifest next update: Sun 17 May 2026 14:25:11 +0000 Files and hashes: 1: EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.crl (hash: DAPup3dwECxcBPij0vbf4uU5R9j9Ml5Q2qpIGrBpxYY=) 2: 323430333a353763303a3a2f33322d3438203d3e20313333383135.roa (hash: 3BwTC01USPfsaxqOFoR8OqcTiLHcsXU9wo2BTdmt5ZU=) 3: 3130332e3133302e3133362e302f32322d3234203d3e20313333383135.roa (hash: eU4i0Mhd/q+mYMVjCXIfd0DHyb4s/+BNKr0BLfdT+jA=) 4: 323430333a626163303a3a2f33322d3438203d3e20313333383135.roa (hash: HEWIf8VBw+80Q4rp+6Ysujhm51rVLU6tXVKj84ErweQ=) 5: 3130332e35322e34342e302f32322d3234203d3e20313333383135.roa (hash: Nq+2Vf2Sjui286xvlwdV6qhYVII60AjIdtuhfdXAxbY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.crl rsync://rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 09:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:11:a7:20:62:c7:7e:43:4a:13:f6:82:93:36:b2:89:0f:e5:3d:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479 Validity Not Before: May 16 12:24:11 2026 GMT Not After : May 17 14:25:11 2026 GMT Subject: CN=183A9C6310464DBB5FC84A36BBE76593D22D09DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:53:96:f4:55:18:cf:00:f4:4e:4c:10:6a:12: 17:24:55:7b:de:93:0a:87:f6:5e:1f:6a:f9:5a:ec: b5:66:74:dd:16:5f:c7:e3:2a:6b:9d:06:41:07:43: b3:f1:8f:79:b0:24:9c:79:81:a9:7a:44:40:48:3b: 4b:f9:e3:dd:05:21:d7:f7:83:34:f8:ae:08:77:cd: 48:ee:ca:8a:06:1d:ff:c1:cc:23:f4:dc:ee:af:b1: 8d:fd:ad:f3:37:29:28:31:b8:75:32:60:92:85:eb: e5:e0:83:85:8f:d1:f4:e8:67:79:ea:88:63:1c:3e: b8:85:6f:ae:f8:1b:0b:cb:99:c3:be:9e:a5:c5:09: 92:f9:c4:d8:a3:c0:07:1a:bf:ba:69:aa:d7:c7:9f: a8:c0:75:75:2f:23:59:96:43:76:a2:24:42:92:5f: 9d:cf:19:1f:ef:13:0b:2e:55:a0:79:06:d2:8b:2a: 60:2e:85:b5:5b:c1:99:14:11:bf:f3:ea:1f:32:42: bb:f2:a4:e2:10:b9:82:dd:9e:2d:7e:c5:be:4d:d6: 41:55:c2:86:9d:2e:cb:4a:73:11:a4:d3:c6:3d:0e: 59:22:9c:a7:69:e2:6a:7c:b3:4e:d4:a8:50:d5:eb: 81:e9:86:07:e3:1a:ed:14:be:23:80:1d:19:69:bd: f0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:3A:9C:63:10:46:4D:BB:5F:C8:4A:36:BB:E7:65:93:D2:2D:09:DA X509v3 Authority Key Identifier: keyid:EB:0B:E2:F2:F4:9F:0E:2E:D0:DC:A4:50:CC:7A:70:E3:7E:6C:44:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:4b:4c:2f:a4:56:d1:a1:4d:1f:1e:88:9b:37:ff:ea:ef:da: c6:84:03:12:3f:fb:78:ce:66:54:3b:72:2d:72:e3:13:20:d6: cd:d5:5b:66:dd:ee:7a:84:1d:18:83:0b:55:d1:ee:da:eb:32: 0a:11:9c:13:eb:b6:74:0b:01:c6:c7:55:b5:35:c5:27:96:0e: 37:6d:db:22:f6:63:32:29:af:97:66:12:84:d3:7a:06:02:07: 86:4c:0c:03:4a:a5:c4:3e:31:75:29:6d:11:d1:9d:5e:a3:4f: e1:66:9a:f1:f4:e8:2c:c1:2d:a3:e2:30:19:a8:eb:1e:82:44: 05:a1:1b:4d:2e:49:ca:49:ff:92:88:14:54:ab:74:fa:fb:c2: c0:43:a4:87:cc:89:19:1d:0f:b6:83:40:55:97:ed:3d:13:b7: ed:7d:f6:89:99:41:96:1e:db:38:ad:3d:dd:1e:be:ed:3b:ba: c1:07:99:d7:3f:1e:36:c3:57:21:61:26:32:0a:82:ed:46:6d: a4:d6:e8:01:6a:a4:5c:39:03:d2:6d:6f:0f:37:2d:e7:1c:3b: a4:2a:22:dd:e5:2f:94:e0:2d:ad:80:6d:a7:52:64:64:57:ff: 34:f4:e7:d6:80:31:a4:2f:12:92:cf:6d:19:a9:f2:e7:86:93: f6:9e:b3:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNxGnIGLHfkNKE/aCkzayiQ/lPRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUIwQkUyRjJGNDlGMEUyRUQwRENBNDUwQ0M3QTcwRTM3 RTZDNDQ3OTAeFw0yNjA1MTYxMjI0MTFaFw0yNjA1MTcxNDI1MTFaMDMxMTAvBgNV BAMTKDE4M0E5QzYzMTA0NjREQkI1RkM4NEEzNkJCRTc2NTkzRDIyRDA5REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeU5b0VRjPAPROTBBqEhckVXve kwqH9l4favla7LVmdN0WX8fjKmudBkEHQ7Pxj3mwJJx5gal6REBIO0v5490FIdf3 gzT4rgh3zUjuyooGHf/BzCP03O6vsY39rfM3KSgxuHUyYJKF6+Xgg4WP0fToZ3nq iGMcPriFb674GwvLmcO+nqXFCZL5xNijwAcav7ppqtfHn6jAdXUvI1mWQ3aiJEKS X53PGR/vEwsuVaB5BtKLKmAuhbVbwZkUEb/z6h8yQrvypOIQuYLdni1+xb5N1kFV woadLstKcxGk08Y9DlkinKdp4mp8s07UqFDV64HphgfjGu0UviOAHRlpvfC9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGDqcYxBGTbtfyEo2u+dlk9ItCdowHwYDVR0j BBgwFoAU6wvi8vSfDi7Q3KRQzHpw435sRHkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmEzYWU0ODUtYTY1OC00YzVjLWFiZTItMWU3ZmQ4YjAzOGEwLzAvRUIwQkUyRjJG NDlGMEUyRUQwRENBNDUwQ0M3QTcwRTM3RTZDNDQ3OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQjBCRTJGMkY0OUYwRTJFRDBEQ0E0NTBDQzdBNzBFMzdFNkM0 NDc5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmEzYWU0ODUtYTY1OC00YzVjLWFi ZTItMWU3ZmQ4YjAzOGEwLzAvRUIwQkUyRjJGNDlGMEUyRUQwRENBNDUwQ0M3QTcw RTM3RTZDNDQ3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGBLTC+kVtGhTR8eiJs3/+rv2saEAxI/+3jO ZlQ7ci1y4xMg1s3VW2bd7nqEHRiDC1XR7trrMgoRnBPrtnQLAcbHVbU1xSeWDjdt 2yL2YzIpr5dmEoTTegYCB4ZMDANKpcQ+MXUpbRHRnV6jT+FmmvH06CzBLaPiMBmo 6x6CRAWhG00uScpJ/5KIFFSrdPr7wsBDpIfMiRkdD7aDQFWX7T0Tt+199omZQZYe 2zitPd0evu07usEHmdc/HjbDVyFhJjIKgu1GbaTW6AFqpFw5A9Jtbw83LeccO6Qq It3lL5TgLa2AbadSZGRX/zT059aAMaQvEpLPbRmp8ueGk/aes3o= -----END CERTIFICATE-----Generated at Sat May 16 20:31:21 2026 by rpki-client