$ rpki-client -vvf rpki-rsync.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/EB0A90C9D38126E4861B3243A60EFD2B08C19921.mft File: EB0A90C9D38126E4861B3243A60EFD2B08C19921.mft (raw, json) Hash identifier: TGozkiJERfnSAjyxdP8dywE31JvIiDi3HXFNnFaigiE= Subject key identifier: A6:F9:C7:5F:AE:18:50:F0:B7:6B:65:71:A7:09:2F:D4:DF:31:71:30 Authority key identifier: EB:0A:90:C9:D3:81:26:E4:86:1B:32:43:A6:0E:FD:2B:08:C1:99:21 Certificate issuer: /CN=EB0A90C9D38126E4861B3243A60EFD2B08C19921 Certificate serial: 685FADFB386DE1B0F01BF34E4D3CA12E1E5C5270 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB0A90C9D38126E4861B3243A60EFD2B08C19921.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/EB0A90C9D38126E4861B3243A60EFD2B08C19921.mft Manifest number: 11 Signing time: Thu 14 May 2026 03:45:11 +0000 Manifest this update: Thu 14 May 2026 03:40:11 +0000 Manifest next update: Fri 15 May 2026 05:57:11 +0000 Files and hashes: 1: EB0A90C9D38126E4861B3243A60EFD2B08C19921.crl (hash: ThtzmU/V+/i22c8pKmCxEiZByY4hmiu6xz74MezWqUQ=) 2: 3130332e38372e3230312e302f32342d3234203d3e203538333639.roa (hash: eyEG+YKfrAxVe/iff0IfSqMexA77iMkR7c8W/AMQ12c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/EB0A90C9D38126E4861B3243A60EFD2B08C19921.crl rsync://rpki-rsync.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/EB0A90C9D38126E4861B3243A60EFD2B08C19921.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB0A90C9D38126E4861B3243A60EFD2B08C19921.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 15 May 2026 03:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:5f:ad:fb:38:6d:e1:b0:f0:1b:f3:4e:4d:3c:a1:2e:1e:5c:52:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB0A90C9D38126E4861B3243A60EFD2B08C19921 Validity Not Before: May 14 03:40:11 2026 GMT Not After : May 15 05:57:11 2026 GMT Subject: CN=A6F9C75FAE1850F0B76B6571A7092FD4DF317130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:19:88:cf:ff:d1:18:c7:3b:8b:80:c3:ce:c4: 68:16:e3:85:08:49:3a:34:9c:8b:6d:c5:a3:87:00: 3d:23:c8:74:93:f3:56:c5:8e:d3:2a:b4:6b:8d:29: 00:cc:26:ae:9a:d7:b4:3b:f4:a5:de:9a:06:72:56: 32:14:94:d8:3a:05:57:ac:c7:e3:d1:68:89:e1:a7: f6:87:28:e5:fd:27:de:a3:ea:7b:11:df:44:40:6b: 4e:29:e8:07:5a:a6:52:c6:b2:6f:53:61:49:6b:2d: b6:ce:79:b3:3c:e4:3b:72:59:e6:c3:23:62:bc:ab: 64:a9:a0:67:ab:07:8d:2f:41:2f:fb:40:ab:da:89: 87:c9:49:f4:7b:f4:22:fe:11:ce:ae:16:6e:18:4d: ba:dd:2c:12:5b:3f:f8:77:f3:7d:72:3f:7a:34:43: 09:95:9e:76:0a:b4:6e:d2:31:22:6b:1c:4c:b3:70: 58:bb:b9:9c:aa:df:ca:d5:71:50:5b:51:e9:a7:d5: 87:6f:a2:26:73:d1:a6:57:46:ef:ce:bd:4f:55:fb: a2:db:26:d9:4c:d1:a9:dd:c5:8d:01:9b:cb:a6:89: 61:fe:03:e2:bd:f2:21:3b:36:ed:8f:5d:70:11:c6: 19:1d:67:8e:c0:14:88:87:5b:ac:25:37:c3:8e:4b: ef:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F9:C7:5F:AE:18:50:F0:B7:6B:65:71:A7:09:2F:D4:DF:31:71:30 X509v3 Authority Key Identifier: keyid:EB:0A:90:C9:D3:81:26:E4:86:1B:32:43:A6:0E:FD:2B:08:C1:99:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/EB0A90C9D38126E4861B3243A60EFD2B08C19921.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB0A90C9D38126E4861B3243A60EFD2B08C19921.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/EB0A90C9D38126E4861B3243A60EFD2B08C19921.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:cb:a2:8e:42:49:82:b3:a5:b5:c1:a9:ff:82:28:b6:a3:65: 90:1a:95:19:8b:26:55:96:8f:d3:53:9a:9a:4d:26:2c:4a:a7: d5:56:bf:a7:18:65:9c:07:5f:49:2d:8a:d6:23:9a:a9:4d:6f: 42:06:2b:6e:90:72:37:b7:b4:12:ad:57:65:18:da:73:7c:a2: 2f:7f:56:d3:39:2c:30:00:1a:03:5e:a8:57:8a:dd:b9:2a:07: 0e:93:ac:06:57:54:a6:d2:2a:a3:ee:83:1d:7c:9e:35:b2:6c: 8b:47:53:6e:00:20:ee:64:f1:5e:60:1f:a1:ee:5a:ab:0b:77: 67:7a:42:4d:12:f6:4b:79:8d:6b:fc:d7:87:21:c1:16:ca:9c: 47:d4:1e:13:c0:af:9e:9b:8c:2a:67:71:9d:66:ce:9e:6f:19: c3:84:68:bc:7a:93:1b:c0:0d:47:ea:12:d9:0b:25:f9:03:d7: f3:ba:dc:0e:65:a0:f0:40:1f:cb:6e:e8:0d:d9:76:4e:61:4c: 58:06:73:66:35:8e:af:3c:a3:9b:2f:26:8f:80:3e:8f:e3:47: 14:fd:b8:5b:69:e3:9a:f7:bf:29:ca:60:b0:45:51:a0:3c:9e: 05:42:46:db:77:b7:19:a6:92:f1:80:98:b8:23:bb:c8:50:cc: 97:a1:97:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaF+t+zht4bDwG/NOTTyhLh5cUnAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUIwQTkwQzlEMzgxMjZFNDg2MUIzMjQzQTYwRUZEMkIw OEMxOTkyMTAeFw0yNjA1MTQwMzQwMTFaFw0yNjA1MTUwNTU3MTFaMDMxMTAvBgNV BAMTKEE2RjlDNzVGQUUxODUwRjBCNzZCNjU3MUE3MDkyRkQ0REYzMTcxMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6GYjP/9EYxzuLgMPOxGgW44UI STo0nIttxaOHAD0jyHST81bFjtMqtGuNKQDMJq6a17Q79KXemgZyVjIUlNg6BVes x+PRaInhp/aHKOX9J96j6nsR30RAa04p6AdaplLGsm9TYUlrLbbOebM85DtyWebD I2K8q2SpoGerB40vQS/7QKvaiYfJSfR79CL+Ec6uFm4YTbrdLBJbP/h3831yP3o0 QwmVnnYKtG7SMSJrHEyzcFi7uZyq38rVcVBbUemn1YdvoiZz0aZXRu/OvU9V+6Lb JtlM0andxY0Bm8umiWH+A+K98iE7Nu2PXXARxhkdZ47AFIiHW6wlN8OOS+/TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpvnHX64YUPC3a2Vxpwkv1N8xcTAwHwYDVR0j BBgwFoAU6wqQydOBJuSGGzJDpg79KwjBmSEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzRhY2MwZDgtYjBjNC00NzM3LTlmNDQtMjlmZjMyNDFjNzliLzAvRUIwQTkwQzlE MzgxMjZFNDg2MUIzMjQzQTYwRUZEMkIwOEMxOTkyMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQjBBOTBDOUQzODEyNkU0ODYxQjMyNDNBNjBFRkQyQjA4QzE5 OTIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzRhY2MwZDgtYjBjNC00NzM3LTlm NDQtMjlmZjMyNDFjNzliLzAvRUIwQTkwQzlEMzgxMjZFNDg2MUIzMjQzQTYwRUZE MkIwOEMxOTkyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADTLoo5CSYKzpbXBqf+CKLajZZAalRmLJlWW j9NTmppNJixKp9VWv6cYZZwHX0ktitYjmqlNb0IGK26Qcje3tBKtV2UY2nN8oi9/ VtM5LDAAGgNeqFeK3bkqBw6TrAZXVKbSKqPugx18njWybItHU24AIO5k8V5gH6Hu WqsLd2d6Qk0S9kt5jWv814chwRbKnEfUHhPAr56bjCpncZ1mzp5vGcOEaLx6kxvA DUfqEtkLJfkD1/O63A5loPBAH8tu6A3Zdk5hTFgGc2Y1jq88o5svJo+APo/jRxT9 uFtp45r3vynKYLBFUaA8ngVCRtt3txmmkvGAmLgju8hQzJehl2k= -----END CERTIFICATE-----Generated at Thu May 14 09:09:58 2026 by rpki-client