$ rpki-client -vvf rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft File: EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft (raw, json) Hash identifier: q9t93v10Rvqd4JsyZXedQSW8JjJmVrIWNDYvXNSgVeM= Subject key identifier: C8:D4:A3:8D:9E:06:D3:21:3C:0F:1A:B1:11:C8:A2:24:C3:3E:77:A2 Authority key identifier: EA:1F:A0:A5:CF:DA:8B:5A:6F:64:2F:58:87:FD:67:22:D7:53:10:0D Certificate issuer: /CN=EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D Certificate serial: 0EC0CE4667D275C85AE7AD9FD40FF552B7572698 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 09:34:14 +0000 Manifest this update: Sun 02 Aug 2026 09:29:14 +0000 Manifest next update: Mon 03 Aug 2026 11:02:14 +0000 Files and hashes: 1: EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.crl (hash: x8KDgX1LAdfU9gqhitCBXEGV93wBlwvE1AjknVBlbfg=) 2: 3136302e3138372e3139362e302f32342d3234203d3e20313533313234.roa (hash: S4hauyuLw7/w8jvKs8EoZ1L3na+uvt8Vo0vCOD48FJ4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.crl rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 11:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:c0:ce:46:67:d2:75:c8:5a:e7:ad:9f:d4:0f:f5:52:b7:57:26:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D Validity Not Before: Aug 2 09:29:14 2026 GMT Not After : Aug 3 11:02:14 2026 GMT Subject: CN=C8D4A38D9E06D3213C0F1AB111C8A224C33E77A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ac:f8:b3:4b:0c:52:b9:5e:d3:f1:dc:56:8e: f3:86:a7:30:3b:43:e1:6b:15:21:47:e7:fe:79:61: 47:5d:75:74:13:90:76:39:5c:c9:80:a6:3c:7a:bc: 51:06:5a:40:a8:70:16:e9:35:57:1d:57:d9:f2:17: fe:51:af:fb:c2:6a:5f:5f:5b:48:9b:f2:09:d4:a3: 06:2f:ae:31:59:d3:2e:40:ec:c3:fc:61:7a:b2:6e: 11:52:54:ed:30:a9:34:1e:0f:6a:1b:37:12:a6:c6: 28:35:cb:9b:8f:04:f1:15:3c:41:6e:39:23:d6:09: 78:ac:4f:45:82:ec:de:9b:9a:00:ee:5b:a7:b1:d2: a9:3f:54:aa:b0:0e:aa:d9:91:36:f5:90:37:60:0d: 9e:98:81:59:9c:22:08:69:d3:1b:2d:34:47:75:fe: 5e:4e:d1:be:6f:96:83:2a:22:8f:27:00:05:c5:a4: 0c:9a:c8:fc:37:0d:af:a1:75:08:6b:ac:65:ef:f8: 20:dd:1f:b2:4c:b6:00:6c:80:52:63:e8:79:31:bc: 4d:a0:c8:ba:51:0a:86:70:09:ca:52:eb:09:82:84: d4:f3:8a:6f:ef:8d:8d:ed:52:7c:07:08:b9:83:e4: 89:29:27:5f:3d:a2:d4:53:9a:0e:e9:4e:d6:93:0d: 0f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D4:A3:8D:9E:06:D3:21:3C:0F:1A:B1:11:C8:A2:24:C3:3E:77:A2 X509v3 Authority Key Identifier: keyid:EA:1F:A0:A5:CF:DA:8B:5A:6F:64:2F:58:87:FD:67:22:D7:53:10:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:83:da:fb:14:65:85:40:df:18:0c:e4:3e:ae:69:14:70:83: 8e:b8:fb:a3:3a:7f:ae:9e:0c:83:9a:c9:5d:6f:20:6f:f6:24: 43:91:19:0f:3d:72:69:73:ee:77:3d:86:b2:fb:7f:bc:fc:1d: b2:99:03:0d:c3:6e:82:dc:85:0b:45:4a:09:b7:43:42:cd:40: 97:49:a5:d5:a1:0f:30:5b:2a:aa:3e:87:28:3b:64:5b:a4:f8: dd:24:77:96:f2:ef:34:87:de:a3:08:b3:3b:0e:05:d4:65:f0: 15:cf:40:26:ec:68:34:5c:34:0f:70:1b:7f:9f:e6:a6:3d:6a: c9:66:7c:c4:69:b4:8b:c2:9c:3f:ad:00:c9:3c:1f:e2:63:5b: fb:5b:7f:e4:a1:c4:4f:2d:f0:3a:98:9f:82:7b:c4:3b:51:e3: 6c:4b:31:c8:3e:03:5d:df:d7:69:13:4d:2f:75:a9:4e:c3:9b: f4:5f:c5:3a:14:ab:29:d5:31:4c:63:b1:e5:70:9e:ac:2f:c3: 89:ef:d2:da:c7:d2:25:9a:d2:c9:7c:8d:2f:33:9a:7b:b7:1c: 0e:df:26:26:0f:e5:00:4f:83:48:d7:ff:f1:db:57:0d:d8:b4: 4d:70:5b:a9:d6:d5:fd:bb:54:fe:20:d9:c0:63:12:97:1a:0c: 0d:4d:b4:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDsDORmfSdcha562f1A/1UrdXJpgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUExRkEwQTVDRkRBOEI1QTZGNjQyRjU4ODdGRDY3MjJE NzUzMTAwRDAeFw0yNjA4MDIwOTI5MTRaFw0yNjA4MDMxMTAyMTRaMDMxMTAvBgNV BAMTKEM4RDRBMzhEOUUwNkQzMjEzQzBGMUFCMTExQzhBMjI0QzMzRTc3QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnrPizSwxSuV7T8dxWjvOGpzA7 Q+FrFSFH5/55YUdddXQTkHY5XMmApjx6vFEGWkCocBbpNVcdV9nyF/5Rr/vCal9f W0ib8gnUowYvrjFZ0y5A7MP8YXqybhFSVO0wqTQeD2obNxKmxig1y5uPBPEVPEFu OSPWCXisT0WC7N6bmgDuW6ex0qk/VKqwDqrZkTb1kDdgDZ6YgVmcIghp0xstNEd1 /l5O0b5vloMqIo8nAAXFpAyayPw3Da+hdQhrrGXv+CDdH7JMtgBsgFJj6HkxvE2g yLpRCoZwCcpS6wmChNTzim/vjY3tUnwHCLmD5IkpJ189otRTmg7pTtaTDQ/vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyNSjjZ4G0yE8DxqxEciiJMM+d6IwHwYDVR0j BBgwFoAU6h+gpc/ai1pvZC9Yh/1nItdTEA0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGM1OGZiN2MtNjdiOC00YmNlLTk2ZDktYmU5MTJlM2Y3M2RkLzAvRUExRkEwQTVD RkRBOEI1QTZGNjQyRjU4ODdGRDY3MjJENzUzMTAwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQTFGQTBBNUNGREE4QjVBNkY2NDJGNTg4N0ZENjcyMkQ3NTMx MDBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGM1OGZiN2MtNjdiOC00YmNlLTk2 ZDktYmU5MTJlM2Y3M2RkLzAvRUExRkEwQTVDRkRBOEI1QTZGNjQyRjU4ODdGRDY3 MjJENzUzMTAwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADaD2vsUZYVA3xgM5D6uaRRwg464+6M6f66e DIOayV1vIG/2JEORGQ89cmlz7nc9hrL7f7z8HbKZAw3DboLchQtFSgm3Q0LNQJdJ pdWhDzBbKqo+hyg7ZFuk+N0kd5by7zSH3qMIszsOBdRl8BXPQCbsaDRcNA9wG3+f 5qY9aslmfMRptIvCnD+tAMk8H+JjW/tbf+ShxE8t8DqYn4J7xDtR42xLMcg+A13f 12kTTS91qU7Dm/RfxToUqynVMUxjseVwnqwvw4nv0trH0iWa0sl8jS8zmnu3HA7f JiYP5QBPg0jX//HbVw3YtE1wW6nW1f27VP4g2cBjEpcaDA1NtKw= -----END CERTIFICATE-----Generated at Sun Aug 2 20:33:43 2026 by rpki-client