$ rpki-client -vvf rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft File: EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft (raw, json) Hash identifier: YxegMQfDqmxEmFjW/Nthmzntx+uHFi4weWr1Ye6wYsI= Subject key identifier: 5E:6F:30:2F:8A:38:60:F9:56:A7:0E:75:6D:80:F6:2F:B8:C8:15:F6 Authority key identifier: EA:1F:A0:A5:CF:DA:8B:5A:6F:64:2F:58:87:FD:67:22:D7:53:10:0D Certificate issuer: /CN=EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D Certificate serial: 3B7D1E150A518991F15EB54DD19429616823B838 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 06:40:19 +0000 Manifest this update: Thu 18 Jun 2026 06:35:19 +0000 Manifest next update: Fri 19 Jun 2026 07:36:19 +0000 Files and hashes: 1: EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.crl (hash: BLdYlNdDqPgsZoTYM8twxfCa5rmgx5TAVIYjmoxZlEo=) 2: 3136302e3138372e3139362e302f32342d3234203d3e20313533313234.roa (hash: S4hauyuLw7/w8jvKs8EoZ1L3na+uvt8Vo0vCOD48FJ4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.crl rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 07:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:7d:1e:15:0a:51:89:91:f1:5e:b5:4d:d1:94:29:61:68:23:b8:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D Validity Not Before: Jun 18 06:35:19 2026 GMT Not After : Jun 19 07:36:19 2026 GMT Subject: CN=5E6F302F8A3860F956A70E756D80F62FB8C815F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1e:20:5c:d8:cc:cc:1e:31:55:fc:94:df:f3: 68:93:9b:a8:a1:90:ad:0c:f9:3e:33:c0:cd:a1:2b: 4a:c6:9e:c3:66:da:e4:f9:c3:32:cf:0b:3e:a9:41: 42:f9:d5:b3:89:f7:84:2f:a1:00:0d:32:ca:67:63: c4:79:0f:2e:6c:6f:c2:e0:da:a2:87:e1:4b:b2:6f: ec:fa:4c:a2:27:34:9b:b3:c2:88:5c:e2:25:4d:8d: fb:ab:fb:88:0a:e4:42:50:8e:13:16:be:aa:9d:4a: 24:7a:33:83:4f:13:b4:13:88:b0:b7:50:3c:2b:3f: a9:6b:7b:81:55:94:c9:c9:4f:ab:5c:5a:f0:c5:ed: c3:17:5f:ce:1e:d0:e8:3b:cc:7f:11:ab:3e:7b:37: e4:31:ed:54:7f:c3:58:c4:66:e8:32:e8:66:b6:1f: 40:3d:a8:f4:0e:37:5b:38:d8:43:49:a3:ff:2f:53: b3:46:69:84:ad:97:60:5d:04:2d:e0:cf:ee:08:cb: 8f:41:41:f4:0e:0f:64:05:01:a5:e1:43:06:1b:28: f9:f1:bf:f6:9a:ef:7d:da:40:32:6f:ed:04:e4:75: bd:a1:dc:b1:61:c5:83:6b:96:e3:3b:96:09:40:5e: cf:c7:9b:1f:2e:41:9e:4b:ef:11:82:42:ae:71:a3: a9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:6F:30:2F:8A:38:60:F9:56:A7:0E:75:6D:80:F6:2F:B8:C8:15:F6 X509v3 Authority Key Identifier: keyid:EA:1F:A0:A5:CF:DA:8B:5A:6F:64:2F:58:87:FD:67:22:D7:53:10:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:d5:73:80:00:f1:48:02:0b:99:3c:41:3c:4e:c7:8a:2f:0b: b3:1c:f8:79:df:38:b1:88:f2:95:f0:b8:da:6a:78:cd:56:e4: 98:21:8b:0b:3c:f7:25:6d:bf:65:ff:e5:ca:a4:a5:05:a1:36: aa:62:89:09:21:f8:cf:dd:c6:c8:06:c4:1b:6f:83:d3:f6:21: 41:a2:ef:da:25:97:3f:fd:e3:cf:d5:96:0e:bf:58:0d:08:df: 24:a2:0a:b3:d7:ce:ad:54:fe:c8:8f:d8:a0:83:b7:77:ac:e0: ed:35:34:7f:ec:77:a7:ab:6a:85:a5:66:bc:4f:93:8f:d8:56: 90:33:c1:0a:0a:0d:0a:4f:74:31:ea:fc:11:b2:c4:96:b8:01: c5:b8:9f:5e:20:06:22:a6:2c:56:1c:d4:ce:67:96:57:d5:68: 95:f2:7b:77:3e:7d:b9:b3:5a:c1:21:26:0b:72:12:4d:7e:4f: ae:1c:a8:00:e6:68:72:7f:ba:03:37:f9:f8:ca:94:66:51:71: 9b:cc:9d:06:e9:e1:09:66:cc:f9:df:ac:b6:7b:b0:8e:1e:f4: d6:d8:77:73:73:18:f1:0c:35:54:b0:c8:dc:d3:17:cc:4e:6b: 05:1d:98:da:48:06:21:22:15:42:23:ca:1a:30:ab:4f:74:c0: c0:db:e3:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO30eFQpRiZHxXrVN0ZQpYWgjuDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUExRkEwQTVDRkRBOEI1QTZGNjQyRjU4ODdGRDY3MjJE NzUzMTAwRDAeFw0yNjA2MTgwNjM1MTlaFw0yNjA2MTkwNzM2MTlaMDMxMTAvBgNV BAMTKDVFNkYzMDJGOEEzODYwRjk1NkE3MEU3NTZEODBGNjJGQjhDODE1RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4HiBc2MzMHjFV/JTf82iTm6ih kK0M+T4zwM2hK0rGnsNm2uT5wzLPCz6pQUL51bOJ94QvoQANMspnY8R5Dy5sb8Lg 2qKH4Uuyb+z6TKInNJuzwohc4iVNjfur+4gK5EJQjhMWvqqdSiR6M4NPE7QTiLC3 UDwrP6lre4FVlMnJT6tcWvDF7cMXX84e0Og7zH8Rqz57N+Qx7VR/w1jEZugy6Ga2 H0A9qPQON1s42ENJo/8vU7NGaYStl2BdBC3gz+4Iy49BQfQOD2QFAaXhQwYbKPnx v/aa733aQDJv7QTkdb2h3LFhxYNrluM7lglAXs/Hmx8uQZ5L7xGCQq5xo6lDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXm8wL4o4YPlWpw51bYD2L7jIFfYwHwYDVR0j BBgwFoAU6h+gpc/ai1pvZC9Yh/1nItdTEA0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGM1OGZiN2MtNjdiOC00YmNlLTk2ZDktYmU5MTJlM2Y3M2RkLzAvRUExRkEwQTVD RkRBOEI1QTZGNjQyRjU4ODdGRDY3MjJENzUzMTAwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQTFGQTBBNUNGREE4QjVBNkY2NDJGNTg4N0ZENjcyMkQ3NTMx MDBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGM1OGZiN2MtNjdiOC00YmNlLTk2 ZDktYmU5MTJlM2Y3M2RkLzAvRUExRkEwQTVDRkRBOEI1QTZGNjQyRjU4ODdGRDY3 MjJENzUzMTAwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKLVc4AA8UgCC5k8QTxOx4ovC7Mc+HnfOLGI 8pXwuNpqeM1W5Jghiws89yVtv2X/5cqkpQWhNqpiiQkh+M/dxsgGxBtvg9P2IUGi 79ollz/948/Vlg6/WA0I3ySiCrPXzq1U/siP2KCDt3es4O01NH/sd6eraoWlZrxP k4/YVpAzwQoKDQpPdDHq/BGyxJa4AcW4n14gBiKmLFYc1M5nllfVaJXye3c+fbmz WsEhJgtyEk1+T64cqADmaHJ/ugM3+fjKlGZRcZvMnQbp4QlmzPnfrLZ7sI4e9NbY d3NzGPEMNVSwyNzTF8xOawUdmNpIBiEiFUIjyhowq090wMDb47M= -----END CERTIFICATE-----Generated at Thu Jun 18 17:13:37 2026 by rpki-client