$ rpki-client -vvf rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.mft File: EB05D5BB4356C8737A9AA4994302BCA8B46691CD.mft (raw, json) Hash identifier: nBKmxN242wlx1+dKcryjRnzaEuOW8W5e/wNCroh25n0= Subject key identifier: 98:B0:CB:38:E0:1F:42:DA:10:D7:4B:AE:10:1A:F9:0A:2C:AC:A5:09 Authority key identifier: EB:05:D5:BB:43:56:C8:73:7A:9A:A4:99:43:02:BC:A8:B4:66:91:CD Certificate issuer: /CN=EB05D5BB4356C8737A9AA4994302BCA8B46691CD Certificate serial: 129FA48AE1D5E9218D69A7066F2480D376C52E1B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 15:49:51 +0000 Manifest this update: Fri 19 Jun 2026 15:44:51 +0000 Manifest next update: Sat 20 Jun 2026 16:00:51 +0000 Files and hashes: 1: EB05D5BB4356C8737A9AA4994302BCA8B46691CD.crl (hash: TlkgrBUZCCP4r1F4ew+zttwgJ+ynvnCpMHe1qMbgSV4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.crl rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 16:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:9f:a4:8a:e1:d5:e9:21:8d:69:a7:06:6f:24:80:d3:76:c5:2e:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB05D5BB4356C8737A9AA4994302BCA8B46691CD Validity Not Before: Jun 19 15:44:51 2026 GMT Not After : Jun 20 16:00:51 2026 GMT Subject: CN=98B0CB38E01F42DA10D74BAE101AF90A2CACA509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d4:f9:f0:cb:95:83:76:82:8e:2d:d5:b9:65: 80:2a:bc:d7:52:d4:51:cb:b0:62:3f:a2:2d:80:1f: a2:b1:57:26:c6:52:4c:33:34:dd:0d:a7:47:0f:12: 51:af:18:c1:52:9d:3c:7a:ea:bc:d3:63:8b:7b:ab: e7:c8:be:86:82:97:13:65:37:55:46:81:94:33:c0: 5f:88:4e:54:3a:2b:a8:25:76:a0:b3:bf:8d:27:7e: 81:9e:83:f7:bb:8e:c4:94:4f:d6:15:2f:11:2b:10: fd:12:ef:6b:ab:fd:4d:86:8a:ae:28:ed:44:20:33: 37:9e:cd:fe:18:23:19:09:b7:87:d3:47:e2:28:1f: 00:db:f8:eb:3d:31:80:57:96:f9:5d:30:8c:d5:2a: f4:28:f4:b8:c6:43:7f:c8:3e:b2:c6:da:0e:2b:44: 63:06:b6:64:11:54:5c:e9:9e:e2:b4:90:92:b5:92: 91:6c:e5:73:0a:de:32:fe:0a:d1:27:8e:d0:ed:e6: fc:2e:c4:17:c4:d8:b7:d4:cc:ac:15:6a:ad:57:38: 84:cb:7e:1f:87:99:2a:29:a7:cf:dc:ae:2e:9e:dd: 08:af:29:3a:59:bf:4f:fe:c9:e0:f5:3b:54:94:9c: 54:a3:d5:2a:2b:d1:83:30:0d:84:8c:52:58:45:2d: df:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B0:CB:38:E0:1F:42:DA:10:D7:4B:AE:10:1A:F9:0A:2C:AC:A5:09 X509v3 Authority Key Identifier: keyid:EB:05:D5:BB:43:56:C8:73:7A:9A:A4:99:43:02:BC:A8:B4:66:91:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:28:f0:6b:10:56:96:71:8d:a9:3f:d1:f4:b8:7c:8c:a8:45: 3b:1d:87:6c:fa:06:d8:75:9c:cc:26:e1:7a:89:94:64:d3:6f: 46:5c:a8:c4:66:65:c2:c9:0f:23:7a:2f:e6:a6:20:3b:5f:f6: 0c:fa:6c:03:60:b2:43:c9:68:a6:ab:4c:ff:7e:3a:20:93:5f: 8e:9e:c9:a6:b0:51:3e:66:2d:13:09:f9:cf:87:cc:8a:0d:b6: 32:7d:47:6f:3c:75:73:c8:ae:aa:5e:a0:b5:e4:7c:b8:68:eb: c4:53:0d:17:d9:e9:db:34:88:66:04:57:63:6d:32:04:8c:89: ab:55:3a:d4:ea:3f:bb:16:2b:66:4e:8a:b0:be:37:31:a9:f3: 4c:df:2f:a3:95:4c:8d:60:84:e5:c6:9f:02:5a:d8:ed:a7:86: f8:02:ba:80:33:67:cd:c1:f7:51:58:99:58:f7:a5:7c:2a:c1: 07:45:8e:9f:91:94:41:57:79:f9:a7:ee:26:ae:38:df:83:7b: a1:5b:d9:32:03:b0:90:b4:24:f5:37:19:cb:58:3c:c5:8b:89: 12:51:a0:d6:4f:93:8a:b6:75:0a:64:38:34:df:d9:fb:8f:13: 29:7f:a1:01:28:0e:7d:fd:ba:42:0f:ed:1c:8c:ce:85:5b:b4: 5e:6e:0a:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEp+kiuHV6SGNaacGbySA03bFLhswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUIwNUQ1QkI0MzU2Qzg3MzdBOUFBNDk5NDMwMkJDQThC NDY2OTFDRDAeFw0yNjA2MTkxNTQ0NTFaFw0yNjA2MjAxNjAwNTFaMDMxMTAvBgNV BAMTKDk4QjBDQjM4RTAxRjQyREExMEQ3NEJBRTEwMUFGOTBBMkNBQ0E1MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM1Pnwy5WDdoKOLdW5ZYAqvNdS 1FHLsGI/oi2AH6KxVybGUkwzNN0Np0cPElGvGMFSnTx66rzTY4t7q+fIvoaClxNl N1VGgZQzwF+ITlQ6K6gldqCzv40nfoGeg/e7jsSUT9YVLxErEP0S72ur/U2Giq4o 7UQgMzeezf4YIxkJt4fTR+IoHwDb+Os9MYBXlvldMIzVKvQo9LjGQ3/IPrLG2g4r RGMGtmQRVFzpnuK0kJK1kpFs5XMK3jL+CtEnjtDt5vwuxBfE2LfUzKwVaq1XOITL fh+HmSopp8/cri6e3QivKTpZv0/+yeD1O1SUnFSj1Sor0YMwDYSMUlhFLd/pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmLDLOOAfQtoQ10uuEBr5CiyspQkwHwYDVR0j BBgwFoAU6wXVu0NWyHN6mqSZQwK8qLRmkc0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGM1OGZiN2MtNjdiOC00YmNlLTk2ZDktYmU5MTJlM2Y3M2RkLzEvRUIwNUQ1QkI0 MzU2Qzg3MzdBOUFBNDk5NDMwMkJDQThCNDY2OTFDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQjA1RDVCQjQzNTZDODczN0E5QUE0OTk0MzAyQkNBOEI0NjY5 MUNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGM1OGZiN2MtNjdiOC00YmNlLTk2 ZDktYmU5MTJlM2Y3M2RkLzEvRUIwNUQ1QkI0MzU2Qzg3MzdBOUFBNDk5NDMwMkJD QThCNDY2OTFDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACAo8GsQVpZxjak/0fS4fIyoRTsdh2z6Bth1 nMwm4XqJlGTTb0ZcqMRmZcLJDyN6L+amIDtf9gz6bANgskPJaKarTP9+OiCTX46e yaawUT5mLRMJ+c+HzIoNtjJ9R288dXPIrqpeoLXkfLho68RTDRfZ6ds0iGYEV2Nt MgSMiatVOtTqP7sWK2ZOirC+NzGp80zfL6OVTI1ghOXGnwJa2O2nhvgCuoAzZ83B 91FYmVj3pXwqwQdFjp+RlEFXefmn7iauON+De6Fb2TIDsJC0JPU3GctYPMWLiRJR oNZPk4q2dQpkODTf2fuPEyl/oQEoDn39ukIP7RyMzoVbtF5uCq4= -----END CERTIFICATE-----Generated at Sat Jun 20 09:18:46 2026 by rpki-client