$ rpki-client -vvf rpki-rsync.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/EAC36BE8959CA224F62797D3331900441E4C9AA0.mft File: EAC36BE8959CA224F62797D3331900441E4C9AA0.mft (raw, json) Hash identifier: dfc8Fj4nkaT+lz4DMwo7P1tE+IpdMl40s2ysqZ5zkNM= Subject key identifier: CE:F0:03:44:80:AA:52:48:25:57:84:58:47:02:E4:10:74:B4:87:8C Authority key identifier: EA:C3:6B:E8:95:9C:A2:24:F6:27:97:D3:33:19:00:44:1E:4C:9A:A0 Certificate issuer: /CN=EAC36BE8959CA224F62797D3331900441E4C9AA0 Certificate serial: 3D031120A1B333A5DA9BCE0780E89D6424763E22 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAC36BE8959CA224F62797D3331900441E4C9AA0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/EAC36BE8959CA224F62797D3331900441E4C9AA0.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 02:53:15 +0000 Manifest this update: Sat 20 Jun 2026 02:48:15 +0000 Manifest next update: Sun 21 Jun 2026 05:23:15 +0000 Files and hashes: 1: 3130332e3132312e39382e302f32332d3234203d3e20313335343738.roa (hash: sNKvsJs//8pNrznC7tNde73755hYJDakfZ44J8CvOhI=) 2: EAC36BE8959CA224F62797D3331900441E4C9AA0.crl (hash: mfX3cBwBkSKgFzRM266Wvoum10iLiq8VzeTUZsl+JzM=) 3: 3130332e3132312e39362e302f32332d3234203d3e20313335343738.roa (hash: m7uPNuZw3t1vASN7WpScOi7UugEIi5WgXEeUkw1LbeE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/EAC36BE8959CA224F62797D3331900441E4C9AA0.crl rsync://rpki-rsync.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/EAC36BE8959CA224F62797D3331900441E4C9AA0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAC36BE8959CA224F62797D3331900441E4C9AA0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 05:23:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:03:11:20:a1:b3:33:a5:da:9b:ce:07:80:e8:9d:64:24:76:3e:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAC36BE8959CA224F62797D3331900441E4C9AA0 Validity Not Before: Jun 20 02:48:15 2026 GMT Not After : Jun 21 05:23:15 2026 GMT Subject: CN=CEF0034480AA5248255784584702E41074B4878C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:57:03:0d:88:74:e5:cc:8b:8c:d6:3a:0a:2f: 0c:c2:07:6b:7e:68:d2:bc:49:34:c4:d0:12:40:69: ac:34:43:fe:0d:83:cb:8d:33:eb:04:7c:ad:2b:51: b0:9f:f7:95:e8:af:3f:66:73:91:d1:08:7f:44:7f: bd:d9:78:44:a0:17:c0:ab:7f:17:13:a1:9c:86:bf: 79:ba:2e:11:ed:88:41:f6:d8:b8:97:65:79:89:f9: c1:55:7e:dc:48:7b:a7:4c:26:63:be:20:50:59:0a: e8:fb:30:54:5d:fc:78:4b:ac:c6:f9:67:8c:9c:7e: 1e:67:92:cd:0a:6c:fe:c6:66:d0:ee:c1:13:af:22: 28:c7:4d:88:14:23:80:c7:1f:8d:5c:f9:fd:b4:54: 87:78:60:17:72:7e:83:75:b8:42:b4:00:26:17:26: 25:35:e0:c8:4f:8c:d7:eb:a2:12:bc:80:ee:03:9a: 88:ee:83:54:e4:23:e4:c4:9f:2b:7e:4a:f6:69:33: c3:72:6e:4c:56:71:56:e2:20:fa:37:82:a6:76:df: c7:20:0d:bc:b9:6d:7c:8d:3c:ae:ce:ab:2d:5f:f8: 92:57:b9:5e:d1:c0:da:87:ab:90:ee:97:87:11:ae: b0:a3:b7:b8:c6:c3:8b:77:27:16:14:8b:77:0b:96: f7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F0:03:44:80:AA:52:48:25:57:84:58:47:02:E4:10:74:B4:87:8C X509v3 Authority Key Identifier: keyid:EA:C3:6B:E8:95:9C:A2:24:F6:27:97:D3:33:19:00:44:1E:4C:9A:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/EAC36BE8959CA224F62797D3331900441E4C9AA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAC36BE8959CA224F62797D3331900441E4C9AA0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/EAC36BE8959CA224F62797D3331900441E4C9AA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:c1:cc:c0:98:9c:0e:4e:99:87:07:65:7a:88:97:8a:be:b3: e3:6b:d2:ae:0a:68:02:e8:a9:17:38:48:98:a2:d9:94:70:3d: f5:97:ab:10:32:b3:2a:8e:c9:ef:64:3c:22:6f:79:7a:e4:0d: 2e:74:00:ef:59:02:dd:4f:57:67:eb:46:95:cb:a8:bd:a0:e8: 9b:d0:8f:c9:b6:6e:2f:cd:5c:8b:fd:ae:57:79:e1:90:c4:68: 74:b8:e0:3e:47:a4:e2:b4:19:94:b0:ca:5a:bf:1f:00:00:b0: db:c7:dd:30:0d:e1:19:14:9c:63:9d:5f:83:88:ac:96:5f:32: 39:cc:2a:30:57:09:c2:86:3a:cc:88:4a:2b:1b:64:96:4f:fe: b1:4e:5d:e6:5a:a6:c9:0e:da:a1:b1:49:98:9e:de:66:3d:5a: 80:04:e6:9c:8b:d4:bc:1d:97:cd:be:81:20:e8:aa:23:9f:ed: fa:f1:3b:34:c0:f0:92:e4:bf:d5:c3:d9:34:90:9a:6d:f2:4e: 18:96:d4:39:4b:7a:b3:61:c0:f3:1c:9b:42:2c:0a:e3:21:2c: 93:ae:e4:e6:cf:6c:4f:a8:03:da:62:20:99:77:8c:25:00:23: 7d:29:ac:5b:99:5b:6c:36:a4:74:25:4d:d1:1a:8d:ef:23:3a: c0:b1:13:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPQMRIKGzM6Xam84HgOidZCR2PiIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFDMzZCRTg5NTlDQTIyNEY2Mjc5N0QzMzMxOTAwNDQx RTRDOUFBMDAeFw0yNjA2MjAwMjQ4MTVaFw0yNjA2MjEwNTIzMTVaMDMxMTAvBgNV BAMTKENFRjAwMzQ0ODBBQTUyNDgyNTU3ODQ1ODQ3MDJFNDEwNzRCNDg3OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXVwMNiHTlzIuM1joKLwzCB2t+ aNK8STTE0BJAaaw0Q/4Ng8uNM+sEfK0rUbCf95Xorz9mc5HRCH9Ef73ZeESgF8Cr fxcToZyGv3m6LhHtiEH22LiXZXmJ+cFVftxIe6dMJmO+IFBZCuj7MFRd/HhLrMb5 Z4ycfh5nks0KbP7GZtDuwROvIijHTYgUI4DHH41c+f20VId4YBdyfoN1uEK0ACYX JiU14MhPjNfrohK8gO4Dmojug1TkI+TEnyt+SvZpM8NybkxWcVbiIPo3gqZ238cg Dby5bXyNPK7Oqy1f+JJXuV7RwNqHq5Dul4cRrrCjt7jGw4t3JxYUi3cLlvdLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzvADRICqUkglV4RYRwLkEHS0h4wwHwYDVR0j BBgwFoAU6sNr6JWcoiT2J5fTMxkARB5MmqAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjM3NzQ2MWQtZmU0Zi00OTYxLTkyZTUtOTY1NWFmMjU3NTRhLzAvRUFDMzZCRTg5 NTlDQTIyNEY2Mjc5N0QzMzMxOTAwNDQxRTRDOUFBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQUMzNkJFODk1OUNBMjI0RjYyNzk3RDMzMzE5MDA0NDFFNEM5 QUEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjM3NzQ2MWQtZmU0Zi00OTYxLTky ZTUtOTY1NWFmMjU3NTRhLzAvRUFDMzZCRTg5NTlDQTIyNEY2Mjc5N0QzMzMxOTAw NDQxRTRDOUFBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACDBzMCYnA5OmYcHZXqIl4q+s+Nr0q4KaALo qRc4SJii2ZRwPfWXqxAysyqOye9kPCJveXrkDS50AO9ZAt1PV2frRpXLqL2g6JvQ j8m2bi/NXIv9rld54ZDEaHS44D5HpOK0GZSwylq/HwAAsNvH3TAN4RkUnGOdX4OI rJZfMjnMKjBXCcKGOsyISisbZJZP/rFOXeZapskO2qGxSZie3mY9WoAE5pyL1Lwd l82+gSDoqiOf7frxOzTA8JLkv9XD2TSQmm3yThiW1DlLerNhwPMcm0IsCuMhLJOu 5ObPbE+oA9piIJl3jCUAI30prFuZW2w2pHQlTdEaje8jOsCxExM= -----END CERTIFICATE-----Generated at Sat Jun 20 11:18:17 2026 by rpki-client