$ rpki-client -vvf rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.mft File: EBA1F4874C4867D2CAA214867052E9413088CD22.mft (raw, json) Hash identifier: 8RHrJzUatvHvyzw/mozjvzp6WLpSV4ltufW1YF9cNe8= Subject key identifier: FB:27:75:C6:AC:1A:E1:A6:D4:E2:FB:E4:93:0F:45:6C:13:82:A6:74 Authority key identifier: EB:A1:F4:87:4C:48:67:D2:CA:A2:14:86:70:52:E9:41:30:88:CD:22 Certificate issuer: /CN=EBA1F4874C4867D2CAA214867052E9413088CD22 Certificate serial: 16D3AEC1D520FB895B70A1C869843F0142C339C1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EBA1F4874C4867D2CAA214867052E9413088CD22.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 14:08:58 +0000 Manifest this update: Thu 18 Jun 2026 14:03:58 +0000 Manifest next update: Fri 19 Jun 2026 15:12:58 +0000 Files and hashes: 1: EBA1F4874C4867D2CAA214867052E9413088CD22.crl (hash: oSH11GTlMCYsw6F6i9d56NR0DYiaoFeckIdXhE17dDo=) 2: 3136302e31392e3230362e302f32342d3234203d3e20313532373634.roa (hash: rkfIQLZH91MBngOR2XF3JSvb0x7kp9rSE9FoBc2wVuU=) 3: 3136302e31392e3230372e302f32342d3234203d3e20313532373634.roa (hash: Rsj+zG8fTbANuQe+LowjpWqzpy4Nr2I6Rkz77sVkBRk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.crl rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EBA1F4874C4867D2CAA214867052E9413088CD22.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:d3:ae:c1:d5:20:fb:89:5b:70:a1:c8:69:84:3f:01:42:c3:39:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBA1F4874C4867D2CAA214867052E9413088CD22 Validity Not Before: Jun 18 14:03:58 2026 GMT Not After : Jun 19 15:12:58 2026 GMT Subject: CN=FB2775C6AC1AE1A6D4E2FBE4930F456C1382A674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5d:46:ba:31:6d:f0:b7:72:ba:51:b7:0d:dc: be:ff:9e:53:1d:1a:92:dd:b2:e7:28:df:dc:bb:33: 09:d1:90:96:80:25:2c:f0:2c:83:70:f5:8e:17:af: f5:32:1c:39:20:f9:48:d6:82:13:ae:7a:84:f0:fd: c4:b7:33:d8:fe:9e:26:56:f9:9a:63:73:44:7d:a6: c9:4d:b7:2f:08:55:d7:1a:61:ed:eb:ed:33:14:75: 33:57:8a:97:11:f0:6d:39:8b:9b:61:1b:b2:9e:56: 0b:67:98:15:dc:f0:f6:5f:9e:57:3a:bf:d4:24:ef: 3e:a6:83:89:e6:3e:c4:91:98:13:5f:42:8e:25:43: a6:56:db:c4:51:42:04:93:7a:57:7d:82:06:ee:ad: d5:be:05:b9:89:ba:e7:b4:c0:ef:ff:bd:bb:d5:a8: c5:2b:e4:d5:f5:f7:cb:a0:df:a1:f4:80:97:09:ac: 4f:b6:6b:14:59:03:6e:a6:b8:a4:16:15:e6:6e:80: 8d:61:96:97:74:0c:0e:f2:1d:22:fc:1c:2e:91:a3: e0:46:04:29:dc:97:43:34:ab:83:a9:6b:ca:9a:64: f1:c2:22:a0:bb:da:62:fa:a9:c7:17:3a:79:a0:c3: 28:84:89:b9:d6:f7:cd:5e:f9:64:92:67:2e:dc:2e: 3f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:27:75:C6:AC:1A:E1:A6:D4:E2:FB:E4:93:0F:45:6C:13:82:A6:74 X509v3 Authority Key Identifier: keyid:EB:A1:F4:87:4C:48:67:D2:CA:A2:14:86:70:52:E9:41:30:88:CD:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EBA1F4874C4867D2CAA214867052E9413088CD22.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:58:d7:51:09:b0:a2:c4:0e:3c:36:a3:f2:1e:82:93:df:8b: b1:58:39:0a:f7:81:d8:25:a4:24:bf:af:bf:a1:35:91:3c:d6: 60:2e:d4:a6:59:11:26:c1:98:62:90:b7:dc:a7:70:fc:4c:68: 4a:91:d8:12:58:fe:96:65:33:71:50:ef:2d:4e:0d:73:50:7f: e1:48:6c:f4:b5:92:ba:dd:9d:7c:6a:b9:c9:03:00:5f:f0:97: 1a:c4:c7:e9:3c:42:f3:66:1f:bd:b2:54:15:24:5a:da:b9:2f: 4f:6b:25:bb:8d:fa:75:83:6f:1f:10:95:82:ae:f7:62:db:0f: cf:48:92:29:1c:1f:20:17:fe:b3:5d:3a:76:08:65:c9:ba:2a: 95:1b:20:77:5d:10:e1:43:37:45:99:63:d2:63:cb:b8:c3:29: a9:ed:b9:df:91:06:58:65:26:e1:97:23:ef:10:c5:02:bd:00: 89:c2:62:de:6b:94:a8:cd:ba:29:31:00:d7:64:87:34:c0:3c: 35:ab:3c:7d:19:b9:95:56:5e:1c:e8:fa:a2:69:c5:68:5d:2a: 37:8b:10:22:d0:4d:5a:df:97:fc:47:d6:75:38:c0:09:05:6f: 51:31:12:f7:1a:93:a1:f4:f9:b9:22:0c:f4:b8:d7:92:0c:b5: 53:6a:57:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFtOuwdUg+4lbcKHIaYQ/AULDOcEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJBMUY0ODc0QzQ4NjdEMkNBQTIxNDg2NzA1MkU5NDEz MDg4Q0QyMjAeFw0yNjA2MTgxNDAzNThaFw0yNjA2MTkxNTEyNThaMDMxMTAvBgNV BAMTKEZCMjc3NUM2QUMxQUUxQTZENEUyRkJFNDkzMEY0NTZDMTM4MkE2NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnXUa6MW3wt3K6UbcN3L7/nlMd GpLdsuco39y7MwnRkJaAJSzwLINw9Y4Xr/UyHDkg+UjWghOueoTw/cS3M9j+niZW +Zpjc0R9pslNty8IVdcaYe3r7TMUdTNXipcR8G05i5thG7KeVgtnmBXc8PZfnlc6 v9Qk7z6mg4nmPsSRmBNfQo4lQ6ZW28RRQgSTeld9ggburdW+BbmJuue0wO//vbvV qMUr5NX198ug36H0gJcJrE+2axRZA26muKQWFeZugI1hlpd0DA7yHSL8HC6Ro+BG BCncl0M0q4Opa8qaZPHCIqC72mL6qccXOnmgwyiEibnW981e+WSSZy7cLj9xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+yd1xqwa4abU4vvkkw9FbBOCpnQwHwYDVR0j BBgwFoAU66H0h0xIZ9LKohSGcFLpQTCIzSIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2IyYTkxNmEtYWQyMi00OTc5LWJlNDMtOTUxYzc2ZjJmOTIwLzAvRUJBMUY0ODc0 QzQ4NjdEMkNBQTIxNDg2NzA1MkU5NDEzMDg4Q0QyMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQkExRjQ4NzRDNDg2N0QyQ0FBMjE0ODY3MDUyRTk0MTMwODhD RDIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2IyYTkxNmEtYWQyMi00OTc5LWJl NDMtOTUxYzc2ZjJmOTIwLzAvRUJBMUY0ODc0QzQ4NjdEMkNBQTIxNDg2NzA1MkU5 NDEzMDg4Q0QyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALNY11EJsKLEDjw2o/IegpPfi7FYOQr3gdgl pCS/r7+hNZE81mAu1KZZESbBmGKQt9yncPxMaEqR2BJY/pZlM3FQ7y1ODXNQf+FI bPS1krrdnXxquckDAF/wlxrEx+k8QvNmH72yVBUkWtq5L09rJbuN+nWDbx8QlYKu 92LbD89IkikcHyAX/rNdOnYIZcm6KpUbIHddEOFDN0WZY9Jjy7jDKantud+RBlhl JuGXI+8QxQK9AInCYt5rlKjNuikxANdkhzTAPDWrPH0ZuZVWXhzo+qJpxWhdKjeL ECLQTVrfl/xH1nU4wAkFb1ExEvcak6H0+bkiDPS415IMtVNqV/I= -----END CERTIFICATE-----Generated at Thu Jun 18 17:13:58 2026 by rpki-client