$ rpki-client -vvf rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.mft File: EBA1F4874C4867D2CAA214867052E9413088CD22.mft (raw, json) Hash identifier: 9O+pARP2fPwSg7X/+GKOqe789r59j8Sb6bUCm+ZwTtQ= Subject key identifier: C8:ED:26:DA:4F:58:2B:F7:D1:96:F9:7D:46:64:71:4D:21:97:9F:0F Authority key identifier: EB:A1:F4:87:4C:48:67:D2:CA:A2:14:86:70:52:E9:41:30:88:CD:22 Certificate issuer: /CN=EBA1F4874C4867D2CAA214867052E9413088CD22 Certificate serial: 20D28F1DB5F14AED390BACF04DE6A0204BB7DF25 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EBA1F4874C4867D2CAA214867052E9413088CD22.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 13:34:01 +0000 Manifest this update: Sun 02 Aug 2026 13:29:01 +0000 Manifest next update: Mon 03 Aug 2026 16:55:01 +0000 Files and hashes: 1: 3136302e31392e3230372e302f32342d3234203d3e20313532373634.roa (hash: Rsj+zG8fTbANuQe+LowjpWqzpy4Nr2I6Rkz77sVkBRk=) 2: EBA1F4874C4867D2CAA214867052E9413088CD22.crl (hash: HxGjFMoI/ctat36qFxco+xlrfV7JXIHbzXfAes8/R+Q=) 3: 3136302e31392e3230362e302f32342d3234203d3e20313532373634.roa (hash: rkfIQLZH91MBngOR2XF3JSvb0x7kp9rSE9FoBc2wVuU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.crl rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EBA1F4874C4867D2CAA214867052E9413088CD22.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 16:55:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:d2:8f:1d:b5:f1:4a:ed:39:0b:ac:f0:4d:e6:a0:20:4b:b7:df:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBA1F4874C4867D2CAA214867052E9413088CD22 Validity Not Before: Aug 2 13:29:01 2026 GMT Not After : Aug 3 16:55:01 2026 GMT Subject: CN=C8ED26DA4F582BF7D196F97D4664714D21979F0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b0:81:4f:c5:36:2c:d5:e8:01:c7:35:e0:1a: 50:17:73:51:98:1a:bf:8c:f1:be:32:cc:04:4e:94: 04:0c:ba:5d:d6:76:a3:9d:77:72:7e:dc:aa:8b:c9: bb:ad:50:0d:20:48:33:1e:ef:6f:39:d6:88:0d:72: be:18:aa:c3:47:24:dd:a5:28:3e:e2:fd:d1:22:bb: bf:1e:80:4b:6a:92:f0:ea:0e:58:c1:56:02:78:a1: 33:97:25:73:40:cc:a4:2f:1d:76:7b:93:93:b9:35: 0e:e1:ce:03:d7:69:da:f3:f2:16:62:04:99:bc:2d: 39:6e:6c:f0:49:a8:18:5b:36:b6:33:4f:7f:66:32: d8:36:92:5a:01:be:5e:b2:01:64:d1:31:88:94:cf: ec:b3:29:7b:ce:b4:86:45:a9:67:88:88:10:b2:b2: 2b:a9:9e:b2:ca:a2:23:61:d1:c0:5e:09:07:1c:a3: 79:44:a3:11:67:d5:69:03:ce:27:5e:8f:71:18:d7: 29:2c:b0:a6:26:81:16:70:5b:05:e8:1a:46:f8:75: d3:ca:97:2f:c5:35:44:1e:5c:65:b6:df:78:99:bd: 4c:69:94:21:cd:72:c3:98:e8:10:f3:f8:cc:b8:94: 99:0b:2e:33:5b:21:71:4c:90:1a:15:95:cd:ae:9f: a3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:ED:26:DA:4F:58:2B:F7:D1:96:F9:7D:46:64:71:4D:21:97:9F:0F X509v3 Authority Key Identifier: keyid:EB:A1:F4:87:4C:48:67:D2:CA:A2:14:86:70:52:E9:41:30:88:CD:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EBA1F4874C4867D2CAA214867052E9413088CD22.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:1a:b7:41:ef:1c:41:b3:0a:01:70:52:70:84:fb:01:ef:87: e6:9d:67:6a:02:a8:42:d6:8d:f9:ba:7a:90:77:a6:3c:a7:79: fa:d3:29:66:ac:28:77:aa:97:a5:5e:c3:71:ae:e0:fa:d4:70: 97:5f:d6:fa:57:07:01:3e:fe:5e:69:19:e6:12:51:a5:54:11: 1b:65:40:37:87:f2:83:2e:07:95:6d:b7:01:b5:f3:c4:63:e2: b0:6c:50:54:38:38:79:95:08:a0:b8:86:b3:2b:fd:ae:c6:71: e6:4e:9e:aa:9f:8a:e9:19:16:91:31:57:a5:cc:ef:87:5e:b9: d0:27:e7:e2:7c:69:fb:ba:cf:d4:53:3c:1b:13:aa:4b:bd:65: da:f1:79:74:06:b8:a8:cf:89:b2:29:b2:52:0e:15:2f:a3:2e: d6:02:3d:fd:a1:6f:e8:3b:46:41:01:20:0d:62:f6:ee:2d:70: dc:76:57:a1:c5:de:b0:85:7b:75:e5:4b:1e:0b:a5:45:c2:35: 86:f1:47:1e:de:4f:a4:e1:37:8d:48:fa:36:6c:8e:e9:a5:08: 1d:46:8a:ab:65:7d:a1:ea:5c:4b:4a:4b:47:d2:8a:15:b5:f7: ae:50:8d:95:e1:32:12:6e:64:92:14:ab:34:c3:0e:38:b3:62: e5:9b:20:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUINKPHbXxSu05C6zwTeagIEu33yUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJBMUY0ODc0QzQ4NjdEMkNBQTIxNDg2NzA1MkU5NDEz MDg4Q0QyMjAeFw0yNjA4MDIxMzI5MDFaFw0yNjA4MDMxNjU1MDFaMDMxMTAvBgNV BAMTKEM4RUQyNkRBNEY1ODJCRjdEMTk2Rjk3RDQ2NjQ3MTREMjE5NzlGMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxsIFPxTYs1egBxzXgGlAXc1GY Gr+M8b4yzAROlAQMul3WdqOdd3J+3KqLybutUA0gSDMe72851ogNcr4YqsNHJN2l KD7i/dEiu78egEtqkvDqDljBVgJ4oTOXJXNAzKQvHXZ7k5O5NQ7hzgPXadrz8hZi BJm8LTlubPBJqBhbNrYzT39mMtg2kloBvl6yAWTRMYiUz+yzKXvOtIZFqWeIiBCy siupnrLKoiNh0cBeCQcco3lEoxFn1WkDzidej3EY1ykssKYmgRZwWwXoGkb4ddPK ly/FNUQeXGW233iZvUxplCHNcsOY6BDz+My4lJkLLjNbIXFMkBoVlc2un6P3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyO0m2k9YK/fRlvl9RmRxTSGXnw8wHwYDVR0j BBgwFoAU66H0h0xIZ9LKohSGcFLpQTCIzSIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2IyYTkxNmEtYWQyMi00OTc5LWJlNDMtOTUxYzc2ZjJmOTIwLzAvRUJBMUY0ODc0 QzQ4NjdEMkNBQTIxNDg2NzA1MkU5NDEzMDg4Q0QyMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQkExRjQ4NzRDNDg2N0QyQ0FBMjE0ODY3MDUyRTk0MTMwODhD RDIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2IyYTkxNmEtYWQyMi00OTc5LWJl NDMtOTUxYzc2ZjJmOTIwLzAvRUJBMUY0ODc0QzQ4NjdEMkNBQTIxNDg2NzA1MkU5 NDEzMDg4Q0QyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAEat0HvHEGzCgFwUnCE+wHvh+adZ2oCqELW jfm6epB3pjynefrTKWasKHeql6Vew3Gu4PrUcJdf1vpXBwE+/l5pGeYSUaVUERtl QDeH8oMuB5VttwG188Rj4rBsUFQ4OHmVCKC4hrMr/a7GceZOnqqfiukZFpExV6XM 74deudAn5+J8afu6z9RTPBsTqku9ZdrxeXQGuKjPibIpslIOFS+jLtYCPf2hb+g7 RkEBIA1i9u4tcNx2V6HF3rCFe3XlSx4LpUXCNYbxRx7eT6ThN41I+jZsjumlCB1G iqtlfaHqXEtKS0fSihW1965QjZXhMhJuZJIUqzTDDjizYuWbIL4= -----END CERTIFICATE-----Generated at Sun Aug 2 20:34:58 2026 by rpki-client