$ rpki-client -vvvf rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.mft File: EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.mft (raw, json) Hash identifier: C0QvgxmRo23vBiChadZuFPhPDRw7Jqgb/3JPFawHEr4= Subject key identifier: EC:F0:4F:05:10:86:91:E6:2B:75:77:2D:D0:45:56:BA:4F:A0:4D:F5 Authority key identifier: EA:8B:1F:D5:4B:5A:4E:9B:79:5C:DD:92:9B:58:E7:BD:B2:DA:68:71 Certificate issuer: /CN=EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871 Certificate serial: 2EB1FC7FEEBBFD36A65AEB1E6B5D5F3BA94D8D20 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.mft Manifest number: BD Signing time: Sun 20 Sep 2026 21:13:18 +0000 Manifest this update: Sun 20 Sep 2026 21:08:18 +0000 Manifest next update: Tue 22 Sep 2026 00:51:18 +0000 Files and hashes: 1: 3130332e3137392e38342e302f32342d3234203d3e20313432333037.roa (hash: 2LkAU6HFzcD+uMMYceohJGiq/c/yqAWAinLHczse+RU=) 2: 3130332e3136382e34342e302f32342d3234203d3e20313432333037.roa (hash: RIjxtB34QrKPBshyuKfeBsiSf1Tc4cR0KfHnQu3zHiw=) 3: EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.crl (hash: m9nccg1rCfDEJ1w/xx6VsY/Z2XAYOqXzv7BVaEv956A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.crl rsync://rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 00:51:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:b1:fc:7f:ee:bb:fd:36:a6:5a:eb:1e:6b:5d:5f:3b:a9:4d:8d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871 Validity Not Before: Sep 20 21:08:18 2026 GMT Not After : Sep 22 00:51:18 2026 GMT Subject: CN=ECF04F05108691E62B75772DD04556BA4FA04DF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8d:53:d9:58:bc:94:b0:e8:21:93:a5:d6:b4: fb:9f:0e:9b:ea:4d:f9:53:e3:e4:e3:42:ee:b8:2d: 85:53:af:70:16:c3:1f:d5:92:20:f5:d6:86:91:7d: f6:c3:53:cb:bf:26:f0:47:d4:d4:d3:a3:e3:56:aa: 3c:c8:71:28:ba:35:b2:58:06:4a:34:0e:38:3c:25: 6c:63:8a:79:54:86:91:05:5b:14:af:a9:aa:f3:ff: 6f:83:1e:45:d8:5f:16:30:0e:51:ca:ea:83:b3:83: 89:4a:5f:c4:d7:43:31:53:cf:75:ac:be:ad:c8:d6: a5:63:f9:da:a5:8e:ac:2f:4a:be:e7:5a:dd:90:ce: 1d:a7:11:d3:26:ca:c4:5a:0f:da:0f:8a:55:e6:82: d1:c1:a9:0e:96:29:0b:3a:61:8f:15:bf:d9:53:ff: 4c:e8:9f:e8:f0:fc:07:fc:57:f9:37:a1:33:3b:39: d7:27:b3:4f:64:b5:27:d4:57:84:92:f5:d8:01:7b: b3:7c:d8:3c:3b:33:73:9e:77:0f:6a:1b:18:d5:7d: b3:c0:26:d0:0c:19:ce:c6:65:c4:b3:2d:23:98:7b: 41:f0:6b:bb:4c:fe:6e:99:d6:69:58:67:0c:7b:5d: 4c:84:8c:7f:6a:4c:1f:6b:3c:87:fc:ef:f9:51:73: 48:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F0:4F:05:10:86:91:E6:2B:75:77:2D:D0:45:56:BA:4F:A0:4D:F5 X509v3 Authority Key Identifier: keyid:EA:8B:1F:D5:4B:5A:4E:9B:79:5C:DD:92:9B:58:E7:BD:B2:DA:68:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:85:92:0f:a0:a5:4c:1c:32:2c:38:32:21:cf:64:c6:5e:db: da:65:c2:a8:ef:24:36:05:58:f9:af:18:fd:77:fc:95:16:25: ed:37:71:a4:ee:fc:d2:34:2a:ea:b8:50:c6:46:a0:fa:08:05: fd:61:6f:cd:f5:ce:67:b1:8f:2a:d7:f3:e1:20:5f:b4:ff:00: 58:1f:25:07:06:79:01:fb:16:1e:31:d5:9d:89:e5:21:d1:7e: 1d:cb:43:60:a6:31:45:01:2b:ce:50:55:86:c9:9f:11:77:a6: 9b:d5:af:7d:68:88:b5:a8:5d:15:bf:25:f4:26:0b:df:ae:f9: cd:43:1a:3f:94:5f:fa:2b:1d:63:3f:c0:3c:fa:e7:96:cb:fb: 4e:d0:ba:9f:99:7d:59:e1:43:1a:f2:73:20:47:23:c1:99:ed: 1f:d3:13:f2:9d:1a:d5:43:1b:b9:42:d2:be:a2:cc:48:df:95: f3:65:83:e3:87:ce:8d:ad:58:1e:57:99:e7:d9:71:c8:4c:de: fa:71:b4:24:e7:2b:0a:6f:da:0c:cd:ff:7b:b6:12:c7:df:27: 8b:13:fd:22:45:59:1e:98:19:e0:44:b0:0e:02:e1:f6:d7:40: 47:d3:78:f7:59:62:5a:75:52:84:3c:ef:16:cd:7a:13:77:a7: b5:35:9c:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULrH8f+67/TamWusea11fO6lNjSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUE4QjFGRDU0QjVBNEU5Qjc5NUNERDkyOUI1OEU3QkRC MkRBNjg3MTAeFw0yNjA5MjAyMTA4MThaFw0yNjA5MjIwMDUxMThaMDMxMTAvBgNV BAMTKEVDRjA0RjA1MTA4NjkxRTYyQjc1NzcyREQwNDU1NkJBNEZBMDRERjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsjVPZWLyUsOghk6XWtPufDpvq TflT4+TjQu64LYVTr3AWwx/VkiD11oaRffbDU8u/JvBH1NTTo+NWqjzIcSi6NbJY Bko0Djg8JWxjinlUhpEFWxSvqarz/2+DHkXYXxYwDlHK6oOzg4lKX8TXQzFTz3Ws vq3I1qVj+dqljqwvSr7nWt2Qzh2nEdMmysRaD9oPilXmgtHBqQ6WKQs6YY8Vv9lT /0zon+jw/Af8V/k3oTM7Odcns09ktSfUV4SS9dgBe7N82Dw7M3Oedw9qGxjVfbPA JtAMGc7GZcSzLSOYe0Hwa7tM/m6Z1mlYZwx7XUyEjH9qTB9rPIf87/lRc0jpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7PBPBRCGkeYrdXct0EVWuk+gTfUwHwYDVR0j BBgwFoAU6osf1UtaTpt5XN2Sm1jnvbLaaHEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDVmMjBiMmUtYTdhOC00MmZkLTkyZjgtOTQ5NjIzM2IyYzllLzAvRUE4QjFGRDU0 QjVBNEU5Qjc5NUNERDkyOUI1OEU3QkRCMkRBNjg3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQThCMUZENTRCNUE0RTlCNzk1Q0REOTI5QjU4RTdCREIyREE2 ODcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDVmMjBiMmUtYTdhOC00MmZkLTky ZjgtOTQ5NjIzM2IyYzllLzAvRUE4QjFGRDU0QjVBNEU5Qjc5NUNERDkyOUI1OEU3 QkRCMkRBNjg3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFqFkg+gpUwcMiw4MiHPZMZe29plwqjvJDYF WPmvGP13/JUWJe03caTu/NI0Kuq4UMZGoPoIBf1hb831zmexjyrX8+EgX7T/AFgf JQcGeQH7Fh4x1Z2J5SHRfh3LQ2CmMUUBK85QVYbJnxF3ppvVr31oiLWoXRW/JfQm C9+u+c1DGj+UX/orHWM/wDz655bL+07Qup+ZfVnhQxrycyBHI8GZ7R/TE/KdGtVD G7lC0r6izEjflfNlg+OHzo2tWB5XmefZcchM3vpxtCTnKwpv2gzN/3u2EsffJ4sT /SJFWR6YGeBEsA4C4fbXQEfTePdZYlp1UoQ87xbNehN3p7U1nF8= -----END CERTIFICATE-----Generated at Mon Sep 21 15:32:47 2026 by rpki-client