$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.mft File: EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.mft (raw, json) Hash identifier: 1dHBQOg+LX4pfG0vHNYL8tcOVYCDe3u3+YOhDwTqELY= Subject key identifier: 39:8C:4F:AA:02:48:52:7F:5B:81:81:96:27:73:2E:68:8F:70:1C:99 Authority key identifier: EE:8B:EB:A8:BE:4D:44:F4:3E:CF:D9:FF:57:89:E8:78:62:8C:6A:54 Certificate issuer: /CN=EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54 Certificate serial: 31C8AF613CB6FFAC805A8FB44F7E9437D1E7DCCE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.mft Manifest number: 0108 Signing time: Sun 15 Nov 2026 02:37:25 +0000 Manifest this update: Sun 15 Nov 2026 02:32:25 +0000 Manifest next update: Mon 16 Nov 2026 06:17:25 +0000 Files and hashes: 1: EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.crl (hash: 8h3KP4Na1kJ5G6okGAIiQxPVMmfRd+R7CjTRzo0C/OI=) 2: 3130332e3134312e3235342e302f32342d3234203d3e20313331373639.roa (hash: zQyUZlOFUHDGNe+npgwTsdpaoQy1XyYjr7ZYgl99pvg=) 3: 3130332e3134312e3235352e302f32342d3234203d3e20313331373639.roa (hash: GdDE8SC5CnBeQmp3oWwqYVk6uwDRjhVlj4+oTAdzWC4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.crl rsync://rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 06:17:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:c8:af:61:3c:b6:ff:ac:80:5a:8f:b4:4f:7e:94:37:d1:e7:dc:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54 Validity Not Before: Nov 15 02:32:25 2026 GMT Not After : Nov 16 06:17:25 2026 GMT Subject: CN=398C4FAA0248527F5B81819627732E688F701C99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:86:06:fa:8f:59:9c:07:41:6f:bb:7c:90:f0: f7:47:b9:15:07:91:fd:6d:b1:ed:e3:2a:d3:52:be: de:53:1f:61:9e:19:8d:b0:4f:b6:7b:83:19:f6:21: 03:48:66:89:8a:a5:6e:76:ce:45:9a:12:9a:20:37: c3:9a:8b:28:19:ec:41:46:4c:24:17:12:c7:f1:4d: a3:72:5a:e2:26:47:cb:d3:b0:57:de:21:70:f6:48: b9:fc:29:dc:27:99:b9:84:2e:a5:65:89:1a:9d:67: d6:4c:da:6d:de:1f:bf:25:fb:af:46:6e:fe:f9:6e: 2d:8e:76:eb:7d:6f:98:ed:89:54:f0:a9:94:88:63: ca:fc:e0:8b:94:27:ce:2f:c3:06:99:53:24:58:aa: f5:e8:6f:db:9d:07:91:55:a0:ac:80:71:6a:ff:97: f6:bb:06:bf:f5:b2:ea:be:67:ab:34:23:08:cc:75: 71:f2:02:a7:23:9b:00:95:76:ec:6b:e6:09:6b:0a: f9:ec:7d:77:e2:73:13:9e:9b:6b:77:16:8c:76:76: 79:ed:19:00:b9:71:5b:a4:a5:b5:d2:e8:ad:1a:df: 4c:65:d3:f6:c8:92:b6:3d:98:62:52:83:24:f9:c5: 91:61:80:6f:d5:22:0d:f6:96:a9:35:31:ee:15:56: c1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:8C:4F:AA:02:48:52:7F:5B:81:81:96:27:73:2E:68:8F:70:1C:99 X509v3 Authority Key Identifier: keyid:EE:8B:EB:A8:BE:4D:44:F4:3E:CF:D9:FF:57:89:E8:78:62:8C:6A:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:21:1e:8d:e3:ca:ba:fe:65:a6:12:29:b5:ae:4c:bb:16:dd: 88:93:fe:d8:c4:75:bb:da:f9:fe:a5:5c:21:2d:d7:b6:35:7b: 61:c9:f0:0a:db:9c:d7:63:37:83:81:b1:68:65:5b:66:70:de: 32:67:44:08:ee:c5:b2:dc:74:e3:72:9f:ff:20:e5:7b:d3:30: db:9b:c6:e2:84:c8:d2:c3:be:3d:e2:d3:55:da:5b:96:4a:1b: 3f:04:f0:a9:a6:3d:1e:ad:b0:f1:e0:a4:73:c7:e2:41:8f:a1: 68:5e:4c:98:9a:c1:8d:00:04:99:66:45:3f:37:4a:59:31:34: 3e:08:cc:9f:29:cb:1a:30:70:02:8e:dd:8d:89:29:64:b5:8e: d3:6b:9d:d0:6c:a1:b0:8e:f9:85:cb:cf:6d:1b:7b:ae:1d:7d: fd:cd:72:ad:09:d9:07:50:1e:ca:c9:72:f3:2e:94:8c:8d:27: c0:98:e8:c2:18:6d:85:7c:0b:e3:1d:02:58:34:e5:58:5b:d4: 03:69:63:02:7e:40:0f:32:9c:b8:8b:33:61:dc:48:4d:ee:6d: 02:50:71:bc:b6:7b:10:50:f8:e8:4d:2a:2a:e9:79:b8:05:fe: 7d:92:4d:3a:c0:f2:8d:15:9c:c9:e9:8a:e9:dc:9d:df:8e:65: 90:e4:17:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMcivYTy2/6yAWo+0T36UN9Hn3M4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU4QkVCQThCRTRENDRGNDNFQ0ZEOUZGNTc4OUU4Nzg2 MjhDNkE1NDAeFw0yNjExMTUwMjMyMjVaFw0yNjExMTYwNjE3MjVaMDMxMTAvBgNV BAMTKDM5OEM0RkFBMDI0ODUyN0Y1QjgxODE5NjI3NzMyRTY4OEY3MDFDOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwhgb6j1mcB0Fvu3yQ8PdHuRUH kf1tse3jKtNSvt5TH2GeGY2wT7Z7gxn2IQNIZomKpW52zkWaEpogN8OaiygZ7EFG TCQXEsfxTaNyWuImR8vTsFfeIXD2SLn8KdwnmbmELqVliRqdZ9ZM2m3eH78l+69G bv75bi2Odut9b5jtiVTwqZSIY8r84IuUJ84vwwaZUyRYqvXob9udB5FVoKyAcWr/ l/a7Br/1suq+Z6s0IwjMdXHyAqcjmwCVduxr5glrCvnsfXficxOem2t3Fox2dnnt GQC5cVukpbXS6K0a30xl0/bIkrY9mGJSgyT5xZFhgG/VIg32lqk1Me4VVsEJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOYxPqgJIUn9bgYGWJ3MuaI9wHJkwHwYDVR0j BBgwFoAU7ovrqL5NRPQ+z9n/V4noeGKMalQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGVkODUwYTgtYWJiOS00NDgyLWE1YmMtNTRkNzllYjdmMzIzLzAvRUU4QkVCQThC RTRENDRGNDNFQ0ZEOUZGNTc4OUU4Nzg2MjhDNkE1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRThCRUJBOEJFNEQ0NEY0M0VDRkQ5RkY1Nzg5RTg3ODYyOEM2 QTU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGVkODUwYTgtYWJiOS00NDgyLWE1 YmMtNTRkNzllYjdmMzIzLzAvRUU4QkVCQThCRTRENDRGNDNFQ0ZEOUZGNTc4OUU4 Nzg2MjhDNkE1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEshHo3jyrr+ZaYSKbWuTLsW3YiT/tjEdbva +f6lXCEt17Y1e2HJ8ArbnNdjN4OBsWhlW2Zw3jJnRAjuxbLcdONyn/8g5XvTMNub xuKEyNLDvj3i01XaW5ZKGz8E8KmmPR6tsPHgpHPH4kGPoWheTJiawY0ABJlmRT83 SlkxND4IzJ8pyxowcAKO3Y2JKWS1jtNrndBsobCO+YXLz20be64dff3Ncq0J2QdQ HsrJcvMulIyNJ8CY6MIYbYV8C+MdAlg05Vhb1ANpYwJ+QA8ynLiLM2HcSE3ubQJQ cby2exBQ+OhNKirpebgF/n2STTrA8o0VnMnpiuncnd+OZZDkF0c= -----END CERTIFICATE-----Generated at Sun Nov 15 15:27:11 2026 by rpki-client