$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.mft File: EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.mft (raw, json) Hash identifier: Fc+ZPAmP33J0A/3i7D0pyXDdnYBh5SD/NqTfcEKNBMc= Subject key identifier: 82:14:32:22:61:DB:EA:21:8F:8B:DC:38:B9:59:12:7C:5F:B4:07:D4 Authority key identifier: EB:65:C3:DE:94:49:F2:C3:42:B6:C2:8D:C0:0A:2D:7D:9F:CE:13:FC Certificate issuer: /CN=EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC Certificate serial: 678FBEF4C48681FBCD37CB3F1A7DEE890B02E4CA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.mft Manifest number: BD Signing time: Sun 20 Sep 2026 19:15:40 +0000 Manifest this update: Sun 20 Sep 2026 19:10:40 +0000 Manifest next update: Mon 21 Sep 2026 22:39:40 +0000 Files and hashes: 1: EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.crl (hash: LI19RD6/PSNgmn/tfaaVfAa9cWfKDfxLpwgyb8T5dBk=) 2: 3130332e31382e34342e302f32332d3234203d3e20313530323735.roa (hash: 7XY8OJYBheI11wkRz8cVl6F/JT2mVgzHkajv0h3NaA4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.crl rsync://rpki-rsync.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:8f:be:f4:c4:86:81:fb:cd:37:cb:3f:1a:7d:ee:89:0b:02:e4:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC Validity Not Before: Sep 20 19:10:40 2026 GMT Not After : Sep 21 22:39:40 2026 GMT Subject: CN=8214322261DBEA218F8BDC38B959127C5FB407D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:83:b4:e8:1e:46:c3:f7:32:02:e9:c6:79:97: c5:77:3d:90:d3:28:7d:ea:2f:1b:9a:7b:cc:9c:32: e5:be:ad:67:d1:19:ea:49:4d:e3:11:d1:dc:02:ea: cb:f9:a8:68:0e:ed:d5:45:0a:cb:d9:a7:8c:08:0b: 9e:9d:00:63:cf:4c:54:ce:07:8a:8f:98:92:55:c9: 96:38:7e:16:d4:d3:bb:05:19:c9:71:1a:ac:37:bb: dc:cf:62:14:f3:67:f4:a0:58:c5:40:9f:d3:e2:cf: b1:e2:66:33:0e:ba:07:a7:5f:69:c8:c4:21:28:e9: 4e:3d:98:79:e9:a7:a7:56:2f:9f:3e:85:14:fe:70: a5:37:ef:4b:8e:08:6d:28:bd:b1:df:aa:69:e3:69: d3:54:b6:26:48:3e:42:19:08:1b:cd:32:f3:81:f1: ef:b4:a4:24:f1:12:57:af:4b:d7:31:e1:50:c5:d8: f1:dd:8e:c3:2f:4a:28:72:43:3d:9c:0b:34:0f:c3: 10:94:f4:17:60:d7:cd:34:c3:28:8d:e2:04:5a:24: 01:48:6c:84:4c:34:e3:d7:e5:3d:78:9d:ce:02:c9: 8b:77:ac:e7:13:aa:6b:0e:a0:de:0e:ef:e4:25:91: d3:f3:59:7d:64:83:29:92:80:ed:b5:45:fe:ce:55: 72:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:14:32:22:61:DB:EA:21:8F:8B:DC:38:B9:59:12:7C:5F:B4:07:D4 X509v3 Authority Key Identifier: keyid:EB:65:C3:DE:94:49:F2:C3:42:B6:C2:8D:C0:0A:2D:7D:9F:CE:13:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:b1:3c:61:06:c8:ad:76:74:48:40:b4:79:b8:12:bc:f8:fa: 2d:99:d6:b3:de:fd:ff:44:99:84:11:82:19:06:55:e5:be:b9: b5:2a:28:e9:36:92:ec:54:cf:1f:0d:2d:fb:c5:45:b1:f5:74: 9d:75:ca:b4:6a:94:fb:9c:fd:0e:25:cd:c0:bd:fb:67:84:fa: 11:e7:27:d9:ad:22:f1:68:be:59:86:68:d5:45:53:78:fe:ba: 35:12:1a:8c:1d:26:8e:ec:fd:90:6f:41:0a:f3:99:9c:3c:fe: e3:93:09:62:8b:e8:4e:ec:eb:ac:1e:f2:3a:9b:db:24:17:64: 70:da:fc:f1:36:8f:53:3f:75:9a:2c:23:6d:07:9a:cf:a0:00: a5:44:5f:6f:08:66:3e:e8:71:aa:f7:97:5b:58:46:cc:c4:a1: 18:b4:ee:de:10:4b:9e:27:48:70:10:1a:00:82:5b:31:9a:e1: 10:c5:fc:48:af:55:0a:75:b3:32:82:aa:ef:60:23:97:a0:09: 42:44:d5:39:5a:8b:72:79:08:7a:20:d4:45:79:89:9e:74:c1: 05:a4:90:40:d9:38:85:71:b1:1a:8e:ba:f0:33:aa:2d:8b:43: 8c:43:97:40:ff:d8:70:c9:02:b1:36:77:b9:de:b5:b7:0f:98: 54:b8:77:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ4++9MSGgfvNN8s/Gn3uiQsC5MowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUI2NUMzREU5NDQ5RjJDMzQyQjZDMjhEQzAwQTJEN0Q5 RkNFMTNGQzAeFw0yNjA5MjAxOTEwNDBaFw0yNjA5MjEyMjM5NDBaMDMxMTAvBgNV BAMTKDgyMTQzMjIyNjFEQkVBMjE4RjhCREMzOEI5NTkxMjdDNUZCNDA3RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6g7ToHkbD9zIC6cZ5l8V3PZDT KH3qLxuae8ycMuW+rWfRGepJTeMR0dwC6sv5qGgO7dVFCsvZp4wIC56dAGPPTFTO B4qPmJJVyZY4fhbU07sFGclxGqw3u9zPYhTzZ/SgWMVAn9Piz7HiZjMOugenX2nI xCEo6U49mHnpp6dWL58+hRT+cKU370uOCG0ovbHfqmnjadNUtiZIPkIZCBvNMvOB 8e+0pCTxElevS9cx4VDF2PHdjsMvSihyQz2cCzQPwxCU9Bdg1800wyiN4gRaJAFI bIRMNOPX5T14nc4CyYt3rOcTqmsOoN4O7+QlkdPzWX1kgymSgO21Rf7OVXKJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUghQyImHb6iGPi9w4uVkSfF+0B9QwHwYDVR0j BBgwFoAU62XD3pRJ8sNCtsKNwAotfZ/OE/wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWI2NGQ4YzEtYzcxNC00NTkyLThmYzUtZTM5MmViZmYxZTk4LzAvRUI2NUMzREU5 NDQ5RjJDMzQyQjZDMjhEQzAwQTJEN0Q5RkNFMTNGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQjY1QzNERTk0NDlGMkMzNDJCNkMyOERDMDBBMkQ3RDlGQ0Ux M0ZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWI2NGQ4YzEtYzcxNC00NTkyLThm YzUtZTM5MmViZmYxZTk4LzAvRUI2NUMzREU5NDQ5RjJDMzQyQjZDMjhEQzAwQTJE N0Q5RkNFMTNGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAICxPGEGyK12dEhAtHm4Erz4+i2Z1rPe/f9E mYQRghkGVeW+ubUqKOk2kuxUzx8NLfvFRbH1dJ11yrRqlPuc/Q4lzcC9+2eE+hHn J9mtIvFovlmGaNVFU3j+ujUSGowdJo7s/ZBvQQrzmZw8/uOTCWKL6E7s66we8jqb 2yQXZHDa/PE2j1M/dZosI20Hms+gAKVEX28IZj7ocar3l1tYRszEoRi07t4QS54n SHAQGgCCWzGa4RDF/EivVQp1szKCqu9gI5egCUJE1Tlai3J5CHog1EV5iZ50wQWk kEDZOIVxsRqOuvAzqi2LQ4xDl0D/2HDJArE2d7netbcPmFS4d0U= -----END CERTIFICATE-----Generated at Mon Sep 21 01:34:56 2026 by rpki-client