$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.mft File: EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.mft (raw, json) Hash identifier: yj3fmsB5NVIZ03L/IJEl/3qiKcm+QXaOL09XTz+xeck= Subject key identifier: 16:E5:47:0E:0F:EB:F9:A5:63:D7:1D:C2:5A:FF:8D:59:63:8C:0E:49 Authority key identifier: EB:65:C3:DE:94:49:F2:C3:42:B6:C2:8D:C0:0A:2D:7D:9F:CE:13:FC Certificate issuer: /CN=EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC Certificate serial: 7FF823D4259DD37AB08F7662D730EC3325B8B029 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.mft Manifest number: 0100 Signing time: Tue 10 Nov 2026 01:22:16 +0000 Manifest this update: Tue 10 Nov 2026 01:17:16 +0000 Manifest next update: Wed 11 Nov 2026 03:21:16 +0000 Files and hashes: 1: EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.crl (hash: iO6UGCVypmaXLKX9WPEL6d212ZwDI+Jt37Af+apVYFY=) 2: 3130332e31382e34342e302f32332d3234203d3e20313530323735.roa (hash: 7XY8OJYBheI11wkRz8cVl6F/JT2mVgzHkajv0h3NaA4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.crl rsync://rpki-rsync.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 03:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:f8:23:d4:25:9d:d3:7a:b0:8f:76:62:d7:30:ec:33:25:b8:b0:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC Validity Not Before: Nov 10 01:17:16 2026 GMT Not After : Nov 11 03:21:16 2026 GMT Subject: CN=16E5470E0FEBF9A563D71DC25AFF8D59638C0E49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c0:16:f2:74:94:47:60:7f:b6:ad:ed:56:3a: bb:c7:f7:88:00:1d:69:70:08:88:44:d3:06:c9:61: 1b:30:65:36:1f:04:57:06:33:10:72:b7:3b:51:9e: 97:4b:ba:ca:de:28:4f:9e:e5:fd:c8:72:de:9c:d2: dd:d8:b0:14:ed:01:05:da:ef:c5:0e:05:55:7a:ca: 7c:e4:20:0f:02:54:c5:47:f8:74:78:d8:0d:3f:56: e9:ae:1d:d8:8b:83:c6:da:64:33:4e:e2:73:a1:1b: fa:94:2b:64:a1:b4:e1:d6:9a:f7:81:b4:c5:dd:ba: 29:75:41:03:e3:5f:ed:7e:ed:71:f7:4a:da:5e:3d: 2a:d7:e2:c5:70:19:8b:d6:21:39:39:c5:3d:bd:c5: 79:6c:d4:dc:37:d4:25:f2:6c:83:60:4f:b4:b9:e2: 68:ac:23:2c:4e:b5:53:b3:f2:18:5a:39:26:d7:69: 8f:e6:5b:84:8c:69:e7:0d:3b:9f:a3:de:7d:f0:91: a6:87:25:56:58:44:cd:df:2c:ba:cb:31:d3:07:94: e2:66:54:77:68:b5:a5:03:9c:4e:8a:47:41:a0:c6: 73:ff:cd:c4:50:a1:9a:b9:c4:b2:bf:04:74:a9:68: 7b:00:b6:c2:b4:d0:9a:dd:fa:ba:86:5e:f7:a2:09: 37:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E5:47:0E:0F:EB:F9:A5:63:D7:1D:C2:5A:FF:8D:59:63:8C:0E:49 X509v3 Authority Key Identifier: keyid:EB:65:C3:DE:94:49:F2:C3:42:B6:C2:8D:C0:0A:2D:7D:9F:CE:13:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:2e:28:01:23:ea:82:36:7d:76:d9:c9:6b:f1:7a:34:b7:dd: 47:3e:c1:8a:ce:49:bd:d0:f5:0d:c6:96:40:31:29:5b:2e:10: a6:4b:68:b1:01:88:a3:2a:d4:e5:34:59:83:63:0d:50:a0:ab: 31:38:3e:ea:d1:69:83:96:ff:b5:f7:df:fa:d5:89:e8:a9:55: fc:fe:84:c3:99:f4:b8:97:e0:06:cf:04:a6:d1:a5:a8:39:fd: d1:68:dc:97:48:4d:63:d7:cf:ef:72:4a:8c:32:18:f7:40:2a: 5f:02:81:a0:02:20:00:92:c9:4b:c4:2e:77:fc:f6:23:ae:4d: 96:eb:df:eb:0e:0d:12:25:e7:5f:af:a7:7f:b9:32:ea:7f:8c: 47:7f:0c:c7:82:16:aa:f4:b7:0a:42:d6:d7:5e:fb:c6:01:91: 58:c2:79:15:c9:63:6b:bc:e8:2f:4d:fd:8c:76:75:51:a0:6c: 1e:80:17:2d:db:9f:2d:52:94:0e:f6:3c:a6:57:0c:30:90:34: c1:4e:20:59:40:da:69:7f:5b:a6:ca:95:b2:70:44:61:db:38: 1d:21:c1:50:6f:eb:1c:13:ad:4e:b8:31:f7:4f:75:65:11:16: c5:96:73:99:d8:45:e8:ee:ed:ea:49:89:e5:20:5f:5a:2e:e3: f8:61:01:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf/gj1CWd03qwj3Zi1zDsMyW4sCkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUI2NUMzREU5NDQ5RjJDMzQyQjZDMjhEQzAwQTJEN0Q5 RkNFMTNGQzAeFw0yNjExMTAwMTE3MTZaFw0yNjExMTEwMzIxMTZaMDMxMTAvBgNV BAMTKDE2RTU0NzBFMEZFQkY5QTU2M0Q3MURDMjVBRkY4RDU5NjM4QzBFNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVwBbydJRHYH+2re1WOrvH94gA HWlwCIhE0wbJYRswZTYfBFcGMxBytztRnpdLusreKE+e5f3Ict6c0t3YsBTtAQXa 78UOBVV6ynzkIA8CVMVH+HR42A0/VumuHdiLg8baZDNO4nOhG/qUK2ShtOHWmveB tMXduil1QQPjX+1+7XH3StpePSrX4sVwGYvWITk5xT29xXls1Nw31CXybINgT7S5 4misIyxOtVOz8hhaOSbXaY/mW4SMaecNO5+j3n3wkaaHJVZYRM3fLLrLMdMHlOJm VHdotaUDnE6KR0GgxnP/zcRQoZq5xLK/BHSpaHsAtsK00Jrd+rqGXveiCTdbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFuVHDg/r+aVj1x3CWv+NWWOMDkkwHwYDVR0j BBgwFoAU62XD3pRJ8sNCtsKNwAotfZ/OE/wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWI2NGQ4YzEtYzcxNC00NTkyLThmYzUtZTM5MmViZmYxZTk4LzAvRUI2NUMzREU5 NDQ5RjJDMzQyQjZDMjhEQzAwQTJEN0Q5RkNFMTNGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQjY1QzNERTk0NDlGMkMzNDJCNkMyOERDMDBBMkQ3RDlGQ0Ux M0ZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWI2NGQ4YzEtYzcxNC00NTkyLThm YzUtZTM5MmViZmYxZTk4LzAvRUI2NUMzREU5NDQ5RjJDMzQyQjZDMjhEQzAwQTJE N0Q5RkNFMTNGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAAuKAEj6oI2fXbZyWvxejS33Uc+wYrOSb3Q 9Q3GlkAxKVsuEKZLaLEBiKMq1OU0WYNjDVCgqzE4PurRaYOW/7X33/rVieipVfz+ hMOZ9LiX4AbPBKbRpag5/dFo3JdITWPXz+9ySowyGPdAKl8CgaACIACSyUvELnf8 9iOuTZbr3+sODRIl51+vp3+5Mup/jEd/DMeCFqr0twpC1tde+8YBkVjCeRXJY2u8 6C9N/Yx2dVGgbB6AFy3bny1SlA72PKZXDDCQNMFOIFlA2ml/W6bKlbJwRGHbOB0h wVBv6xwTrU64MfdPdWURFsWWc5nYReju7epJieUgX1ou4/hhAbE= -----END CERTIFICATE-----Generated at Tue Nov 10 04:54:39 2026 by rpki-client