$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.mft File: EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.mft (raw, json) Hash identifier: qwzCK9owyw/bXFY0aPxpCLakPkiuzp79Ciy4qsqynIE= Subject key identifier: 42:8E:3C:44:6E:61:C0:67:F1:98:25:35:7A:90:E8:19:F4:C3:1A:02 Authority key identifier: EB:0B:E2:F2:F4:9F:0E:2E:D0:DC:A4:50:CC:7A:70:E3:7E:6C:44:79 Certificate issuer: /CN=EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479 Certificate serial: 6EF3A409BCF422D007B793B0A34D4DA0DD8CA03E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.mft Manifest number: 0108 Signing time: Sun 15 Nov 2026 03:08:05 +0000 Manifest this update: Sun 15 Nov 2026 03:03:05 +0000 Manifest next update: Mon 16 Nov 2026 04:28:05 +0000 Files and hashes: 1: EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.crl (hash: fNWpls7+ju+r1x4GR46vBtwjbq+quJdBLcW4d+1vj4s=) 2: 323430333a353763303a3a2f33322d3438203d3e20313333383135.roa (hash: 3BwTC01USPfsaxqOFoR8OqcTiLHcsXU9wo2BTdmt5ZU=) 3: 323430333a626163303a3a2f33322d3438203d3e20313333383135.roa (hash: HEWIf8VBw+80Q4rp+6Ysujhm51rVLU6tXVKj84ErweQ=) 4: 3130332e35322e34342e302f32322d3234203d3e20313333383135.roa (hash: Nq+2Vf2Sjui286xvlwdV6qhYVII60AjIdtuhfdXAxbY=) 5: 3130332e3133302e3133362e302f32322d3234203d3e20313333383135.roa (hash: eU4i0Mhd/q+mYMVjCXIfd0DHyb4s/+BNKr0BLfdT+jA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.crl rsync://rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 04:28:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:f3:a4:09:bc:f4:22:d0:07:b7:93:b0:a3:4d:4d:a0:dd:8c:a0:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479 Validity Not Before: Nov 15 03:03:05 2026 GMT Not After : Nov 16 04:28:05 2026 GMT Subject: CN=428E3C446E61C067F19825357A90E819F4C31A02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:09:e9:0b:a4:f7:4d:01:b3:a7:8b:07:bb:1f: ff:87:48:c2:2c:e4:1c:67:06:50:97:76:c2:c6:bb: cf:c9:59:92:34:56:70:a8:7c:e5:b1:66:79:82:78: 45:5b:d1:cb:5d:db:91:e9:8a:25:be:28:05:63:3c: a6:c7:c2:f6:83:06:02:e1:d8:e4:36:ba:53:f7:96: 62:92:93:e0:49:f2:4f:b4:ed:54:97:84:76:89:2f: 17:d9:ed:7d:f1:33:18:96:de:d5:03:2a:9c:5f:56: 2e:71:16:dc:e1:92:81:75:47:e2:61:be:8a:05:81: 63:c6:69:42:8c:10:b9:62:6e:85:bb:f5:92:18:37: 6a:a5:1e:80:75:25:18:e1:40:fd:24:23:7e:b2:b1: 45:18:02:37:7e:98:fa:fa:02:ed:e2:fe:66:c3:d0: 89:24:c9:89:de:bf:f8:0a:5e:8b:28:0b:b6:80:4f: 72:0f:d2:4d:f9:fc:e4:a1:60:51:66:75:b9:f8:66: 57:44:db:fe:2b:3b:79:65:e6:72:0c:a5:f9:c5:c0: 74:1e:bb:02:6d:7a:31:4a:82:bd:90:6c:a6:3a:4a: cc:e8:87:90:da:af:72:d7:4f:85:92:78:17:f0:69: b7:e9:50:2a:a4:1d:c7:c7:3a:6a:53:de:50:8d:96: d5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:8E:3C:44:6E:61:C0:67:F1:98:25:35:7A:90:E8:19:F4:C3:1A:02 X509v3 Authority Key Identifier: keyid:EB:0B:E2:F2:F4:9F:0E:2E:D0:DC:A4:50:CC:7A:70:E3:7E:6C:44:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:2c:dd:16:75:1d:93:59:dd:0c:0a:17:a2:9d:d5:ae:61:dc: b5:dd:7b:67:f3:9b:16:9e:ac:c8:ab:5d:e1:f7:46:13:96:ad: ad:d1:fd:f0:ce:de:a6:f2:6b:6f:72:03:c6:e0:9e:ee:8b:73: 7e:51:68:fe:3e:53:51:85:3a:01:1c:50:cd:9c:23:63:ba:8f: 38:8f:1b:9a:15:49:91:e6:4e:40:cc:0c:53:7a:bb:ea:bb:5d: 62:12:89:d9:41:83:e4:fb:6e:7d:70:b8:77:f4:5d:60:cc:01: 4d:87:62:17:06:0d:11:c9:d2:a2:ce:1f:ca:19:8d:3e:0e:bd: 3a:57:eb:23:10:82:68:13:34:28:57:3f:58:1a:99:0c:f7:7e: f1:2d:f1:f9:1b:5d:7f:cd:cd:04:38:da:f2:c5:67:f0:f4:05: 48:61:bc:97:ce:fb:90:19:d8:8e:5b:f2:11:1c:2c:1a:90:af: 0d:b9:0e:e5:2f:21:02:f5:00:32:f8:c4:1a:b4:ee:ec:5d:27: 94:2a:32:08:a3:39:47:70:dd:30:15:02:5c:68:05:cc:31:61: 72:4f:3a:7b:f9:69:fa:c9:71:de:d2:d6:e4:71:b2:20:ea:28: 54:59:95:a4:cb:4c:b8:70:5c:5a:73:5c:bc:a8:80:d6:fc:88: 9d:46:c1:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbvOkCbz0ItAHt5Owo01NoN2MoD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUIwQkUyRjJGNDlGMEUyRUQwRENBNDUwQ0M3QTcwRTM3 RTZDNDQ3OTAeFw0yNjExMTUwMzAzMDVaFw0yNjExMTYwNDI4MDVaMDMxMTAvBgNV BAMTKDQyOEUzQzQ0NkU2MUMwNjdGMTk4MjUzNTdBOTBFODE5RjRDMzFBMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZCekLpPdNAbOniwe7H/+HSMIs 5BxnBlCXdsLGu8/JWZI0VnCofOWxZnmCeEVb0ctd25HpiiW+KAVjPKbHwvaDBgLh 2OQ2ulP3lmKSk+BJ8k+07VSXhHaJLxfZ7X3xMxiW3tUDKpxfVi5xFtzhkoF1R+Jh vooFgWPGaUKMELliboW79ZIYN2qlHoB1JRjhQP0kI36ysUUYAjd+mPr6Au3i/mbD 0IkkyYnev/gKXosoC7aAT3IP0k35/OShYFFmdbn4ZldE2/4rO3ll5nIMpfnFwHQe uwJtejFKgr2QbKY6Sszoh5Dar3LXT4WSeBfwabfpUCqkHcfHOmpT3lCNltW7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQo48RG5hwGfxmCU1epDoGfTDGgIwHwYDVR0j BBgwFoAU6wvi8vSfDi7Q3KRQzHpw435sRHkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmEzYWU0ODUtYTY1OC00YzVjLWFiZTItMWU3ZmQ4YjAzOGEwLzAvRUIwQkUyRjJG NDlGMEUyRUQwRENBNDUwQ0M3QTcwRTM3RTZDNDQ3OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQjBCRTJGMkY0OUYwRTJFRDBEQ0E0NTBDQzdBNzBFMzdFNkM0 NDc5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmEzYWU0ODUtYTY1OC00YzVjLWFi ZTItMWU3ZmQ4YjAzOGEwLzAvRUIwQkUyRjJGNDlGMEUyRUQwRENBNDUwQ0M3QTcw RTM3RTZDNDQ3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJQs3RZ1HZNZ3QwKF6Kd1a5h3LXde2fzmxae rMirXeH3RhOWra3R/fDO3qbya29yA8bgnu6Lc35RaP4+U1GFOgEcUM2cI2O6jziP G5oVSZHmTkDMDFN6u+q7XWISidlBg+T7bn1wuHf0XWDMAU2HYhcGDRHJ0qLOH8oZ jT4OvTpX6yMQgmgTNChXP1gamQz3fvEt8fkbXX/NzQQ42vLFZ/D0BUhhvJfO+5AZ 2I5b8hEcLBqQrw25DuUvIQL1ADL4xBq07uxdJ5QqMgijOUdw3TAVAlxoBcwxYXJP Onv5afrJcd7S1uRxsiDqKFRZlaTLTLhwXFpzXLyogNb8iJ1GwTg= -----END CERTIFICATE-----Generated at Sun Nov 15 20:31:27 2026 by rpki-client