$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/EAEAF1E00C07D762D6C0C8DFE13A74C322AF63E8.mft File: EAEAF1E00C07D762D6C0C8DFE13A74C322AF63E8.mft (raw, json) Hash identifier: KRVVYqzO4YMfbsXtx8CoTLCBuDiuqX3Mj+AyKIdzBpw= Subject key identifier: 46:34:51:F8:A3:61:85:47:D4:EF:AB:4B:E4:B2:87:05:5F:B2:F5:4C Authority key identifier: EA:EA:F1:E0:0C:07:D7:62:D6:C0:C8:DF:E1:3A:74:C3:22:AF:63:E8 Certificate issuer: /CN=EAEAF1E00C07D762D6C0C8DFE13A74C322AF63E8 Certificate serial: 37B9A02CB15D4EED4B2FADEB90287EE6619E29E3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAEAF1E00C07D762D6C0C8DFE13A74C322AF63E8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/EAEAF1E00C07D762D6C0C8DFE13A74C322AF63E8.mft Manifest number: BB Signing time: Sun 20 Sep 2026 10:35:10 +0000 Manifest this update: Sun 20 Sep 2026 10:30:10 +0000 Manifest next update: Mon 21 Sep 2026 12:08:10 +0000 Files and hashes: 1: 3130332e3137372e39362e302f32332d3234203d3e20313331313131.roa (hash: C73i0YpnAYn9XBbKfMcAdv1YEWmSqBMSxQV+g6EnRYQ=) 2: EAEAF1E00C07D762D6C0C8DFE13A74C322AF63E8.crl (hash: ZV8N1+gK3WDjGlr6WjvUiS9xxGaR2F3GqRxfxybA7CA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/EAEAF1E00C07D762D6C0C8DFE13A74C322AF63E8.crl rsync://rpki-rsync.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/EAEAF1E00C07D762D6C0C8DFE13A74C322AF63E8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAEAF1E00C07D762D6C0C8DFE13A74C322AF63E8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 12:08:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:b9:a0:2c:b1:5d:4e:ed:4b:2f:ad:eb:90:28:7e:e6:61:9e:29:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAEAF1E00C07D762D6C0C8DFE13A74C322AF63E8 Validity Not Before: Sep 20 10:30:10 2026 GMT Not After : Sep 21 12:08:10 2026 GMT Subject: CN=463451F8A3618547D4EFAB4BE4B287055FB2F54C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:35:24:8a:5c:fd:a5:9c:5a:b2:74:2a:a4:51: f9:dd:46:4c:a0:06:97:1c:93:6f:7a:f8:d0:a5:7c: 9a:17:04:26:f2:1b:8f:2c:88:2a:82:60:fc:d6:cf: ce:41:8a:bb:ce:18:ba:5e:5f:11:d2:71:6b:e9:f7: 94:b8:77:a4:38:89:d6:75:9a:cd:16:25:06:cb:77: 61:30:71:08:0a:a2:ab:04:6e:46:e5:47:dd:fb:7e: 4f:f4:95:25:88:f0:7e:bd:38:de:45:fe:f4:a1:6b: c8:dc:56:1a:6f:94:ca:d4:90:12:36:64:10:6c:50: 71:93:03:53:3e:e4:37:66:cb:04:8c:9e:0d:7f:3f: 68:ef:cb:d3:a3:3b:2b:94:36:16:d3:3e:26:93:3b: 94:74:57:9e:3d:7a:f1:e2:55:8a:ff:c3:7d:9b:ab: 15:ab:da:c0:32:2d:52:3b:2c:1e:d0:49:f8:32:b5: f9:1d:c9:93:69:20:07:06:de:49:ba:cf:6f:e6:2b: 16:01:52:2e:f6:d5:14:67:79:6c:af:b8:48:9a:a1: 07:ab:81:ee:50:58:d4:2f:5c:ca:1d:7b:a5:cd:05: d7:32:65:98:b0:90:d4:96:ac:c8:6a:b3:72:fd:e1: 8b:da:a5:2b:80:44:56:98:b4:3f:88:af:ee:71:30: 91:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:34:51:F8:A3:61:85:47:D4:EF:AB:4B:E4:B2:87:05:5F:B2:F5:4C X509v3 Authority Key Identifier: keyid:EA:EA:F1:E0:0C:07:D7:62:D6:C0:C8:DF:E1:3A:74:C3:22:AF:63:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/EAEAF1E00C07D762D6C0C8DFE13A74C322AF63E8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAEAF1E00C07D762D6C0C8DFE13A74C322AF63E8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/EAEAF1E00C07D762D6C0C8DFE13A74C322AF63E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:3d:9f:da:35:b4:c8:d0:69:9e:d6:ae:67:d4:83:d0:1a:c3: e3:b1:29:ae:af:8c:00:9d:72:7a:62:a7:b8:58:81:38:15:a9: 46:70:db:6a:ea:73:24:6d:0b:f4:b3:12:98:51:c4:31:16:d1: 24:e9:dd:4c:71:b8:87:91:ac:90:ee:28:5a:74:6d:28:ac:1d: 14:cf:63:c0:d9:f3:f0:59:c1:1d:f5:fc:be:90:f6:f6:be:ca: 09:9b:7f:4f:8a:74:f4:b1:e2:a7:29:05:bf:4e:13:8c:b8:4d: 0e:d5:ee:8d:31:69:5f:d1:26:86:3d:2f:78:bd:61:f9:93:c2: 28:a6:76:84:21:4c:ee:74:87:2b:89:e0:9d:b2:c9:e8:73:d1: 77:9f:eb:1d:cf:2c:87:7b:e7:55:d9:fd:80:f4:72:ff:f5:7e: ff:67:40:b1:e5:37:e7:96:57:59:ee:69:24:6c:4f:19:7b:40: dd:7b:29:25:be:1e:4a:14:c5:a8:ca:fc:f6:eb:98:07:5e:31: b0:3a:2f:2b:df:2b:e0:af:b5:50:4a:48:b3:29:5a:ae:73:df: 80:2f:17:8e:83:3b:ad:32:23:6a:af:96:7b:d9:63:7f:9a:79: 6d:b2:24:65:01:f7:20:00:7f:ca:55:b8:21:fa:ab:47:91:32: a6:ce:ee:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN7mgLLFdTu1LL63rkCh+5mGeKeMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFFQUYxRTAwQzA3RDc2MkQ2QzBDOERGRTEzQTc0QzMy MkFGNjNFODAeFw0yNjA5MjAxMDMwMTBaFw0yNjA5MjExMjA4MTBaMDMxMTAvBgNV BAMTKDQ2MzQ1MUY4QTM2MTg1NDdENEVGQUI0QkU0QjI4NzA1NUZCMkY1NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCINSSKXP2lnFqydCqkUfndRkyg Bpcck296+NClfJoXBCbyG48siCqCYPzWz85BirvOGLpeXxHScWvp95S4d6Q4idZ1 ms0WJQbLd2EwcQgKoqsEbkblR937fk/0lSWI8H69ON5F/vSha8jcVhpvlMrUkBI2 ZBBsUHGTA1M+5DdmywSMng1/P2jvy9OjOyuUNhbTPiaTO5R0V549evHiVYr/w32b qxWr2sAyLVI7LB7QSfgytfkdyZNpIAcG3km6z2/mKxYBUi721RRneWyvuEiaoQer ge5QWNQvXMode6XNBdcyZZiwkNSWrMhqs3L94YvapSuARFaYtD+Ir+5xMJHHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURjRR+KNhhUfU76tL5LKHBV+y9UwwHwYDVR0j BBgwFoAU6urx4AwH12LWwMjf4Tp0wyKvY+gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2U4N2YxZDEtMDZmYi00MzZiLTljZTYtOTJkYWEyOWYxZjliLzAvRUFFQUYxRTAw QzA3RDc2MkQ2QzBDOERGRTEzQTc0QzMyMkFGNjNFOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQUVBRjFFMDBDMDdENzYyRDZDMEM4REZFMTNBNzRDMzIyQUY2 M0U4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2U4N2YxZDEtMDZmYi00MzZiLTlj ZTYtOTJkYWEyOWYxZjliLzAvRUFFQUYxRTAwQzA3RDc2MkQ2QzBDOERGRTEzQTc0 QzMyMkFGNjNFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANE9n9o1tMjQaZ7WrmfUg9Aaw+OxKa6vjACd cnpip7hYgTgVqUZw22rqcyRtC/SzEphRxDEW0STp3UxxuIeRrJDuKFp0bSisHRTP Y8DZ8/BZwR31/L6Q9va+ygmbf0+KdPSx4qcpBb9OE4y4TQ7V7o0xaV/RJoY9L3i9 YfmTwiimdoQhTO50hyuJ4J2yyehz0Xef6x3PLId751XZ/YD0cv/1fv9nQLHlN+eW V1nuaSRsTxl7QN17KSW+HkoUxajK/PbrmAdeMbA6LyvfK+CvtVBKSLMpWq5z34Av F46DO60yI2qvlnvZY3+aeW2yJGUB9yAAf8pVuCH6q0eRMqbO7gI= -----END CERTIFICATE-----Generated at Sun Sep 20 20:11:24 2026 by rpki-client