$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft File: EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft (raw, json) Hash identifier: L5Vt/JQLUeIm+gTrqH/ocHz7SP7PYkgintf3JfowAgk= Subject key identifier: FE:0D:F8:D1:1E:A1:AE:A5:AF:73:10:F3:04:15:40:51:88:DB:E7:4E Authority key identifier: EA:1F:A0:A5:CF:DA:8B:5A:6F:64:2F:58:87:FD:67:22:D7:53:10:0D Certificate issuer: /CN=EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D Certificate serial: 252E3676DC6B08E0DF6CE6D10294A69A3B03187B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft Manifest number: BD Signing time: Mon 21 Sep 2026 05:23:20 +0000 Manifest this update: Mon 21 Sep 2026 05:18:20 +0000 Manifest next update: Tue 22 Sep 2026 05:45:20 +0000 Files and hashes: 1: EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.crl (hash: pK8xomoHPlnbJ1Ju4r84tNF7sDbYXbOvENnNmYR84u8=) 2: 3136302e3138372e3139362e302f32342d3234203d3e20313533313234.roa (hash: S4hauyuLw7/w8jvKs8EoZ1L3na+uvt8Vo0vCOD48FJ4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.crl rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:45:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:2e:36:76:dc:6b:08:e0:df:6c:e6:d1:02:94:a6:9a:3b:03:18:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D Validity Not Before: Sep 21 05:18:20 2026 GMT Not After : Sep 22 05:45:20 2026 GMT Subject: CN=FE0DF8D11EA1AEA5AF7310F30415405188DBE74E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3a:aa:90:ab:6e:82:db:ac:d4:4c:07:94:94: 6a:10:fa:2b:58:05:7d:34:cf:d0:7d:1a:e2:b9:29: 23:7e:5a:1e:a3:05:ec:38:5c:44:b9:b0:1a:fb:6c: 84:8e:0e:71:b4:de:62:e3:a4:1d:62:fd:e0:93:3a: 06:96:0b:75:ae:b6:8f:1f:38:97:46:3a:78:b9:55: 88:2c:5a:f4:94:71:f4:5b:90:2a:91:f8:69:c5:49: f3:55:bf:13:23:1f:43:2f:5d:86:69:a8:a2:af:7a: 5d:03:bb:b3:70:1e:93:aa:69:c7:d1:94:c9:bb:ca: e6:79:be:f8:b8:83:d9:49:3f:26:ca:0f:cd:97:0a: 2a:1a:f8:9f:b3:14:10:6d:ac:9d:cb:cd:89:73:34: f3:b1:6e:8f:22:74:d9:91:80:db:e9:53:84:db:2a: 29:9c:86:c1:64:e9:df:a1:07:0c:1b:cf:1a:5a:bd: f9:b2:d1:e9:31:ca:3f:32:72:34:e1:80:9e:77:2d: a1:c7:c6:d6:b6:1a:78:9e:7d:34:00:f5:d4:e8:02: 03:28:67:49:bb:0d:59:d4:de:e0:42:57:c1:2a:21: 4a:d2:39:0b:7f:41:84:44:d4:93:35:ac:98:bd:92: 6d:fc:f5:f6:79:53:fc:48:83:b2:df:7f:45:09:4c: 00:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:0D:F8:D1:1E:A1:AE:A5:AF:73:10:F3:04:15:40:51:88:DB:E7:4E X509v3 Authority Key Identifier: keyid:EA:1F:A0:A5:CF:DA:8B:5A:6F:64:2F:58:87:FD:67:22:D7:53:10:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:83:d8:09:71:cf:8d:aa:fe:81:10:89:ec:1c:f5:88:36:fc: fa:8c:04:34:3b:c5:ed:b0:0c:af:f0:0e:8a:da:0f:1e:03:1c: 95:74:9c:f9:96:1e:df:0a:93:fa:65:18:fe:78:bd:54:67:59: 23:1f:cf:5d:a2:45:f4:49:58:4b:6f:fa:59:f1:87:af:8b:73: a3:6a:ef:e4:d8:35:f3:bf:f9:99:a9:82:7f:fc:6a:21:be:00: 9c:45:ef:21:20:f6:d1:cd:51:2f:9e:0c:74:33:90:f6:0c:03: b0:65:a0:8c:54:3b:90:fe:56:d9:a5:32:f4:2f:5f:6d:93:07: 00:6d:b5:4a:7f:02:73:5b:ec:d8:11:25:99:93:8d:36:3b:a4: aa:c4:83:94:5d:9c:a5:90:35:9b:28:09:c7:45:10:ca:15:43: 82:35:1e:54:c1:67:28:fc:ba:b7:85:d3:92:b4:35:47:0c:80: c9:07:08:c3:cd:d0:b4:8a:b2:8b:ee:90:e1:09:e3:9e:af:a5: 4b:9c:9a:91:46:2b:14:50:6f:a0:c2:ab:fc:60:24:dc:67:79: 58:f2:55:93:5b:0d:fb:5c:85:37:34:e6:ca:09:a7:a1:d8:46: e3:b8:5f:16:4c:e6:ce:cb:fb:b1:49:97:16:bd:83:43:6d:1f: 55:09:5e:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJS42dtxrCODfbObRApSmmjsDGHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUExRkEwQTVDRkRBOEI1QTZGNjQyRjU4ODdGRDY3MjJE NzUzMTAwRDAeFw0yNjA5MjEwNTE4MjBaFw0yNjA5MjIwNTQ1MjBaMDMxMTAvBgNV BAMTKEZFMERGOEQxMUVBMUFFQTVBRjczMTBGMzA0MTU0MDUxODhEQkU3NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuOqqQq26C26zUTAeUlGoQ+itY BX00z9B9GuK5KSN+Wh6jBew4XES5sBr7bISODnG03mLjpB1i/eCTOgaWC3Wuto8f OJdGOni5VYgsWvSUcfRbkCqR+GnFSfNVvxMjH0MvXYZpqKKvel0Du7NwHpOqacfR lMm7yuZ5vvi4g9lJPybKD82XCioa+J+zFBBtrJ3LzYlzNPOxbo8idNmRgNvpU4Tb KimchsFk6d+hBwwbzxpavfmy0ekxyj8ycjThgJ53LaHHxta2GniefTQA9dToAgMo Z0m7DVnU3uBCV8EqIUrSOQt/QYRE1JM1rJi9km389fZ5U/xIg7Lff0UJTADlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/g340R6hrqWvcxDzBBVAUYjb504wHwYDVR0j BBgwFoAU6h+gpc/ai1pvZC9Yh/1nItdTEA0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGM1OGZiN2MtNjdiOC00YmNlLTk2ZDktYmU5MTJlM2Y3M2RkLzAvRUExRkEwQTVD RkRBOEI1QTZGNjQyRjU4ODdGRDY3MjJENzUzMTAwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQTFGQTBBNUNGREE4QjVBNkY2NDJGNTg4N0ZENjcyMkQ3NTMx MDBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGM1OGZiN2MtNjdiOC00YmNlLTk2 ZDktYmU5MTJlM2Y3M2RkLzAvRUExRkEwQTVDRkRBOEI1QTZGNjQyRjU4ODdGRDY3 MjJENzUzMTAwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHeD2Alxz42q/oEQiewc9Yg2/PqMBDQ7xe2w DK/wDoraDx4DHJV0nPmWHt8Kk/plGP54vVRnWSMfz12iRfRJWEtv+lnxh6+Lc6Nq 7+TYNfO/+Zmpgn/8aiG+AJxF7yEg9tHNUS+eDHQzkPYMA7BloIxUO5D+VtmlMvQv X22TBwBttUp/AnNb7NgRJZmTjTY7pKrEg5RdnKWQNZsoCcdFEMoVQ4I1HlTBZyj8 ureF05K0NUcMgMkHCMPN0LSKsovukOEJ456vpUucmpFGKxRQb6DCq/xgJNxneVjy VZNbDftchTc05soJp6HYRuO4XxZM5s7L+7FJlxa9g0NtH1UJXkQ= -----END CERTIFICATE-----Generated at Mon Sep 21 14:27:03 2026 by rpki-client