$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.mft File: EB05D5BB4356C8737A9AA4994302BCA8B46691CD.mft (raw, json) Hash identifier: V+0CEGUXEdXC8uigvQKl+GJmz3uZjOxcHiRnshUjE1w= Subject key identifier: 0F:EC:EA:7E:CD:6C:E2:21:8A:C2:33:7C:F0:F7:96:FD:7C:E3:81:9F Authority key identifier: EB:05:D5:BB:43:56:C8:73:7A:9A:A4:99:43:02:BC:A8:B4:66:91:CD Certificate issuer: /CN=EB05D5BB4356C8737A9AA4994302BCA8B46691CD Certificate serial: 74EBDBDE63B9F9DBE377112E8AB93FD7E5B294EC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.mft Manifest number: BE Signing time: Mon 21 Sep 2026 15:00:09 +0000 Manifest this update: Mon 21 Sep 2026 14:55:09 +0000 Manifest next update: Tue 22 Sep 2026 17:22:09 +0000 Files and hashes: 1: EB05D5BB4356C8737A9AA4994302BCA8B46691CD.crl (hash: iQs3n6zW6sOD5E5+4kSI7chpQEgIkwfY3/OVZ/D4ClU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.crl rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 17:22:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:eb:db:de:63:b9:f9:db:e3:77:11:2e:8a:b9:3f:d7:e5:b2:94:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB05D5BB4356C8737A9AA4994302BCA8B46691CD Validity Not Before: Sep 21 14:55:09 2026 GMT Not After : Sep 22 17:22:09 2026 GMT Subject: CN=0FECEA7ECD6CE2218AC2337CF0F796FD7CE3819F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:45:f9:67:4e:35:ad:96:58:6f:cc:10:2a:fe: 82:b3:71:4f:92:4a:e7:2b:a4:5e:58:5c:d0:63:7d: 96:46:12:d6:07:19:1d:ec:26:ef:4e:a8:0c:db:59: b4:f8:10:18:e7:38:f0:48:54:f9:9e:b5:2a:e3:38: 60:d9:fc:ed:a4:93:7c:65:b1:c3:43:d1:78:07:0d: f5:8d:b3:27:40:f8:49:d5:8c:15:25:56:30:ba:6a: c0:5a:11:87:80:14:a3:7f:ec:f6:dd:3a:71:f4:04: 15:d8:69:60:21:fc:ed:52:d2:ec:8d:a0:9c:8a:8d: f1:cf:69:4f:1b:14:08:17:01:5f:20:02:a5:6f:3a: f5:df:f0:97:af:5e:b6:a6:d9:30:80:6c:40:82:aa: 3d:52:46:4f:d0:38:47:7e:b6:d2:a3:96:8d:88:39: 50:08:f5:aa:6d:0a:0f:06:e0:7c:fc:f7:68:72:99: 69:15:07:9f:ae:3a:9b:76:be:31:0e:60:98:f8:bd: 95:e9:d5:33:16:2e:16:13:e3:4a:0a:ef:80:50:a1: 3e:95:e3:13:01:50:69:a0:c5:09:f9:f6:a6:ae:af: 3d:47:c9:87:39:3f:05:c7:c3:be:4a:8f:2d:61:3d: 76:49:88:ab:1a:00:96:2a:70:37:d2:9e:e1:28:b6: 73:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:EC:EA:7E:CD:6C:E2:21:8A:C2:33:7C:F0:F7:96:FD:7C:E3:81:9F X509v3 Authority Key Identifier: keyid:EB:05:D5:BB:43:56:C8:73:7A:9A:A4:99:43:02:BC:A8:B4:66:91:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/1/EB05D5BB4356C8737A9AA4994302BCA8B46691CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:68:25:fa:3c:92:c9:76:df:76:68:17:d8:70:76:e8:02:6f: 02:36:45:aa:e6:9c:76:15:5f:ab:7f:42:37:f0:ea:a9:82:04: 06:4f:e3:dd:21:6a:d4:45:af:3e:4f:18:1f:1d:c7:f5:59:81: c1:14:0a:4f:a7:43:1a:78:24:e4:2a:b3:3d:6f:58:65:6a:28: b4:8a:67:a0:5f:61:14:44:18:75:ae:07:7f:92:48:9d:1a:07: 76:1a:77:26:3f:11:ef:a9:0c:ba:5a:aa:a3:f0:28:d8:44:d3: bd:22:22:90:5d:35:6c:9c:55:b1:79:06:04:90:84:36:a4:3c: 4f:92:11:5a:4d:cb:7c:1f:22:51:19:70:a5:10:ca:13:ee:53: 86:cb:69:46:7d:aa:22:9a:7a:17:93:ba:79:3e:ee:6e:47:3d: 7d:f3:8c:95:92:7a:76:a5:c9:f9:e5:30:06:46:89:7d:ed:2e: fb:6e:6e:83:eb:e6:8c:50:a6:b8:c8:9a:57:01:28:96:6b:3a: 63:da:7f:d0:fb:b5:86:59:b0:4c:f0:9e:26:41:2a:da:4e:c4: c7:f6:c4:b8:9e:8a:3d:11:a3:75:74:8b:66:4b:7b:70:51:66: b8:eb:fb:e0:a0:e5:fc:3d:a3:95:3c:f4:f0:c4:d6:4d:c9:06: d9:86:53:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdOvb3mO5+dvjdxEuirk/1+WylOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUIwNUQ1QkI0MzU2Qzg3MzdBOUFBNDk5NDMwMkJDQThC NDY2OTFDRDAeFw0yNjA5MjExNDU1MDlaFw0yNjA5MjIxNzIyMDlaMDMxMTAvBgNV BAMTKDBGRUNFQTdFQ0Q2Q0UyMjE4QUMyMzM3Q0YwRjc5NkZEN0NFMzgxOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/RflnTjWtllhvzBAq/oKzcU+S SucrpF5YXNBjfZZGEtYHGR3sJu9OqAzbWbT4EBjnOPBIVPmetSrjOGDZ/O2kk3xl scND0XgHDfWNsydA+EnVjBUlVjC6asBaEYeAFKN/7PbdOnH0BBXYaWAh/O1S0uyN oJyKjfHPaU8bFAgXAV8gAqVvOvXf8JevXram2TCAbECCqj1SRk/QOEd+ttKjlo2I OVAI9aptCg8G4Hz892hymWkVB5+uOpt2vjEOYJj4vZXp1TMWLhYT40oK74BQoT6V 4xMBUGmgxQn59qaurz1HyYc5PwXHw75Kjy1hPXZJiKsaAJYqcDfSnuEotnMPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD+zqfs1s4iGKwjN88PeW/XzjgZ8wHwYDVR0j BBgwFoAU6wXVu0NWyHN6mqSZQwK8qLRmkc0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGM1OGZiN2MtNjdiOC00YmNlLTk2ZDktYmU5MTJlM2Y3M2RkLzEvRUIwNUQ1QkI0 MzU2Qzg3MzdBOUFBNDk5NDMwMkJDQThCNDY2OTFDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQjA1RDVCQjQzNTZDODczN0E5QUE0OTk0MzAyQkNBOEI0NjY5 MUNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGM1OGZiN2MtNjdiOC00YmNlLTk2 ZDktYmU5MTJlM2Y3M2RkLzEvRUIwNUQ1QkI0MzU2Qzg3MzdBOUFBNDk5NDMwMkJD QThCNDY2OTFDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABVoJfo8ksl233ZoF9hwdugCbwI2RarmnHYV X6t/Qjfw6qmCBAZP490hatRFrz5PGB8dx/VZgcEUCk+nQxp4JOQqsz1vWGVqKLSK Z6BfYRREGHWuB3+SSJ0aB3YadyY/Ee+pDLpaqqPwKNhE070iIpBdNWycVbF5BgSQ hDakPE+SEVpNy3wfIlEZcKUQyhPuU4bLaUZ9qiKaeheTunk+7m5HPX3zjJWSenal yfnlMAZGiX3tLvtuboPr5oxQprjImlcBKJZrOmPaf9D7tYZZsEzwniZBKtpOxMf2 xLieij0Ro3V0i2ZLe3BRZrjr++Cg5fw9o5U89PDE1k3JBtmGUws= -----END CERTIFICATE-----Generated at Tue Sep 22 06:55:27 2026 by rpki-client