$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.mft File: EB1DCD321031C0290E00088B308F6E37F658F0F0.mft (raw, json) Hash identifier: SL3Ex2TVQ/M95ukhUErlvz5MkODWqo+wbcEjr0QciGk= Subject key identifier: 16:26:D4:FF:F5:15:6E:B0:C3:70:54:97:FA:65:5E:21:11:E1:86:90 Authority key identifier: EB:1D:CD:32:10:31:C0:29:0E:00:08:8B:30:8F:6E:37:F6:58:F0:F0 Certificate issuer: /CN=EB1DCD321031C0290E00088B308F6E37F658F0F0 Certificate serial: 48B10E01C5CF548FBEDD2560B53DD2850267E500 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.mft Manifest number: BF Signing time: Mon 21 Sep 2026 11:51:04 +0000 Manifest this update: Mon 21 Sep 2026 11:46:04 +0000 Manifest next update: Tue 22 Sep 2026 14:40:04 +0000 Files and hashes: 1: EB1DCD321031C0290E00088B308F6E37F658F0F0.crl (hash: PUY9/FDOxQxP2E40I9PlevQVWOqcMBpvNrbXu0VuxB8=) 2: 3135372e36362e3132352e302f32342d3234203d3e20313532373732.roa (hash: 52gK1ZVXU5lx2N9LIOHuf1720HHZgYLR2YWvzcpZMqA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.crl rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:b1:0e:01:c5:cf:54:8f:be:dd:25:60:b5:3d:d2:85:02:67:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB1DCD321031C0290E00088B308F6E37F658F0F0 Validity Not Before: Sep 21 11:46:04 2026 GMT Not After : Sep 22 14:40:04 2026 GMT Subject: CN=1626D4FFF5156EB0C3705497FA655E2111E18690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6b:a0:30:5c:87:f1:c1:cb:5e:16:29:be:45: 62:01:a6:ca:4d:66:d3:a9:59:d9:03:66:75:f8:41: 25:27:a4:7b:bf:d7:54:2f:28:64:82:6f:06:55:fe: 8f:19:6c:de:5a:49:7d:bf:7f:c2:21:33:8a:17:67: e0:58:fa:27:c2:1d:ad:a3:9f:06:33:74:35:a9:e7: 14:56:17:b4:1c:1b:3f:01:0e:e6:41:23:35:89:ca: 0d:ff:7d:18:3c:74:87:23:51:b3:7c:23:2f:71:2e: c2:c0:e1:4c:0f:70:c9:9b:bd:7f:bc:31:bb:86:10: 2a:c9:7c:cc:55:87:b7:bb:f9:db:2a:c6:5e:1f:e0: 41:90:eb:be:25:50:a9:43:db:01:1b:91:9c:d3:91: 53:7b:fe:ff:7e:5e:52:be:9b:d0:a0:79:88:08:db: 42:b9:a0:87:3c:00:66:ff:05:dd:1f:ea:0b:0a:03: 66:f6:4b:f0:47:2c:ac:45:15:26:ab:c0:a1:1a:2c: 22:32:03:d6:e9:44:58:8a:0e:5f:48:a0:c9:d4:15: 2d:d0:57:a5:2d:70:3c:e2:d2:f3:c9:24:89:b6:f7: 74:d8:0e:5c:16:8d:51:a1:80:83:86:69:2d:92:14: 5d:16:4f:ca:a6:2e:5e:1d:26:01:6f:2b:08:9c:99: 8b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:26:D4:FF:F5:15:6E:B0:C3:70:54:97:FA:65:5E:21:11:E1:86:90 X509v3 Authority Key Identifier: keyid:EB:1D:CD:32:10:31:C0:29:0E:00:08:8B:30:8F:6E:37:F6:58:F0:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:f8:a9:93:2f:40:99:74:fd:43:c1:48:9b:fa:5a:8d:8e:d7: b3:27:f2:f0:55:ed:af:dd:73:12:49:b4:c1:37:0a:ae:65:6c: 6c:ee:82:12:02:54:d4:27:b1:84:32:43:75:cd:ae:e4:3c:6c: 5a:65:d0:80:8b:a0:95:91:cd:02:4f:54:b3:0f:68:d3:24:b6: b8:1f:fc:e6:ae:25:06:54:fa:2d:b9:0f:52:98:77:4f:61:b9: f9:71:0b:06:90:e2:2d:29:88:ac:fb:ed:ac:07:fb:19:ac:2a: c4:80:85:53:a0:df:77:b0:b7:02:9a:9e:b4:a2:b6:18:11:c4: 52:6b:46:d0:9f:1c:d9:fa:05:f4:82:ed:34:37:65:3e:53:1d: 23:e3:5f:ad:45:18:b2:e4:b1:c1:5e:74:02:e1:29:e0:aa:41: 08:2e:1e:93:8c:fc:65:5b:8e:93:23:6c:dc:27:d2:28:a3:71: b4:14:e5:fc:9f:aa:b1:7b:c1:d6:41:42:91:2b:68:ac:cf:e0: 47:18:e4:fa:dd:23:ee:d4:02:6a:aa:1d:f2:1f:5a:d0:7b:85: dd:4c:65:b6:20:65:10:6d:cd:63:43:07:12:97:b1:b5:81:03: 87:be:a1:58:d4:4d:e3:d4:e6:76:67:98:68:62:c2:9a:32:1e: 4b:42:95:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSLEOAcXPVI++3SVgtT3ShQJn5QAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUIxRENEMzIxMDMxQzAyOTBFMDAwODhCMzA4RjZFMzdG NjU4RjBGMDAeFw0yNjA5MjExMTQ2MDRaFw0yNjA5MjIxNDQwMDRaMDMxMTAvBgNV BAMTKDE2MjZENEZGRjUxNTZFQjBDMzcwNTQ5N0ZBNjU1RTIxMTFFMTg2OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCea6AwXIfxwcteFim+RWIBpspN ZtOpWdkDZnX4QSUnpHu/11QvKGSCbwZV/o8ZbN5aSX2/f8IhM4oXZ+BY+ifCHa2j nwYzdDWp5xRWF7QcGz8BDuZBIzWJyg3/fRg8dIcjUbN8Iy9xLsLA4UwPcMmbvX+8 MbuGECrJfMxVh7e7+dsqxl4f4EGQ674lUKlD2wEbkZzTkVN7/v9+XlK+m9CgeYgI 20K5oIc8AGb/Bd0f6gsKA2b2S/BHLKxFFSarwKEaLCIyA9bpRFiKDl9IoMnUFS3Q V6UtcDzi0vPJJIm293TYDlwWjVGhgIOGaS2SFF0WT8qmLl4dJgFvKwicmYtfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFibU//UVbrDDcFSX+mVeIRHhhpAwHwYDVR0j BBgwFoAU6x3NMhAxwCkOAAiLMI9uN/ZY8PAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2NmMDFlYzYtOGU4OS00MDJhLTkwYzctNTBjNmYxNGNkMjQyLzAvRUIxRENEMzIx MDMxQzAyOTBFMDAwODhCMzA4RjZFMzdGNjU4RjBGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQjFEQ0QzMjEwMzFDMDI5MEUwMDA4OEIzMDhGNkUzN0Y2NThG MEYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2NmMDFlYzYtOGU4OS00MDJhLTkw YzctNTBjNmYxNGNkMjQyLzAvRUIxRENEMzIxMDMxQzAyOTBFMDAwODhCMzA4RjZF MzdGNjU4RjBGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAv4qZMvQJl0/UPBSJv6Wo2O17Mn8vBV7a/d cxJJtME3Cq5lbGzughICVNQnsYQyQ3XNruQ8bFpl0ICLoJWRzQJPVLMPaNMktrgf /OauJQZU+i25D1KYd09huflxCwaQ4i0piKz77awH+xmsKsSAhVOg33ewtwKanrSi thgRxFJrRtCfHNn6BfSC7TQ3ZT5THSPjX61FGLLkscFedALhKeCqQQguHpOM/GVb jpMjbNwn0iijcbQU5fyfqrF7wdZBQpEraKzP4EcY5PrdI+7UAmqqHfIfWtB7hd1M ZbYgZRBtzWNDBxKXsbWBA4e+oVjUTePU5nZnmGhiwpoyHktClUk= -----END CERTIFICATE-----Generated at Mon Sep 21 23:46:32 2026 by rpki-client