$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft File: EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft (raw, json) Hash identifier: Queq9GZ8VknAvn0yvaSbZa6U5DeOi3xRVo6Uw+WRz/U= Subject key identifier: 05:B5:0F:B0:8A:B5:38:C4:3D:1F:C9:54:E3:0A:F2:82:86:36:06:9A Authority key identifier: EA:F1:1A:8E:D0:35:AD:ED:15:9E:09:77:A5:5B:8A:13:5A:2D:BA:F0 Certificate issuer: /CN=EAF11A8ED035ADED159E0977A55B8A135A2DBAF0 Certificate serial: 5AD763FCB9985977FE26E11E600281609C289FB6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft Manifest number: BC Signing time: Sun 20 Sep 2026 18:24:30 +0000 Manifest this update: Sun 20 Sep 2026 18:19:30 +0000 Manifest next update: Mon 21 Sep 2026 21:32:30 +0000 Files and hashes: 1: 3132312e3130312e3139302e302f32342d3234203d3e203338373835.roa (hash: kOLyF61iZDyTGCpcXoqG6pGYD92Lf55fGKKsSX0XUdE=) 2: 3132312e3130312e3139312e302f32342d3234203d3e203338373835.roa (hash: hd0faeOSPJPRBzPByoIXVnw8NPD4bzR2wSWzwHgoQPA=) 3: 3132312e3130312e3138352e302f32342d3234203d3e203338373835.roa (hash: njy5/kh9KsnXyn0A9UeBHDQF9Tkk8vaMqIfNa9Qx8CA=) 4: 3132312e3130312e3138362e302f32342d3234203d3e203338373835.roa (hash: o0yYhvbuoFqhEPym4z+ZdJk3Le3FK4ab18rxhmTiTA8=) 5: 3132312e3130312e3138382e302f32342d3234203d3e203338373835.roa (hash: jtsuDztEZ+UqFnwxVIum5heFrLrZtRBLCrlDOZVW974=) 6: EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.crl (hash: Am8RK5ym9cVgYh90uKJ1i/PB1YojpBPEl03lQFvl2Hk=) 7: 3132312e3130312e3138342e302f32342d3234203d3e203338373835.roa (hash: 3mA7+mzgag84qW1ECVIx+vVoMA11/hm1+8F3im5FSgM=) 8: 3132312e3130312e3138372e302f32342d3234203d3e203338373835.roa (hash: eow5kZw+wlYHSjxq5MYrTPBsAbbgLnc6v4ENArx4+O8=) 9: 3132312e3130312e3138392e302f32342d3234203d3e203338373835.roa (hash: pWwlBOgo0c3x6IIcXfvg9KBIWmKkPWfxlYAnYQTVkEg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.crl rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:d7:63:fc:b9:98:59:77:fe:26:e1:1e:60:02:81:60:9c:28:9f:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAF11A8ED035ADED159E0977A55B8A135A2DBAF0 Validity Not Before: Sep 20 18:19:30 2026 GMT Not After : Sep 21 21:32:30 2026 GMT Subject: CN=05B50FB08AB538C43D1FC954E30AF2828636069A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:79:94:26:38:dc:f8:46:a5:52:58:ac:1a:98: ac:ae:3f:ba:d7:08:f7:ad:c6:72:50:84:c6:f1:79: ce:30:bc:9e:56:c1:6f:f1:b6:bb:9e:3f:f4:4c:ef: 7a:86:22:3a:87:c2:04:18:13:86:c0:ca:3f:02:83: 09:59:6d:10:1f:c3:77:17:cd:01:b5:2e:d8:8f:2d: ff:9e:4e:b1:a2:ed:73:82:79:cf:b0:80:b7:4a:63: bf:c3:06:15:cc:11:94:bb:ba:59:5c:7b:a6:bb:98: 11:97:f3:d4:1b:b5:74:86:4d:06:ee:1c:00:a8:19: 67:af:c0:e9:5c:4e:e6:cb:86:ba:47:91:13:14:73: 23:b5:94:a4:01:b9:42:8b:87:1d:61:31:ee:7f:31: 74:0b:cd:38:26:9d:b6:b3:5f:3a:d8:4b:d2:5b:db: a9:39:71:dc:72:74:5a:fe:0f:b3:6b:e7:95:3e:0c: 95:2f:f0:e6:28:b7:51:23:54:a3:99:10:db:d3:6f: bb:3a:be:5b:9e:fe:cf:2d:ba:f5:5a:17:94:30:05: 0a:db:df:19:0a:67:22:3b:5f:5e:a4:0a:f2:b7:88: 02:b1:4d:6a:67:f3:a8:c8:88:6d:f4:cc:aa:29:61: 92:1f:30:43:5b:9c:90:58:b6:e4:43:5f:6a:40:22: a0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:B5:0F:B0:8A:B5:38:C4:3D:1F:C9:54:E3:0A:F2:82:86:36:06:9A X509v3 Authority Key Identifier: keyid:EA:F1:1A:8E:D0:35:AD:ED:15:9E:09:77:A5:5B:8A:13:5A:2D:BA:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:07:93:23:8b:f7:d1:95:4a:05:c6:27:e0:fc:68:32:c6:a8: 7e:0a:16:75:b2:79:3c:e3:8a:9b:13:f6:17:a9:24:f0:0a:c5: b2:7a:79:45:89:ba:aa:c3:75:68:1e:a4:fc:dc:f8:f1:36:f0: b4:fc:d8:60:0d:4f:53:a9:d8:ea:87:14:aa:3d:72:0f:ce:09: 1d:a6:7f:68:5e:3d:e1:28:5c:56:b5:e7:1b:23:a0:c0:ca:3d: e8:c4:1b:99:cf:22:9a:cc:22:7b:1b:55:4b:18:f4:a8:b7:44: d9:dc:8e:21:fa:57:fe:9c:74:63:d4:6a:2d:17:41:dd:c6:13: a5:ea:3d:e5:ff:d7:73:f6:fe:6f:ef:3e:33:78:0e:aa:a3:42: 87:59:60:9c:d5:7c:e7:c7:64:6e:df:db:93:8f:eb:0d:2a:d3: 85:25:dc:71:c6:71:f6:46:f0:d5:d2:e2:05:51:25:16:e3:5d: e6:a5:41:8f:8f:79:bf:ad:e2:7e:09:eb:31:70:ae:6e:aa:c1: 4d:37:d9:8e:fc:2f:b0:ce:46:6f:77:2f:e6:b4:2c:2f:a4:f1: 7b:d2:18:03:5e:0d:f8:e2:88:59:27:f6:43:b5:e1:c7:de:b9: 3d:5f:9f:e1:60:8d:30:5b:2c:58:30:79:27:f9:4d:dc:c9:3e: 5b:21:65:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWtdj/LmYWXf+JuEeYAKBYJwon7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFGMTFBOEVEMDM1QURFRDE1OUUwOTc3QTU1QjhBMTM1 QTJEQkFGMDAeFw0yNjA5MjAxODE5MzBaFw0yNjA5MjEyMTMyMzBaMDMxMTAvBgNV BAMTKDA1QjUwRkIwOEFCNTM4QzQzRDFGQzk1NEUzMEFGMjgyODYzNjA2OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkeZQmONz4RqVSWKwamKyuP7rX CPetxnJQhMbxec4wvJ5WwW/xtrueP/RM73qGIjqHwgQYE4bAyj8CgwlZbRAfw3cX zQG1LtiPLf+eTrGi7XOCec+wgLdKY7/DBhXMEZS7ullce6a7mBGX89QbtXSGTQbu HACoGWevwOlcTubLhrpHkRMUcyO1lKQBuUKLhx1hMe5/MXQLzTgmnbazXzrYS9Jb 26k5cdxydFr+D7Nr55U+DJUv8OYot1EjVKOZENvTb7s6vlue/s8tuvVaF5QwBQrb 3xkKZyI7X16kCvK3iAKxTWpn86jIiG30zKopYZIfMENbnJBYtuRDX2pAIqA1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBbUPsIq1OMQ9H8lU4wrygoY2BpowHwYDVR0j BBgwFoAU6vEajtA1re0Vngl3pVuKE1otuvAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTU3MmRmYmUtNGNhMC00YTQ2LTgwMzctNDk2OGVkOTdjYWRjLzAvRUFGMTFBOEVE MDM1QURFRDE1OUUwOTc3QTU1QjhBMTM1QTJEQkFGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQUYxMUE4RUQwMzVBREVEMTU5RTA5NzdBNTVCOEExMzVBMkRC QUYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTU3MmRmYmUtNGNhMC00YTQ2LTgw MzctNDk2OGVkOTdjYWRjLzAvRUFGMTFBOEVEMDM1QURFRDE1OUUwOTc3QTU1QjhB MTM1QTJEQkFGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHYHkyOL99GVSgXGJ+D8aDLGqH4KFnWyeTzj ipsT9hepJPAKxbJ6eUWJuqrDdWgepPzc+PE28LT82GANT1Op2OqHFKo9cg/OCR2m f2hePeEoXFa15xsjoMDKPejEG5nPIprMInsbVUsY9Ki3RNncjiH6V/6cdGPUai0X Qd3GE6XqPeX/13P2/m/vPjN4DqqjQodZYJzVfOfHZG7f25OP6w0q04Ul3HHGcfZG 8NXS4gVRJRbjXealQY+Peb+t4n4J6zFwrm6qwU032Y78L7DORm93L+a0LC+k8XvS GANeDfjiiFkn9kO14cfeuT1fn+FgjTBbLFgweSf5TdzJPlshZVw= -----END CERTIFICATE-----Generated at Sun Sep 20 23:30:57 2026 by rpki-client