$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft File: EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft (raw, json) Hash identifier: nofzYg9UEgyK59EgsorgkTqnDwO2WeR7KnyE1SaX6jk= Subject key identifier: A5:B4:C4:7D:F6:30:26:45:8B:55:BC:92:39:BF:2B:39:9F:00:BF:F4 Authority key identifier: EA:F1:1A:8E:D0:35:AD:ED:15:9E:09:77:A5:5B:8A:13:5A:2D:BA:F0 Certificate issuer: /CN=EAF11A8ED035ADED159E0977A55B8A135A2DBAF0 Certificate serial: 1C7A5378F59CE3AA6977EBA9F15682945587B56E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft Manifest number: 0105 Signing time: Sun 15 Nov 2026 11:23:08 +0000 Manifest this update: Sun 15 Nov 2026 11:18:08 +0000 Manifest next update: Mon 16 Nov 2026 13:31:08 +0000 Files and hashes: 1: 3132312e3130312e3138372e302f32342d3234203d3e203338373835.roa (hash: eow5kZw+wlYHSjxq5MYrTPBsAbbgLnc6v4ENArx4+O8=) 2: 3132312e3130312e3138382e302f32342d3234203d3e203338373835.roa (hash: jtsuDztEZ+UqFnwxVIum5heFrLrZtRBLCrlDOZVW974=) 3: EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.crl (hash: 4nYIckD+VgzgiwniNACV7uzmqI8u9zn4rnxhiUadFrE=) 4: 3132312e3130312e3139312e302f32342d3234203d3e203338373835.roa (hash: hd0faeOSPJPRBzPByoIXVnw8NPD4bzR2wSWzwHgoQPA=) 5: 3132312e3130312e3138342e302f32342d3234203d3e203338373835.roa (hash: 3mA7+mzgag84qW1ECVIx+vVoMA11/hm1+8F3im5FSgM=) 6: 3132312e3130312e3138392e302f32342d3234203d3e203338373835.roa (hash: pWwlBOgo0c3x6IIcXfvg9KBIWmKkPWfxlYAnYQTVkEg=) 7: 3132312e3130312e3138362e302f32342d3234203d3e203338373835.roa (hash: o0yYhvbuoFqhEPym4z+ZdJk3Le3FK4ab18rxhmTiTA8=) 8: 3132312e3130312e3139302e302f32342d3234203d3e203338373835.roa (hash: kOLyF61iZDyTGCpcXoqG6pGYD92Lf55fGKKsSX0XUdE=) 9: 3132312e3130312e3138352e302f32342d3234203d3e203338373835.roa (hash: njy5/kh9KsnXyn0A9UeBHDQF9Tkk8vaMqIfNa9Qx8CA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.crl rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:7a:53:78:f5:9c:e3:aa:69:77:eb:a9:f1:56:82:94:55:87:b5:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAF11A8ED035ADED159E0977A55B8A135A2DBAF0 Validity Not Before: Nov 15 11:18:08 2026 GMT Not After : Nov 16 13:31:08 2026 GMT Subject: CN=A5B4C47DF63026458B55BC9239BF2B399F00BFF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3b:78:24:8b:0e:0a:74:66:f3:1b:18:58:ee: 5c:21:37:32:13:ae:48:70:83:89:c5:d6:70:fa:a0: 09:a0:8c:04:9e:f7:bc:10:81:64:e1:02:a9:fc:40: 39:e2:45:c4:cb:56:95:34:61:89:3d:34:ce:f8:ab: 4d:02:61:c0:05:f1:f8:4d:57:0d:34:b0:86:e2:1f: 9a:b7:7a:4b:ec:52:5f:18:d6:5d:77:69:13:fc:a6: 28:fd:72:5f:a3:3b:7c:a9:5d:13:c3:dc:57:e7:2d: 9a:ea:2e:a2:9b:e8:4e:a3:46:89:bd:de:e6:83:d8: 2a:fb:45:db:ef:a9:05:db:62:a0:46:1a:62:2e:82: f5:ca:ad:c2:5a:1a:69:f2:d8:bb:12:60:8e:35:b4: 95:03:26:68:55:ab:6e:6d:39:f3:ab:e6:43:7a:aa: db:e9:b2:bc:09:a5:9f:88:d6:58:b5:c2:10:5a:9f: 10:c8:af:05:64:46:ba:8d:a2:3a:37:a4:f0:0d:91: d1:2a:47:ff:36:5c:36:d6:49:8d:c2:db:e2:35:15: 04:df:e0:ac:ad:91:83:73:cf:3d:3a:9c:6c:f5:fa: 2f:8d:7d:6b:23:0c:32:db:bc:ee:05:9a:96:8d:23: 0e:e6:6c:d6:f2:f3:db:4c:e0:37:ce:d2:51:c3:61: 55:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:B4:C4:7D:F6:30:26:45:8B:55:BC:92:39:BF:2B:39:9F:00:BF:F4 X509v3 Authority Key Identifier: keyid:EA:F1:1A:8E:D0:35:AD:ED:15:9E:09:77:A5:5B:8A:13:5A:2D:BA:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:cf:d3:96:ea:89:1a:9d:42:43:67:39:aa:57:b7:18:d0:e1: dd:37:36:69:2d:4f:a7:23:45:d4:a9:0c:fd:fd:74:ba:2f:8c: da:6c:e1:61:87:9c:17:dc:1a:01:20:db:bf:10:24:a1:60:2b: 57:d9:22:c2:37:45:73:61:0b:70:17:1d:ac:93:99:e4:7c:55: a2:30:cf:95:78:de:c4:4a:a1:0c:e6:02:9b:7b:37:0d:34:c7: b2:0c:44:16:12:db:57:0d:8e:b6:72:d5:77:3e:eb:e8:a6:d1: 87:80:dc:94:e0:a3:b1:42:02:65:ee:33:1b:e0:bf:38:c1:45: 07:f3:66:4a:de:5e:b4:82:ec:30:eb:1c:53:8b:04:cf:58:89: 07:4f:f3:e3:4c:7c:cb:c2:ef:ba:0f:31:7a:af:10:ef:ae:fe: 6d:73:10:f0:ed:bb:3d:46:b3:47:d6:14:e3:94:73:03:5c:dc: 7c:a0:5a:69:79:2a:60:4e:b4:b3:7c:91:a9:45:32:52:0f:eb: b3:c4:79:c7:0b:b4:8d:22:99:cd:51:da:f3:59:28:46:4e:74: 64:a7:29:6e:0d:1a:34:26:65:c5:2c:aa:10:04:5f:c2:7f:71: 56:c0:1a:66:71:38:5a:f7:14:7a:45:2b:8c:b1:09:20:5e:2f: 8a:e5:ff:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHHpTePWc46ppd+up8VaClFWHtW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFGMTFBOEVEMDM1QURFRDE1OUUwOTc3QTU1QjhBMTM1 QTJEQkFGMDAeFw0yNjExMTUxMTE4MDhaFw0yNjExMTYxMzMxMDhaMDMxMTAvBgNV BAMTKEE1QjRDNDdERjYzMDI2NDU4QjU1QkM5MjM5QkYyQjM5OUYwMEJGRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8O3gkiw4KdGbzGxhY7lwhNzIT rkhwg4nF1nD6oAmgjASe97wQgWThAqn8QDniRcTLVpU0YYk9NM74q00CYcAF8fhN Vw00sIbiH5q3ekvsUl8Y1l13aRP8pij9cl+jO3ypXRPD3FfnLZrqLqKb6E6jRom9 3uaD2Cr7RdvvqQXbYqBGGmIugvXKrcJaGmny2LsSYI41tJUDJmhVq25tOfOr5kN6 qtvpsrwJpZ+I1li1whBanxDIrwVkRrqNojo3pPANkdEqR/82XDbWSY3C2+I1FQTf 4KytkYNzzz06nGz1+i+NfWsjDDLbvO4FmpaNIw7mbNby89tM4DfO0lHDYVVzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpbTEffYwJkWLVbySOb8rOZ8Av/QwHwYDVR0j BBgwFoAU6vEajtA1re0Vngl3pVuKE1otuvAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTU3MmRmYmUtNGNhMC00YTQ2LTgwMzctNDk2OGVkOTdjYWRjLzAvRUFGMTFBOEVE MDM1QURFRDE1OUUwOTc3QTU1QjhBMTM1QTJEQkFGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQUYxMUE4RUQwMzVBREVEMTU5RTA5NzdBNTVCOEExMzVBMkRC QUYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTU3MmRmYmUtNGNhMC00YTQ2LTgw MzctNDk2OGVkOTdjYWRjLzAvRUFGMTFBOEVEMDM1QURFRDE1OUUwOTc3QTU1QjhB MTM1QTJEQkFGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADHP05bqiRqdQkNnOapXtxjQ4d03NmktT6cj RdSpDP39dLovjNps4WGHnBfcGgEg278QJKFgK1fZIsI3RXNhC3AXHayTmeR8VaIw z5V43sRKoQzmApt7Nw00x7IMRBYS21cNjrZy1Xc+6+im0YeA3JTgo7FCAmXuMxvg vzjBRQfzZkreXrSC7DDrHFOLBM9YiQdP8+NMfMvC77oPMXqvEO+u/m1zEPDtuz1G s0fWFOOUcwNc3HygWml5KmBOtLN8kalFMlIP67PEeccLtI0imc1R2vNZKEZOdGSn KW4NGjQmZcUsqhAEX8J/cVbAGmZxOFr3FHpFK4yxCSBeL4rl/+Y= -----END CERTIFICATE-----Generated at Sun Nov 15 21:52:47 2026 by rpki-client