$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft File: EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft (raw, json) Hash identifier: 1+E+b3L6yPF5rOChNepcWeGZVX4Gd51fu4mIHY8APuI= Subject key identifier: 90:F9:4C:8C:C9:B3:ED:FB:40:1E:C0:AD:A6:1A:51:90:5F:88:79:CE Authority key identifier: EA:F1:BB:C2:E7:85:2A:08:EC:97:26:DF:03:7B:7A:90:02:0F:61:3C Certificate issuer: /CN=EAF1BBC2E7852A08EC9726DF037B7A90020F613C Certificate serial: 60BED3F16D0213DA3E73BF78557DA8B0C207E59D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft Manifest number: BE Signing time: Mon 21 Sep 2026 13:23:08 +0000 Manifest this update: Mon 21 Sep 2026 13:18:08 +0000 Manifest next update: Tue 22 Sep 2026 16:38:08 +0000 Files and hashes: 1: 3130332e332e35382e302f32342d3234203d3e20313335343737.roa (hash: 2zqd8AgBddwBm4KIXvjiblLxU15/BrCCnreac7skVlA=) 2: 3130332e37362e3135312e302f32342d3234203d3e20313335343737.roa (hash: qw6OlEu48FrPsEmKgwHPSjOidfOJLUIet7s/2iStFrA=) 3: 3230332e32392e32362e302f32342d3234203d3e20313335343737.roa (hash: 5DkSgMYDvgEBxCCplmwfDoevI8VI5H/bGiFDzCRHnts=) 4: 3130332e37362e3135302e302f32342d3234203d3e20313335343737.roa (hash: xYxE6IzCdxb+aq4Kkm/AnjYa+vu3xdG+mLXx5vkCP/U=) 5: 323430373a366638303a3a2f33322d3438203d3e20313335343737.roa (hash: P366bIkTOlc69Ppfa9a3mTWNreZ6tb8vIXj7vOkMLBM=) 6: 3132302e38392e39302e302f32332d3234203d3e20313335343737.roa (hash: L8OlDd+zcMlp2nj6z/A4ihQhVRTYQCBk+qSvJaFpcus=) 7: 3130332e37362e3134382e302f32342d3234203d3e20313335343737.roa (hash: Tsm6R3Ykoq+qGUHJdq4ks8X4b5Uy0ypiE0/txgdjmm4=) 8: EAF1BBC2E7852A08EC9726DF037B7A90020F613C.crl (hash: BjBPcSQfQKO4+gWZJ2NuqrT5NR1jj8QYEAmfO0TOQYo=) 9: 3130332e37362e3134392e302f32342d3234203d3e20313335343737.roa (hash: f59rz1HETJlgvZwIKtKFdh5XtKqyQqDaf24eWmjJW6o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.crl rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:be:d3:f1:6d:02:13:da:3e:73:bf:78:55:7d:a8:b0:c2:07:e5:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAF1BBC2E7852A08EC9726DF037B7A90020F613C Validity Not Before: Sep 21 13:18:08 2026 GMT Not After : Sep 22 16:38:08 2026 GMT Subject: CN=90F94C8CC9B3EDFB401EC0ADA61A51905F8879CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:68:38:dc:3e:5b:40:27:86:bc:11:bc:0b:72: eb:ac:4b:f0:55:b5:46:56:fd:1c:44:7d:60:ef:af: 9b:b2:e2:d5:6d:57:ab:1a:9c:be:5a:9d:0a:66:ba: e6:f6:f0:a0:14:32:4e:d3:8b:11:eb:ad:51:8c:90: 18:db:83:69:a9:30:be:16:e4:59:7a:74:65:cd:23: cb:a8:a0:bf:b8:a6:d9:b0:12:53:19:51:a4:f2:99: cb:ec:89:f7:29:14:52:33:b4:e2:7d:49:b1:9d:3e: 37:96:7b:58:de:e2:1f:a8:fa:92:dd:1f:f6:74:4a: 6f:2b:0f:7d:36:8a:f7:aa:1a:d2:65:68:c2:f0:e0: e8:1a:da:32:d5:90:d2:bb:d2:4c:cc:6e:a5:b0:5b: 30:d2:62:26:cc:91:47:cc:3b:7b:1a:92:5b:40:93: 55:4f:a6:81:9a:ab:7e:8a:c4:82:01:7e:83:ed:29: bb:07:9c:2c:7a:43:57:f8:23:d8:b8:59:e6:46:1e: e4:c8:23:27:11:7a:a1:6c:f8:cc:24:37:52:8d:2f: 14:78:f1:cf:d2:88:d0:ef:e4:5d:2e:9b:a6:2e:64: 30:fd:67:24:90:5c:85:ed:c0:d0:81:de:12:0f:51: b6:68:13:11:34:83:f4:a4:db:71:7b:8b:ff:ee:60: 36:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F9:4C:8C:C9:B3:ED:FB:40:1E:C0:AD:A6:1A:51:90:5F:88:79:CE X509v3 Authority Key Identifier: keyid:EA:F1:BB:C2:E7:85:2A:08:EC:97:26:DF:03:7B:7A:90:02:0F:61:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:48:4c:27:8c:2d:03:09:5c:47:16:8c:a4:14:a1:cf:e1:a6: e4:b8:3c:40:af:0f:21:ce:7e:75:d5:6e:84:7a:80:96:fe:cb: 05:8f:1c:c6:53:14:5e:93:77:5e:62:2e:45:ab:cb:a7:40:d2: 9b:86:90:69:1e:5f:f6:80:b0:6d:93:fc:99:c4:04:42:3d:42: a5:ff:45:8e:0d:d7:0c:bb:07:bc:d6:71:78:bf:67:64:96:5c: f4:85:eb:2e:b2:90:a8:06:d9:28:3c:87:d5:37:ea:0a:7a:73: c4:1c:f5:d0:cc:4c:f4:f6:69:67:b5:09:55:6d:5e:34:99:ce: 8e:04:df:e7:b8:5f:0d:8f:90:bc:86:c3:07:a7:19:c5:93:02: c4:65:79:aa:3d:37:fb:c5:19:8d:ae:91:3a:08:47:be:d0:6e: e5:2e:ac:5b:39:7b:b2:ee:d4:da:9e:9b:e4:fc:12:9e:74:7d: 28:93:7b:41:2f:a5:7a:c5:16:db:d7:6d:5d:d1:c0:c9:d3:a9: 6b:ae:4a:84:ec:ee:a8:ce:c5:fe:fa:6e:4c:c6:5d:a0:30:cc: 04:0d:20:a9:00:3c:cc:67:cf:51:3b:c7:13:d9:73:25:43:67: 35:39:91:02:1a:9a:dc:55:61:36:ba:a7:e4:10:8f:f3:79:06: 29:20:36:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYL7T8W0CE9o+c794VX2osMIH5Z0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFGMUJCQzJFNzg1MkEwOEVDOTcyNkRGMDM3QjdBOTAw MjBGNjEzQzAeFw0yNjA5MjExMzE4MDhaFw0yNjA5MjIxNjM4MDhaMDMxMTAvBgNV BAMTKDkwRjk0QzhDQzlCM0VERkI0MDFFQzBBREE2MUE1MTkwNUY4ODc5Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0aDjcPltAJ4a8EbwLcuusS/BV tUZW/RxEfWDvr5uy4tVtV6sanL5anQpmuub28KAUMk7TixHrrVGMkBjbg2mpML4W 5Fl6dGXNI8uooL+4ptmwElMZUaTymcvsifcpFFIztOJ9SbGdPjeWe1je4h+o+pLd H/Z0Sm8rD302iveqGtJlaMLw4Oga2jLVkNK70kzMbqWwWzDSYibMkUfMO3sakltA k1VPpoGaq36KxIIBfoPtKbsHnCx6Q1f4I9i4WeZGHuTIIycReqFs+MwkN1KNLxR4 8c/SiNDv5F0um6YuZDD9ZySQXIXtwNCB3hIPUbZoExE0g/Sk23F7i//uYDb1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkPlMjMmz7ftAHsCtphpRkF+Iec4wHwYDVR0j BBgwFoAU6vG7wueFKgjslybfA3t6kAIPYTwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTdmZGY0M2UtNGE0Yy00ZGJjLWI3ODUtZGQ3Y2JmMWE2N2I3LzAvRUFGMUJCQzJF Nzg1MkEwOEVDOTcyNkRGMDM3QjdBOTAwMjBGNjEzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQUYxQkJDMkU3ODUyQTA4RUM5NzI2REYwMzdCN0E5MDAyMEY2 MTNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTdmZGY0M2UtNGE0Yy00ZGJjLWI3 ODUtZGQ3Y2JmMWE2N2I3LzAvRUFGMUJCQzJFNzg1MkEwOEVDOTcyNkRGMDM3QjdB OTAwMjBGNjEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACZITCeMLQMJXEcWjKQUoc/hpuS4PECvDyHO fnXVboR6gJb+ywWPHMZTFF6Td15iLkWry6dA0puGkGkeX/aAsG2T/JnEBEI9QqX/ RY4N1wy7B7zWcXi/Z2SWXPSF6y6ykKgG2Sg8h9U36gp6c8Qc9dDMTPT2aWe1CVVt XjSZzo4E3+e4Xw2PkLyGwwenGcWTAsRleao9N/vFGY2ukToIR77QbuUurFs5e7Lu 1Nqem+T8Ep50fSiTe0EvpXrFFtvXbV3RwMnTqWuuSoTs7qjOxf76bkzGXaAwzAQN IKkAPMxnz1E7xxPZcyVDZzU5kQIamtxVYTa6p+QQj/N5BikgNhE= -----END CERTIFICATE-----Generated at Mon Sep 21 23:03:35 2026 by rpki-client