$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft File: EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft (raw, json) Hash identifier: SCkQHGIjjLzncIoTSn5qkiJ60Q7wPYtWsgsDEYrJ764= Subject key identifier: 0D:CE:17:81:1D:CF:4F:FD:26:17:EE:01:B9:69:5B:46:88:30:04:BC Authority key identifier: EA:F1:BB:C2:E7:85:2A:08:EC:97:26:DF:03:7B:7A:90:02:0F:61:3C Certificate issuer: /CN=EAF1BBC2E7852A08EC9726DF037B7A90020F613C Certificate serial: 7E933FC3BE314CF65858DB845BDE5585DB436D87 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft Manifest number: FF Signing time: Mon 09 Nov 2026 05:58:02 +0000 Manifest this update: Mon 09 Nov 2026 05:53:02 +0000 Manifest next update: Tue 10 Nov 2026 08:27:02 +0000 Files and hashes: 1: 3130332e37362e3134392e302f32342d3234203d3e20313335343737.roa (hash: f59rz1HETJlgvZwIKtKFdh5XtKqyQqDaf24eWmjJW6o=) 2: 3130332e332e35382e302f32342d3234203d3e20313335343737.roa (hash: 2zqd8AgBddwBm4KIXvjiblLxU15/BrCCnreac7skVlA=) 3: 3130332e37362e3134382e302f32342d3234203d3e20313335343737.roa (hash: Tsm6R3Ykoq+qGUHJdq4ks8X4b5Uy0ypiE0/txgdjmm4=) 4: EAF1BBC2E7852A08EC9726DF037B7A90020F613C.crl (hash: WvD1nHzcn15uf94/tg686+iOxKPwNe8bt7yRy1kqWoY=) 5: 3130332e37362e3135312e302f32342d3234203d3e20313335343737.roa (hash: qw6OlEu48FrPsEmKgwHPSjOidfOJLUIet7s/2iStFrA=) 6: 3132302e38392e39302e302f32332d3234203d3e20313335343737.roa (hash: L8OlDd+zcMlp2nj6z/A4ihQhVRTYQCBk+qSvJaFpcus=) 7: 3230332e32392e32362e302f32342d3234203d3e20313335343737.roa (hash: 5DkSgMYDvgEBxCCplmwfDoevI8VI5H/bGiFDzCRHnts=) 8: 323430373a366638303a3a2f33322d3438203d3e20313335343737.roa (hash: P366bIkTOlc69Ppfa9a3mTWNreZ6tb8vIXj7vOkMLBM=) 9: 3130332e37362e3135302e302f32342d3234203d3e20313335343737.roa (hash: xYxE6IzCdxb+aq4Kkm/AnjYa+vu3xdG+mLXx5vkCP/U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.crl rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:93:3f:c3:be:31:4c:f6:58:58:db:84:5b:de:55:85:db:43:6d:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAF1BBC2E7852A08EC9726DF037B7A90020F613C Validity Not Before: Nov 9 05:53:02 2026 GMT Not After : Nov 10 08:27:02 2026 GMT Subject: CN=0DCE17811DCF4FFD2617EE01B9695B46883004BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b5:45:76:5f:4f:87:53:69:99:86:c7:da:70: 46:11:59:59:96:c8:6b:55:5e:47:40:f4:8c:ce:9d: 4b:d8:da:6d:4f:9a:00:7b:5c:a1:77:87:57:ba:d1: 5e:6f:55:13:48:9b:cc:be:e0:8b:81:d6:0e:c1:4e: 68:e9:93:57:c1:8d:4c:19:b3:d0:57:4a:03:7c:db: de:ed:19:ba:0d:39:da:3a:1c:36:26:d2:15:38:95: f2:f8:e3:ef:e0:2d:74:97:64:4f:d7:3d:12:77:bf: 9b:73:f9:a8:db:7c:5e:5b:cd:cc:81:85:3c:ad:b6: 04:cb:c4:a7:61:25:4e:e2:2b:a3:ee:73:35:a3:68: 07:fe:0c:1d:b5:ab:dd:82:56:ba:e7:09:64:e6:fe: 07:a5:dc:f8:3c:25:58:ef:67:06:13:a8:38:29:dd: 50:37:ab:cb:dd:72:3a:79:26:cf:3e:bd:16:05:a5: ea:ed:45:f5:c5:97:db:5a:b5:72:82:d7:dc:1a:94: e9:3f:b7:74:17:a3:08:bb:8d:b2:46:5f:96:68:6e: ff:60:84:d6:22:a0:46:55:a3:a4:d8:ea:fc:80:cc: 74:9d:c5:55:5e:d2:58:06:ee:97:b5:60:0d:0e:89: 58:8d:ed:37:d9:e6:5b:04:25:86:82:39:5f:bd:77: 38:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:CE:17:81:1D:CF:4F:FD:26:17:EE:01:B9:69:5B:46:88:30:04:BC X509v3 Authority Key Identifier: keyid:EA:F1:BB:C2:E7:85:2A:08:EC:97:26:DF:03:7B:7A:90:02:0F:61:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:6e:75:b8:21:e7:77:89:d7:e2:21:3f:ec:4e:d2:db:08:82: 25:de:82:cd:5f:f6:c4:19:f8:2d:f0:48:ae:78:36:00:5b:e2: 46:ef:5b:b3:5d:9a:51:7f:47:5c:c3:cc:2f:93:29:46:7b:a4: 14:d3:ef:bc:4e:09:be:1d:7f:82:25:26:ed:09:13:06:a7:a4: 41:31:d8:fa:95:3f:d3:93:e3:34:8f:d7:67:2f:d0:87:28:8c: ae:75:91:a6:a7:7e:ec:72:f0:28:3a:3b:96:fc:28:5e:0a:2e: cf:ea:ea:8e:70:20:d4:d0:6d:c1:1e:77:50:9d:a9:a2:ab:d1: c8:0a:08:66:78:a8:38:c7:c9:16:d5:29:c3:54:c0:bd:93:fb: 75:b9:f8:06:6d:d0:ca:6b:01:86:1c:de:c8:22:87:e4:ff:06: 7c:3a:ea:41:9e:31:b5:9c:32:17:74:3f:5a:61:cd:5a:5e:9f: 4f:44:fd:74:7f:98:e2:15:f7:0b:f5:5f:5e:9d:64:53:a5:d4: ea:13:6b:38:7e:5e:98:9a:b4:9b:59:01:75:c0:aa:2f:25:09: 8f:3c:48:5d:b1:61:f8:71:97:76:ac:d3:75:d9:50:a8:e2:3e: 3e:00:46:63:fa:4a:45:dc:4d:8f:e0:fd:6a:72:ae:6e:ce:74: 05:95:e3:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfpM/w74xTPZYWNuEW95VhdtDbYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFGMUJCQzJFNzg1MkEwOEVDOTcyNkRGMDM3QjdBOTAw MjBGNjEzQzAeFw0yNjExMDkwNTUzMDJaFw0yNjExMTAwODI3MDJaMDMxMTAvBgNV BAMTKDBEQ0UxNzgxMURDRjRGRkQyNjE3RUUwMUI5Njk1QjQ2ODgzMDA0QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8tUV2X0+HU2mZhsfacEYRWVmW yGtVXkdA9IzOnUvY2m1PmgB7XKF3h1e60V5vVRNIm8y+4IuB1g7BTmjpk1fBjUwZ s9BXSgN8297tGboNOdo6HDYm0hU4lfL44+/gLXSXZE/XPRJ3v5tz+ajbfF5bzcyB hTyttgTLxKdhJU7iK6PuczWjaAf+DB21q92CVrrnCWTm/gel3Pg8JVjvZwYTqDgp 3VA3q8vdcjp5Js8+vRYFpertRfXFl9tatXKC19walOk/t3QXowi7jbJGX5Zobv9g hNYioEZVo6TY6vyAzHSdxVVe0lgG7pe1YA0OiViN7TfZ5lsEJYaCOV+9dzidAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDc4XgR3PT/0mF+4BuWlbRogwBLwwHwYDVR0j BBgwFoAU6vG7wueFKgjslybfA3t6kAIPYTwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTdmZGY0M2UtNGE0Yy00ZGJjLWI3ODUtZGQ3Y2JmMWE2N2I3LzAvRUFGMUJCQzJF Nzg1MkEwOEVDOTcyNkRGMDM3QjdBOTAwMjBGNjEzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQUYxQkJDMkU3ODUyQTA4RUM5NzI2REYwMzdCN0E5MDAyMEY2 MTNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTdmZGY0M2UtNGE0Yy00ZGJjLWI3 ODUtZGQ3Y2JmMWE2N2I3LzAvRUFGMUJCQzJFNzg1MkEwOEVDOTcyNkRGMDM3QjdB OTAwMjBGNjEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACNudbgh53eJ1+IhP+xO0tsIgiXegs1f9sQZ +C3wSK54NgBb4kbvW7NdmlF/R1zDzC+TKUZ7pBTT77xOCb4df4IlJu0JEwanpEEx 2PqVP9OT4zSP12cv0IcojK51kaanfuxy8Cg6O5b8KF4KLs/q6o5wINTQbcEed1Cd qaKr0cgKCGZ4qDjHyRbVKcNUwL2T+3W5+AZt0MprAYYc3sgih+T/Bnw66kGeMbWc Mhd0P1phzVpen09E/XR/mOIV9wv1X16dZFOl1OoTazh+XpiatJtZAXXAqi8lCY88 SF2xYfhxl3as03XZUKjiPj4ARmP6SkXcTY/g/Wpyrm7OdAWV47k= -----END CERTIFICATE-----Generated at Mon Nov 9 22:27:09 2026 by rpki-client