$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft File: EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft (raw, json) Hash identifier: 32d9noLOy7g+6hEM9y0nAPcf7Mul4d2QsURYsdse1U4= Subject key identifier: 7A:BD:F9:FF:5D:AE:46:6C:F3:83:EE:C0:E3:C3:0C:08:87:18:3B:2C Authority key identifier: EA:F1:BB:C2:E7:85:2A:08:EC:97:26:DF:03:7B:7A:90:02:0F:61:3C Certificate issuer: /CN=EAF1BBC2E7852A08EC9726DF037B7A90020F613C Certificate serial: 12B819F5E72F3B757BC9CD55D2DDC40564AA6538 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft Manifest number: BD Signing time: Sun 20 Sep 2026 18:24:36 +0000 Manifest this update: Sun 20 Sep 2026 18:19:36 +0000 Manifest next update: Mon 21 Sep 2026 21:21:36 +0000 Files and hashes: 1: 3132302e38392e39302e302f32332d3234203d3e20313335343737.roa (hash: L8OlDd+zcMlp2nj6z/A4ihQhVRTYQCBk+qSvJaFpcus=) 2: 3230332e32392e32362e302f32342d3234203d3e20313335343737.roa (hash: 5DkSgMYDvgEBxCCplmwfDoevI8VI5H/bGiFDzCRHnts=) 3: 3130332e37362e3135302e302f32342d3234203d3e20313335343737.roa (hash: xYxE6IzCdxb+aq4Kkm/AnjYa+vu3xdG+mLXx5vkCP/U=) 4: EAF1BBC2E7852A08EC9726DF037B7A90020F613C.crl (hash: 7CBkU5qaSbnDe6BZE2A5YY8AfKswNzegWq/VyO5BFDQ=) 5: 323430373a366638303a3a2f33322d3438203d3e20313335343737.roa (hash: P366bIkTOlc69Ppfa9a3mTWNreZ6tb8vIXj7vOkMLBM=) 6: 3130332e37362e3134392e302f32342d3234203d3e20313335343737.roa (hash: f59rz1HETJlgvZwIKtKFdh5XtKqyQqDaf24eWmjJW6o=) 7: 3130332e37362e3134382e302f32342d3234203d3e20313335343737.roa (hash: Tsm6R3Ykoq+qGUHJdq4ks8X4b5Uy0ypiE0/txgdjmm4=) 8: 3130332e332e35382e302f32342d3234203d3e20313335343737.roa (hash: 2zqd8AgBddwBm4KIXvjiblLxU15/BrCCnreac7skVlA=) 9: 3130332e37362e3135312e302f32342d3234203d3e20313335343737.roa (hash: qw6OlEu48FrPsEmKgwHPSjOidfOJLUIet7s/2iStFrA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.crl rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 21:21:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:b8:19:f5:e7:2f:3b:75:7b:c9:cd:55:d2:dd:c4:05:64:aa:65:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAF1BBC2E7852A08EC9726DF037B7A90020F613C Validity Not Before: Sep 20 18:19:36 2026 GMT Not After : Sep 21 21:21:36 2026 GMT Subject: CN=7ABDF9FF5DAE466CF383EEC0E3C30C0887183B2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2f:d6:b1:84:46:13:23:32:c5:00:63:c6:3c: 0f:f4:ad:64:dc:47:3e:53:40:43:54:71:6a:91:20: 5d:c4:20:fb:2c:f0:41:ba:9a:b9:46:53:78:54:59: 07:5e:92:75:d0:f5:58:be:04:9b:54:55:a8:de:6b: ca:d3:42:d0:e3:a4:7b:c1:d6:ce:66:74:cb:a4:68: 4d:fc:b1:c3:08:f3:92:3b:f7:93:a1:bf:db:39:89: a5:3f:6d:10:91:47:71:3b:55:45:15:a2:a7:f5:48: ce:fd:3a:b8:3e:69:b3:13:68:cd:c2:dc:88:70:96: 08:c6:2e:ad:07:b2:ef:eb:14:c5:8e:3c:34:74:37: 7d:49:67:22:fc:df:f7:43:70:4a:b6:ac:79:52:f2: f7:8c:06:36:95:e3:14:2b:4f:43:72:fc:69:f5:85: c6:50:28:15:61:13:ea:23:ba:22:ab:19:b8:1f:c6: 6b:ab:3a:93:aa:c5:81:7c:f1:42:9d:bf:4e:5d:5b: f1:ce:be:87:28:75:4b:8a:7e:38:b4:6d:c0:25:d0: 23:87:31:e3:7b:64:a0:d6:50:19:c7:6a:4a:24:c1: 8c:a6:c8:db:47:d8:cf:0a:3e:0b:47:8d:18:10:5e: 39:7e:e1:18:6c:c7:3c:0d:82:81:9e:ec:d0:40:1d: f0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:BD:F9:FF:5D:AE:46:6C:F3:83:EE:C0:E3:C3:0C:08:87:18:3B:2C X509v3 Authority Key Identifier: keyid:EA:F1:BB:C2:E7:85:2A:08:EC:97:26:DF:03:7B:7A:90:02:0F:61:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:51:92:5c:48:a6:24:b8:bf:4c:a2:07:ba:2b:fa:ae:be:a4: 71:13:1c:99:a1:1e:2a:e6:c6:b4:a8:72:90:1b:d0:18:a4:d4: 2f:9f:7a:32:30:ae:5b:c1:b4:5e:3c:92:44:34:19:c9:df:5e: 55:f7:c9:b2:7a:32:24:60:8c:ec:4d:7f:68:66:56:6b:ff:49: dc:57:45:c6:b3:4a:c9:39:2b:0c:94:3d:31:71:0a:f8:17:c3: 7e:ff:0b:d3:ca:69:f7:6d:27:09:19:76:74:54:33:f9:2f:6c: 90:5a:f3:17:5d:c3:4f:42:14:c6:6a:a1:81:a9:5b:22:d8:f3: c2:45:53:17:bc:b3:d6:10:51:31:71:f1:29:b5:cf:9f:4d:a6: 56:eb:81:9e:21:34:41:37:c7:1f:e0:ec:d3:27:66:e2:b4:a9: dc:01:47:8c:83:40:e5:46:13:c6:27:2a:c0:16:11:57:b6:e7: 59:b5:08:de:48:e3:cd:8a:b6:44:56:ae:0c:7c:a3:bd:e1:77: 73:4c:1a:5a:10:fe:5a:51:5d:c7:2c:e1:4f:d1:45:09:0f:f1: d0:7b:16:b3:1b:1e:0d:e2:81:be:92:8a:25:5a:a7:82:90:5c: a6:e2:ef:3d:4a:1d:32:de:16:d8:0e:c0:7f:9d:ae:37:aa:19: 3c:26:73:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUErgZ9ecvO3V7yc1V0t3EBWSqZTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFGMUJCQzJFNzg1MkEwOEVDOTcyNkRGMDM3QjdBOTAw MjBGNjEzQzAeFw0yNjA5MjAxODE5MzZaFw0yNjA5MjEyMTIxMzZaMDMxMTAvBgNV BAMTKDdBQkRGOUZGNURBRTQ2NkNGMzgzRUVDMEUzQzMwQzA4ODcxODNCMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaL9axhEYTIzLFAGPGPA/0rWTc Rz5TQENUcWqRIF3EIPss8EG6mrlGU3hUWQdeknXQ9Vi+BJtUVajea8rTQtDjpHvB 1s5mdMukaE38scMI85I795Ohv9s5iaU/bRCRR3E7VUUVoqf1SM79Org+abMTaM3C 3IhwlgjGLq0Hsu/rFMWOPDR0N31JZyL83/dDcEq2rHlS8veMBjaV4xQrT0Ny/Gn1 hcZQKBVhE+ojuiKrGbgfxmurOpOqxYF88UKdv05dW/HOvocodUuKfji0bcAl0COH MeN7ZKDWUBnHakokwYymyNtH2M8KPgtHjRgQXjl+4RhsxzwNgoGe7NBAHfCdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUer35/12uRmzzg+7A48MMCIcYOywwHwYDVR0j BBgwFoAU6vG7wueFKgjslybfA3t6kAIPYTwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTdmZGY0M2UtNGE0Yy00ZGJjLWI3ODUtZGQ3Y2JmMWE2N2I3LzAvRUFGMUJCQzJF Nzg1MkEwOEVDOTcyNkRGMDM3QjdBOTAwMjBGNjEzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQUYxQkJDMkU3ODUyQTA4RUM5NzI2REYwMzdCN0E5MDAyMEY2 MTNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTdmZGY0M2UtNGE0Yy00ZGJjLWI3 ODUtZGQ3Y2JmMWE2N2I3LzAvRUFGMUJCQzJFNzg1MkEwOEVDOTcyNkRGMDM3QjdB OTAwMjBGNjEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIhRklxIpiS4v0yiB7or+q6+pHETHJmhHirm xrSocpAb0Bik1C+fejIwrlvBtF48kkQ0GcnfXlX3ybJ6MiRgjOxNf2hmVmv/SdxX RcazSsk5KwyUPTFxCvgXw37/C9PKafdtJwkZdnRUM/kvbJBa8xddw09CFMZqoYGp WyLY88JFUxe8s9YQUTFx8Sm1z59NplbrgZ4hNEE3xx/g7NMnZuK0qdwBR4yDQOVG E8YnKsAWEVe251m1CN5I482KtkRWrgx8o73hd3NMGloQ/lpRXccs4U/RRQkP8dB7 FrMbHg3igb6SiiVap4KQXKbi7z1KHTLeFtgOwH+drjeqGTwmc3A= -----END CERTIFICATE-----Generated at Mon Sep 21 12:18:06 2026 by rpki-client