$ rpki-client -vvvf rpki-rsync.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.mft File: EBFE4CA91514CAC61F1B83534BB158D90BDD4142.mft (raw, json) Hash identifier: kwBCqCWZmgIo2W65XnUV1amarU7PgmcHldNruUsWKzs= Subject key identifier: 49:BA:FD:D0:19:EC:22:9B:94:38:FC:18:50:F0:4A:0B:01:50:A0:62 Authority key identifier: EB:FE:4C:A9:15:14:CA:C6:1F:1B:83:53:4B:B1:58:D9:0B:DD:41:42 Certificate issuer: /CN=EBFE4CA91514CAC61F1B83534BB158D90BDD4142 Certificate serial: 236BDEE8A854D785D9512E9ABCEF8A895758D9DB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.mft Manifest number: BF Signing time: Mon 21 Sep 2026 22:44:49 +0000 Manifest this update: Mon 21 Sep 2026 22:39:49 +0000 Manifest next update: Wed 23 Sep 2026 01:51:49 +0000 Files and hashes: 1: 323030313a6466333a356334303a3a2f34382d3438203d3e20313431313236.roa (hash: hTFuMvwmOj1lUIuO6NPn3OHHpBVIbvNuSActpFl0hWE=) 2: EBFE4CA91514CAC61F1B83534BB158D90BDD4142.crl (hash: CjK0GMIH9nwMkqVzoaA3aNHk33tkVRxlIvFmuVebAbU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.crl rsync://rpki-rsync.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 01:51:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:6b:de:e8:a8:54:d7:85:d9:51:2e:9a:bc:ef:8a:89:57:58:d9:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBFE4CA91514CAC61F1B83534BB158D90BDD4142 Validity Not Before: Sep 21 22:39:49 2026 GMT Not After : Sep 23 01:51:49 2026 GMT Subject: CN=49BAFDD019EC229B9438FC1850F04A0B0150A062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:54:ec:0d:10:8f:f1:6c:78:76:4b:16:03:f0: ad:f4:b0:38:87:33:d6:9a:63:ea:6a:81:cf:b1:1e: b9:27:8f:5d:7a:25:89:d3:97:b7:aa:6f:69:8a:de: 6c:9d:83:99:cc:21:d7:c3:18:88:43:b1:50:d9:b1: ef:6d:f5:f7:8c:88:92:32:b4:08:21:64:e4:af:ec: bc:8c:e1:46:b4:52:f2:00:8b:2c:54:be:0d:6a:6e: ef:45:db:b9:60:51:2e:af:27:1a:4c:83:53:1c:5c: 26:32:de:1b:30:b0:88:b8:3c:11:43:41:65:a2:94: 0a:8d:97:3e:bf:67:0a:5f:2a:f3:f1:94:e5:ab:93: 28:07:3e:fc:5c:bb:4f:11:6c:1d:49:ef:8b:11:4c: 86:58:4e:2c:82:a4:90:55:5f:46:27:9b:a5:a3:4e: 7f:53:42:d6:bb:36:d1:3e:68:12:32:77:d6:9f:db: 61:a5:2b:a4:79:79:0b:42:98:9b:10:cb:21:00:86: 36:fe:62:0c:ea:90:65:d2:d5:3b:b9:0f:08:a5:12: ce:0a:d2:81:3f:98:75:66:6c:9c:1f:49:ba:01:d8: b4:cc:3b:7f:3d:3d:9f:8f:e6:99:c8:eb:6a:47:90: 38:29:df:c0:25:1e:80:bf:e5:b8:b4:a0:04:52:bd: 48:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:BA:FD:D0:19:EC:22:9B:94:38:FC:18:50:F0:4A:0B:01:50:A0:62 X509v3 Authority Key Identifier: keyid:EB:FE:4C:A9:15:14:CA:C6:1F:1B:83:53:4B:B1:58:D9:0B:DD:41:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:89:4c:64:d9:9c:73:05:a0:09:f0:34:e4:06:c8:d7:ba:77: 80:59:84:81:9a:cd:e1:7c:79:3b:1a:e5:05:df:40:15:f7:4c: 01:09:ee:8b:f6:29:75:7c:20:8c:29:ef:66:ab:d4:99:18:d2: 12:ba:56:e5:73:8d:21:a7:e5:c0:26:18:60:7a:f4:51:6a:17: 64:90:bc:6d:0a:d5:4b:90:2b:47:7f:48:ad:86:9d:b5:04:71: c1:35:e5:b9:9e:e5:ba:0a:13:a7:b9:fc:1a:0b:2a:b0:66:e2: 30:0e:47:a5:6a:19:c0:1a:78:f3:83:e7:df:ef:a6:f8:97:00: a5:0e:52:0c:88:e9:01:75:cd:e0:26:51:94:17:38:4d:26:2d: bd:26:9d:e8:b6:99:6b:de:84:06:4b:e1:ec:a0:57:08:cc:58: 23:43:80:9d:03:08:a2:1e:6d:7a:6c:d0:86:87:38:62:19:ac: 96:9b:57:66:b0:d7:06:5d:63:f6:58:fb:a3:4c:81:3c:96:63: e4:ca:62:a9:a7:49:40:96:33:d2:2b:df:25:9b:fe:da:91:7e: 0b:52:85:2c:86:66:21:70:e4:a6:2e:ed:41:79:c1:a5:c7:25: 89:0b:7c:65:b5:27:fe:a1:e2:69:99:f6:82:e8:f8:1c:3d:46: cf:48:4c:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI2ve6KhU14XZUS6avO+KiVdY2dswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJGRTRDQTkxNTE0Q0FDNjFGMUI4MzUzNEJCMTU4RDkw QkRENDE0MjAeFw0yNjA5MjEyMjM5NDlaFw0yNjA5MjMwMTUxNDlaMDMxMTAvBgNV BAMTKDQ5QkFGREQwMTlFQzIyOUI5NDM4RkMxODUwRjA0QTBCMDE1MEEwNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHVOwNEI/xbHh2SxYD8K30sDiH M9aaY+pqgc+xHrknj116JYnTl7eqb2mK3mydg5nMIdfDGIhDsVDZse9t9feMiJIy tAghZOSv7LyM4Ua0UvIAiyxUvg1qbu9F27lgUS6vJxpMg1McXCYy3hswsIi4PBFD QWWilAqNlz6/ZwpfKvPxlOWrkygHPvxcu08RbB1J74sRTIZYTiyCpJBVX0Ynm6Wj Tn9TQta7NtE+aBIyd9af22GlK6R5eQtCmJsQyyEAhjb+YgzqkGXS1Tu5DwilEs4K 0oE/mHVmbJwfSboB2LTMO389PZ+P5pnI62pHkDgp38AlHoC/5bi0oARSvUiXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSbr90BnsIpuUOPwYUPBKCwFQoGIwHwYDVR0j BBgwFoAU6/5MqRUUysYfG4NTS7FY2QvdQUIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmUwY2I2MzAtNjM2YS00YjZhLTkzZGYtYjVkOTA4ZmU2ZWU3LzAvRUJGRTRDQTkx NTE0Q0FDNjFGMUI4MzUzNEJCMTU4RDkwQkRENDE0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQkZFNENBOTE1MTRDQUM2MUYxQjgzNTM0QkIxNThEOTBCREQ0 MTQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmUwY2I2MzAtNjM2YS00YjZhLTkz ZGYtYjVkOTA4ZmU2ZWU3LzAvRUJGRTRDQTkxNTE0Q0FDNjFGMUI4MzUzNEJCMTU4 RDkwQkRENDE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2JTGTZnHMFoAnwNOQGyNe6d4BZhIGazeF8 eTsa5QXfQBX3TAEJ7ov2KXV8IIwp72ar1JkY0hK6VuVzjSGn5cAmGGB69FFqF2SQ vG0K1UuQK0d/SK2GnbUEccE15bme5boKE6e5/BoLKrBm4jAOR6VqGcAaePOD59/v pviXAKUOUgyI6QF1zeAmUZQXOE0mLb0mnei2mWvehAZL4eygVwjMWCNDgJ0DCKIe bXps0IaHOGIZrJabV2aw1wZdY/ZY+6NMgTyWY+TKYqmnSUCWM9Ir3yWb/tqRfgtS hSyGZiFw5KYu7UF5waXHJYkLfGW1J/6h4mmZ9oLo+Bw9Rs9ITGE= -----END CERTIFICATE-----Generated at Tue Sep 22 07:08:44 2026 by rpki-client