$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.mft File: EBA1F4874C4867D2CAA214867052E9413088CD22.mft (raw, json) Hash identifier: 58k7igeDkK3UKnHdYMrqZXrkJ53t1hXSgc99VhDLDsU= Subject key identifier: 1C:85:8C:DC:B6:8A:3B:80:B2:9B:0F:23:60:41:24:A6:A1:77:2C:D2 Authority key identifier: EB:A1:F4:87:4C:48:67:D2:CA:A2:14:86:70:52:E9:41:30:88:CD:22 Certificate issuer: /CN=EBA1F4874C4867D2CAA214867052E9413088CD22 Certificate serial: 0E3B7DDFE1D13D4A70A971A5ABBB6226B86BEE24 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EBA1F4874C4867D2CAA214867052E9413088CD22.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 13:15:34 +0000 Manifest this update: Sun 15 Nov 2026 13:10:34 +0000 Manifest next update: Mon 16 Nov 2026 13:56:34 +0000 Files and hashes: 1: 3136302e31392e3230362e302f32342d3234203d3e20313532373634.roa (hash: rkfIQLZH91MBngOR2XF3JSvb0x7kp9rSE9FoBc2wVuU=) 2: EBA1F4874C4867D2CAA214867052E9413088CD22.crl (hash: UZ/o+eXucRZXIKgK3CuSpXfCAjMxkoSEJ6gniT+/Uko=) 3: 3136302e31392e3230372e302f32342d3234203d3e20313532373634.roa (hash: Rsj+zG8fTbANuQe+LowjpWqzpy4Nr2I6Rkz77sVkBRk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.crl rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EBA1F4874C4867D2CAA214867052E9413088CD22.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:35:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:3b:7d:df:e1:d1:3d:4a:70:a9:71:a5:ab:bb:62:26:b8:6b:ee:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBA1F4874C4867D2CAA214867052E9413088CD22 Validity Not Before: Nov 15 13:10:34 2026 GMT Not After : Nov 16 13:56:34 2026 GMT Subject: CN=1C858CDCB68A3B80B29B0F23604124A6A1772CD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:02:75:62:3b:8f:f1:b2:66:72:27:4e:24:b2: 0e:9e:5b:8a:3e:f5:69:0b:04:cc:d6:d0:e3:07:4a: 2a:5e:5c:55:db:66:06:f3:bc:79:ae:b4:e9:0d:27: ac:88:20:70:81:cc:0e:9a:77:05:84:2c:8d:b9:ee: 09:45:8a:e9:86:01:2b:81:59:8b:0e:fa:b9:6d:b5: f3:76:67:43:c9:32:83:8c:7d:b3:5b:36:92:50:04: dc:6e:17:58:54:b8:26:6b:0d:52:88:0b:9c:c6:0f: 48:51:62:16:43:47:f7:ee:27:63:68:62:32:0c:93: bb:af:05:9a:69:8a:81:d3:41:da:16:0e:b8:1a:f2: 8f:a0:14:a2:07:33:f5:e3:f2:e8:52:b5:52:17:3c: 36:47:24:1a:b2:64:5d:e8:22:80:51:58:d6:0b:0f: b6:20:30:70:d7:d7:fe:1e:23:c6:48:cc:ef:e5:ba: 00:c1:6a:8a:c1:4c:df:e7:51:4f:de:44:3b:f8:ea: 41:ef:3f:87:74:43:ee:b4:64:56:cb:2a:58:53:a5: b1:1b:ee:9f:a2:66:7d:04:f6:d6:80:ec:68:7f:d1: fd:5f:42:fa:3f:ea:ff:9f:ca:71:44:cf:a4:ea:63: ef:1c:06:04:93:54:18:73:46:09:a5:54:07:3f:09: 32:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:85:8C:DC:B6:8A:3B:80:B2:9B:0F:23:60:41:24:A6:A1:77:2C:D2 X509v3 Authority Key Identifier: keyid:EB:A1:F4:87:4C:48:67:D2:CA:A2:14:86:70:52:E9:41:30:88:CD:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EBA1F4874C4867D2CAA214867052E9413088CD22.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:ca:96:26:8c:50:0c:6b:c6:9e:4d:6a:0b:59:73:43:c8:64: ab:72:f4:4c:a6:9b:80:fd:99:e7:e4:49:b5:32:1a:f3:f0:a4: 6f:43:2a:f9:67:ee:2b:b3:2e:72:02:bd:78:89:20:5f:8a:e3: e4:7f:01:e1:66:2a:d2:3e:c2:dd:1f:c2:9f:f5:94:d9:df:84: 7c:9c:16:4d:c7:86:72:ba:b5:66:39:88:98:79:35:00:bf:73: cc:1a:ca:c9:26:77:4d:20:70:5e:2f:9a:7e:fc:96:f7:83:7f: 38:a8:99:ac:f1:5d:a7:8f:f7:31:f8:e4:ee:2a:d6:38:36:5e: 9c:44:13:90:9a:56:ee:a9:cf:cf:8f:77:f6:f5:81:e2:0a:41: 73:b4:34:ca:95:6d:73:cd:e5:0e:5f:db:66:2e:42:37:a0:61: 54:cf:74:e1:22:bd:46:d4:82:b0:80:26:d4:44:fe:0f:b1:b3: 8b:7d:9b:0b:23:fa:55:0f:4e:ea:5b:df:11:59:22:85:da:51: 0d:26:35:bd:f7:8e:c8:bd:51:fe:5b:f1:40:c7:86:e9:ca:8d: 1a:e2:42:50:39:98:ad:e4:35:6e:5b:a0:72:bd:da:54:08:11: 51:7e:f8:9d:59:bc:be:c1:c7:f7:88:ab:73:0a:50:81:20:15: c8:ed:f8:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDjt93+HRPUpwqXGlq7tiJrhr7iQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJBMUY0ODc0QzQ4NjdEMkNBQTIxNDg2NzA1MkU5NDEz MDg4Q0QyMjAeFw0yNjExMTUxMzEwMzRaFw0yNjExMTYxMzU2MzRaMDMxMTAvBgNV BAMTKDFDODU4Q0RDQjY4QTNCODBCMjlCMEYyMzYwNDEyNEE2QTE3NzJDRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkAnViO4/xsmZyJ04ksg6eW4o+ 9WkLBMzW0OMHSipeXFXbZgbzvHmutOkNJ6yIIHCBzA6adwWELI257glFiumGASuB WYsO+rlttfN2Z0PJMoOMfbNbNpJQBNxuF1hUuCZrDVKIC5zGD0hRYhZDR/fuJ2No YjIMk7uvBZppioHTQdoWDrga8o+gFKIHM/Xj8uhStVIXPDZHJBqyZF3oIoBRWNYL D7YgMHDX1/4eI8ZIzO/lugDBaorBTN/nUU/eRDv46kHvP4d0Q+60ZFbLKlhTpbEb 7p+iZn0E9taA7Gh/0f1fQvo/6v+fynFEz6TqY+8cBgSTVBhzRgmlVAc/CTLtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHIWM3LaKO4Cymw8jYEEkpqF3LNIwHwYDVR0j BBgwFoAU66H0h0xIZ9LKohSGcFLpQTCIzSIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2IyYTkxNmEtYWQyMi00OTc5LWJlNDMtOTUxYzc2ZjJmOTIwLzAvRUJBMUY0ODc0 QzQ4NjdEMkNBQTIxNDg2NzA1MkU5NDEzMDg4Q0QyMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQkExRjQ4NzRDNDg2N0QyQ0FBMjE0ODY3MDUyRTk0MTMwODhD RDIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2IyYTkxNmEtYWQyMi00OTc5LWJl NDMtOTUxYzc2ZjJmOTIwLzAvRUJBMUY0ODc0QzQ4NjdEMkNBQTIxNDg2NzA1MkU5 NDEzMDg4Q0QyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMLKliaMUAxrxp5NagtZc0PIZKty9Eymm4D9 mefkSbUyGvPwpG9DKvln7iuzLnICvXiJIF+K4+R/AeFmKtI+wt0fwp/1lNnfhHyc Fk3HhnK6tWY5iJh5NQC/c8wayskmd00gcF4vmn78lveDfziomazxXaeP9zH45O4q 1jg2XpxEE5CaVu6pz8+Pd/b1geIKQXO0NMqVbXPN5Q5f22YuQjegYVTPdOEivUbU grCAJtRE/g+xs4t9mwsj+lUPTupb3xFZIoXaUQ0mNb33jsi9Uf5b8UDHhunKjRri QlA5mK3kNW5boHK92lQIEVF++J1ZvL7Bx/eIq3MKUIEgFcjt+NA= -----END CERTIFICATE-----Generated at Sun Nov 15 22:07:00 2026 by rpki-client