$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.mft File: EB314E0C129A5CAF077447531422664A0DBA21EB.mft (raw, json) Hash identifier: b+sutJuNtnAsmOHk5HRIlrhiUNX+h2MILUgkbsgy7aQ= Subject key identifier: CA:FE:AE:E9:AC:F0:ED:BC:24:22:98:59:15:E1:82:53:B3:31:48:93 Authority key identifier: EB:31:4E:0C:12:9A:5C:AF:07:74:47:53:14:22:66:4A:0D:BA:21:EB Certificate issuer: /CN=EB314E0C129A5CAF077447531422664A0DBA21EB Certificate serial: 72DC0BD6467B3C2C4C07188E822349213955B70C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB314E0C129A5CAF077447531422664A0DBA21EB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.mft Manifest number: BD Signing time: Mon 21 Sep 2026 09:12:52 +0000 Manifest this update: Mon 21 Sep 2026 09:07:52 +0000 Manifest next update: Tue 22 Sep 2026 12:31:52 +0000 Files and hashes: 1: 3130332e34392e3233312e302f32342d3234203d3e203633383638.roa (hash: Y2m4R38G71C4Yy/wcE7dbb3Q4JyEjJy1AWb7+OggzPM=) 2: EB314E0C129A5CAF077447531422664A0DBA21EB.crl (hash: Ztw1aHouBOLcH3b5K5zRy4sOggOWMhM+UZnpT+GE/9M=) 3: 3130332e34392e3232382e302f32342d3234203d3e203633383638.roa (hash: un5/MncOqw/wwzU2UuxhsRYNEiAYmLczzv4yniu8AsM=) 4: 3130332e34392e3233302e302f32342d3234203d3e203633383638.roa (hash: XZkVD58+fA+9TgN/E8SS+oOsYxABbo9pdQXTqmdzBkg=) 5: 3130332e34392e3232392e302f32342d3234203d3e203633383638.roa (hash: A5PltxTRAuGwKx7Z5AFNGaTklePgssNYT6aD4qcBx0s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.crl rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB314E0C129A5CAF077447531422664A0DBA21EB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:dc:0b:d6:46:7b:3c:2c:4c:07:18:8e:82:23:49:21:39:55:b7:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB314E0C129A5CAF077447531422664A0DBA21EB Validity Not Before: Sep 21 09:07:52 2026 GMT Not After : Sep 22 12:31:52 2026 GMT Subject: CN=CAFEAEE9ACF0EDBC2422985915E18253B3314893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c5:98:19:e4:e2:bc:0d:dc:d3:d5:cd:27:a8: d7:f6:51:e7:e6:77:ef:93:58:5b:64:ef:c0:1c:9f: 9f:b0:b1:f8:a6:4f:13:5e:71:66:71:ae:a4:75:46: 8c:e1:9b:51:0b:56:f1:4c:45:56:3f:88:40:73:b4: d0:1d:b9:c7:d9:9e:a2:55:be:30:3b:df:b8:af:27: fc:e7:fd:76:49:1e:67:b5:6f:01:18:33:00:41:75: 80:01:54:65:60:e5:2f:14:d1:be:07:55:d0:1d:f2: df:e8:2e:53:96:7c:b7:a4:35:0d:4d:98:06:97:69: ad:08:21:00:cf:a3:56:d4:02:3e:b4:6e:07:dc:79: 48:b3:25:7e:38:1f:5f:8f:61:2d:bd:b5:81:83:d2: e0:8a:1e:73:be:46:ea:84:ee:76:76:8b:82:dc:3e: c9:5d:1d:f2:4f:08:b9:58:fc:2f:08:b2:4b:17:2f: 6f:8d:45:93:91:92:cc:57:a7:36:cd:72:34:ba:72: 8d:48:ed:1f:10:03:c7:46:6b:14:ab:4b:90:e2:ff: 88:23:54:61:17:44:33:db:b9:e1:ac:82:a8:fc:ec: a7:1c:44:57:54:03:47:e1:6b:8b:65:0b:41:8d:b6: 8f:b3:27:df:9a:75:44:ad:12:bd:9a:49:a8:9f:60: c3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:FE:AE:E9:AC:F0:ED:BC:24:22:98:59:15:E1:82:53:B3:31:48:93 X509v3 Authority Key Identifier: keyid:EB:31:4E:0C:12:9A:5C:AF:07:74:47:53:14:22:66:4A:0D:BA:21:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB314E0C129A5CAF077447531422664A0DBA21EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:dd:ad:ab:34:80:e8:e2:8f:82:4d:dc:7b:9d:52:89:d5:db: bd:e5:3a:1a:50:87:3a:34:26:49:f6:17:bf:7c:39:64:06:0f: d4:7c:01:45:d9:9c:21:26:9d:19:bd:53:6e:2f:bb:cd:71:b0: 22:57:29:df:a3:27:0c:cb:bf:60:9c:53:c3:12:bf:4e:1b:a3: e1:84:e9:57:66:f9:73:72:72:40:36:5b:c8:11:26:b5:01:e1: e7:72:54:e6:81:ff:0d:e4:a0:65:a9:7a:e4:3a:ba:7d:d5:d4: 59:0c:d1:ad:19:cf:05:d4:25:bc:49:66:39:5c:1b:81:71:e8: bc:ce:2f:a5:2d:f9:54:41:4d:93:18:5b:7d:6c:fc:9d:7c:6b: 97:22:b9:d9:1f:3d:4b:49:ee:f3:b5:29:af:2a:e7:93:ae:62: 91:b4:23:19:f8:59:b2:8f:78:96:1f:2b:97:17:29:69:b1:7e: 2a:1e:29:22:52:9c:d7:2d:3f:37:18:80:79:c6:a9:f8:47:72: 5e:60:83:da:5d:da:d4:21:36:7b:1e:c9:90:c1:64:c1:d7:46: da:42:62:3f:a6:1e:e2:ff:36:6c:2d:39:8c:64:2b:36:00:ca: 33:5c:5a:df:a4:13:fc:89:4f:7f:7b:28:19:e9:3f:ab:55:fc: 4d:19:43:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUctwL1kZ7PCxMBxiOgiNJITlVtwwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUIzMTRFMEMxMjlBNUNBRjA3NzQ0NzUzMTQyMjY2NEEw REJBMjFFQjAeFw0yNjA5MjEwOTA3NTJaFw0yNjA5MjIxMjMxNTJaMDMxMTAvBgNV BAMTKENBRkVBRUU5QUNGMEVEQkMyNDIyOTg1OTE1RTE4MjUzQjMzMTQ4OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTxZgZ5OK8DdzT1c0nqNf2Uefm d++TWFtk78Acn5+wsfimTxNecWZxrqR1Rozhm1ELVvFMRVY/iEBztNAducfZnqJV vjA737ivJ/zn/XZJHme1bwEYMwBBdYABVGVg5S8U0b4HVdAd8t/oLlOWfLekNQ1N mAaXaa0IIQDPo1bUAj60bgfceUizJX44H1+PYS29tYGD0uCKHnO+RuqE7nZ2i4Lc PsldHfJPCLlY/C8IsksXL2+NRZORksxXpzbNcjS6co1I7R8QA8dGaxSrS5Di/4gj VGEXRDPbueGsgqj87KccRFdUA0fha4tlC0GNto+zJ9+adUStEr2aSaifYMMrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyv6u6azw7bwkIphZFeGCU7MxSJMwHwYDVR0j BBgwFoAU6zFODBKaXK8HdEdTFCJmSg26IeswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDM3MTkyOWQtYzNkMC00ZGFhLWI1ZmQtYTI0OTU2MGQ1ZDA0LzAvRUIzMTRFMEMx MjlBNUNBRjA3NzQ0NzUzMTQyMjY2NEEwREJBMjFFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQjMxNEUwQzEyOUE1Q0FGMDc3NDQ3NTMxNDIyNjY0QTBEQkEy MUVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDM3MTkyOWQtYzNkMC00ZGFhLWI1 ZmQtYTI0OTU2MGQ1ZDA0LzAvRUIzMTRFMEMxMjlBNUNBRjA3NzQ0NzUzMTQyMjY2 NEEwREJBMjFFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMXdras0gOjij4JN3HudUonV273lOhpQhzo0 Jkn2F798OWQGD9R8AUXZnCEmnRm9U24vu81xsCJXKd+jJwzLv2CcU8MSv04bo+GE 6Vdm+XNyckA2W8gRJrUB4edyVOaB/w3koGWpeuQ6un3V1FkM0a0ZzwXUJbxJZjlc G4Fx6LzOL6Ut+VRBTZMYW31s/J18a5ciudkfPUtJ7vO1Ka8q55OuYpG0Ixn4WbKP eJYfK5cXKWmxfioeKSJSnNctPzcYgHnGqfhHcl5gg9pd2tQhNnseyZDBZMHXRtpC Yj+mHuL/NmwtOYxkKzYAyjNcWt+kE/yJT397KBnpP6tV/E0ZQ7E= -----END CERTIFICATE-----Generated at Mon Sep 21 15:58:46 2026 by rpki-client