$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.mft File: EBF23572810F8726C4B72E50589964A910C50B4B.mft (raw, json) Hash identifier: WRfWh0ccWJub7JOyuXqm2JpAXkMB3WAWwpcus0zQsg8= Subject key identifier: C7:19:DC:56:66:55:A3:69:15:FE:00:E2:76:42:6D:FA:10:2A:7E:BA Authority key identifier: EB:F2:35:72:81:0F:87:26:C4:B7:2E:50:58:99:64:A9:10:C5:0B:4B Certificate issuer: /CN=EBF23572810F8726C4B72E50589964A910C50B4B Certificate serial: 111D7D4288982DDEA9265DE862612CA25FDB1ABF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBF23572810F8726C4B72E50589964A910C50B4B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.mft Manifest number: C8 Signing time: Tue 29 Sep 2026 02:37:54 +0000 Manifest this update: Tue 29 Sep 2026 02:32:54 +0000 Manifest next update: Wed 30 Sep 2026 06:21:54 +0000 Files and hashes: 1: 323430373a343630303a3a2f33322d3438203d3e203435323935.roa (hash: pwFWQeeNE8aLdvpKEf3Cftf5A02g3uDsYu8O+3yCUbE=) 2: EBF23572810F8726C4B72E50589964A910C50B4B.crl (hash: 7q34iJIQX/EvKFMy/mAaTMcoTptQNBspMnRbdthbgoE=) 3: 3131332e3231322e3136302e302f32312d3234203d3e203435323935.roa (hash: sfi5wZHa7EFMZctUVQihd5OvgHWotWx/JrU33FAshF0=) 4: 3130332e3135312e39322e302f32332d3234203d3e203435323935.roa (hash: l97XL+b3anmLCwyyq3iPYCEWOtlJt1r4AiG3G4acaMc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.crl rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBF23572810F8726C4B72E50589964A910C50B4B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:21:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:1d:7d:42:88:98:2d:de:a9:26:5d:e8:62:61:2c:a2:5f:db:1a:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBF23572810F8726C4B72E50589964A910C50B4B Validity Not Before: Sep 29 02:32:54 2026 GMT Not After : Sep 30 06:21:54 2026 GMT Subject: CN=C719DC566655A36915FE00E276426DFA102A7EBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2b:01:81:e3:bf:22:32:78:c5:35:6f:ec:13: 37:e7:41:e2:b3:20:dd:7e:0d:ed:5f:d6:3d:5e:6e: 85:fe:d9:d3:af:5b:be:ef:13:7f:90:15:cd:b1:86: bf:d5:60:d2:15:c5:46:47:01:51:d8:66:91:63:c5: 27:f1:61:8e:6e:4d:50:97:75:41:b8:5a:42:ad:e5: e9:12:f2:86:e1:9b:95:41:2c:7b:e9:84:06:f7:d3: 63:4b:43:e3:bf:98:37:ff:74:54:ff:f7:20:74:14: 1d:3e:b9:25:45:ca:de:6a:c7:2a:05:f3:a5:a4:0d: c4:1b:6f:d8:49:c0:3b:3d:10:6b:55:44:c6:c1:17: 81:1d:5e:88:a9:05:23:9e:52:4a:12:71:6c:ee:45: 05:f6:a6:c6:bb:7b:db:b7:b5:28:ff:06:47:f8:5d: 0f:fb:38:be:99:5a:be:5c:f4:55:2d:4a:08:7f:a7: 52:05:52:e3:6e:7a:6c:d4:15:37:07:45:0a:ba:a6: 9d:56:23:8f:ce:bf:19:9a:5e:36:82:2b:aa:e1:e5: 0a:56:2c:97:c3:22:7b:db:02:f5:68:03:3b:88:c4: 1c:61:1a:f1:a3:b2:40:aa:39:f1:91:8a:72:8e:54: c7:ad:fc:7a:e7:da:b3:6c:91:0a:b3:a9:4f:0a:7e: 03:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:19:DC:56:66:55:A3:69:15:FE:00:E2:76:42:6D:FA:10:2A:7E:BA X509v3 Authority Key Identifier: keyid:EB:F2:35:72:81:0F:87:26:C4:B7:2E:50:58:99:64:A9:10:C5:0B:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBF23572810F8726C4B72E50589964A910C50B4B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:07:c8:bd:80:74:1f:bc:98:a2:2b:11:cf:03:ec:42:4e:a0: bd:5e:72:fd:7d:44:d5:bc:2e:23:83:85:2c:f6:d5:d0:7e:ba: 2d:61:9f:0a:2d:a5:a0:14:6f:df:14:26:82:89:dc:70:62:a7: 53:63:02:5f:e5:30:2a:05:79:a4:18:ee:d7:d4:90:2b:0a:a5: fd:c2:4b:29:27:aa:e2:10:26:99:3c:f0:18:c7:85:b2:ea:dc: 52:fd:51:d9:9c:c8:8d:11:79:c2:d0:93:e7:bd:e4:b0:eb:40: d6:6d:3a:01:74:bb:4c:af:b8:de:a8:53:63:b0:a5:40:87:d5: 23:11:23:91:89:2a:75:30:d5:cf:6b:98:c0:d7:38:e3:42:71: 21:f4:84:a1:c0:d3:92:af:ab:8c:50:58:0d:46:32:29:cb:fc: e2:2d:5f:d9:78:d6:20:60:83:d7:65:1c:e8:07:fa:b1:6a:f9: 8c:92:44:4c:c5:d5:2b:4b:86:a6:96:71:ca:a0:51:31:b2:f8: 38:42:5f:ea:f0:41:78:92:03:e3:a9:9e:5d:56:5a:fc:34:db: 89:1c:be:f7:1c:e2:5c:1c:df:93:ca:16:34:2d:77:d1:6a:8c: be:54:c5:3d:72:a9:2c:74:8d:4a:ce:93:46:1d:ad:8f:1e:ca: 7c:b2:3e:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUER19QoiYLd6pJl3oYmEsol/bGr8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJGMjM1NzI4MTBGODcyNkM0QjcyRTUwNTg5OTY0QTkx MEM1MEI0QjAeFw0yNjA5MjkwMjMyNTRaFw0yNjA5MzAwNjIxNTRaMDMxMTAvBgNV BAMTKEM3MTlEQzU2NjY1NUEzNjkxNUZFMDBFMjc2NDI2REZBMTAyQTdFQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXKwGB478iMnjFNW/sEzfnQeKz IN1+De1f1j1eboX+2dOvW77vE3+QFc2xhr/VYNIVxUZHAVHYZpFjxSfxYY5uTVCX dUG4WkKt5ekS8obhm5VBLHvphAb302NLQ+O/mDf/dFT/9yB0FB0+uSVFyt5qxyoF 86WkDcQbb9hJwDs9EGtVRMbBF4EdXoipBSOeUkoScWzuRQX2psa7e9u3tSj/Bkf4 XQ/7OL6ZWr5c9FUtSgh/p1IFUuNuemzUFTcHRQq6pp1WI4/OvxmaXjaCK6rh5QpW LJfDInvbAvVoAzuIxBxhGvGjskCqOfGRinKOVMet/Hrn2rNskQqzqU8KfgOFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxxncVmZVo2kV/gDidkJt+hAqfrowHwYDVR0j BBgwFoAU6/I1coEPhybEty5QWJlkqRDFC0swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDRmNDhhODktOTBjNS00ZjVhLTgwMTUtMzZmMTE5NmE3MWM4LzAvRUJGMjM1NzI4 MTBGODcyNkM0QjcyRTUwNTg5OTY0QTkxMEM1MEI0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQkYyMzU3MjgxMEY4NzI2QzRCNzJFNTA1ODk5NjRBOTEwQzUw QjRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDRmNDhhODktOTBjNS00ZjVhLTgw MTUtMzZmMTE5NmE3MWM4LzAvRUJGMjM1NzI4MTBGODcyNkM0QjcyRTUwNTg5OTY0 QTkxMEM1MEI0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGIHyL2AdB+8mKIrEc8D7EJOoL1ecv19RNW8 LiODhSz21dB+ui1hnwotpaAUb98UJoKJ3HBip1NjAl/lMCoFeaQY7tfUkCsKpf3C SyknquIQJpk88BjHhbLq3FL9UdmcyI0RecLQk+e95LDrQNZtOgF0u0yvuN6oU2Ow pUCH1SMRI5GJKnUw1c9rmMDXOONCcSH0hKHA05Kvq4xQWA1GMinL/OItX9l41iBg g9dlHOgH+rFq+YySREzF1StLhqaWccqgUTGy+DhCX+rwQXiSA+Opnl1WWvw024kc vvcc4lwc35PKFjQtd9FqjL5UxT1yqSx0jUrOk0YdrY8eynyyPtM= -----END CERTIFICATE-----Generated at Tue Sep 29 15:59:04 2026 by rpki-client