$ rpki-client -vvvf rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft File: EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft (raw, json) Hash identifier: ld/3khU33mgZrwA3oHsEAwyOeIjuF1ME7VqGj2/99uA= Subject key identifier: 6C:45:3F:3B:85:54:8C:E2:D8:C1:34:80:26:4E:9D:BC:5D:FB:2E:88 Authority key identifier: EA:41:3F:BC:BE:2B:F7:36:52:D8:51:02:49:5E:CE:33:E9:33:0D:0F Certificate issuer: /CN=EA413FBCBE2BF73652D85102495ECE33E9330D0F Certificate serial: 5DD18217190C712C76BF11DE7B98B903C8C330FA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA413FBCBE2BF73652D85102495ECE33E9330D0F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft Manifest number: C5 Signing time: Sat 26 Sep 2026 19:34:20 +0000 Manifest this update: Sat 26 Sep 2026 19:29:20 +0000 Manifest next update: Sun 27 Sep 2026 21:09:20 +0000 Files and hashes: 1: 3130332e3135332e3133352e302f32342d3234203d3e20313430343634.roa (hash: WSddUG6Ud+EGXAnyjU+LN6Z0WaSOYhJ8p87PY2mBdmk=) 2: 323430363a343534303a3a2f33322d3332203d3e20313430343634.roa (hash: g38q9LaZAq4No+F6g8orw8HsN+5ba4Mi+pwZw+eZ3w8=) 3: 3130332e3135332e3133342e302f32342d3234203d3e20313430343634.roa (hash: PJ6SYnJsMTtu1EVv401gG2I/mMRasJM6zvehsyeEO6I=) 4: 3130332e3135332e3133342e302f32332d3233203d3e20313430343634.roa (hash: wrEWuCEXvYyJtUKLCBlrSkqSpEscz1bfuLgaervIG1M=) 5: EA413FBCBE2BF73652D85102495ECE33E9330D0F.crl (hash: lQvGBZpgUlh3FElgh0k66Nxnz+F2kra8LKn6GY0B5KA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.crl rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA413FBCBE2BF73652D85102495ECE33E9330D0F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 21:09:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:d1:82:17:19:0c:71:2c:76:bf:11:de:7b:98:b9:03:c8:c3:30:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA413FBCBE2BF73652D85102495ECE33E9330D0F Validity Not Before: Sep 26 19:29:20 2026 GMT Not After : Sep 27 21:09:20 2026 GMT Subject: CN=6C453F3B85548CE2D8C13480264E9DBC5DFB2E88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1e:38:bc:ca:86:b2:a2:ac:d6:c1:2a:3a:42: 06:09:6e:25:96:ee:f1:7c:8d:50:c8:e8:35:c6:23: dc:9e:81:db:1a:ad:ce:d4:68:00:c7:1d:93:6f:d0: 45:c9:e8:f7:ff:bd:16:c9:e8:b1:27:36:35:f9:95: dc:0f:e0:42:c5:30:f6:bd:93:dd:ad:73:71:7c:8a: 1c:bd:0a:a7:c5:c3:a5:e6:24:2c:16:a1:82:45:71: 4f:94:c7:bc:d3:db:8e:24:64:3b:d2:e2:fe:d2:6e: a6:ab:64:5a:17:03:5f:ed:ae:b8:b1:c2:69:40:4b: f3:13:ca:b6:f6:15:57:f5:8f:cf:0a:11:bc:bc:e4: 93:b9:5a:41:b0:30:ee:e7:04:38:ca:15:56:4d:f0: 9f:27:43:c6:db:f0:99:55:35:a8:da:1c:7b:19:14: 84:84:35:3c:59:eb:7d:ac:48:68:ad:cb:bd:8f:66: 0d:32:ec:7e:5e:45:28:4d:8a:b5:3b:25:cd:1a:fa: 2e:c0:fd:1d:57:83:67:79:0f:c1:7a:5e:d6:8e:90: e9:e1:26:73:f0:65:35:7a:1e:ae:66:e9:c2:a0:df: b7:4a:bc:06:4b:bb:0d:51:90:87:b8:d4:e9:50:e9: 55:76:05:c0:43:3c:b2:03:71:cc:0d:19:ba:36:c8: 7b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:45:3F:3B:85:54:8C:E2:D8:C1:34:80:26:4E:9D:BC:5D:FB:2E:88 X509v3 Authority Key Identifier: keyid:EA:41:3F:BC:BE:2B:F7:36:52:D8:51:02:49:5E:CE:33:E9:33:0D:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA413FBCBE2BF73652D85102495ECE33E9330D0F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:ea:b2:c1:76:93:df:64:79:d8:43:47:fa:e9:b2:13:84:10: 4d:69:ec:4d:80:69:78:50:42:94:60:18:b9:e0:4c:9b:60:aa: e9:39:44:b0:49:ff:ea:45:cf:2c:c3:cc:d8:50:5c:ae:8c:f4: 7c:e2:23:5d:98:78:5d:02:e9:1e:81:ad:8c:a2:75:7f:fd:f7: 17:f8:66:3c:f9:d3:85:db:19:d3:e3:c5:83:67:0a:dc:42:1a: d5:39:98:ef:f2:a4:29:7a:1e:06:43:90:e8:26:85:53:63:cd: 07:d3:ad:bb:05:d9:40:9a:33:12:e1:02:65:71:2d:f8:4c:18: 7a:af:99:11:74:73:e5:d5:38:1f:8f:f7:3d:98:16:83:8c:24: 6e:7b:99:0e:55:02:d6:07:34:c5:bb:84:91:eb:6c:df:95:da: d5:8b:9a:c6:bc:4d:de:ad:04:eb:5b:f4:5b:3d:ca:2d:62:14: be:e9:16:35:28:06:14:e6:af:c3:b8:f7:ea:ef:12:31:f2:c4: eb:47:18:7d:fa:8d:0e:10:3b:6a:48:3f:06:a0:08:48:cf:c7: d2:0c:b1:2a:07:4e:5a:7a:00:9a:d8:94:99:d4:31:64:c4:fe: 0d:8d:8b:d6:09:8d:96:76:0e:bb:07:95:e5:f3:c1:83:5d:87: 98:0e:29:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXdGCFxkMcSx2vxHee5i5A8jDMPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUE0MTNGQkNCRTJCRjczNjUyRDg1MTAyNDk1RUNFMzNF OTMzMEQwRjAeFw0yNjA5MjYxOTI5MjBaFw0yNjA5MjcyMTA5MjBaMDMxMTAvBgNV BAMTKDZDNDUzRjNCODU1NDhDRTJEOEMxMzQ4MDI2NEU5REJDNURGQjJFODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Hji8yoayoqzWwSo6QgYJbiWW 7vF8jVDI6DXGI9yegdsarc7UaADHHZNv0EXJ6Pf/vRbJ6LEnNjX5ldwP4ELFMPa9 k92tc3F8ihy9CqfFw6XmJCwWoYJFcU+Ux7zT244kZDvS4v7SbqarZFoXA1/trrix wmlAS/MTyrb2FVf1j88KEby85JO5WkGwMO7nBDjKFVZN8J8nQ8bb8JlVNajaHHsZ FISENTxZ632sSGity72PZg0y7H5eRShNirU7Jc0a+i7A/R1Xg2d5D8F6XtaOkOnh JnPwZTV6Hq5m6cKg37dKvAZLuw1RkIe41OlQ6VV2BcBDPLIDccwNGbo2yHuBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbEU/O4VUjOLYwTSAJk6dvF37LogwHwYDVR0j BBgwFoAU6kE/vL4r9zZS2FECSV7OM+kzDQ8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGI4YmU5MDUtZjI5Ni00NWQxLWE4NzktNGE0ZGU1MmNiMmQ2LzAvRUE0MTNGQkNC RTJCRjczNjUyRDg1MTAyNDk1RUNFMzNFOTMzMEQwRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQTQxM0ZCQ0JFMkJGNzM2NTJEODUxMDI0OTVFQ0UzM0U5MzMw RDBGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGI4YmU5MDUtZjI5Ni00NWQxLWE4 NzktNGE0ZGU1MmNiMmQ2LzAvRUE0MTNGQkNCRTJCRjczNjUyRDg1MTAyNDk1RUNF MzNFOTMzMEQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjqssF2k99kedhDR/rpshOEEE1p7E2AaXhQ QpRgGLngTJtgquk5RLBJ/+pFzyzDzNhQXK6M9HziI12YeF0C6R6BrYyidX/99xf4 Zjz504XbGdPjxYNnCtxCGtU5mO/ypCl6HgZDkOgmhVNjzQfTrbsF2UCaMxLhAmVx LfhMGHqvmRF0c+XVOB+P9z2YFoOMJG57mQ5VAtYHNMW7hJHrbN+V2tWLmsa8Td6t BOtb9Fs9yi1iFL7pFjUoBhTmr8O49+rvEjHyxOtHGH36jQ4QO2pIPwagCEjPx9IM sSoHTlp6AJrYlJnUMWTE/g2Ni9YJjZZ2DrsHleXzwYNdh5gOKbo= -----END CERTIFICATE-----Generated at Sun Sep 27 14:54:17 2026 by rpki-client