$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft File: 2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft (raw, json) Hash identifier: 1sghHYj+4hZeiKGkszKUoEfUEHZ+zduOZ44w8Tsh/bE= Subject key identifier: 9F:E4:90:7D:0B:E9:F9:8F:B6:5E:AE:5A:0B:97:4A:A5:14:8D:46:CD Authority key identifier: 2E:B8:CB:E7:A4:79:27:7A:C0:3E:E8:0F:36:5D:D8:83:BE:38:DD:88 Certificate issuer: /CN=2EB8CBE7A479277AC03EE80F365DD883BE38DD88 Certificate serial: F7577FAD634E8DD8A8D424023B4B554AD01A7F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft Manifest number: 0107 Signing time: Sat 14 Nov 2026 14:58:09 +0000 Manifest this update: Sat 14 Nov 2026 14:53:09 +0000 Manifest next update: Sun 15 Nov 2026 17:55:09 +0000 Files and hashes: 1: 3130332e3136362e362e302f32332d3234203d3e203137393935.roa (hash: BwjnFjz5sFQQdxCMf3i5N8Aax7h3Sveq3upFP+p+HDs=) 2: 2EB8CBE7A479277AC03EE80F365DD883BE38DD88.crl (hash: T5ZhbZOMMVYLtUF7hQQUroTKrGmcL3T/XUUlyNJf5hg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.crl rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 17:55:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: f7:57:7f:ad:63:4e:8d:d8:a8:d4:24:02:3b:4b:55:4a:d0:1a:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EB8CBE7A479277AC03EE80F365DD883BE38DD88 Validity Not Before: Nov 14 14:53:09 2026 GMT Not After : Nov 15 17:55:09 2026 GMT Subject: CN=9FE4907D0BE9F98FB65EAE5A0B974AA5148D46CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a5:2d:62:00:07:53:3d:38:ee:73:7f:7c:e4: 75:fe:f5:ec:36:c4:5b:12:3c:16:24:86:6d:53:c5: 15:36:fe:a8:51:ea:01:2c:5e:ea:44:b6:dd:b2:11: a0:dd:81:0c:ec:e3:66:23:63:6f:8d:79:b5:70:56: 07:26:fc:27:d6:a1:92:61:b7:6a:88:8b:a9:4a:cd: be:47:9c:54:23:ac:5e:b7:76:4b:b6:0a:52:56:e0: 66:95:29:cf:47:67:c7:bd:d3:12:74:10:c5:11:e6: 77:a4:14:7f:0a:af:6a:e7:72:b7:35:1c:75:82:7a: 21:95:aa:3a:e0:d2:be:88:ec:27:1a:72:be:b4:0e: 49:15:3d:a1:61:96:18:d3:35:da:0b:2b:0f:95:00: a1:91:ad:32:56:a5:24:b6:b4:ac:21:9e:6e:c7:f6: f2:4e:c3:ae:b5:8e:76:dc:c4:35:d7:73:0f:23:65: 88:cf:c7:d6:eb:1a:fa:15:48:4d:c4:a1:b6:3f:d7: d6:65:84:a4:cb:40:ab:c7:7f:c7:7f:54:09:05:68: 06:59:94:86:e4:51:2b:a0:04:7a:44:ad:c2:68:f8: 50:9b:35:de:04:4c:77:41:83:a1:40:45:1d:51:bc: 07:75:df:02:82:46:3c:82:62:d7:8e:83:b5:9c:7e: 0b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E4:90:7D:0B:E9:F9:8F:B6:5E:AE:5A:0B:97:4A:A5:14:8D:46:CD X509v3 Authority Key Identifier: keyid:2E:B8:CB:E7:A4:79:27:7A:C0:3E:E8:0F:36:5D:D8:83:BE:38:DD:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/2EB8CBE7A479277AC03EE80F365DD883BE38DD88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e2:e8:22:81:db:66:33:cd:cc:f9:91:77:57:be:8f:77:dd:ef: dd:df:d2:b4:72:ef:57:fe:ac:e7:3d:3b:cb:f1:f9:aa:ba:d0: 2f:56:d9:91:e5:af:d7:e9:80:d0:69:4b:d9:8e:37:ac:9b:82: 38:de:49:cf:9d:83:70:42:42:1c:1e:ac:10:ee:67:be:52:9b: b2:23:ea:00:e1:71:58:4c:18:50:cd:38:02:a7:9c:98:b3:73: d8:f4:fa:ac:87:90:ab:8c:a7:a7:b9:a8:27:f3:f2:d1:26:32: 5b:81:bb:93:56:e7:a0:12:3e:c8:f8:75:fb:60:29:62:42:0b: f8:4f:6f:b4:ee:45:ed:c9:2b:99:9d:e8:5f:0f:96:7e:69:06: 5b:8d:5a:ca:6e:3b:71:e1:93:18:44:82:b9:a7:5e:85:da:3a: 55:b0:8e:c5:2e:89:68:d9:f5:dc:03:d8:5f:5b:b8:07:de:b2: 8c:1e:3d:95:db:9d:b4:38:09:03:6c:2f:6a:fa:80:a0:0c:6e: a6:de:02:56:ba:a0:da:8a:64:f2:d5:07:22:45:c0:ef:f5:07: bd:6b:12:81:c0:06:6c:89:6e:c9:25:21:49:19:94:d9:43:cf: 63:34:e7:8f:be:7f:08:55:cb:ac:a1:49:df:50:5e:c5:0d:af: 60:eb:c0:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAPdXf61jTo3YqNQkAjtLVUrQGn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVCOENCRTdBNDc5Mjc3QUMwM0VFODBGMzY1REQ4ODNC RTM4REQ4ODAeFw0yNjExMTQxNDUzMDlaFw0yNjExMTUxNzU1MDlaMDMxMTAvBgNV BAMTKDlGRTQ5MDdEMEJFOUY5OEZCNjVFQUU1QTBCOTc0QUE1MTQ4RDQ2Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYpS1iAAdTPTjuc3985HX+9ew2 xFsSPBYkhm1TxRU2/qhR6gEsXupEtt2yEaDdgQzs42YjY2+NebVwVgcm/CfWoZJh t2qIi6lKzb5HnFQjrF63dku2ClJW4GaVKc9HZ8e90xJ0EMUR5nekFH8Kr2rncrc1 HHWCeiGVqjrg0r6I7Ccacr60DkkVPaFhlhjTNdoLKw+VAKGRrTJWpSS2tKwhnm7H 9vJOw661jnbcxDXXcw8jZYjPx9brGvoVSE3EobY/19ZlhKTLQKvHf8d/VAkFaAZZ lIbkUSugBHpErcJo+FCbNd4ETHdBg6FARR1RvAd13wKCRjyCYteOg7WcfgsDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn+SQfQvp+Y+2Xq5aC5dKpRSNRs0wHwYDVR0j BBgwFoAULrjL56R5J3rAPugPNl3Yg7443YgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGRiOTJlODktOTJkNS00MDY0LTk1MTEtMDY3ZTM1MzY3OWNlLzAvMkVCOENCRTdB NDc5Mjc3QUMwM0VFODBGMzY1REQ4ODNCRTM4REQ4OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRUI4Q0JFN0E0NzkyNzdBQzAzRUU4MEYzNjVERDg4M0JFMzhE RDg4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGRiOTJlODktOTJkNS00MDY0LTk1 MTEtMDY3ZTM1MzY3OWNlLzAvMkVCOENCRTdBNDc5Mjc3QUMwM0VFODBGMzY1REQ4 ODNCRTM4REQ4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOLoIoHbZjPNzPmRd1e+j3fd793f0rRy71f+ rOc9O8vx+aq60C9W2ZHlr9fpgNBpS9mON6ybgjjeSc+dg3BCQhwerBDuZ75Sm7Ij 6gDhcVhMGFDNOAKnnJizc9j0+qyHkKuMp6e5qCfz8tEmMluBu5NW56ASPsj4dftg KWJCC/hPb7TuRe3JK5md6F8Pln5pBluNWspuO3HhkxhEgrmnXoXaOlWwjsUuiWjZ 9dwD2F9buAfesowePZXbnbQ4CQNsL2r6gKAMbqbeAla6oNqKZPLVByJFwO/1B71r EoHABmyJbsklIUkZlNlDz2M054++fwhVy6yhSd9QXsUNr2DrwNo= -----END CERTIFICATE-----Generated at Sun Nov 15 11:56:21 2026 by rpki-client