$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.mft File: 1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.mft (raw, json) Hash identifier: FOJl/E6MGIZ0Qz6gQEsyNsVKIlPoGsN+5AAYQt23AyM= Subject key identifier: F7:E5:74:2B:7C:CE:08:75:33:C4:0A:9B:2D:15:AF:C6:BA:59:54:DF Authority key identifier: 1E:BB:23:22:03:FD:54:32:F4:FF:5F:50:C7:CA:7F:67:25:52:ED:3F Certificate issuer: /CN=1EBB232203FD5432F4FF5F50C7CA7F672552ED3F Certificate serial: 5D49A3DA75D048F643C41C1FC0E8B2B80C6FDE59 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.mft Manifest number: BD Signing time: Sun 20 Sep 2026 18:50:04 +0000 Manifest this update: Sun 20 Sep 2026 18:45:04 +0000 Manifest next update: Mon 21 Sep 2026 21:03:04 +0000 Files and hashes: 1: 3230322e35322e35322e302f32342d3234203d3e203436303537.roa (hash: B12SJCFtXXNNoUXjwCcqgBMFjVn7huHWD2lTe7WyRQA=) 2: 1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.crl (hash: mWLH2gTX5WA7Jxu+dttz897PP4Dlr7YZE0DDpwuds+U=) 3: 3130332e31302e3134342e302f32342d3234203d3e203436303537.roa (hash: jBCASy1F6Hwq7/RSM0DnwGAyM9nsMAfX8PewBvtkG60=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.crl rsync://rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 21:03:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:49:a3:da:75:d0:48:f6:43:c4:1c:1f:c0:e8:b2:b8:0c:6f:de:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EBB232203FD5432F4FF5F50C7CA7F672552ED3F Validity Not Before: Sep 20 18:45:04 2026 GMT Not After : Sep 21 21:03:04 2026 GMT Subject: CN=F7E5742B7CCE087533C40A9B2D15AFC6BA5954DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1d:5d:20:2a:6f:12:e1:47:21:85:50:64:b1: 5e:64:e4:f8:9e:0d:80:27:80:7c:2e:8e:60:85:ea: e8:b1:a4:24:8b:7e:69:41:6d:5c:22:4b:27:5d:22: 47:29:89:aa:9e:52:26:e3:26:74:68:1c:c7:b7:95: 00:08:67:38:97:de:af:dc:b7:50:ab:6b:a5:83:bd: f9:ed:ae:5c:30:4b:36:57:23:ce:8a:04:7d:8d:a4: b1:19:06:7f:ef:9e:af:13:1d:47:43:ba:3a:69:3a: 71:18:c2:d5:58:da:67:f2:c0:c7:81:f7:5d:ce:cb: d0:11:e1:ce:79:b3:c3:4d:52:8b:dc:9c:24:98:7c: fc:93:46:07:8a:c3:ef:56:99:5d:5d:6a:f1:d3:12: 74:de:e5:4f:7c:30:30:8b:70:2f:91:fb:78:7d:06: 65:7f:d3:30:ea:78:47:a9:a4:8e:c6:96:23:7f:7d: 6e:a1:9b:b2:af:d5:9a:06:41:e4:7a:45:40:db:79: 64:f8:f7:14:ff:92:9f:94:28:7d:c8:f4:c8:8e:7e: 62:95:ae:4f:39:40:41:ee:31:87:8a:ff:11:d3:ea: 19:f9:46:5e:9f:e9:ce:63:e5:dc:49:a8:70:d6:23: c8:b3:15:ef:48:83:ae:b5:f9:b3:53:46:67:8a:35: cc:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E5:74:2B:7C:CE:08:75:33:C4:0A:9B:2D:15:AF:C6:BA:59:54:DF X509v3 Authority Key Identifier: keyid:1E:BB:23:22:03:FD:54:32:F4:FF:5F:50:C7:CA:7F:67:25:52:ED:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ed:32:93:13:b8:73:c3:a5:d1:60:fd:a6:ed:5e:01:4f:ac: 20:51:3a:b9:d7:04:37:a2:aa:e5:0f:1e:9b:80:9c:26:7d:8f: 2b:37:4a:ac:a4:f0:ef:c5:d5:89:c8:b9:7a:99:1e:75:e7:56: 12:65:70:51:9e:d2:e7:72:db:af:cb:48:5b:81:7e:48:55:af: 8f:ec:bc:48:4d:95:4c:25:d1:9c:65:73:56:1b:9b:ff:e5:87: ca:b4:78:e5:87:c4:38:26:87:fc:1c:09:75:f7:76:df:96:e8: c8:68:2d:8c:41:d0:61:33:07:dd:bd:8a:1b:f1:8b:28:39:a1: 96:b4:81:5b:ac:49:eb:b3:d3:46:8d:9d:a6:c5:a5:72:58:04: 66:1e:18:d1:d4:63:b1:d5:35:3a:66:17:aa:f3:6c:5c:cf:20: fa:62:c4:1b:c6:33:e1:05:45:a7:d5:eb:73:9a:31:11:20:b6: 95:72:3b:83:32:e9:88:c4:10:ce:36:46:7a:26:b4:43:66:2d: ac:3d:62:33:dc:e2:5b:31:66:2a:40:5c:0d:b6:ed:ab:38:7e: 1c:7e:50:56:75:fe:a7:86:06:1c:15:e0:29:a8:45:7d:c0:a8: 18:21:4d:92:f5:e9:15:b5:13:fd:2d:32:fa:78:e9:c0:8d:81: 90:d8:22:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXUmj2nXQSPZDxBwfwOiyuAxv3lkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVCQjIzMjIwM0ZENTQzMkY0RkY1RjUwQzdDQTdGNjcy NTUyRUQzRjAeFw0yNjA5MjAxODQ1MDRaFw0yNjA5MjEyMTAzMDRaMDMxMTAvBgNV BAMTKEY3RTU3NDJCN0NDRTA4NzUzM0M0MEE5QjJEMTVBRkM2QkE1OTU0REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3HV0gKm8S4UchhVBksV5k5Pie DYAngHwujmCF6uixpCSLfmlBbVwiSyddIkcpiaqeUibjJnRoHMe3lQAIZziX3q/c t1Cra6WDvfntrlwwSzZXI86KBH2NpLEZBn/vnq8THUdDujppOnEYwtVY2mfywMeB 913Oy9AR4c55s8NNUovcnCSYfPyTRgeKw+9WmV1davHTEnTe5U98MDCLcC+R+3h9 BmV/0zDqeEeppI7GliN/fW6hm7Kv1ZoGQeR6RUDbeWT49xT/kp+UKH3I9MiOfmKV rk85QEHuMYeK/xHT6hn5Rl6f6c5j5dxJqHDWI8izFe9Ig661+bNTRmeKNcwnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9+V0K3zOCHUzxAqbLRWvxrpZVN8wHwYDVR0j BBgwFoAUHrsjIgP9VDL0/19Qx8p/ZyVS7T8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTc1ZDdkZWYtNWViOS00MDU0LWEzYWItZDdlY2Y0ODYzNzlhLzAvMUVCQjIzMjIw M0ZENTQzMkY0RkY1RjUwQzdDQTdGNjcyNTUyRUQzRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRUJCMjMyMjAzRkQ1NDMyRjRGRjVGNTBDN0NBN0Y2NzI1NTJF RDNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTc1ZDdkZWYtNWViOS00MDU0LWEz YWItZDdlY2Y0ODYzNzlhLzAvMUVCQjIzMjIwM0ZENTQzMkY0RkY1RjUwQzdDQTdG NjcyNTUyRUQzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3tMpMTuHPDpdFg/abtXgFPrCBROrnXBDei quUPHpuAnCZ9jys3Sqyk8O/F1YnIuXqZHnXnVhJlcFGe0udy26/LSFuBfkhVr4/s vEhNlUwl0Zxlc1Ybm//lh8q0eOWHxDgmh/wcCXX3dt+W6MhoLYxB0GEzB929ihvx iyg5oZa0gVusSeuz00aNnabFpXJYBGYeGNHUY7HVNTpmF6rzbFzPIPpixBvGM+EF RafV63OaMREgtpVyO4My6YjEEM42RnomtENmLaw9YjPc4lsxZipAXA227as4fhx+ UFZ1/qeGBhwV4CmoRX3AqBghTZL16RW1E/0tMvp46cCNgZDYIqA= -----END CERTIFICATE-----Generated at Mon Sep 21 14:25:11 2026 by rpki-client