$ rpki-client -vvvf rpki-rsync.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.mft File: E4AC5A0B7B031CC8F4387521F896C49FC8165D46.mft (raw, json) Hash identifier: jb+FiyDp/L4iq9b6COJlPL5Sc1vHCCk1U/ihoIlV+lM= Subject key identifier: F7:BE:F7:76:75:FC:11:A1:1D:21:0E:17:1A:1D:F8:39:EF:CD:E9:6A Authority key identifier: E4:AC:5A:0B:7B:03:1C:C8:F4:38:75:21:F8:96:C4:9F:C8:16:5D:46 Certificate issuer: /CN=E4AC5A0B7B031CC8F4387521F896C49FC8165D46 Certificate serial: 2DC6C4A5960B8E58D556E45F0E0DD17CC200527E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.mft Manifest number: 0100 Signing time: Tue 10 Nov 2026 05:37:54 +0000 Manifest this update: Tue 10 Nov 2026 05:32:54 +0000 Manifest next update: Wed 11 Nov 2026 05:58:54 +0000 Files and hashes: 1: 3130332e3133392e3138382e302f32332d3234203d3e20313338393031.roa (hash: nmYerSBoYz5ABQ7ABcFXpaJW56oTyB9j1y+H2x6EP3A=) 2: E4AC5A0B7B031CC8F4387521F896C49FC8165D46.crl (hash: VTdumWCdv5P2JSsqb+Ic/XPJr4qH0xZ/Sl2H8D8LX8M=) 3: 3130332e3133392e3138382e302f32332d3233203d3e20313338393031.roa (hash: l0X0+poFCOAwI1du4qGF+veeFoCLhTMTvuXxlX7wlYc=) 4: 323030313a6466303a386438303a3a2f34382d3438203d3e20313338393031.roa (hash: Fw4ZShoY1ipa+BexcpJaYw89aApjuOYJwqsXze7oiwI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.crl rsync://rpki-rsync.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 05:58:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:c6:c4:a5:96:0b:8e:58:d5:56:e4:5f:0e:0d:d1:7c:c2:00:52:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4AC5A0B7B031CC8F4387521F896C49FC8165D46 Validity Not Before: Nov 10 05:32:54 2026 GMT Not After : Nov 11 05:58:54 2026 GMT Subject: CN=F7BEF77675FC11A11D210E171A1DF839EFCDE96A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fd:ca:09:b5:1e:a1:38:b4:25:01:ae:73:dc: 1a:41:e8:ef:03:76:d4:4e:1f:81:25:11:49:df:64: 24:0d:9f:bf:a0:ac:af:b1:12:71:98:c1:37:35:a2: 17:38:8e:1c:00:0b:1b:44:fd:d7:0f:37:32:2f:02: 1d:c4:51:5d:a0:94:fa:9b:be:9d:f4:5c:2c:fe:a5: b0:8f:3c:1e:9f:f6:57:7e:96:57:0b:8b:8f:d2:d6: 09:1a:b1:63:e5:e6:31:66:d5:2a:6d:61:9a:df:09: eb:7e:d4:8a:bc:bc:8e:1c:d6:44:48:12:2b:0d:17: aa:23:db:05:a5:8b:e9:42:e0:59:60:fe:c6:74:df: 37:89:f5:16:ff:e7:af:4b:86:09:0a:aa:81:01:f1: 97:05:f6:5d:2d:d7:b1:0c:10:e3:ef:49:6f:ce:88: 78:8b:ae:80:bf:8d:8e:05:db:d2:1f:e8:e1:4e:e0: 15:7c:d5:fc:5d:12:6e:bc:2b:4c:b8:f1:8e:69:9d: eb:76:81:dc:39:9b:34:70:f4:12:5c:cd:55:70:b8: 75:cf:c9:06:42:0a:22:23:c5:ae:5f:3d:a1:70:ae: 38:11:7c:46:ea:c5:de:23:f6:4b:e0:d6:da:bb:a2: 0d:ce:ce:eb:43:9a:03:0d:90:2b:0d:f7:8c:19:8a: f1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:BE:F7:76:75:FC:11:A1:1D:21:0E:17:1A:1D:F8:39:EF:CD:E9:6A X509v3 Authority Key Identifier: keyid:E4:AC:5A:0B:7B:03:1C:C8:F4:38:75:21:F8:96:C4:9F:C8:16:5D:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:d2:78:e7:21:67:69:32:2a:04:ca:52:8d:90:83:6e:b2:da: 8d:19:26:23:72:06:96:b6:b3:9a:10:c9:8a:4f:07:c4:51:81: c5:c9:26:86:86:ed:3f:a4:3d:f5:91:20:36:07:04:c5:94:4e: c8:49:51:ab:d6:ea:e5:85:d4:fb:e3:a7:00:20:95:72:3c:ee: 7e:2e:52:4e:7b:f3:79:81:d1:fa:c9:43:a7:69:37:a4:2e:88: 71:31:2e:c7:20:23:51:24:ff:7f:38:99:9d:61:e9:15:38:17: de:6d:c0:8a:6f:38:37:78:b1:76:2f:71:af:36:e0:fc:4f:64: 5e:83:ae:74:f7:52:1f:39:e7:aa:33:46:56:41:2e:33:20:8f: f0:4a:4c:49:57:53:4d:81:b2:c9:cb:5a:31:92:d4:7d:ff:ac: 7f:0e:b8:a1:ce:55:cd:9a:0c:76:4c:75:f0:bd:85:8b:86:a9: e7:a7:08:2e:f4:31:1d:50:41:9b:4c:45:d1:ca:38:16:16:69: aa:8f:40:22:70:71:f8:a6:92:47:05:d1:e7:67:9c:1f:7c:6e: 44:5d:47:a3:db:dc:49:f4:94:9d:b5:3f:3f:d4:cb:6b:cc:3c: 9e:18:c9:8e:7a:4c:56:8c:a4:f3:26:52:d6:b7:69:22:6d:eb: 02:aa:5a:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULcbEpZYLjljVVuRfDg3RfMIAUn4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRBQzVBMEI3QjAzMUNDOEY0Mzg3NTIxRjg5NkM0OUZD ODE2NUQ0NjAeFw0yNjExMTAwNTMyNTRaFw0yNjExMTEwNTU4NTRaMDMxMTAvBgNV BAMTKEY3QkVGNzc2NzVGQzExQTExRDIxMEUxNzFBMURGODM5RUZDREU5NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe/coJtR6hOLQlAa5z3BpB6O8D dtROH4ElEUnfZCQNn7+grK+xEnGYwTc1ohc4jhwACxtE/dcPNzIvAh3EUV2glPqb vp30XCz+pbCPPB6f9ld+llcLi4/S1gkasWPl5jFm1SptYZrfCet+1Iq8vI4c1kRI EisNF6oj2wWli+lC4Flg/sZ03zeJ9Rb/569LhgkKqoEB8ZcF9l0t17EMEOPvSW/O iHiLroC/jY4F29If6OFO4BV81fxdEm68K0y48Y5pnet2gdw5mzRw9BJczVVwuHXP yQZCCiIjxa5fPaFwrjgRfEbqxd4j9kvg1tq7og3OzutDmgMNkCsN94wZivE3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9773dnX8EaEdIQ4XGh34Oe/N6WowHwYDVR0j BBgwFoAU5KxaC3sDHMj0OHUh+JbEn8gWXUYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWI3OTkwNjgtNGVjOC00YzM2LThmYTctM2U3MmFlYmNlZWI4LzAvRTRBQzVBMEI3 QjAzMUNDOEY0Mzg3NTIxRjg5NkM0OUZDODE2NUQ0Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FNEFDNUEwQjdCMDMxQ0M4RjQzODc1MjFGODk2QzQ5RkM4MTY1 RDQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWI3OTkwNjgtNGVjOC00YzM2LThm YTctM2U3MmFlYmNlZWI4LzAvRTRBQzVBMEI3QjAzMUNDOEY0Mzg3NTIxRjg5NkM0 OUZDODE2NUQ0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALjSeOchZ2kyKgTKUo2Qg26y2o0ZJiNyBpa2 s5oQyYpPB8RRgcXJJoaG7T+kPfWRIDYHBMWUTshJUavW6uWF1PvjpwAglXI87n4u Uk5783mB0frJQ6dpN6QuiHExLscgI1Ek/384mZ1h6RU4F95twIpvODd4sXYvca82 4PxPZF6DrnT3Uh8556ozRlZBLjMgj/BKTElXU02BssnLWjGS1H3/rH8OuKHOVc2a DHZMdfC9hYuGqeenCC70MR1QQZtMRdHKOBYWaaqPQCJwcfimkkcF0ednnB98bkRd R6Pb3En0lJ21Pz/Uy2vMPJ4YyY56TFaMpPMmUta3aSJt6wKqWig= -----END CERTIFICATE-----Generated at Tue Nov 10 13:32:01 2026 by rpki-client