$ rpki-client -vvvf rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.mft File: EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.mft (raw, json) Hash identifier: OclX94ssCpgViuKSeqxRtv5CdZbwtpE0rgoAsLo/MNU= Subject key identifier: 0D:5B:4B:2C:E8:F7:0B:B9:19:E9:D9:3E:0B:C9:6E:C3:68:A3:DD:BB Authority key identifier: EA:8B:1F:D5:4B:5A:4E:9B:79:5C:DD:92:9B:58:E7:BD:B2:DA:68:71 Certificate issuer: /CN=EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871 Certificate serial: 1A5E150A7E6CC4BB61EDFCBF7FD6A7959081B879 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 04:26:37 +0000 Manifest this update: Wed 23 Sep 2026 04:21:37 +0000 Manifest next update: Thu 24 Sep 2026 08:08:37 +0000 Files and hashes: 1: EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.crl (hash: +mkyGdPjX0q6a+Sk7EfownUv5QHe85j+nqu9ViHHTcE=) 2: 3130332e3136382e34342e302f32342d3234203d3e20313432333037.roa (hash: RIjxtB34QrKPBshyuKfeBsiSf1Tc4cR0KfHnQu3zHiw=) 3: 3130332e3137392e38342e302f32342d3234203d3e20313432333037.roa (hash: 2LkAU6HFzcD+uMMYceohJGiq/c/yqAWAinLHczse+RU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.crl rsync://rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 08:08:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:5e:15:0a:7e:6c:c4:bb:61:ed:fc:bf:7f:d6:a7:95:90:81:b8:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871 Validity Not Before: Sep 23 04:21:37 2026 GMT Not After : Sep 24 08:08:37 2026 GMT Subject: CN=0D5B4B2CE8F70BB919E9D93E0BC96EC368A3DDBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a7:1a:e2:df:0f:ab:15:71:ca:93:b0:1a:c3: dc:44:00:c5:25:a5:8f:e4:5c:cf:57:75:11:f7:13: 74:f9:35:59:61:b9:d7:45:02:cb:08:d2:9a:b1:5d: e2:ec:77:37:79:66:0a:ff:e6:ed:cf:a5:db:e4:e9: 10:9f:15:fa:f2:73:2c:cd:00:29:81:75:b8:a8:f9: f7:15:7d:0f:40:85:19:56:b3:f9:74:b9:12:71:05: 80:7e:fa:23:b8:0b:a5:4b:b1:3f:cc:52:25:3e:05: 5f:ee:30:ca:7c:07:5f:7e:75:91:9c:ac:ab:cd:cd: 35:f6:e6:ba:45:95:04:6f:2f:5c:8d:7d:20:70:bc: 72:3f:fa:fb:69:4c:b2:a2:90:b7:38:06:61:6f:db: 24:76:7b:f3:5c:a2:bb:73:20:8f:b4:9a:67:ee:63: da:3f:bc:9e:58:b0:96:40:b9:03:5d:50:f5:13:43: 2d:6d:8a:f1:13:98:d8:9e:45:35:e6:55:19:d5:89: af:8a:88:14:65:d4:63:ce:fa:2f:59:fc:85:a5:19: 3f:4f:01:ca:df:74:2f:db:9f:97:25:83:ac:6d:05: 73:93:74:44:e5:c3:58:ef:fc:a4:c1:48:cc:44:5c: 3f:31:b7:1e:39:32:4e:78:22:7b:de:e2:cd:35:93: 9d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:5B:4B:2C:E8:F7:0B:B9:19:E9:D9:3E:0B:C9:6E:C3:68:A3:DD:BB X509v3 Authority Key Identifier: keyid:EA:8B:1F:D5:4B:5A:4E:9B:79:5C:DD:92:9B:58:E7:BD:B2:DA:68:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/EA8B1FD54B5A4E9B795CDD929B58E7BDB2DA6871.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:11:6e:6e:5e:d8:66:49:c7:e7:42:be:c4:3a:c9:75:76:b6: 58:6a:c7:fd:92:83:9d:9f:6b:b8:aa:c8:f3:3a:c2:1c:6b:a3: e9:29:59:fe:db:23:b6:db:a8:fd:d3:a3:0e:1a:69:5d:56:39: 6c:8d:10:05:b4:a4:ae:ca:26:be:8f:26:b7:ce:f8:fb:42:26: 89:74:da:23:e5:57:16:2e:9c:b2:cb:55:28:93:b0:e1:73:59: 3e:97:63:7a:7c:4d:5d:87:4d:04:25:1c:b0:8d:b0:c5:66:0c: c2:82:17:93:b4:70:38:07:66:6c:b7:b3:2e:ce:42:ef:34:83: 4d:cf:fd:a0:ac:aa:e9:99:95:59:38:20:fb:da:b9:20:7c:f5: bd:91:64:9f:38:59:45:65:c0:73:9a:56:d2:d6:4d:f3:28:f1: e5:02:85:ae:21:c9:15:37:75:50:50:d5:cf:26:d8:e2:3d:b2: a7:31:20:66:8f:82:e5:c3:66:b2:ef:63:08:18:5f:73:f1:3c: a9:4e:79:f5:a5:49:3d:b6:b4:ab:48:53:87:fe:f9:50:3f:20: 1b:91:77:d6:95:cb:3a:b0:d1:09:56:de:a3:97:72:8a:85:32: 37:52:a5:6f:10:98:86:d9:44:5d:b8:c5:23:54:9c:b1:b5:de: 5a:0d:56:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGl4VCn5sxLth7fy/f9anlZCBuHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUE4QjFGRDU0QjVBNEU5Qjc5NUNERDkyOUI1OEU3QkRC MkRBNjg3MTAeFw0yNjA5MjMwNDIxMzdaFw0yNjA5MjQwODA4MzdaMDMxMTAvBgNV BAMTKDBENUI0QjJDRThGNzBCQjkxOUU5RDkzRTBCQzk2RUMzNjhBM0REQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHpxri3w+rFXHKk7Aaw9xEAMUl pY/kXM9XdRH3E3T5NVlhuddFAssI0pqxXeLsdzd5Zgr/5u3Ppdvk6RCfFfrycyzN ACmBdbio+fcVfQ9AhRlWs/l0uRJxBYB++iO4C6VLsT/MUiU+BV/uMMp8B19+dZGc rKvNzTX25rpFlQRvL1yNfSBwvHI/+vtpTLKikLc4BmFv2yR2e/NcortzII+0mmfu Y9o/vJ5YsJZAuQNdUPUTQy1tivETmNieRTXmVRnVia+KiBRl1GPO+i9Z/IWlGT9P AcrfdC/bn5clg6xtBXOTdETlw1jv/KTBSMxEXD8xtx45Mk54Inve4s01k52ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDVtLLOj3C7kZ6dk+C8luw2ij3bswHwYDVR0j BBgwFoAU6osf1UtaTpt5XN2Sm1jnvbLaaHEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDVmMjBiMmUtYTdhOC00MmZkLTkyZjgtOTQ5NjIzM2IyYzllLzAvRUE4QjFGRDU0 QjVBNEU5Qjc5NUNERDkyOUI1OEU3QkRCMkRBNjg3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQThCMUZENTRCNUE0RTlCNzk1Q0REOTI5QjU4RTdCREIyREE2 ODcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDVmMjBiMmUtYTdhOC00MmZkLTky ZjgtOTQ5NjIzM2IyYzllLzAvRUE4QjFGRDU0QjVBNEU5Qjc5NUNERDkyOUI1OEU3 QkRCMkRBNjg3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJkRbm5e2GZJx+dCvsQ6yXV2tlhqx/2Sg52f a7iqyPM6whxro+kpWf7bI7bbqP3Tow4aaV1WOWyNEAW0pK7KJr6PJrfO+PtCJol0 2iPlVxYunLLLVSiTsOFzWT6XY3p8TV2HTQQlHLCNsMVmDMKCF5O0cDgHZmy3sy7O Qu80g03P/aCsqumZlVk4IPvauSB89b2RZJ84WUVlwHOaVtLWTfMo8eUCha4hyRU3 dVBQ1c8m2OI9sqcxIGaPguXDZrLvYwgYX3PxPKlOefWlST22tKtIU4f++VA/IBuR d9aVyzqw0QlW3qOXcoqFMjdSpW8QmIbZRF24xSNUnLG13loNVjQ= -----END CERTIFICATE-----Generated at Wed Sep 23 20:16:56 2026 by rpki-client