$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.mft File: EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.mft (raw, json) Hash identifier: Iq3+GuFT388bpmPadn0ekOhYT8/XZB3iuWwXbI04X8I= Subject key identifier: D8:2A:01:2C:58:7D:0F:36:3F:28:92:BC:C0:9D:4A:08:D7:B7:40:E3 Authority key identifier: EB:65:C3:DE:94:49:F2:C3:42:B6:C2:8D:C0:0A:2D:7D:9F:CE:13:FC Certificate issuer: /CN=EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC Certificate serial: 6BF83344B3F6EBDFAE6191AA7833BA9B49DABFF7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 21:48:04 +0000 Manifest this update: Wed 23 Sep 2026 21:43:04 +0000 Manifest next update: Thu 24 Sep 2026 21:53:04 +0000 Files and hashes: 1: 3130332e31382e34342e302f32332d3234203d3e20313530323735.roa (hash: 7XY8OJYBheI11wkRz8cVl6F/JT2mVgzHkajv0h3NaA4=) 2: EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.crl (hash: pW+kHKiSaLLV2uH9zVV8Ej7jg4NSV0Yo6C5XnwdSRZ4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.crl rsync://rpki-rsync.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 21:53:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:f8:33:44:b3:f6:eb:df:ae:61:91:aa:78:33:ba:9b:49:da:bf:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC Validity Not Before: Sep 23 21:43:04 2026 GMT Not After : Sep 24 21:53:04 2026 GMT Subject: CN=D82A012C587D0F363F2892BCC09D4A08D7B740E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c9:51:a9:a1:1e:b5:22:02:13:1b:27:e9:a0: 1c:fc:b4:87:aa:82:d7:94:f4:95:d0:a1:6d:f5:67: cd:bf:60:cd:ff:37:7d:7f:a0:a1:6b:44:26:ff:84: 2f:7a:d5:63:a1:ef:37:14:34:d3:5e:88:55:45:05: 3c:37:fa:38:08:21:ed:d2:0e:a0:e7:2b:b5:5b:f5: 9d:bb:e2:fe:75:bd:17:67:bc:86:08:9c:81:b7:c6: 8e:c5:b8:ca:e9:fa:cd:a1:30:ed:12:47:83:6e:6d: 5f:3d:a9:13:9e:1f:dc:f2:8e:82:39:23:b9:59:a1: fb:54:7a:56:04:2f:5c:8e:5c:be:72:03:52:f0:78: 6e:83:bd:5e:74:0b:9e:ef:e8:4e:2b:7f:57:1b:95: cd:36:7d:97:1e:7c:2e:b2:f7:a8:92:02:48:ec:bb: 67:98:75:16:b7:d5:a5:58:d2:92:6b:2c:15:f0:13: 8f:a5:9e:8d:29:31:97:71:79:7c:4d:c0:39:18:94: d1:23:75:9b:36:d0:26:db:f0:cb:a4:c7:ee:a6:ae: 5f:30:8d:49:94:97:7b:cb:6b:ba:3c:bb:35:28:c0: 8c:e0:ac:cb:64:c6:d8:b9:15:53:42:e8:f1:1e:84: a3:dd:65:86:61:80:2b:be:eb:7a:41:d7:91:ec:a8: 80:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:2A:01:2C:58:7D:0F:36:3F:28:92:BC:C0:9D:4A:08:D7:B7:40:E3 X509v3 Authority Key Identifier: keyid:EB:65:C3:DE:94:49:F2:C3:42:B6:C2:8D:C0:0A:2D:7D:9F:CE:13:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/EB65C3DE9449F2C342B6C28DC00A2D7D9FCE13FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:03:a7:e2:ac:9e:59:b8:c5:6f:2d:96:9f:e7:5d:d6:cc:95: 7c:fc:d4:87:2c:6f:97:b0:4d:73:ff:14:aa:75:42:2c:fe:4b: 37:24:83:f5:66:ea:ed:f7:93:1b:92:da:23:90:3e:c8:e0:20: 7c:f0:df:1d:c7:fc:fd:fe:73:84:1f:2f:61:d5:be:f1:5d:89: 85:fe:db:57:22:57:04:67:5f:bf:29:58:ce:84:f1:3d:33:2f: 1a:f4:54:a9:05:56:aa:60:a5:28:0e:46:99:0f:60:bd:b6:c7: c5:b2:7c:5d:dc:16:e5:95:bd:5d:78:b7:4f:33:3d:c4:ea:de: f4:61:01:ad:02:ae:b1:4e:6c:d7:d5:4e:83:16:9b:6b:08:cd: 82:4e:67:3a:97:9a:51:b8:bc:83:2b:46:40:7c:7a:5e:06:fe: 3e:f8:a3:16:1e:88:a9:cf:e2:b1:bf:06:d9:fc:9d:fc:7e:bc: 9e:0e:28:23:07:95:de:26:58:95:0b:e9:f2:4a:fb:ef:1e:c1: cb:1a:c7:32:d4:32:b7:f6:bd:73:c1:aa:66:9a:b0:b5:b3:07: 61:0f:c9:c3:0f:93:07:f8:42:e1:01:b9:e5:c0:13:35:70:a2: 60:36:b9:4b:78:f2:62:58:65:15:07:26:56:72:93:53:b5:b0: cb:1e:cf:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa/gzRLP269+uYZGqeDO6m0nav/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUI2NUMzREU5NDQ5RjJDMzQyQjZDMjhEQzAwQTJEN0Q5 RkNFMTNGQzAeFw0yNjA5MjMyMTQzMDRaFw0yNjA5MjQyMTUzMDRaMDMxMTAvBgNV BAMTKEQ4MkEwMTJDNTg3RDBGMzYzRjI4OTJCQ0MwOUQ0QTA4RDdCNzQwRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsyVGpoR61IgITGyfpoBz8tIeq gteU9JXQoW31Z82/YM3/N31/oKFrRCb/hC961WOh7zcUNNNeiFVFBTw3+jgIIe3S DqDnK7Vb9Z274v51vRdnvIYInIG3xo7FuMrp+s2hMO0SR4NubV89qROeH9zyjoI5 I7lZoftUelYEL1yOXL5yA1LweG6DvV50C57v6E4rf1cblc02fZcefC6y96iSAkjs u2eYdRa31aVY0pJrLBXwE4+lno0pMZdxeXxNwDkYlNEjdZs20Cbb8Mukx+6mrl8w jUmUl3vLa7o8uzUowIzgrMtkxti5FVNC6PEehKPdZYZhgCu+63pB15HsqIBXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2CoBLFh9DzY/KJK8wJ1KCNe3QOMwHwYDVR0j BBgwFoAU62XD3pRJ8sNCtsKNwAotfZ/OE/wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWI2NGQ4YzEtYzcxNC00NTkyLThmYzUtZTM5MmViZmYxZTk4LzAvRUI2NUMzREU5 NDQ5RjJDMzQyQjZDMjhEQzAwQTJEN0Q5RkNFMTNGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQjY1QzNERTk0NDlGMkMzNDJCNkMyOERDMDBBMkQ3RDlGQ0Ux M0ZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWI2NGQ4YzEtYzcxNC00NTkyLThm YzUtZTM5MmViZmYxZTk4LzAvRUI2NUMzREU5NDQ5RjJDMzQyQjZDMjhEQzAwQTJE N0Q5RkNFMTNGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB0Dp+Ksnlm4xW8tlp/nXdbMlXz81Icsb5ew TXP/FKp1Qiz+Szckg/Vm6u33kxuS2iOQPsjgIHzw3x3H/P3+c4QfL2HVvvFdiYX+ 21ciVwRnX78pWM6E8T0zLxr0VKkFVqpgpSgORpkPYL22x8WyfF3cFuWVvV14t08z PcTq3vRhAa0CrrFObNfVToMWm2sIzYJOZzqXmlG4vIMrRkB8el4G/j74oxYeiKnP 4rG/Btn8nfx+vJ4OKCMHld4mWJUL6fJK++8ewcsaxzLUMrf2vXPBqmaasLWzB2EP ycMPkwf4QuEBueXAEzVwomA2uUt48mJYZRUHJlZyk1O1sMsez5U= -----END CERTIFICATE-----Generated at Thu Sep 24 01:55:32 2026 by rpki-client