$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.mft File: EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.mft (raw, json) Hash identifier: PGaSZPp062jwZcfWt0WlZRuNsWQV3zkXXP0osu09EUw= Subject key identifier: 98:5E:5F:52:96:B9:C0:19:40:CE:A5:4B:99:E5:3A:67:D0:37:30:AA Authority key identifier: EB:0B:E2:F2:F4:9F:0E:2E:D0:DC:A4:50:CC:7A:70:E3:7E:6C:44:79 Certificate issuer: /CN=EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479 Certificate serial: 0B20B741113B80B80078AD0CD0BF2835AD8BE952 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 20:51:53 +0000 Manifest this update: Wed 23 Sep 2026 20:46:53 +0000 Manifest next update: Thu 24 Sep 2026 22:56:53 +0000 Files and hashes: 1: 3130332e3133302e3133362e302f32322d3234203d3e20313333383135.roa (hash: eU4i0Mhd/q+mYMVjCXIfd0DHyb4s/+BNKr0BLfdT+jA=) 2: 3130332e35322e34342e302f32322d3234203d3e20313333383135.roa (hash: Nq+2Vf2Sjui286xvlwdV6qhYVII60AjIdtuhfdXAxbY=) 3: EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.crl (hash: OBr/ZARBilYeSmVImfUTvW9AuewvojssdzSRPhyHCqY=) 4: 323430333a626163303a3a2f33322d3438203d3e20313333383135.roa (hash: HEWIf8VBw+80Q4rp+6Ysujhm51rVLU6tXVKj84ErweQ=) 5: 323430333a353763303a3a2f33322d3438203d3e20313333383135.roa (hash: 3BwTC01USPfsaxqOFoR8OqcTiLHcsXU9wo2BTdmt5ZU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.crl rsync://rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 22:56:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:20:b7:41:11:3b:80:b8:00:78:ad:0c:d0:bf:28:35:ad:8b:e9:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479 Validity Not Before: Sep 23 20:46:53 2026 GMT Not After : Sep 24 22:56:53 2026 GMT Subject: CN=985E5F5296B9C01940CEA54B99E53A67D03730AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f0:fb:a5:1f:2e:b4:1d:b2:c0:a9:29:5e:00: b1:82:86:dc:cf:36:26:78:1a:b6:58:6c:fc:a9:cb: 95:28:42:c1:fe:59:3a:f8:9c:22:28:7f:5c:08:ad: 9f:39:33:cb:27:26:a9:92:19:47:e1:68:10:95:68: b1:54:ee:c7:75:d7:d3:f0:9f:b8:06:81:17:3b:85: 22:1e:fa:5e:02:d8:aa:03:fe:b1:7c:dc:46:5e:7b: 3a:48:f3:e1:84:d6:a9:1a:b1:89:48:60:d7:3d:57: a6:da:c7:7f:53:70:56:5b:59:20:b3:e5:7f:c9:1b: f8:4f:b9:85:3f:a0:72:96:6d:4d:b2:50:ff:4f:82: de:ca:fe:6b:42:ba:98:20:df:f7:a9:3c:47:bb:27: ec:97:19:b1:55:44:48:bd:8a:39:22:fc:65:a7:ea: 9f:56:b2:18:24:30:43:b1:f5:08:96:ce:ae:05:17: d2:a5:a8:3b:22:5e:ef:4e:db:da:af:36:e9:7c:ad: cc:d0:30:63:7e:86:f6:dd:06:9c:b3:da:47:26:94: e6:4f:da:98:f2:e5:4f:38:d3:20:f0:84:b5:92:cb: 0f:2a:5e:9a:35:aa:8d:4d:90:77:00:33:0d:fa:9d: fc:3d:ff:74:25:17:d4:6c:6a:f9:5d:17:1e:f5:db: 37:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:5E:5F:52:96:B9:C0:19:40:CE:A5:4B:99:E5:3A:67:D0:37:30:AA X509v3 Authority Key Identifier: keyid:EB:0B:E2:F2:F4:9F:0E:2E:D0:DC:A4:50:CC:7A:70:E3:7E:6C:44:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:62:7e:73:43:12:30:a3:03:40:71:fe:7c:d7:1f:9a:01:78: 95:e8:86:ce:2e:b1:33:d7:e5:a8:84:60:85:f3:81:4f:c7:d6: df:07:80:39:00:f9:92:81:5e:06:08:0e:21:1c:64:d4:e6:e1: 5e:fe:ff:e8:72:c0:70:15:ce:e1:45:b6:6f:43:7c:37:8b:1a: cf:f4:ce:e6:84:72:65:04:75:d3:e4:04:9c:44:1b:47:45:fd: 1b:db:db:a9:d2:fe:2c:6b:ef:4f:82:a1:e4:f6:70:b0:ff:16: 16:a0:81:89:4d:d4:9e:08:06:43:a5:b7:91:c8:97:61:f4:bc: 4a:2b:a4:e2:5a:58:0b:5b:a5:04:f4:b3:9e:42:af:ff:c7:30: 3f:7e:3b:45:4d:df:7c:41:10:cf:2e:21:33:ec:8c:6c:20:ed: 8d:be:13:d3:01:b3:e2:a1:90:fc:73:e0:c0:cf:c8:70:3f:8f: f1:4d:e1:1d:2c:62:4f:be:de:3b:ff:a8:58:09:d9:34:56:5c: 52:81:50:88:7a:e4:71:1b:78:37:c4:30:a2:5b:13:b3:b7:a5: 1d:74:21:11:73:24:39:05:07:9e:99:42:4b:40:96:56:2e:c4: e6:71:3c:b9:27:cb:6d:0c:cb:6f:b7:82:f2:24:55:3a:97:bb: eb:03:33:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCyC3QRE7gLgAeK0M0L8oNa2L6VIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUIwQkUyRjJGNDlGMEUyRUQwRENBNDUwQ0M3QTcwRTM3 RTZDNDQ3OTAeFw0yNjA5MjMyMDQ2NTNaFw0yNjA5MjQyMjU2NTNaMDMxMTAvBgNV BAMTKDk4NUU1RjUyOTZCOUMwMTk0MENFQTU0Qjk5RTUzQTY3RDAzNzMwQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ8PulHy60HbLAqSleALGChtzP NiZ4GrZYbPypy5UoQsH+WTr4nCIof1wIrZ85M8snJqmSGUfhaBCVaLFU7sd119Pw n7gGgRc7hSIe+l4C2KoD/rF83EZeezpI8+GE1qkasYlIYNc9V6bax39TcFZbWSCz 5X/JG/hPuYU/oHKWbU2yUP9Pgt7K/mtCupgg3/epPEe7J+yXGbFVREi9ijki/GWn 6p9WshgkMEOx9QiWzq4FF9KlqDsiXu9O29qvNul8rczQMGN+hvbdBpyz2kcmlOZP 2pjy5U840yDwhLWSyw8qXpo1qo1NkHcAMw36nfw9/3QlF9RsavldFx712zfvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmF5fUpa5wBlAzqVLmeU6Z9A3MKowHwYDVR0j BBgwFoAU6wvi8vSfDi7Q3KRQzHpw435sRHkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmEzYWU0ODUtYTY1OC00YzVjLWFiZTItMWU3ZmQ4YjAzOGEwLzAvRUIwQkUyRjJG NDlGMEUyRUQwRENBNDUwQ0M3QTcwRTM3RTZDNDQ3OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQjBCRTJGMkY0OUYwRTJFRDBEQ0E0NTBDQzdBNzBFMzdFNkM0 NDc5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmEzYWU0ODUtYTY1OC00YzVjLWFi ZTItMWU3ZmQ4YjAzOGEwLzAvRUIwQkUyRjJGNDlGMEUyRUQwRENBNDUwQ0M3QTcw RTM3RTZDNDQ3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9ifnNDEjCjA0Bx/nzXH5oBeJXohs4usTPX 5aiEYIXzgU/H1t8HgDkA+ZKBXgYIDiEcZNTm4V7+/+hywHAVzuFFtm9DfDeLGs/0 zuaEcmUEddPkBJxEG0dF/Rvb26nS/ixr70+CoeT2cLD/FhaggYlN1J4IBkOlt5HI l2H0vEorpOJaWAtbpQT0s55Cr//HMD9+O0VN33xBEM8uITPsjGwg7Y2+E9MBs+Kh kPxz4MDPyHA/j/FN4R0sYk++3jv/qFgJ2TRWXFKBUIh65HEbeDfEMKJbE7O3pR10 IRFzJDkFB56ZQktAllYuxOZxPLkny20My2+3gvIkVTqXu+sDM+Q= -----END CERTIFICATE-----Generated at Thu Sep 24 10:19:40 2026 by rpki-client