$ rpki-client -vvvf rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.mft File: EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.mft (raw, json) Hash identifier: Q7XbjF7rYCl9iQhiYHsHlRaw2ccY/Kasew4+0IOrU10= Subject key identifier: 3F:14:81:6A:95:DC:9F:25:3C:44:01:C4:AD:9B:AF:33:9B:2F:8E:64 Authority key identifier: EA:8F:56:9A:74:05:BE:AB:A2:3F:9B:20:CF:1A:CD:2C:BD:5E:F5:79 Certificate issuer: /CN=EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579 Certificate serial: 50A85250C936B964D731FDAB9A1B0CDF45A66615 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.mft Manifest number: C8 Signing time: Mon 28 Sep 2026 04:56:09 +0000 Manifest this update: Mon 28 Sep 2026 04:51:09 +0000 Manifest next update: Tue 29 Sep 2026 05:58:09 +0000 Files and hashes: 1: 3130332e3233302e3138382e302f32332d3234203d3e20313333333439.roa (hash: yCX5+Dxju6djsJMnbOlkqP9bGOuuQKBHDP9eW/sQSSc=) 2: EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.crl (hash: pOANRKgLk1W1pI5GwDLJW+GAvFuAw5of0CeQAm8fpjU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.crl rsync://rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 05:58:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:a8:52:50:c9:36:b9:64:d7:31:fd:ab:9a:1b:0c:df:45:a6:66:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579 Validity Not Before: Sep 28 04:51:09 2026 GMT Not After : Sep 29 05:58:09 2026 GMT Subject: CN=3F14816A95DC9F253C4401C4AD9BAF339B2F8E64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:36:85:8d:2d:6d:a7:e5:95:fd:55:dd:5a:56: 87:91:0b:78:ff:88:aa:86:94:40:08:21:8b:88:9f: 06:93:5f:8f:c5:45:38:81:71:43:23:d0:15:54:a3: 63:a2:06:d4:b0:6c:10:db:93:54:a7:67:4c:94:dc: 04:c2:97:c8:b7:5e:42:f5:7c:93:a8:24:39:53:38: 12:eb:cc:35:bc:73:91:6e:80:74:85:0c:83:10:1d: 11:d5:52:80:e7:4b:6b:90:86:15:97:5f:b4:2a:8b: 1d:3e:7c:38:3b:66:d3:2d:87:7e:2b:22:4f:10:30: 8e:04:b0:c8:b4:24:d0:be:06:cb:1b:5a:ce:c5:44: 3e:d2:7a:d8:1a:67:c5:23:66:e6:4a:d5:82:6f:f9: 40:b5:56:fe:02:8c:44:1d:b1:25:01:b0:ff:e5:2e: 0b:23:d4:06:8d:82:2b:15:26:87:6c:2c:cb:48:49: 95:9d:63:47:0e:c3:0e:03:8f:99:3e:91:c7:af:af: 5b:23:bc:d6:e0:65:71:af:b3:8f:5e:70:5f:d1:f7: b6:75:af:e2:59:0b:86:24:f5:14:ad:f6:f8:a2:51: b4:0c:b0:7a:01:e2:eb:f8:11:03:f3:9e:18:29:e2: 16:8b:59:9d:4f:7a:74:8b:e1:92:bc:cf:d1:e5:34: 58:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:14:81:6A:95:DC:9F:25:3C:44:01:C4:AD:9B:AF:33:9B:2F:8E:64 X509v3 Authority Key Identifier: keyid:EA:8F:56:9A:74:05:BE:AB:A2:3F:9B:20:CF:1A:CD:2C:BD:5E:F5:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:4e:14:3f:c9:4d:97:bf:ed:60:49:f5:e9:30:23:b1:71:eb: 4c:39:88:5b:ca:96:bf:df:87:94:ab:2d:35:d4:96:54:40:18: c3:d1:49:9f:3a:25:1e:3a:cb:ac:7f:e5:73:df:d3:63:23:43: 5e:ce:d5:2c:14:c1:b5:dc:00:e2:88:13:d3:bf:0d:96:29:9d: 1f:2b:ba:dc:73:41:f9:48:0c:e0:eb:71:9a:d3:fd:24:69:07: 59:9f:e5:38:df:19:9f:f9:ab:d0:02:51:1c:06:e2:c5:9e:7e: b8:5b:2b:7d:38:5e:71:b1:6a:f8:68:55:8d:8e:43:46:2a:ae: f9:d7:14:89:c3:11:27:96:bd:cb:00:f7:59:42:b6:fe:18:fe: b6:3f:2d:60:25:c1:5c:eb:52:dc:a7:13:b5:c5:0c:26:b3:46: 8f:11:b0:3b:56:9c:6e:b0:8d:e0:85:95:87:6a:07:c0:af:f4: 10:d3:4e:ff:0a:91:64:bb:ce:0c:b7:7a:5f:a1:30:f4:d8:d6: 2a:b0:88:4e:eb:14:2e:57:6b:74:08:cb:65:26:78:b9:08:d9: 37:de:af:72:8e:6f:c6:31:ec:98:7e:55:1b:55:1d:d8:b4:e1: de:aa:12:03:d1:5e:a3:6f:31:74:f8:47:9f:6d:d2:09:cc:3c: 9e:57:4d:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUKhSUMk2uWTXMf2rmhsM30WmZhUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUE4RjU2OUE3NDA1QkVBQkEyM0Y5QjIwQ0YxQUNEMkNC RDVFRjU3OTAeFw0yNjA5MjgwNDUxMDlaFw0yNjA5MjkwNTU4MDlaMDMxMTAvBgNV BAMTKDNGMTQ4MTZBOTVEQzlGMjUzQzQ0MDFDNEFEOUJBRjMzOUIyRjhFNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTNoWNLW2n5ZX9Vd1aVoeRC3j/ iKqGlEAIIYuInwaTX4/FRTiBcUMj0BVUo2OiBtSwbBDbk1SnZ0yU3ATCl8i3XkL1 fJOoJDlTOBLrzDW8c5FugHSFDIMQHRHVUoDnS2uQhhWXX7Qqix0+fDg7ZtMth34r Ik8QMI4EsMi0JNC+BssbWs7FRD7SetgaZ8UjZuZK1YJv+UC1Vv4CjEQdsSUBsP/l Lgsj1AaNgisVJodsLMtISZWdY0cOww4Dj5k+kcevr1sjvNbgZXGvs49ecF/R97Z1 r+JZC4Yk9RSt9viiUbQMsHoB4uv4EQPznhgp4haLWZ1PenSL4ZK8z9HlNFj7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPxSBapXcnyU8RAHErZuvM5svjmQwHwYDVR0j BBgwFoAU6o9WmnQFvquiP5sgzxrNLL1e9XkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDA0NTdkMjAtMDIzYS00NTA5LWJiNGEtNjJjODY5MjlkZDk3LzAvRUE4RjU2OUE3 NDA1QkVBQkEyM0Y5QjIwQ0YxQUNEMkNCRDVFRjU3OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQThGNTY5QTc0MDVCRUFCQTIzRjlCMjBDRjFBQ0QyQ0JENUVG NTc5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDA0NTdkMjAtMDIzYS00NTA5LWJi NGEtNjJjODY5MjlkZDk3LzAvRUE4RjU2OUE3NDA1QkVBQkEyM0Y5QjIwQ0YxQUNE MkNCRDVFRjU3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAClOFD/JTZe/7WBJ9ekwI7Fx60w5iFvKlr/f h5SrLTXUllRAGMPRSZ86JR46y6x/5XPf02MjQ17O1SwUwbXcAOKIE9O/DZYpnR8r utxzQflIDODrcZrT/SRpB1mf5TjfGZ/5q9ACURwG4sWefrhbK304XnGxavhoVY2O Q0YqrvnXFInDESeWvcsA91lCtv4Y/rY/LWAlwVzrUtynE7XFDCazRo8RsDtWnG6w jeCFlYdqB8Cv9BDTTv8KkWS7zgy3el+hMPTY1iqwiE7rFC5Xa3QIy2UmeLkI2Tfe r3KOb8Yx7Jh+VRtVHdi04d6qEgPRXqNvMXT4R59t0gnMPJ5XTfs= -----END CERTIFICATE-----Generated at Mon Sep 28 16:27:14 2026 by rpki-client