$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft File: EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft (raw, json) Hash identifier: BngYwwyR0naQh76b1K6UaseZOP21s0zel9fAUcTErIY= Subject key identifier: 3E:9B:C9:7A:81:BC:D3:E8:AA:9D:86:9A:DC:30:5E:2D:C0:A1:BD:F8 Authority key identifier: EA:1F:A0:A5:CF:DA:8B:5A:6F:64:2F:58:87:FD:67:22:D7:53:10:0D Certificate issuer: /CN=EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D Certificate serial: 5DE61F3E72109427BDC6069D8FBE1FD2958073F2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 16:41:23 +0000 Manifest this update: Thu 24 Sep 2026 16:36:23 +0000 Manifest next update: Fri 25 Sep 2026 18:59:23 +0000 Files and hashes: 1: 3136302e3138372e3139362e302f32342d3234203d3e20313533313234.roa (hash: S4hauyuLw7/w8jvKs8EoZ1L3na+uvt8Vo0vCOD48FJ4=) 2: EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.crl (hash: Na6ovfnDe94KM+8iDzpki65TdPmKNd9YDoCWQbml448=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.crl rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 18:59:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:e6:1f:3e:72:10:94:27:bd:c6:06:9d:8f:be:1f:d2:95:80:73:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D Validity Not Before: Sep 24 16:36:23 2026 GMT Not After : Sep 25 18:59:23 2026 GMT Subject: CN=3E9BC97A81BCD3E8AA9D869ADC305E2DC0A1BDF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:49:6a:e1:4d:56:7c:5a:df:3c:cd:8a:b8:8c: 2f:6e:b9:3c:80:06:c3:6c:82:5d:1d:3b:ac:cb:03: 72:78:6e:04:34:08:61:65:0e:f5:73:23:9e:7a:7e: 1c:03:d5:d4:bf:09:ad:11:ff:db:0d:b9:0e:39:e0: a1:97:0b:dc:46:53:c4:4f:f2:f3:f3:8b:a9:ff:56: 7c:29:84:f5:a7:b7:2c:23:26:16:5d:c8:29:03:6f: 58:36:b3:ec:52:bc:35:de:ad:0d:89:ba:2a:81:a1: 86:9f:cc:60:d7:1e:d9:e3:41:e5:3d:a1:d6:7c:05: 20:4b:3e:6b:14:9a:52:83:12:fb:1f:72:e7:c2:80: dd:af:a1:d0:55:60:a4:fb:25:dd:06:17:54:dd:a6: e9:d4:7c:35:5c:58:20:63:8f:8f:f5:82:fc:dd:41: 0a:b7:c9:70:41:41:dc:49:c9:08:fc:4f:41:ce:c2: 9e:24:3a:df:97:80:87:63:16:e0:82:cd:b6:12:91: f2:02:7f:e1:62:0e:6a:aa:28:cc:68:f0:38:9a:2f: 64:0e:d6:45:92:6d:7d:56:b9:14:ed:38:0f:5d:05: c1:39:a6:01:2d:73:54:3e:70:ba:29:8c:c7:3c:dd: 04:54:b8:25:e7:36:82:1e:b4:1f:1a:a5:22:aa:72: 78:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:9B:C9:7A:81:BC:D3:E8:AA:9D:86:9A:DC:30:5E:2D:C0:A1:BD:F8 X509v3 Authority Key Identifier: keyid:EA:1F:A0:A5:CF:DA:8B:5A:6F:64:2F:58:87:FD:67:22:D7:53:10:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:a7:00:a2:c2:13:ff:7c:cd:a0:de:83:89:8a:81:3f:f2:8b: 10:23:3c:67:32:37:04:33:a5:86:e4:2d:f9:f1:11:eb:ea:56: 75:3d:2f:b5:a1:e4:3b:19:ba:2b:eb:5d:63:b1:dd:6f:5c:83: 2e:b8:3b:a6:d5:92:19:f1:40:0c:f5:0e:85:7a:ce:90:ea:fa: 48:a5:f4:ad:cd:c0:ad:f6:37:75:d8:c1:b3:d6:42:16:b7:15: 63:7a:b9:57:d9:08:a1:20:cd:61:92:38:73:71:42:0b:c1:12: 5c:33:08:38:d9:67:b0:2e:ec:29:f4:63:0b:08:08:5f:18:15: 8e:14:ec:fd:de:f3:b5:95:ee:45:d7:6d:e3:6e:ed:ee:20:a4: f7:cb:16:c9:df:e8:26:1b:c4:fe:ee:3d:13:2b:8f:54:74:35: ef:0f:50:b9:46:4c:78:85:c7:4a:26:ac:2b:34:3a:60:9f:de: 7e:2f:e1:cf:d6:60:b6:98:e2:22:77:bd:51:84:95:59:61:b3: 64:08:c9:0a:82:32:c5:9d:15:21:82:2d:29:90:b8:56:1f:f9: 14:e3:ad:94:5e:50:66:5a:04:b7:e9:ac:7f:07:b8:9d:62:98: b8:72:2d:85:92:1f:45:e8:2e:24:b2:51:a3:a6:05:33:e2:b6: a2:da:fe:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXeYfPnIQlCe9xgadj74f0pWAc/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUExRkEwQTVDRkRBOEI1QTZGNjQyRjU4ODdGRDY3MjJE NzUzMTAwRDAeFw0yNjA5MjQxNjM2MjNaFw0yNjA5MjUxODU5MjNaMDMxMTAvBgNV BAMTKDNFOUJDOTdBODFCQ0QzRThBQTlEODY5QURDMzA1RTJEQzBBMUJERjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYSWrhTVZ8Wt88zYq4jC9uuTyA BsNsgl0dO6zLA3J4bgQ0CGFlDvVzI556fhwD1dS/Ca0R/9sNuQ454KGXC9xGU8RP 8vPzi6n/VnwphPWntywjJhZdyCkDb1g2s+xSvDXerQ2JuiqBoYafzGDXHtnjQeU9 odZ8BSBLPmsUmlKDEvsfcufCgN2vodBVYKT7Jd0GF1TdpunUfDVcWCBjj4/1gvzd QQq3yXBBQdxJyQj8T0HOwp4kOt+XgIdjFuCCzbYSkfICf+FiDmqqKMxo8DiaL2QO 1kWSbX1WuRTtOA9dBcE5pgEtc1Q+cLopjMc83QRUuCXnNoIetB8apSKqcnjrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPpvJeoG80+iqnYaa3DBeLcChvfgwHwYDVR0j BBgwFoAU6h+gpc/ai1pvZC9Yh/1nItdTEA0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGM1OGZiN2MtNjdiOC00YmNlLTk2ZDktYmU5MTJlM2Y3M2RkLzAvRUExRkEwQTVD RkRBOEI1QTZGNjQyRjU4ODdGRDY3MjJENzUzMTAwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQTFGQTBBNUNGREE4QjVBNkY2NDJGNTg4N0ZENjcyMkQ3NTMx MDBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGM1OGZiN2MtNjdiOC00YmNlLTk2 ZDktYmU5MTJlM2Y3M2RkLzAvRUExRkEwQTVDRkRBOEI1QTZGNjQyRjU4ODdGRDY3 MjJENzUzMTAwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE2nAKLCE/98zaDeg4mKgT/yixAjPGcyNwQz pYbkLfnxEevqVnU9L7Wh5DsZuivrXWOx3W9cgy64O6bVkhnxQAz1DoV6zpDq+kil 9K3NwK32N3XYwbPWQha3FWN6uVfZCKEgzWGSOHNxQgvBElwzCDjZZ7Au7Cn0YwsI CF8YFY4U7P3e87WV7kXXbeNu7e4gpPfLFsnf6CYbxP7uPRMrj1R0Ne8PULlGTHiF x0omrCs0OmCf3n4v4c/WYLaY4iJ3vVGElVlhs2QIyQqCMsWdFSGCLSmQuFYf+RTj rZReUGZaBLfprH8HuJ1imLhyLYWSH0XoLiSyUaOmBTPitqLa/iY= -----END CERTIFICATE-----Generated at Fri Sep 25 08:35:30 2026 by rpki-client