$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft File: EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft (raw, json) Hash identifier: +3LPDmayYK5sMR6wZMOZRwYPd4g2hJBWTkBkX1GG+Ts= Subject key identifier: 93:7C:9A:60:D3:78:BC:53:A5:59:DD:BD:08:8E:6D:9B:F0:88:20:17 Authority key identifier: EA:1F:A0:A5:CF:DA:8B:5A:6F:64:2F:58:87:FD:67:22:D7:53:10:0D Certificate issuer: /CN=EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D Certificate serial: 59CCEAA5E1D26E2CE7B9028D08D58F3FCEC292A3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft Manifest number: 0105 Signing time: Sat 14 Nov 2026 17:21:19 +0000 Manifest this update: Sat 14 Nov 2026 17:16:19 +0000 Manifest next update: Sun 15 Nov 2026 20:20:19 +0000 Files and hashes: 1: EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.crl (hash: wwwktfe1Z7+sQc6YOOIsKnRkfV5j0czEk7iLCw5aZ+U=) 2: 3136302e3138372e3139362e302f32342d3234203d3e20313533313234.roa (hash: S4hauyuLw7/w8jvKs8EoZ1L3na+uvt8Vo0vCOD48FJ4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.crl rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 18:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:cc:ea:a5:e1:d2:6e:2c:e7:b9:02:8d:08:d5:8f:3f:ce:c2:92:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D Validity Not Before: Nov 14 17:16:19 2026 GMT Not After : Nov 15 20:20:19 2026 GMT Subject: CN=937C9A60D378BC53A559DDBD088E6D9BF0882017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:56:f8:58:ca:46:be:2f:63:8e:35:22:ba:e4: fb:50:fd:53:35:09:31:58:11:c1:1f:b1:da:bf:98: 34:ba:53:9a:24:a3:cf:fb:b8:4b:8b:04:89:d8:df: ff:d1:6b:3f:9e:1f:28:4e:e7:2b:9b:6d:c9:a3:fa: cd:39:ef:3f:8a:ab:bd:ac:4b:4f:4b:01:ed:ca:8f: e4:68:37:f3:b2:a1:aa:e3:ef:2f:1d:d8:45:52:05: 06:82:2b:22:e8:7a:c1:90:6e:9e:8b:a7:92:9c:4a: 99:7c:f5:14:7a:00:b9:c2:8c:8f:c9:0d:82:19:29: 46:c9:b8:3f:dd:50:eb:b6:db:65:1a:d1:a4:4d:4e: b1:d8:b3:61:64:4b:87:da:4b:1c:34:62:7b:51:dc: 6e:b6:67:9c:3b:5b:a1:56:d4:50:96:9e:13:7c:1f: 61:b9:9d:dc:ee:b5:aa:db:9d:d2:5f:54:f0:c6:16: 82:b0:9f:8f:0f:a0:06:4f:7e:a8:13:f5:f0:0f:af: 9c:2d:b6:d7:8a:f7:42:0d:e2:1d:0c:3d:30:44:8d: 71:6a:40:08:c2:68:5e:18:b1:ff:9c:06:aa:61:50: 2e:b2:77:98:70:b9:68:9e:28:b7:72:de:ae:0e:d9: 0f:87:b8:0e:41:eb:2a:f8:d6:80:8a:1b:41:a5:70: 0b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:7C:9A:60:D3:78:BC:53:A5:59:DD:BD:08:8E:6D:9B:F0:88:20:17 X509v3 Authority Key Identifier: keyid:EA:1F:A0:A5:CF:DA:8B:5A:6F:64:2F:58:87:FD:67:22:D7:53:10:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:15:e9:6d:0f:0f:14:f5:f5:e4:99:1e:e9:34:18:10:23:35: af:7d:3e:c2:c8:bd:8d:e1:63:89:78:7f:78:b4:82:c9:d2:a0: 4f:57:e0:86:cf:6b:83:09:b9:40:b7:a5:32:e7:fb:b9:56:77: 8a:95:49:a3:ba:f8:df:10:b0:a1:7f:fb:2a:d9:6f:4c:d0:88: 19:09:79:90:b3:1f:70:bf:99:1c:51:23:ec:b5:de:1e:e8:70: 4f:92:13:7b:1d:0c:94:24:09:c8:3c:ff:0d:ee:a5:14:4b:fc: 98:ec:4e:88:fc:1e:34:dc:0a:b8:5e:48:04:e2:0f:bf:09:45: e6:4b:7e:61:51:de:86:12:cb:72:3b:ed:e0:a2:4b:00:99:e5: b2:6b:2a:b0:fd:36:58:a2:cb:0b:ed:be:b1:8f:7c:87:2e:57: aa:8f:af:b2:74:7e:45:f6:33:84:a0:98:28:40:dd:8f:0a:4d: a1:b5:6f:3a:a2:ba:7c:cb:a6:c9:f8:8e:87:a2:2d:65:4c:0b: 6a:70:a5:f9:0e:3f:d1:fb:7b:5e:2f:8c:a7:16:9e:e3:50:aa: f7:2c:0f:5f:57:6c:2d:30:49:82:90:b9:00:e4:dd:4b:a1:79: 42:57:54:48:8a:c9:4b:8a:78:62:03:90:61:ed:95:77:7d:a0: 13:8d:62:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWczqpeHSbiznuQKNCNWPP87CkqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUExRkEwQTVDRkRBOEI1QTZGNjQyRjU4ODdGRDY3MjJE NzUzMTAwRDAeFw0yNjExMTQxNzE2MTlaFw0yNjExMTUyMDIwMTlaMDMxMTAvBgNV BAMTKDkzN0M5QTYwRDM3OEJDNTNBNTU5RERCRDA4OEU2RDlCRjA4ODIwMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXVvhYyka+L2OONSK65PtQ/VM1 CTFYEcEfsdq/mDS6U5oko8/7uEuLBInY3//Raz+eHyhO5yubbcmj+s057z+Kq72s S09LAe3Kj+RoN/Oyoarj7y8d2EVSBQaCKyLoesGQbp6Lp5KcSpl89RR6ALnCjI/J DYIZKUbJuD/dUOu222Ua0aRNTrHYs2FkS4faSxw0YntR3G62Z5w7W6FW1FCWnhN8 H2G5ndzutarbndJfVPDGFoKwn48PoAZPfqgT9fAPr5wttteK90IN4h0MPTBEjXFq QAjCaF4Ysf+cBqphUC6yd5hwuWieKLdy3q4O2Q+HuA5B6yr41oCKG0GlcAu1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk3yaYNN4vFOlWd29CI5tm/CIIBcwHwYDVR0j BBgwFoAU6h+gpc/ai1pvZC9Yh/1nItdTEA0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGM1OGZiN2MtNjdiOC00YmNlLTk2ZDktYmU5MTJlM2Y3M2RkLzAvRUExRkEwQTVD RkRBOEI1QTZGNjQyRjU4ODdGRDY3MjJENzUzMTAwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQTFGQTBBNUNGREE4QjVBNkY2NDJGNTg4N0ZENjcyMkQ3NTMx MDBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGM1OGZiN2MtNjdiOC00YmNlLTk2 ZDktYmU5MTJlM2Y3M2RkLzAvRUExRkEwQTVDRkRBOEI1QTZGNjQyRjU4ODdGRDY3 MjJENzUzMTAwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIEV6W0PDxT19eSZHuk0GBAjNa99PsLIvY3h Y4l4f3i0gsnSoE9X4IbPa4MJuUC3pTLn+7lWd4qVSaO6+N8QsKF/+yrZb0zQiBkJ eZCzH3C/mRxRI+y13h7ocE+SE3sdDJQkCcg8/w3upRRL/JjsToj8HjTcCrheSATi D78JReZLfmFR3oYSy3I77eCiSwCZ5bJrKrD9NliiywvtvrGPfIcuV6qPr7J0fkX2 M4SgmChA3Y8KTaG1bzqiunzLpsn4joeiLWVMC2pwpfkOP9H7e14vjKcWnuNQqvcs D19XbC0wSYKQuQDk3UuheUJXVEiKyUuKeGIDkGHtlXd9oBONYvQ= -----END CERTIFICATE-----Generated at Sun Nov 15 00:08:19 2026 by rpki-client