$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.mft File: EB1DCD321031C0290E00088B308F6E37F658F0F0.mft (raw, json) Hash identifier: zU0LRwFjgimmLtRvIgedvyQZ3fDduMYco0r5LinhVMk= Subject key identifier: F8:5D:57:C5:A0:32:95:CD:44:EB:04:6B:9F:8B:BA:81:5C:E6:2C:7A Authority key identifier: EB:1D:CD:32:10:31:C0:29:0E:00:08:8B:30:8F:6E:37:F6:58:F0:F0 Certificate issuer: /CN=EB1DCD321031C0290E00088B308F6E37F658F0F0 Certificate serial: 26EA9FC9D140968F333FA17DA0D92AEF7D203916 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 19:24:57 +0000 Manifest this update: Wed 23 Sep 2026 19:19:57 +0000 Manifest next update: Thu 24 Sep 2026 19:36:57 +0000 Files and hashes: 1: EB1DCD321031C0290E00088B308F6E37F658F0F0.crl (hash: AomlNZASqIPROpwznJg4QJzCjAvcsFyrwC0Qe7DcQxM=) 2: 3135372e36362e3132352e302f32342d3234203d3e20313532373732.roa (hash: 52gK1ZVXU5lx2N9LIOHuf1720HHZgYLR2YWvzcpZMqA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.crl rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:36:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:ea:9f:c9:d1:40:96:8f:33:3f:a1:7d:a0:d9:2a:ef:7d:20:39:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB1DCD321031C0290E00088B308F6E37F658F0F0 Validity Not Before: Sep 23 19:19:57 2026 GMT Not After : Sep 24 19:36:57 2026 GMT Subject: CN=F85D57C5A03295CD44EB046B9F8BBA815CE62C7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:30:f4:f5:16:3e:9f:8c:0a:84:1b:ea:ae:3d: bb:39:11:97:3e:76:34:bf:9f:6c:07:15:f6:0b:e5: 55:18:76:22:a1:ce:f4:9f:00:05:09:a4:56:f6:55: 98:9f:9b:7d:c8:52:59:cc:bf:df:da:0e:25:0e:b1: 51:6a:e2:e9:6d:61:f8:e5:0b:cc:61:dc:c6:ed:6a: 44:ef:f0:f5:d7:0a:88:4e:9a:86:48:c6:b8:76:d1: 0d:0f:8e:40:3a:0a:18:12:06:22:57:1f:a9:fb:78: e5:ee:79:40:ae:8f:3f:25:57:6d:2f:ba:00:bb:ba: 74:2d:ba:c9:98:44:b4:f9:10:aa:48:45:78:b8:d9: 77:a9:fd:4a:3f:92:ee:e2:18:f8:a2:f8:44:ad:84: ef:ec:2d:60:79:cf:e5:5f:b2:be:6f:9a:be:72:67: 8f:1b:b2:23:af:79:c7:e8:48:c5:d0:48:ef:90:0c: 84:b7:19:23:15:f1:ce:3f:16:0f:5c:86:27:21:65: 59:64:f0:47:c1:a7:94:37:4a:a9:be:49:27:c9:7c: 1a:6f:4e:a6:df:91:e6:7d:23:b9:d1:01:43:5c:1e: e7:2a:72:59:04:4f:5c:d6:83:1a:8c:b9:7b:e4:e6: b7:48:46:9a:a9:71:93:c8:9e:10:21:7c:8e:75:b2: 6d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:5D:57:C5:A0:32:95:CD:44:EB:04:6B:9F:8B:BA:81:5C:E6:2C:7A X509v3 Authority Key Identifier: keyid:EB:1D:CD:32:10:31:C0:29:0E:00:08:8B:30:8F:6E:37:F6:58:F0:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:4f:c0:93:57:55:2d:a4:e0:f6:b3:05:74:4b:3d:db:d6:20: 63:28:fa:e2:52:bb:e2:1e:b8:fd:bb:dd:00:a5:84:46:b0:a2: 2e:c5:c5:83:45:0a:b9:ca:cc:a2:29:c6:09:d2:65:63:21:0f: b2:86:31:64:83:83:26:5f:05:e1:10:5d:86:79:a3:e3:0f:4a: 73:c7:fd:58:70:6d:2b:1a:03:62:55:b1:d2:8b:0a:17:3b:4b: d0:a6:12:55:1e:c9:94:49:84:8e:41:f7:2f:c8:78:31:fd:18: 03:df:3e:6d:58:de:ab:22:1d:c3:62:d5:59:55:0c:2a:d4:c3: 27:76:25:eb:e1:5c:53:ad:c2:df:c7:78:46:3b:2f:32:37:a6: 5b:c5:df:a3:5b:9a:cc:e2:8e:90:aa:4f:2d:76:5f:68:e5:bd: 84:64:d1:56:9d:21:4c:f0:d5:b2:75:23:5e:6e:05:9e:2f:66: 57:20:38:21:45:ce:77:4f:63:0e:6f:e2:9e:3e:f6:2b:13:a0: 53:97:c5:9e:f7:99:d4:46:e7:0c:96:a6:2d:f5:52:e3:74:2b: d5:6d:77:38:df:68:00:37:20:d0:b7:3b:e3:f6:9f:a5:65:3e: 2f:04:e7:35:3e:41:71:0e:08:54:b5:0d:0b:a9:ec:05:04:2a: 36:0d:d1:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJuqfydFAlo8zP6F9oNkq730gORYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUIxRENEMzIxMDMxQzAyOTBFMDAwODhCMzA4RjZFMzdG NjU4RjBGMDAeFw0yNjA5MjMxOTE5NTdaFw0yNjA5MjQxOTM2NTdaMDMxMTAvBgNV BAMTKEY4NUQ1N0M1QTAzMjk1Q0Q0NEVCMDQ2QjlGOEJCQTgxNUNFNjJDN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSMPT1Fj6fjAqEG+quPbs5EZc+ djS/n2wHFfYL5VUYdiKhzvSfAAUJpFb2VZifm33IUlnMv9/aDiUOsVFq4ultYfjl C8xh3MbtakTv8PXXCohOmoZIxrh20Q0PjkA6ChgSBiJXH6n7eOXueUCujz8lV20v ugC7unQtusmYRLT5EKpIRXi42Xep/Uo/ku7iGPii+ESthO/sLWB5z+Vfsr5vmr5y Z48bsiOvecfoSMXQSO+QDIS3GSMV8c4/Fg9chichZVlk8EfBp5Q3Sqm+SSfJfBpv TqbfkeZ9I7nRAUNcHucqclkET1zWgxqMuXvk5rdIRpqpcZPInhAhfI51sm33AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+F1XxaAylc1E6wRrn4u6gVzmLHowHwYDVR0j BBgwFoAU6x3NMhAxwCkOAAiLMI9uN/ZY8PAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2NmMDFlYzYtOGU4OS00MDJhLTkwYzctNTBjNmYxNGNkMjQyLzAvRUIxRENEMzIx MDMxQzAyOTBFMDAwODhCMzA4RjZFMzdGNjU4RjBGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQjFEQ0QzMjEwMzFDMDI5MEUwMDA4OEIzMDhGNkUzN0Y2NThG MEYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2NmMDFlYzYtOGU4OS00MDJhLTkw YzctNTBjNmYxNGNkMjQyLzAvRUIxRENEMzIxMDMxQzAyOTBFMDAwODhCMzA4RjZF MzdGNjU4RjBGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGtPwJNXVS2k4PazBXRLPdvWIGMo+uJSu+Ie uP273QClhEawoi7FxYNFCrnKzKIpxgnSZWMhD7KGMWSDgyZfBeEQXYZ5o+MPSnPH /VhwbSsaA2JVsdKLChc7S9CmElUeyZRJhI5B9y/IeDH9GAPfPm1Y3qsiHcNi1VlV DCrUwyd2JevhXFOtwt/HeEY7LzI3plvF36NbmszijpCqTy12X2jlvYRk0VadIUzw 1bJ1I15uBZ4vZlcgOCFFzndPYw5v4p4+9isToFOXxZ73mdRG5wyWpi31UuN0K9Vt dzjfaAA3INC3O+P2n6VlPi8E5zU+QXEOCFS1DQup7AUEKjYN0Y0= -----END CERTIFICATE-----Generated at Thu Sep 24 12:43:03 2026 by rpki-client