$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft File: EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft (raw, json) Hash identifier: 171yotJF6DIhwHWZF7W6zcet2MU8cflk2iQQ4dkucSc= Subject key identifier: D6:20:1E:48:66:9E:9E:DC:3D:F4:D9:A7:41:1F:BF:6D:60:4E:31:4C Authority key identifier: EA:F1:1A:8E:D0:35:AD:ED:15:9E:09:77:A5:5B:8A:13:5A:2D:BA:F0 Certificate issuer: /CN=EAF11A8ED035ADED159E0977A55B8A135A2DBAF0 Certificate serial: 5FC78631CB6F563CA885EEE28EE7027C2AFCC974 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 19:55:32 +0000 Manifest this update: Wed 23 Sep 2026 19:50:32 +0000 Manifest next update: Thu 24 Sep 2026 22:17:32 +0000 Files and hashes: 1: 3132312e3130312e3138362e302f32342d3234203d3e203338373835.roa (hash: o0yYhvbuoFqhEPym4z+ZdJk3Le3FK4ab18rxhmTiTA8=) 2: 3132312e3130312e3139302e302f32342d3234203d3e203338373835.roa (hash: kOLyF61iZDyTGCpcXoqG6pGYD92Lf55fGKKsSX0XUdE=) 3: 3132312e3130312e3138342e302f32342d3234203d3e203338373835.roa (hash: 3mA7+mzgag84qW1ECVIx+vVoMA11/hm1+8F3im5FSgM=) 4: 3132312e3130312e3138352e302f32342d3234203d3e203338373835.roa (hash: njy5/kh9KsnXyn0A9UeBHDQF9Tkk8vaMqIfNa9Qx8CA=) 5: 3132312e3130312e3138382e302f32342d3234203d3e203338373835.roa (hash: jtsuDztEZ+UqFnwxVIum5heFrLrZtRBLCrlDOZVW974=) 6: EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.crl (hash: 80UccyzSGUg5n0fR12hr6i0+ItGt41QcoyfN2ENs60c=) 7: 3132312e3130312e3139312e302f32342d3234203d3e203338373835.roa (hash: hd0faeOSPJPRBzPByoIXVnw8NPD4bzR2wSWzwHgoQPA=) 8: 3132312e3130312e3138372e302f32342d3234203d3e203338373835.roa (hash: eow5kZw+wlYHSjxq5MYrTPBsAbbgLnc6v4ENArx4+O8=) 9: 3132312e3130312e3138392e302f32342d3234203d3e203338373835.roa (hash: pWwlBOgo0c3x6IIcXfvg9KBIWmKkPWfxlYAnYQTVkEg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.crl rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 22:17:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:c7:86:31:cb:6f:56:3c:a8:85:ee:e2:8e:e7:02:7c:2a:fc:c9:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAF11A8ED035ADED159E0977A55B8A135A2DBAF0 Validity Not Before: Sep 23 19:50:32 2026 GMT Not After : Sep 24 22:17:32 2026 GMT Subject: CN=D6201E48669E9EDC3DF4D9A7411FBF6D604E314C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fe:ba:44:43:44:aa:43:ad:d8:2a:45:6f:ab: 78:d4:24:ec:39:b8:28:6a:85:ec:28:58:b1:4e:7b: 21:8e:2f:b7:57:70:11:73:db:28:b1:ed:4d:31:ca: dc:22:3b:1a:13:e6:6e:88:7f:71:f6:35:fb:e7:67: 06:ce:43:e6:3e:7b:1f:87:d0:b3:cc:ee:69:1c:3b: 0e:c6:6e:36:6a:0d:6a:5f:ca:1a:1d:ca:07:0a:6d: 65:c5:86:ab:47:e8:02:0e:6e:9d:7e:a6:ac:14:42: 32:2e:28:fb:5e:bd:1b:ae:91:43:cc:6f:93:58:77: b5:07:2d:77:d8:fa:4f:25:40:86:ac:ed:ec:b1:aa: 4a:a4:90:8b:42:2c:50:41:82:92:1c:e0:88:b2:dc: 96:d9:a2:c9:85:b9:33:37:0a:6d:ad:4d:27:6f:63: 5c:81:c1:df:77:b6:ac:cb:40:f9:ef:a5:e2:d0:a3: 3e:42:b0:6f:89:c2:47:8f:f6:6f:5f:cd:a5:c7:22: 93:76:83:8a:ca:a4:42:bc:80:c4:0d:cd:16:71:c5: 54:c3:d0:e6:b9:64:eb:aa:29:93:cc:6a:42:a7:fe: 06:b4:f2:41:3c:41:57:65:a9:fd:f0:d1:5d:1e:37: 97:26:3a:20:61:e6:d1:80:98:7e:5a:78:60:a0:f8: 86:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:20:1E:48:66:9E:9E:DC:3D:F4:D9:A7:41:1F:BF:6D:60:4E:31:4C X509v3 Authority Key Identifier: keyid:EA:F1:1A:8E:D0:35:AD:ED:15:9E:09:77:A5:5B:8A:13:5A:2D:BA:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:81:ee:b9:77:4d:c6:f6:15:0e:df:05:e2:26:3f:75:64:4b: 46:1c:d4:26:cf:48:0f:74:3b:5f:53:51:a0:68:23:33:9d:5b: 0e:87:08:56:a1:0d:fe:9c:e4:37:e7:19:a2:b9:e6:81:a1:90: e6:a3:19:ed:fa:18:8a:41:98:b3:e0:6e:dd:31:24:50:e9:ce: 33:7e:43:db:4c:d2:e0:d6:e3:23:5e:81:8f:4f:39:8b:b7:e8: 77:f3:1f:cb:51:d0:e4:67:06:d8:12:21:15:43:09:b2:18:fc: 0b:34:9f:4d:c6:92:92:f9:9f:50:37:3b:ad:15:3b:5f:6a:0e: 70:0f:01:5a:ce:56:b0:ce:c6:69:38:10:0b:61:52:78:06:f4: bc:8f:c1:1d:db:13:a3:be:c8:8c:67:3e:d5:f2:64:1f:55:2e: 00:06:f4:9b:4a:dd:fc:85:4c:99:0a:88:c6:01:1f:5c:f6:ac: 9e:01:45:85:31:02:61:76:78:c3:1f:2b:62:c0:12:ad:a1:b6: 03:c5:3e:91:9d:32:6c:25:bb:80:4c:f2:d3:ce:ce:a4:f3:56: 78:9f:10:07:08:05:fc:78:74:96:eb:8d:12:3b:ce:4b:3f:85: da:2d:10:d3:e9:83:0e:4b:fb:2f:95:74:93:0d:ed:dd:8e:0f: d7:9b:70:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX8eGMctvVjyohe7ijucCfCr8yXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFGMTFBOEVEMDM1QURFRDE1OUUwOTc3QTU1QjhBMTM1 QTJEQkFGMDAeFw0yNjA5MjMxOTUwMzJaFw0yNjA5MjQyMjE3MzJaMDMxMTAvBgNV BAMTKEQ2MjAxRTQ4NjY5RTlFREMzREY0RDlBNzQxMUZCRjZENjA0RTMxNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr/rpEQ0SqQ63YKkVvq3jUJOw5 uChqhewoWLFOeyGOL7dXcBFz2yix7U0xytwiOxoT5m6If3H2NfvnZwbOQ+Y+ex+H 0LPM7mkcOw7GbjZqDWpfyhodygcKbWXFhqtH6AIObp1+pqwUQjIuKPtevRuukUPM b5NYd7UHLXfY+k8lQIas7eyxqkqkkItCLFBBgpIc4Iiy3JbZosmFuTM3Cm2tTSdv Y1yBwd93tqzLQPnvpeLQoz5CsG+JwkeP9m9fzaXHIpN2g4rKpEK8gMQNzRZxxVTD 0Oa5ZOuqKZPMakKn/ga08kE8QVdlqf3w0V0eN5cmOiBh5tGAmH5aeGCg+IZjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1iAeSGaentw99NmnQR+/bWBOMUwwHwYDVR0j BBgwFoAU6vEajtA1re0Vngl3pVuKE1otuvAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTU3MmRmYmUtNGNhMC00YTQ2LTgwMzctNDk2OGVkOTdjYWRjLzAvRUFGMTFBOEVE MDM1QURFRDE1OUUwOTc3QTU1QjhBMTM1QTJEQkFGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQUYxMUE4RUQwMzVBREVEMTU5RTA5NzdBNTVCOEExMzVBMkRC QUYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTU3MmRmYmUtNGNhMC00YTQ2LTgw MzctNDk2OGVkOTdjYWRjLzAvRUFGMTFBOEVEMDM1QURFRDE1OUUwOTc3QTU1QjhB MTM1QTJEQkFGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG2B7rl3Tcb2FQ7fBeImP3VkS0Yc1CbPSA90 O19TUaBoIzOdWw6HCFahDf6c5DfnGaK55oGhkOajGe36GIpBmLPgbt0xJFDpzjN+ Q9tM0uDW4yNegY9POYu36HfzH8tR0ORnBtgSIRVDCbIY/As0n03GkpL5n1A3O60V O19qDnAPAVrOVrDOxmk4EAthUngG9LyPwR3bE6O+yIxnPtXyZB9VLgAG9JtK3fyF TJkKiMYBH1z2rJ4BRYUxAmF2eMMfK2LAEq2htgPFPpGdMmwlu4BM8tPOzqTzVnif EAcIBfx4dJbrjRI7zks/hdotENPpgw5L+y+VdJMN7d2OD9ebcMY= -----END CERTIFICATE-----Generated at Thu Sep 24 12:41:52 2026 by rpki-client