$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/EA69EE1870C74C4198176D679D2040962AA65EE5.mft File: EA69EE1870C74C4198176D679D2040962AA65EE5.mft (raw, json) Hash identifier: U3pGE1qDngzHADaPkLfPcUD7OQibbb+VlFxMyg4YP6A= Subject key identifier: 0D:50:2C:4B:4F:AF:5A:25:9A:A6:3A:15:7C:AE:8F:43:23:D7:A2:22 Authority key identifier: EA:69:EE:18:70:C7:4C:41:98:17:6D:67:9D:20:40:96:2A:A6:5E:E5 Certificate issuer: /CN=EA69EE1870C74C4198176D679D2040962AA65EE5 Certificate serial: 3D1B22E0FE43880CC0CF6B5D4D814E9BB3D8273C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA69EE1870C74C4198176D679D2040962AA65EE5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/EA69EE1870C74C4198176D679D2040962AA65EE5.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 10:13:19 +0000 Manifest this update: Fri 25 Sep 2026 10:08:19 +0000 Manifest next update: Sat 26 Sep 2026 10:55:19 +0000 Files and hashes: 1: 3130332e3134362e3132392e302f32342d3234203d3e20313430303238.roa (hash: JdS3onh/UNwTa6fbUAQVIX7szlwvK4Q8vIPtVeKS+NU=) 2: 3130332e3134362e3132382e302f32332d3233203d3e20313430303238.roa (hash: 27RMiTZ9x6jfj6rn7+g1KMgItqjflbCMRzo3ncDyIag=) 3: EA69EE1870C74C4198176D679D2040962AA65EE5.crl (hash: +WvROmu55E7GtCztr/j8ydrmRPKnryQP85mH51p84kI=) 4: 3130332e3134362e3132382e302f32342d3234203d3e20313430303238.roa (hash: xmNTgE8NlEgdxtkyZzmV8vhuvBfxhNKdp0Qma8cQHQ4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/EA69EE1870C74C4198176D679D2040962AA65EE5.crl rsync://rpki-rsync.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/EA69EE1870C74C4198176D679D2040962AA65EE5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA69EE1870C74C4198176D679D2040962AA65EE5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 10:55:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:1b:22:e0:fe:43:88:0c:c0:cf:6b:5d:4d:81:4e:9b:b3:d8:27:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA69EE1870C74C4198176D679D2040962AA65EE5 Validity Not Before: Sep 25 10:08:19 2026 GMT Not After : Sep 26 10:55:19 2026 GMT Subject: CN=0D502C4B4FAF5A259AA63A157CAE8F4323D7A222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:31:da:70:7f:82:47:65:f7:03:49:77:ec:b1: 3e:e0:10:d5:83:0d:b5:71:a9:9b:6b:65:a2:a2:44: 5f:43:cc:ab:fe:70:5d:df:00:44:a4:9f:c1:e3:55: cb:81:41:b7:71:24:ec:3d:ad:20:b0:c9:26:08:c0: 3c:2c:4f:8d:13:fa:6e:ff:53:6d:58:62:b7:ad:ee: 53:5d:c4:89:74:cd:67:c8:dd:40:fd:ae:c4:7c:b2: 3b:a6:4e:9e:ed:59:e9:4f:12:dc:3e:36:96:ec:69: 91:a8:4a:df:ab:d5:00:7a:74:ff:f6:55:66:0b:fa: 69:4e:58:1c:86:6f:ef:fe:79:06:fe:2b:36:51:6b: e5:4a:4e:93:4b:cb:c8:c3:9d:88:c1:e5:91:20:6e: 22:75:8d:8d:95:a2:0a:10:10:15:66:0d:6b:ad:bd: 0e:92:5e:29:89:4a:8a:f0:21:39:3a:25:f8:e0:25: 71:e2:53:12:7a:cb:7e:6d:97:a9:d1:f2:91:57:9a: 94:46:d6:d6:16:d8:54:11:29:d1:b6:8d:c9:92:31: 18:74:04:40:f0:8f:b7:e8:3b:3c:75:e0:63:dc:6d: 7c:63:b5:ca:c9:b7:b8:32:f1:7e:80:d0:da:f9:d7: 0e:92:c8:42:2e:0d:57:89:a1:94:81:44:3e:4f:c0: 7d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:50:2C:4B:4F:AF:5A:25:9A:A6:3A:15:7C:AE:8F:43:23:D7:A2:22 X509v3 Authority Key Identifier: keyid:EA:69:EE:18:70:C7:4C:41:98:17:6D:67:9D:20:40:96:2A:A6:5E:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/EA69EE1870C74C4198176D679D2040962AA65EE5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA69EE1870C74C4198176D679D2040962AA65EE5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/EA69EE1870C74C4198176D679D2040962AA65EE5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:88:bb:65:f3:87:30:38:3b:33:88:06:a9:0f:05:26:b8:40: 37:00:8f:5a:3b:1c:15:3c:bc:ea:43:10:1a:a2:39:09:40:55: ce:0b:96:91:28:b0:89:0c:6d:95:32:4b:27:8f:9d:ef:97:3b: 91:ec:47:6a:98:9b:4b:62:1e:26:4e:db:af:27:8d:df:59:59: 97:1f:cd:4f:bd:74:3b:cb:4a:df:7b:fd:2b:cc:77:f0:35:27: d7:b9:79:e9:02:ea:de:6d:24:21:d4:62:f5:4b:4c:c6:34:e8: 7f:83:73:c3:0c:15:69:8a:a3:98:94:73:59:4a:20:5f:f4:e9: 25:f7:46:eb:65:69:b6:ae:9e:f2:42:67:11:3b:ff:fc:17:96: ec:5c:2f:77:01:4c:80:01:34:9c:81:30:96:c0:4a:13:8e:28: 51:64:29:f2:d6:cc:20:7e:94:f0:67:3a:fe:b8:e8:6a:39:5b: ed:bb:9d:89:09:89:d6:ec:74:23:9c:05:a0:79:4f:50:a5:a0: 1c:42:75:92:a9:a0:13:f0:5e:4d:93:bb:dd:2a:ec:3a:4e:c0: a9:e9:9c:7c:5b:38:aa:b5:c1:4a:7a:c6:6f:f6:7c:af:4c:6e: 4b:3f:b7:44:78:1e:be:56:ce:1a:69:94:3d:94:24:66:89:d3: f8:02:b0:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPRsi4P5DiAzAz2tdTYFOm7PYJzwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUE2OUVFMTg3MEM3NEM0MTk4MTc2RDY3OUQyMDQwOTYy QUE2NUVFNTAeFw0yNjA5MjUxMDA4MTlaFw0yNjA5MjYxMDU1MTlaMDMxMTAvBgNV BAMTKDBENTAyQzRCNEZBRjVBMjU5QUE2M0ExNTdDQUU4RjQzMjNEN0EyMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClMdpwf4JHZfcDSXfssT7gENWD DbVxqZtrZaKiRF9DzKv+cF3fAESkn8HjVcuBQbdxJOw9rSCwySYIwDwsT40T+m7/ U21YYret7lNdxIl0zWfI3UD9rsR8sjumTp7tWelPEtw+NpbsaZGoSt+r1QB6dP/2 VWYL+mlOWByGb+/+eQb+KzZRa+VKTpNLy8jDnYjB5ZEgbiJ1jY2VogoQEBVmDWut vQ6SXimJSorwITk6JfjgJXHiUxJ6y35tl6nR8pFXmpRG1tYW2FQRKdG2jcmSMRh0 BEDwj7foOzx14GPcbXxjtcrJt7gy8X6A0Nr51w6SyEIuDVeJoZSBRD5PwH0hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDVAsS0+vWiWapjoVfK6PQyPXoiIwHwYDVR0j BBgwFoAU6mnuGHDHTEGYF21nnSBAliqmXuUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjQyYWEwYTktNDU4OC00Zjg3LWFiODktZjNiOWRjNjEwN2I2LzAvRUE2OUVFMTg3 MEM3NEM0MTk4MTc2RDY3OUQyMDQwOTYyQUE2NUVFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQTY5RUUxODcwQzc0QzQxOTgxNzZENjc5RDIwNDA5NjJBQTY1 RUU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjQyYWEwYTktNDU4OC00Zjg3LWFi ODktZjNiOWRjNjEwN2I2LzAvRUE2OUVFMTg3MEM3NEM0MTk4MTc2RDY3OUQyMDQw OTYyQUE2NUVFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKeIu2XzhzA4OzOIBqkPBSa4QDcAj1o7HBU8 vOpDEBqiOQlAVc4LlpEosIkMbZUySyePne+XO5HsR2qYm0tiHiZO268njd9ZWZcf zU+9dDvLSt97/SvMd/A1J9e5eekC6t5tJCHUYvVLTMY06H+Dc8MMFWmKo5iUc1lK IF/06SX3RutlabaunvJCZxE7//wXluxcL3cBTIABNJyBMJbAShOOKFFkKfLWzCB+ lPBnOv646Go5W+27nYkJidbsdCOcBaB5T1CloBxCdZKpoBPwXk2Tu90q7DpOwKnp nHxbOKq1wUp6xm/2fK9Mbks/t0R4Hr5WzhpplD2UJGaJ0/gCsMw= -----END CERTIFICATE-----Generated at Fri Sep 25 18:55:30 2026 by rpki-client