$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.mft File: EBA1F4874C4867D2CAA214867052E9413088CD22.mft (raw, json) Hash identifier: zgvWU+LPyOnE9GIc4/snUZ0+EgDOgmjyyh/877Axbhs= Subject key identifier: 76:18:CF:5D:22:C4:A3:79:43:86:D5:52:C8:32:0F:28:B3:67:4F:95 Authority key identifier: EB:A1:F4:87:4C:48:67:D2:CA:A2:14:86:70:52:E9:41:30:88:CD:22 Certificate issuer: /CN=EBA1F4874C4867D2CAA214867052E9413088CD22 Certificate serial: 3DA54F021E824D42DD69F902B8C1D24906DC5145 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EBA1F4874C4867D2CAA214867052E9413088CD22.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 13:22:22 +0000 Manifest this update: Thu 24 Sep 2026 13:17:22 +0000 Manifest next update: Fri 25 Sep 2026 17:15:22 +0000 Files and hashes: 1: EBA1F4874C4867D2CAA214867052E9413088CD22.crl (hash: FUDiT1CsxASiZaOmPiGoQYmu2UzPY4W8nnoeeQ6Es70=) 2: 3136302e31392e3230372e302f32342d3234203d3e20313532373634.roa (hash: Rsj+zG8fTbANuQe+LowjpWqzpy4Nr2I6Rkz77sVkBRk=) 3: 3136302e31392e3230362e302f32342d3234203d3e20313532373634.roa (hash: rkfIQLZH91MBngOR2XF3JSvb0x7kp9rSE9FoBc2wVuU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.crl rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EBA1F4874C4867D2CAA214867052E9413088CD22.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 11:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:a5:4f:02:1e:82:4d:42:dd:69:f9:02:b8:c1:d2:49:06:dc:51:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBA1F4874C4867D2CAA214867052E9413088CD22 Validity Not Before: Sep 24 13:17:22 2026 GMT Not After : Sep 25 17:15:22 2026 GMT Subject: CN=7618CF5D22C4A3794386D552C8320F28B3674F95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:bc:8e:c7:f7:22:bc:c0:f4:94:55:eb:f0:ea: 49:bd:83:3f:0c:94:21:52:eb:37:76:30:12:5f:4c: a8:19:18:43:6e:f4:c7:3b:f0:71:0a:05:20:1c:99: e7:bf:1f:c4:4d:41:ef:5f:27:b8:fa:b9:71:2b:4a: 98:9e:73:d0:66:16:bd:24:a3:53:ca:e1:c6:52:0d: 67:d3:9b:58:73:98:d3:11:ee:83:d9:46:cd:58:51: 51:16:5a:a0:51:78:cb:09:55:18:0d:bc:22:61:0c: 49:d8:f0:6f:5a:60:c3:1c:a3:77:f9:21:eb:ca:01: 00:7c:5e:97:b9:32:68:5d:60:6e:bc:4f:ba:81:27: 27:8b:cd:fe:86:6e:5f:89:6d:48:90:90:35:b9:c5: 64:d4:61:73:ef:bf:93:a3:da:8b:08:45:db:6e:ee: 5d:60:57:a3:d3:5a:f4:66:2e:2a:33:5c:a0:f0:6f: cd:e1:16:1c:31:e2:98:8c:17:08:b1:c5:91:6d:a4: 0a:87:09:cf:ca:c8:1d:90:21:bb:3a:c4:64:81:43: d0:1a:4b:df:81:e4:9b:07:5e:e7:97:79:32:9f:a5: 2d:34:89:4a:af:89:a1:7d:bf:db:0d:18:af:a3:c4: a8:d0:63:f8:ec:43:cd:7d:b9:f2:d9:ae:80:e7:ef: 0a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:18:CF:5D:22:C4:A3:79:43:86:D5:52:C8:32:0F:28:B3:67:4F:95 X509v3 Authority Key Identifier: keyid:EB:A1:F4:87:4C:48:67:D2:CA:A2:14:86:70:52:E9:41:30:88:CD:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EBA1F4874C4867D2CAA214867052E9413088CD22.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:66:77:78:84:52:aa:f7:bc:79:96:16:ac:e7:92:55:d6:a2: 86:26:73:f5:ce:8d:07:8c:26:c5:8b:cb:f0:63:51:69:6b:32: cd:35:b9:d3:94:32:41:6e:67:d4:b4:58:f5:7f:c7:d7:f6:4e: fd:d6:47:12:13:23:8d:84:de:94:1b:fd:c4:05:f4:36:d8:c8: 98:82:65:72:72:c0:2a:ed:33:e7:fc:59:35:44:62:7f:82:f4: f5:3e:66:f2:39:1b:cc:5e:79:e1:e2:3d:8c:2c:b2:d8:f8:0f: 76:18:44:d3:fc:1c:c4:e8:95:70:8c:70:99:54:69:87:e8:53: be:b2:01:02:64:3a:b0:8c:1b:81:c7:6f:41:a2:f2:fd:cb:09: f7:c6:8a:10:2c:10:30:95:10:19:81:ae:0b:6b:57:b1:12:0d: 98:25:6c:2d:c8:02:2a:b2:11:0a:66:f5:af:00:cd:50:f4:76: c3:30:3b:8d:97:fb:b7:8f:20:98:1f:32:21:1b:46:46:97:6b: b7:1a:2e:ef:c7:9c:bd:4c:5c:df:3f:20:41:4f:29:df:92:3d: c7:d0:12:6c:af:2b:71:64:8d:73:e6:2b:15:66:06:71:c1:b2: 28:a4:a4:e9:70:1c:83:c2:c3:9c:3e:49:70:59:93:e5:38:f0: 9a:53:24:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPaVPAh6CTULdafkCuMHSSQbcUUUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJBMUY0ODc0QzQ4NjdEMkNBQTIxNDg2NzA1MkU5NDEz MDg4Q0QyMjAeFw0yNjA5MjQxMzE3MjJaFw0yNjA5MjUxNzE1MjJaMDMxMTAvBgNV BAMTKDc2MThDRjVEMjJDNEEzNzk0Mzg2RDU1MkM4MzIwRjI4QjM2NzRGOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDovI7H9yK8wPSUVevw6km9gz8M lCFS6zd2MBJfTKgZGENu9Mc78HEKBSAcmee/H8RNQe9fJ7j6uXErSpiec9BmFr0k o1PK4cZSDWfTm1hzmNMR7oPZRs1YUVEWWqBReMsJVRgNvCJhDEnY8G9aYMMco3f5 IevKAQB8Xpe5MmhdYG68T7qBJyeLzf6Gbl+JbUiQkDW5xWTUYXPvv5Oj2osIRdtu 7l1gV6PTWvRmLiozXKDwb83hFhwx4piMFwixxZFtpAqHCc/KyB2QIbs6xGSBQ9Aa S9+B5JsHXueXeTKfpS00iUqviaF9v9sNGK+jxKjQY/jsQ819ufLZroDn7wqjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdhjPXSLEo3lDhtVSyDIPKLNnT5UwHwYDVR0j BBgwFoAU66H0h0xIZ9LKohSGcFLpQTCIzSIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2IyYTkxNmEtYWQyMi00OTc5LWJlNDMtOTUxYzc2ZjJmOTIwLzAvRUJBMUY0ODc0 QzQ4NjdEMkNBQTIxNDg2NzA1MkU5NDEzMDg4Q0QyMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQkExRjQ4NzRDNDg2N0QyQ0FBMjE0ODY3MDUyRTk0MTMwODhD RDIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2IyYTkxNmEtYWQyMi00OTc5LWJl NDMtOTUxYzc2ZjJmOTIwLzAvRUJBMUY0ODc0QzQ4NjdEMkNBQTIxNDg2NzA1MkU5 NDEzMDg4Q0QyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFmd3iEUqr3vHmWFqznklXWooYmc/XOjQeM JsWLy/BjUWlrMs01udOUMkFuZ9S0WPV/x9f2Tv3WRxITI42E3pQb/cQF9DbYyJiC ZXJywCrtM+f8WTVEYn+C9PU+ZvI5G8xeeeHiPYwsstj4D3YYRNP8HMTolXCMcJlU aYfoU76yAQJkOrCMG4HHb0Gi8v3LCffGihAsEDCVEBmBrgtrV7ESDZglbC3IAiqy EQpm9a8AzVD0dsMwO42X+7ePIJgfMiEbRkaXa7caLu/HnL1MXN8/IEFPKd+SPcfQ EmyvK3FkjXPmKxVmBnHBsiikpOlwHIPCw5w+SXBZk+U48JpTJC0= -----END CERTIFICATE-----Generated at Fri Sep 25 04:05:07 2026 by rpki-client