$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.mft File: EBA1F4874C4867D2CAA214867052E9413088CD22.mft (raw, json) Hash identifier: s+UUTmf3ZrwtxlifijqHgNWxXCugCJCbeJ3b4gvRzQU= Subject key identifier: CB:F7:AF:7C:61:AF:3D:85:BA:F2:87:DB:DD:F8:E5:8B:FE:0D:5F:A7 Authority key identifier: EB:A1:F4:87:4C:48:67:D2:CA:A2:14:86:70:52:E9:41:30:88:CD:22 Certificate issuer: /CN=EBA1F4874C4867D2CAA214867052E9413088CD22 Certificate serial: 1ADA8E78A26B0544C34A5B3B1EFE904C726A3EA9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EBA1F4874C4867D2CAA214867052E9413088CD22.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.mft Manifest number: 0106 Signing time: Sat 14 Nov 2026 20:25:04 +0000 Manifest this update: Sat 14 Nov 2026 20:20:04 +0000 Manifest next update: Sun 15 Nov 2026 21:13:04 +0000 Files and hashes: 1: 3136302e31392e3230362e302f32342d3234203d3e20313532373634.roa (hash: rkfIQLZH91MBngOR2XF3JSvb0x7kp9rSE9FoBc2wVuU=) 2: 3136302e31392e3230372e302f32342d3234203d3e20313532373634.roa (hash: Rsj+zG8fTbANuQe+LowjpWqzpy4Nr2I6Rkz77sVkBRk=) 3: EBA1F4874C4867D2CAA214867052E9413088CD22.crl (hash: u64rkGLU97qgjTR488/+/8BD++9pP0zDD+s57aVNzwo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.crl rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EBA1F4874C4867D2CAA214867052E9413088CD22.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 21:13:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:da:8e:78:a2:6b:05:44:c3:4a:5b:3b:1e:fe:90:4c:72:6a:3e:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBA1F4874C4867D2CAA214867052E9413088CD22 Validity Not Before: Nov 14 20:20:04 2026 GMT Not After : Nov 15 21:13:04 2026 GMT Subject: CN=CBF7AF7C61AF3D85BAF287DBDDF8E58BFE0D5FA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:43:d1:42:84:51:f6:aa:ef:cd:6f:c8:01:c2: 65:cd:3d:ee:0e:05:6f:58:ba:8f:9b:e5:ee:de:47: 9f:a8:8b:f2:1d:4b:3a:58:07:5e:85:bf:ce:f7:03: cd:17:49:2f:d1:97:78:e0:f0:61:ba:a0:87:15:b7: 50:0f:1e:cd:ea:7a:ac:e0:e7:f1:d7:1e:0a:67:0f: bc:f6:7a:68:a5:c0:42:41:1e:f0:43:54:a9:3f:36: 48:e7:6a:6f:b8:eb:20:ee:97:62:7d:69:e5:ff:3e: b4:62:a8:4e:43:18:fe:20:82:a1:d8:40:f6:a3:25: 77:9c:32:8c:95:66:55:d0:02:80:24:e0:e2:fd:11: 02:80:80:9b:37:1c:d6:5b:bc:ce:44:e3:4a:0b:ec: 3c:87:83:99:9b:36:65:d6:19:5c:9e:2d:c1:7f:c1: 30:e3:07:4a:7b:2e:29:1a:d8:35:b6:e5:84:5f:51: 5a:c3:88:fd:5a:2c:39:c3:c0:c9:f6:59:37:71:ad: 66:57:95:b7:c9:1e:63:5d:b2:22:32:a9:0f:60:41: 69:79:3a:0d:c3:62:be:8c:3a:d1:18:81:1f:ab:8e: 5f:6b:86:cd:bf:70:04:c5:bc:fb:07:1b:1a:28:2a: 08:d1:63:b1:ae:c5:99:73:62:b5:d4:a1:56:49:16: 0f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F7:AF:7C:61:AF:3D:85:BA:F2:87:DB:DD:F8:E5:8B:FE:0D:5F:A7 X509v3 Authority Key Identifier: keyid:EB:A1:F4:87:4C:48:67:D2:CA:A2:14:86:70:52:E9:41:30:88:CD:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EBA1F4874C4867D2CAA214867052E9413088CD22.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:b0:a1:b5:fe:a2:6f:a6:1a:90:67:e4:19:ee:e8:11:13:4b: 31:a2:28:92:82:d1:b5:54:1d:d8:7a:90:a0:dd:ee:7a:ad:33: 7f:b1:fe:cb:a2:aa:29:b9:9e:07:f7:5f:28:0d:46:73:f3:12: 43:03:93:3b:4d:d8:42:de:fd:47:b6:35:bc:3f:d7:9c:49:ee: 5a:db:c4:45:fc:ea:f4:12:b3:c0:08:4e:38:bd:e8:6b:e2:0a: b8:d8:76:d9:fe:5f:95:61:29:4f:7e:e1:6a:d4:00:cc:45:1b: 3c:f6:1a:d3:97:d0:bb:8e:8f:35:3f:a8:95:80:1c:41:9e:81: 1a:c4:22:6a:b4:a5:a1:8b:0c:0a:ab:93:cf:25:d3:22:4e:6b: f0:d4:25:94:1d:db:c2:3e:4c:69:43:c5:d1:54:c8:9d:3b:9b: 20:85:6f:6a:b0:9b:ff:77:05:ae:02:52:99:7c:55:64:45:b8: da:1f:70:16:56:59:63:c8:a1:29:f3:e7:b7:06:da:9c:35:ff: 09:60:ec:6c:46:2b:ac:8a:23:7e:ae:4b:ac:19:3c:90:7c:44: 8f:16:d7:26:8b:ac:d4:c8:f5:55:65:a8:39:df:45:c9:7a:20: 3d:37:6e:f7:c2:5a:71:9d:72:5e:fc:ed:e3:ec:e9:b4:3e:0e: f9:d4:0d:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGtqOeKJrBUTDSls7Hv6QTHJqPqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJBMUY0ODc0QzQ4NjdEMkNBQTIxNDg2NzA1MkU5NDEz MDg4Q0QyMjAeFw0yNjExMTQyMDIwMDRaFw0yNjExMTUyMTEzMDRaMDMxMTAvBgNV BAMTKENCRjdBRjdDNjFBRjNEODVCQUYyODdEQkRERjhFNThCRkUwRDVGQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEQ9FChFH2qu/Nb8gBwmXNPe4O BW9Yuo+b5e7eR5+oi/IdSzpYB16Fv873A80XSS/Rl3jg8GG6oIcVt1APHs3qeqzg 5/HXHgpnD7z2emilwEJBHvBDVKk/Nkjnam+46yDul2J9aeX/PrRiqE5DGP4ggqHY QPajJXecMoyVZlXQAoAk4OL9EQKAgJs3HNZbvM5E40oL7DyHg5mbNmXWGVyeLcF/ wTDjB0p7Lika2DW25YRfUVrDiP1aLDnDwMn2WTdxrWZXlbfJHmNdsiIyqQ9gQWl5 Og3DYr6MOtEYgR+rjl9rhs2/cATFvPsHGxooKgjRY7GuxZlzYrXUoVZJFg93AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy/evfGGvPYW68ofb3fjli/4NX6cwHwYDVR0j BBgwFoAU66H0h0xIZ9LKohSGcFLpQTCIzSIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2IyYTkxNmEtYWQyMi00OTc5LWJlNDMtOTUxYzc2ZjJmOTIwLzAvRUJBMUY0ODc0 QzQ4NjdEMkNBQTIxNDg2NzA1MkU5NDEzMDg4Q0QyMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQkExRjQ4NzRDNDg2N0QyQ0FBMjE0ODY3MDUyRTk0MTMwODhD RDIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2IyYTkxNmEtYWQyMi00OTc5LWJl NDMtOTUxYzc2ZjJmOTIwLzAvRUJBMUY0ODc0QzQ4NjdEMkNBQTIxNDg2NzA1MkU5 NDEzMDg4Q0QyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGWwobX+om+mGpBn5Bnu6BETSzGiKJKC0bVU Hdh6kKDd7nqtM3+x/suiqim5ngf3XygNRnPzEkMDkztN2ELe/Ue2Nbw/15xJ7lrb xEX86vQSs8AITji96GviCrjYdtn+X5VhKU9+4WrUAMxFGzz2GtOX0LuOjzU/qJWA HEGegRrEImq0paGLDAqrk88l0yJOa/DUJZQd28I+TGlDxdFUyJ07myCFb2qwm/93 Ba4CUpl8VWRFuNofcBZWWWPIoSnz57cG2pw1/wlg7GxGK6yKI36uS6wZPJB8RI8W 1yaLrNTI9VVlqDnfRcl6ID03bvfCWnGdcl787ePs6bQ+DvnUDYU= -----END CERTIFICATE-----Generated at Sun Nov 15 08:05:52 2026 by rpki-client