$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.mft File: EB314E0C129A5CAF077447531422664A0DBA21EB.mft (raw, json) Hash identifier: ADVfBwEW7tkIS5kVfAqKeaWpcEvo+RSlDJraW0vXY88= Subject key identifier: F0:B1:7D:B8:E7:44:A6:A1:F9:AB:25:51:23:88:6D:88:A1:34:77:18 Authority key identifier: EB:31:4E:0C:12:9A:5C:AF:07:74:47:53:14:22:66:4A:0D:BA:21:EB Certificate issuer: /CN=EB314E0C129A5CAF077447531422664A0DBA21EB Certificate serial: 2DCE1C97920AF184F44DBF12358D1B8A372D3149 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB314E0C129A5CAF077447531422664A0DBA21EB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 18:33:56 +0000 Manifest this update: Wed 23 Sep 2026 18:28:56 +0000 Manifest next update: Thu 24 Sep 2026 21:20:56 +0000 Files and hashes: 1: 3130332e34392e3233302e302f32342d3234203d3e203633383638.roa (hash: XZkVD58+fA+9TgN/E8SS+oOsYxABbo9pdQXTqmdzBkg=) 2: 3130332e34392e3233312e302f32342d3234203d3e203633383638.roa (hash: Y2m4R38G71C4Yy/wcE7dbb3Q4JyEjJy1AWb7+OggzPM=) 3: EB314E0C129A5CAF077447531422664A0DBA21EB.crl (hash: Fnh3BPLY4Yp5YtRsmrx3zFDKHzjt68kFK5qBADGpmuM=) 4: 3130332e34392e3232392e302f32342d3234203d3e203633383638.roa (hash: A5PltxTRAuGwKx7Z5AFNGaTklePgssNYT6aD4qcBx0s=) 5: 3130332e34392e3232382e302f32342d3234203d3e203633383638.roa (hash: un5/MncOqw/wwzU2UuxhsRYNEiAYmLczzv4yniu8AsM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.crl rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB314E0C129A5CAF077447531422664A0DBA21EB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 21:20:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:ce:1c:97:92:0a:f1:84:f4:4d:bf:12:35:8d:1b:8a:37:2d:31:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB314E0C129A5CAF077447531422664A0DBA21EB Validity Not Before: Sep 23 18:28:56 2026 GMT Not After : Sep 24 21:20:56 2026 GMT Subject: CN=F0B17DB8E744A6A1F9AB255123886D88A1347718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:96:f9:44:3b:a9:00:8b:c3:6b:b3:6b:f4:1e: bd:de:c0:4e:a0:87:db:1f:ed:78:08:60:46:f1:ff: 4c:f4:33:b0:34:ba:94:3b:67:a1:ca:07:6d:e2:36: 6f:b0:a9:10:30:53:11:b9:bf:c6:a7:10:da:54:29: 43:af:26:b4:41:34:91:f2:68:68:3d:2e:5b:26:6e: 4b:53:03:53:59:d3:de:ee:ae:24:8b:bd:ab:17:a0: d9:af:71:12:ef:81:2d:cf:38:81:3f:3d:44:79:93: 52:ef:a9:40:71:d9:d6:86:4d:65:d7:91:75:95:d2: e9:a1:df:36:5f:24:c6:fc:b2:7b:09:ee:e8:b9:b3: 96:ce:37:1c:cf:c8:6b:54:5b:ae:fd:ae:c2:4d:0e: 56:8c:1e:50:9b:9c:28:03:62:0d:b7:3d:ea:52:30: f5:aa:41:6f:92:b3:4b:62:f2:df:8e:b0:d8:23:38: 0f:68:ba:02:67:19:07:ab:11:16:3a:54:0b:a4:5e: 34:19:38:38:cd:01:85:f4:a1:eb:25:32:38:69:c2: 5e:88:67:d7:bb:e0:b2:a5:34:26:6b:b9:22:a7:28: 98:de:84:6a:28:7b:33:3d:a2:ea:e5:11:a1:d1:e6: 07:23:66:b9:f1:b1:87:65:75:8c:3e:8c:98:11:f8: 92:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:B1:7D:B8:E7:44:A6:A1:F9:AB:25:51:23:88:6D:88:A1:34:77:18 X509v3 Authority Key Identifier: keyid:EB:31:4E:0C:12:9A:5C:AF:07:74:47:53:14:22:66:4A:0D:BA:21:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB314E0C129A5CAF077447531422664A0DBA21EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:5f:fe:54:c0:6e:7b:3d:95:16:50:9f:94:14:6e:85:d6:e3: 66:03:8f:76:cb:96:54:f6:18:52:a5:55:88:4b:5a:ac:d7:df: b1:cd:ed:0f:9f:01:0e:9e:91:46:6e:0e:48:cc:0f:9f:06:ad: f1:de:17:56:d5:26:4e:c7:13:77:fa:f9:83:15:0f:ea:f7:6a: 09:00:6f:29:db:42:74:9c:50:ad:6b:d3:42:d1:94:e4:6e:25: 48:c7:c0:f8:cf:b6:b6:75:72:be:88:88:ce:a1:3b:31:8c:8a: 0c:7a:72:2b:27:70:7b:1d:ee:fd:73:5e:95:33:c2:e8:e1:1c: ae:57:da:cc:1f:b0:90:07:a8:d2:74:cb:97:e9:1c:9f:6a:4e: c0:fc:fc:da:4c:81:9a:a2:a2:8c:e7:83:2f:8d:d1:6d:80:aa: 76:0c:00:74:a2:a7:14:ef:9b:99:e0:b5:59:3c:db:77:ec:c2: f6:95:f8:39:b4:8f:0c:53:11:b0:67:8c:a8:61:08:b8:94:35: cc:14:40:52:51:21:ae:73:21:e5:b8:82:49:72:21:f6:63:f8: 70:ae:76:cb:fe:22:06:19:85:9f:f4:d1:28:b4:a7:eb:cb:d7: 05:58:ca:71:25:fc:0a:8e:d5:c1:92:5b:fc:5a:92:81:1e:66: d4:d5:47:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULc4cl5IK8YT0Tb8SNY0bijctMUkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUIzMTRFMEMxMjlBNUNBRjA3NzQ0NzUzMTQyMjY2NEEw REJBMjFFQjAeFw0yNjA5MjMxODI4NTZaFw0yNjA5MjQyMTIwNTZaMDMxMTAvBgNV BAMTKEYwQjE3REI4RTc0NEE2QTFGOUFCMjU1MTIzODg2RDg4QTEzNDc3MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCulvlEO6kAi8Nrs2v0Hr3ewE6g h9sf7XgIYEbx/0z0M7A0upQ7Z6HKB23iNm+wqRAwUxG5v8anENpUKUOvJrRBNJHy aGg9LlsmbktTA1NZ097uriSLvasXoNmvcRLvgS3POIE/PUR5k1LvqUBx2daGTWXX kXWV0umh3zZfJMb8snsJ7ui5s5bONxzPyGtUW679rsJNDlaMHlCbnCgDYg23PepS MPWqQW+Ss0ti8t+OsNgjOA9ougJnGQerERY6VAukXjQZODjNAYX0oeslMjhpwl6I Z9e74LKlNCZruSKnKJjehGooezM9ourlEaHR5gcjZrnxsYdldYw+jJgR+JI1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8LF9uOdEpqH5qyVRI4htiKE0dxgwHwYDVR0j BBgwFoAU6zFODBKaXK8HdEdTFCJmSg26IeswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDM3MTkyOWQtYzNkMC00ZGFhLWI1ZmQtYTI0OTU2MGQ1ZDA0LzAvRUIzMTRFMEMx MjlBNUNBRjA3NzQ0NzUzMTQyMjY2NEEwREJBMjFFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQjMxNEUwQzEyOUE1Q0FGMDc3NDQ3NTMxNDIyNjY0QTBEQkEy MUVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDM3MTkyOWQtYzNkMC00ZGFhLWI1 ZmQtYTI0OTU2MGQ1ZDA0LzAvRUIzMTRFMEMxMjlBNUNBRjA3NzQ0NzUzMTQyMjY2 NEEwREJBMjFFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAChf/lTAbns9lRZQn5QUboXW42YDj3bLllT2 GFKlVYhLWqzX37HN7Q+fAQ6ekUZuDkjMD58GrfHeF1bVJk7HE3f6+YMVD+r3agkA bynbQnScUK1r00LRlORuJUjHwPjPtrZ1cr6IiM6hOzGMigx6cisncHsd7v1zXpUz wujhHK5X2swfsJAHqNJ0y5fpHJ9qTsD8/NpMgZqioozngy+N0W2AqnYMAHSipxTv m5ngtVk823fswvaV+Dm0jwxTEbBnjKhhCLiUNcwUQFJRIa5zIeW4gklyIfZj+HCu dsv+IgYZhZ/00Si0p+vL1wVYynEl/AqO1cGSW/xakoEeZtTVRzU= -----END CERTIFICATE-----Generated at Thu Sep 24 06:09:40 2026 by rpki-client