$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.mft File: EBF23572810F8726C4B72E50589964A910C50B4B.mft (raw, json) Hash identifier: LYNCE3Iz+Wf1KqtJSx6rhRsgTQfug683PfYUXImWWeE= Subject key identifier: 33:A5:F2:AE:EC:D9:8F:29:CC:3F:54:6E:E5:01:5F:B6:46:B3:62:C2 Authority key identifier: EB:F2:35:72:81:0F:87:26:C4:B7:2E:50:58:99:64:A9:10:C5:0B:4B Certificate issuer: /CN=EBF23572810F8726C4B72E50589964A910C50B4B Certificate serial: 5A4B1621B47612F34773CBD66FE530E0FFE2D405 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBF23572810F8726C4B72E50589964A910C50B4B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 15:35:01 +0000 Manifest this update: Thu 24 Sep 2026 15:30:01 +0000 Manifest next update: Fri 25 Sep 2026 15:36:01 +0000 Files and hashes: 1: EBF23572810F8726C4B72E50589964A910C50B4B.crl (hash: opIOqqix60/v50GefZMNDqWfID4RxpZ4uR+WS7okKjs=) 2: 3131332e3231322e3136302e302f32312d3234203d3e203435323935.roa (hash: sfi5wZHa7EFMZctUVQihd5OvgHWotWx/JrU33FAshF0=) 3: 323430373a343630303a3a2f33322d3438203d3e203435323935.roa (hash: pwFWQeeNE8aLdvpKEf3Cftf5A02g3uDsYu8O+3yCUbE=) 4: 3130332e3135312e39322e302f32332d3234203d3e203435323935.roa (hash: l97XL+b3anmLCwyyq3iPYCEWOtlJt1r4AiG3G4acaMc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.crl rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBF23572810F8726C4B72E50589964A910C50B4B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:4b:16:21:b4:76:12:f3:47:73:cb:d6:6f:e5:30:e0:ff:e2:d4:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBF23572810F8726C4B72E50589964A910C50B4B Validity Not Before: Sep 24 15:30:01 2026 GMT Not After : Sep 25 15:36:01 2026 GMT Subject: CN=33A5F2AEECD98F29CC3F546EE5015FB646B362C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:21:4f:0d:2a:18:8b:d8:d0:4e:ab:e7:b4:31: f9:87:f5:f3:ac:de:8e:46:81:e0:fc:32:6f:f1:c3: 4f:e8:7a:5a:81:76:22:72:95:54:77:a2:48:e3:21: 08:74:6f:2a:8c:65:39:99:2d:be:86:c2:9a:06:b6: 2c:76:36:b7:97:76:35:36:05:b0:08:fa:06:d3:38: 70:47:91:5e:5f:64:28:c7:0a:12:68:7f:90:59:b4: a1:e3:52:a5:a2:ab:db:18:df:2a:fa:64:63:94:57: d0:e9:99:6c:ef:53:a4:a7:02:8d:04:51:18:c0:cf: 80:20:42:0f:f6:15:a1:4a:87:3e:40:06:47:31:c1: 2f:d1:b6:79:72:8b:64:7f:52:bf:05:85:73:ec:19: 9c:9f:e3:1d:d1:58:c7:4b:fb:0c:7f:7f:a6:2f:ba: e3:0f:73:2b:d7:66:ad:70:69:03:8c:97:91:79:b3: 06:f3:07:eb:ac:9f:96:9d:19:71:ff:2e:fc:d5:c8: cb:b8:c6:6d:65:57:95:0e:7b:9b:42:d9:fb:b9:94: 15:6c:7b:14:f2:80:5a:9f:95:a0:65:b8:e1:1f:df: 50:2e:d6:86:4d:51:66:f4:4c:ef:5f:eb:32:ea:0b: 6c:cb:a7:a3:05:36:52:0a:44:3a:5c:75:67:69:a6: 4a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A5:F2:AE:EC:D9:8F:29:CC:3F:54:6E:E5:01:5F:B6:46:B3:62:C2 X509v3 Authority Key Identifier: keyid:EB:F2:35:72:81:0F:87:26:C4:B7:2E:50:58:99:64:A9:10:C5:0B:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBF23572810F8726C4B72E50589964A910C50B4B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:19:c8:4b:e7:3f:8d:0c:76:4b:f0:f8:b4:c5:53:bb:aa:04: 79:35:61:77:7c:9f:63:8d:fc:53:5b:6b:34:7d:c6:5c:2b:21: 2c:ae:34:71:b1:5f:d7:4e:04:ef:44:33:de:9e:58:1b:75:a5: 09:fb:94:3f:de:8d:d6:1f:fb:50:47:62:b7:b1:4f:7a:54:5c: 90:d9:63:b4:56:65:1c:62:c0:05:80:aa:e8:9e:24:c0:77:1e: 99:ee:78:63:ff:c6:6c:5e:c1:a5:5e:7f:f5:ec:e9:ed:69:4a: 8c:1d:b7:09:b1:af:cd:de:d7:98:6c:60:5d:45:3b:8b:48:e6: 8c:5e:df:71:55:6d:82:5b:9a:7d:11:f0:6f:3b:7a:4b:59:93: 39:e0:b4:58:14:46:34:9e:82:a1:a3:f4:04:47:b2:f6:5c:0e: ea:29:5e:5e:68:72:90:9a:be:d9:94:6d:ff:03:eb:00:2a:7a: b7:35:98:26:fc:22:70:64:15:d5:4b:3d:f8:22:1e:ce:3d:3a: fa:c9:5e:ec:4f:37:35:a8:1c:47:65:fa:8f:b0:0b:8c:59:7e: 97:e9:2a:d1:90:ed:0d:47:4e:3d:b9:90:e5:45:09:7a:5f:c3: a1:5f:f2:19:a6:87:8d:69:11:98:61:71:a7:af:d5:5f:34:cd: 6b:f0:a6:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWksWIbR2EvNHc8vWb+Uw4P/i1AUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJGMjM1NzI4MTBGODcyNkM0QjcyRTUwNTg5OTY0QTkx MEM1MEI0QjAeFw0yNjA5MjQxNTMwMDFaFw0yNjA5MjUxNTM2MDFaMDMxMTAvBgNV BAMTKDMzQTVGMkFFRUNEOThGMjlDQzNGNTQ2RUU1MDE1RkI2NDZCMzYyQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYIU8NKhiL2NBOq+e0MfmH9fOs 3o5GgeD8Mm/xw0/oelqBdiJylVR3okjjIQh0byqMZTmZLb6GwpoGtix2NreXdjU2 BbAI+gbTOHBHkV5fZCjHChJof5BZtKHjUqWiq9sY3yr6ZGOUV9DpmWzvU6SnAo0E URjAz4AgQg/2FaFKhz5ABkcxwS/Rtnlyi2R/Ur8FhXPsGZyf4x3RWMdL+wx/f6Yv uuMPcyvXZq1waQOMl5F5swbzB+usn5adGXH/LvzVyMu4xm1lV5UOe5tC2fu5lBVs exTygFqflaBluOEf31Au1oZNUWb0TO9f6zLqC2zLp6MFNlIKRDpcdWdppkr9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM6XyruzZjynMP1Ru5QFftkazYsIwHwYDVR0j BBgwFoAU6/I1coEPhybEty5QWJlkqRDFC0swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDRmNDhhODktOTBjNS00ZjVhLTgwMTUtMzZmMTE5NmE3MWM4LzAvRUJGMjM1NzI4 MTBGODcyNkM0QjcyRTUwNTg5OTY0QTkxMEM1MEI0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQkYyMzU3MjgxMEY4NzI2QzRCNzJFNTA1ODk5NjRBOTEwQzUw QjRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDRmNDhhODktOTBjNS00ZjVhLTgw MTUtMzZmMTE5NmE3MWM4LzAvRUJGMjM1NzI4MTBGODcyNkM0QjcyRTUwNTg5OTY0 QTkxMEM1MEI0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF8ZyEvnP40Mdkvw+LTFU7uqBHk1YXd8n2ON /FNbazR9xlwrISyuNHGxX9dOBO9EM96eWBt1pQn7lD/ejdYf+1BHYrexT3pUXJDZ Y7RWZRxiwAWAquieJMB3HpnueGP/xmxewaVef/Xs6e1pSowdtwmxr83e15hsYF1F O4tI5oxe33FVbYJbmn0R8G87ektZkzngtFgURjSegqGj9ARHsvZcDuopXl5ocpCa vtmUbf8D6wAqerc1mCb8InBkFdVLPfgiHs49OvrJXuxPNzWoHEdl+o+wC4xZfpfp KtGQ7Q1HTj25kOVFCXpfw6Ff8hmmh41pEZhhcaev1V80zWvwprQ= -----END CERTIFICATE-----Generated at Thu Sep 24 21:04:00 2026 by rpki-client