$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.mft File: EBF23572810F8726C4B72E50589964A910C50B4B.mft (raw, json) Hash identifier: HZDvUuuEf46qfWJ+RBGc2UrLOwTSoQpRhhGxICrpJgs= Subject key identifier: CF:26:4E:53:2A:E7:78:40:0E:67:2A:02:69:90:60:D6:33:38:2B:74 Authority key identifier: EB:F2:35:72:81:0F:87:26:C4:B7:2E:50:58:99:64:A9:10:C5:0B:4B Certificate issuer: /CN=EBF23572810F8726C4B72E50589964A910C50B4B Certificate serial: 409398CC466205F7F6AAD087940BB9CDEDBB3BBE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBF23572810F8726C4B72E50589964A910C50B4B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.mft Manifest number: C4 Signing time: Sat 26 Sep 2026 02:07:50 +0000 Manifest this update: Sat 26 Sep 2026 02:02:50 +0000 Manifest next update: Sun 27 Sep 2026 03:28:50 +0000 Files and hashes: 1: 3131332e3231322e3136302e302f32312d3234203d3e203435323935.roa (hash: sfi5wZHa7EFMZctUVQihd5OvgHWotWx/JrU33FAshF0=) 2: EBF23572810F8726C4B72E50589964A910C50B4B.crl (hash: v8xv8x7RMvkCKopDlowA7hc2jcfiufx+9pbkr/+yNBM=) 3: 3130332e3135312e39322e302f32332d3234203d3e203435323935.roa (hash: l97XL+b3anmLCwyyq3iPYCEWOtlJt1r4AiG3G4acaMc=) 4: 323430373a343630303a3a2f33322d3438203d3e203435323935.roa (hash: pwFWQeeNE8aLdvpKEf3Cftf5A02g3uDsYu8O+3yCUbE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.crl rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBF23572810F8726C4B72E50589964A910C50B4B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 03:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:93:98:cc:46:62:05:f7:f6:aa:d0:87:94:0b:b9:cd:ed:bb:3b:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBF23572810F8726C4B72E50589964A910C50B4B Validity Not Before: Sep 26 02:02:50 2026 GMT Not After : Sep 27 03:28:50 2026 GMT Subject: CN=CF264E532AE778400E672A02699060D633382B74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0a:b2:18:d8:92:81:e6:fe:0b:33:b2:83:16: ef:58:d1:a5:da:9b:ba:c5:6e:d8:87:b5:35:38:3b: e1:5a:14:38:bb:02:ea:8a:24:fe:63:07:bc:13:7f: 5b:bf:ec:e9:7b:f2:71:f5:ec:f3:e4:c3:be:9a:d8: 8c:14:71:e2:26:4a:05:53:4f:b5:20:56:d4:24:a1: d0:e7:92:7a:c9:15:6b:12:17:cd:ef:78:07:8d:00: 91:c9:ee:c8:ac:91:bb:69:65:fd:41:2e:bd:82:e6: 15:05:06:61:30:49:2c:b3:b4:75:4a:c2:ba:b3:c8: 66:68:15:0e:4e:28:e7:05:e3:e6:02:c0:c1:90:2d: 2c:5d:c5:bc:6c:f2:50:3a:00:6f:f3:f9:5b:9f:a0: 53:0c:57:69:5e:9f:95:64:51:e5:97:e2:d8:cd:9b: 6c:e6:75:fc:5e:6e:64:d5:54:af:e9:19:44:86:b8: 13:2b:dd:bf:0e:b1:14:c4:ab:f2:cf:53:62:e5:3b: 64:8e:ec:0d:e6:7b:44:0c:1c:37:4c:2b:33:e9:38: e0:73:f1:1f:20:ea:57:e9:87:d7:a7:06:7a:d6:18: 34:32:a6:9f:cb:e0:4c:5e:63:e2:ef:52:2a:94:be: 1a:af:e2:12:e8:8b:2b:e9:f9:79:15:6a:f8:fe:dd: 2b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:26:4E:53:2A:E7:78:40:0E:67:2A:02:69:90:60:D6:33:38:2B:74 X509v3 Authority Key Identifier: keyid:EB:F2:35:72:81:0F:87:26:C4:B7:2E:50:58:99:64:A9:10:C5:0B:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBF23572810F8726C4B72E50589964A910C50B4B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:9a:30:17:b8:0d:66:87:03:40:33:d6:c5:98:ed:22:54:c1: 60:3d:72:c3:e9:64:cc:17:3b:6c:7c:8a:e5:fe:9d:0b:e8:53: 97:6d:7a:e0:da:1b:3b:f9:05:71:05:79:95:b0:01:f9:59:1f: ce:0e:be:a6:7b:1c:f2:e8:49:24:49:60:da:44:25:04:39:32: 42:41:94:bf:04:9c:91:21:91:3a:b9:95:80:27:66:35:f4:00: 37:ad:f0:cc:2c:ad:19:fe:ad:b1:69:ab:9f:32:1c:9f:1a:c7: 9c:c4:45:5f:9d:33:c9:f4:3d:4b:c5:4f:c8:59:52:a4:78:74: 59:1c:20:21:01:03:c6:71:e7:7c:85:7f:f1:b4:79:d7:f8:f7: 2a:eb:a1:2a:53:ff:fd:3f:48:67:9d:9f:15:af:e6:cd:f3:1d: e0:34:e7:7d:fd:a6:cc:e0:d0:45:47:9f:ac:56:3f:50:e1:9e: c9:53:64:91:ae:5f:1b:bf:eb:58:b6:16:35:0b:69:d7:a0:14: 20:4d:f8:33:b2:77:1f:93:47:a5:62:50:b6:0c:05:f9:80:88: 57:57:1a:9d:2b:d9:84:f2:6f:1c:62:8c:65:a1:a8:9f:d7:bf: 16:b0:78:1e:f9:37:f8:04:6b:44:68:7f:c0:34:ff:52:c7:b7: 73:82:dd:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQJOYzEZiBff2qtCHlAu5ze27O74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJGMjM1NzI4MTBGODcyNkM0QjcyRTUwNTg5OTY0QTkx MEM1MEI0QjAeFw0yNjA5MjYwMjAyNTBaFw0yNjA5MjcwMzI4NTBaMDMxMTAvBgNV BAMTKENGMjY0RTUzMkFFNzc4NDAwRTY3MkEwMjY5OTA2MEQ2MzMzODJCNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrCrIY2JKB5v4LM7KDFu9Y0aXa m7rFbtiHtTU4O+FaFDi7AuqKJP5jB7wTf1u/7Ol78nH17PPkw76a2IwUceImSgVT T7UgVtQkodDnknrJFWsSF83veAeNAJHJ7siskbtpZf1BLr2C5hUFBmEwSSyztHVK wrqzyGZoFQ5OKOcF4+YCwMGQLSxdxbxs8lA6AG/z+VufoFMMV2len5VkUeWX4tjN m2zmdfxebmTVVK/pGUSGuBMr3b8OsRTEq/LPU2LlO2SO7A3me0QMHDdMKzPpOOBz 8R8g6lfph9enBnrWGDQypp/L4ExeY+LvUiqUvhqv4hLoiyvp+XkVavj+3StHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzyZOUyrneEAOZyoCaZBg1jM4K3QwHwYDVR0j BBgwFoAU6/I1coEPhybEty5QWJlkqRDFC0swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDRmNDhhODktOTBjNS00ZjVhLTgwMTUtMzZmMTE5NmE3MWM4LzAvRUJGMjM1NzI4 MTBGODcyNkM0QjcyRTUwNTg5OTY0QTkxMEM1MEI0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQkYyMzU3MjgxMEY4NzI2QzRCNzJFNTA1ODk5NjRBOTEwQzUw QjRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDRmNDhhODktOTBjNS00ZjVhLTgw MTUtMzZmMTE5NmE3MWM4LzAvRUJGMjM1NzI4MTBGODcyNkM0QjcyRTUwNTg5OTY0 QTkxMEM1MEI0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEaaMBe4DWaHA0Az1sWY7SJUwWA9csPpZMwX O2x8iuX+nQvoU5dteuDaGzv5BXEFeZWwAflZH84OvqZ7HPLoSSRJYNpEJQQ5MkJB lL8EnJEhkTq5lYAnZjX0ADet8MwsrRn+rbFpq58yHJ8ax5zERV+dM8n0PUvFT8hZ UqR4dFkcICEBA8Zx53yFf/G0edf49yrroSpT//0/SGednxWv5s3zHeA05339pszg 0EVHn6xWP1DhnslTZJGuXxu/61i2FjULadegFCBN+DOydx+TR6ViULYMBfmAiFdX Gp0r2YTybxxijGWhqJ/XvxaweB75N/gEa0Rof8A0/1LHt3OC3Qs= -----END CERTIFICATE-----Generated at Sat Sep 26 18:41:52 2026 by rpki-client