$ rpki-client -vvvf rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft File: EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft (raw, json) Hash identifier: gRf6ujaKok/oBJvwzuQHl36TwTxfCx5H6fXF3j05p4g= Subject key identifier: F0:86:EB:57:17:A0:B0:B2:D4:D5:79:A8:2E:18:28:CF:FE:C5:2E:30 Authority key identifier: EA:41:3F:BC:BE:2B:F7:36:52:D8:51:02:49:5E:CE:33:E9:33:0D:0F Certificate issuer: /CN=EA413FBCBE2BF73652D85102495ECE33E9330D0F Certificate serial: 6469F6D925006330D4E5DD2E1CB32E198647919B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA413FBCBE2BF73652D85102495ECE33E9330D0F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 21:27:41 +0000 Manifest this update: Wed 23 Sep 2026 21:22:41 +0000 Manifest next update: Thu 24 Sep 2026 22:09:41 +0000 Files and hashes: 1: 3130332e3135332e3133352e302f32342d3234203d3e20313430343634.roa (hash: WSddUG6Ud+EGXAnyjU+LN6Z0WaSOYhJ8p87PY2mBdmk=) 2: 3130332e3135332e3133342e302f32342d3234203d3e20313430343634.roa (hash: PJ6SYnJsMTtu1EVv401gG2I/mMRasJM6zvehsyeEO6I=) 3: EA413FBCBE2BF73652D85102495ECE33E9330D0F.crl (hash: ybaraxy+S5syyA9QlmxlxJxwY/ksqhsXdEsFx/XUomM=) 4: 3130332e3135332e3133342e302f32332d3233203d3e20313430343634.roa (hash: wrEWuCEXvYyJtUKLCBlrSkqSpEscz1bfuLgaervIG1M=) 5: 323430363a343534303a3a2f33322d3332203d3e20313430343634.roa (hash: g38q9LaZAq4No+F6g8orw8HsN+5ba4Mi+pwZw+eZ3w8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.crl rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA413FBCBE2BF73652D85102495ECE33E9330D0F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 22:09:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:69:f6:d9:25:00:63:30:d4:e5:dd:2e:1c:b3:2e:19:86:47:91:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA413FBCBE2BF73652D85102495ECE33E9330D0F Validity Not Before: Sep 23 21:22:41 2026 GMT Not After : Sep 24 22:09:41 2026 GMT Subject: CN=F086EB5717A0B0B2D4D579A82E1828CFFEC52E30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:92:22:1d:d1:4a:fb:8e:79:dd:10:9e:58:11: 54:0e:18:c1:60:85:d3:fb:7f:8c:a6:d3:22:ce:b2: 36:e7:9a:31:1d:91:6c:4e:eb:ab:a8:2f:db:f4:3e: 03:06:b4:78:31:f8:ab:18:f2:99:1e:ee:a9:54:70: 8d:fa:1d:d0:2d:ad:bb:64:25:4c:92:f5:a0:9a:df: fb:9c:d7:0f:70:b0:02:6c:2c:5d:98:5e:21:d4:b8: 35:f2:02:70:e0:45:3d:6e:f8:c8:91:91:13:59:8a: 27:3c:48:a4:74:7b:d5:1a:da:a7:bd:45:3f:19:c6: e4:2e:b1:76:a0:e5:18:92:73:e4:dc:b1:59:6a:9e: 92:65:3f:60:4c:df:e5:ba:a5:e0:27:95:41:c2:b2: 37:84:d9:77:b8:89:d6:e4:99:a6:6d:7f:5e:08:25: 9b:97:4a:b3:c9:7d:49:5a:7e:e7:46:78:4a:d8:8f: 9c:b1:13:58:1d:b6:55:57:0b:48:e2:ea:67:02:9b: a8:54:66:d2:c0:6b:e9:8c:0e:3a:52:55:c0:68:0f: 19:f5:b5:2c:19:88:5b:df:24:50:d7:53:08:39:d9: e9:07:87:8d:0f:04:31:e9:6c:3e:a9:96:b1:72:f8: f7:27:2d:1c:52:e1:6e:2b:bf:60:1e:fe:9f:34:ad: 4c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:86:EB:57:17:A0:B0:B2:D4:D5:79:A8:2E:18:28:CF:FE:C5:2E:30 X509v3 Authority Key Identifier: keyid:EA:41:3F:BC:BE:2B:F7:36:52:D8:51:02:49:5E:CE:33:E9:33:0D:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA413FBCBE2BF73652D85102495ECE33E9330D0F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/EA413FBCBE2BF73652D85102495ECE33E9330D0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:18:3b:68:1b:5a:9e:fb:ea:1d:3b:61:a9:48:02:92:41:00: 39:70:02:68:27:e5:28:69:04:22:2e:8c:a0:e7:34:44:c3:08: bc:1e:e0:7a:de:83:fc:ed:ca:8c:f8:5f:b1:46:2c:f8:b2:1b: 2b:8c:78:e4:b5:c6:53:37:1a:b7:b6:42:0a:80:68:90:95:d1: c4:0e:e0:74:7f:e8:38:55:71:9f:5a:da:0f:70:40:da:61:2d: bb:c9:04:11:6d:f2:35:a5:6f:a2:39:19:12:ec:12:c1:b0:19: 69:38:df:93:d4:d3:d3:2a:3c:57:6f:97:c0:75:8f:bc:40:bb: 82:9c:5f:3a:87:b9:a2:e4:51:9a:a5:b6:81:84:3f:e8:2b:10: 9a:2a:a4:d1:c1:92:92:4e:12:c3:ac:29:83:2f:10:eb:04:3c: 50:11:cb:02:4d:e2:4e:2e:8c:c5:16:ba:56:8b:b5:52:c0:1f: 34:f8:dc:55:ad:7a:e5:97:2e:cf:ef:03:ec:d6:35:e4:63:a1: 01:15:0c:cb:b5:9d:16:ad:62:67:bf:dd:0c:d1:52:72:b4:e7: 4a:ea:4e:3f:ad:5a:4d:55:4a:ac:00:36:20:26:81:df:51:f9: 29:91:22:94:06:26:e0:0f:3d:38:04:f9:c7:23:c6:a2:50:70: ec:10:73:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZGn22SUAYzDU5d0uHLMuGYZHkZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUE0MTNGQkNCRTJCRjczNjUyRDg1MTAyNDk1RUNFMzNF OTMzMEQwRjAeFw0yNjA5MjMyMTIyNDFaFw0yNjA5MjQyMjA5NDFaMDMxMTAvBgNV BAMTKEYwODZFQjU3MTdBMEIwQjJENEQ1NzlBODJFMTgyOENGRkVDNTJFMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDkiId0Ur7jnndEJ5YEVQOGMFg hdP7f4ym0yLOsjbnmjEdkWxO66uoL9v0PgMGtHgx+KsY8pke7qlUcI36HdAtrbtk JUyS9aCa3/uc1w9wsAJsLF2YXiHUuDXyAnDgRT1u+MiRkRNZiic8SKR0e9Ua2qe9 RT8ZxuQusXag5RiSc+TcsVlqnpJlP2BM3+W6peAnlUHCsjeE2Xe4idbkmaZtf14I JZuXSrPJfUlafudGeErYj5yxE1gdtlVXC0ji6mcCm6hUZtLAa+mMDjpSVcBoDxn1 tSwZiFvfJFDXUwg52ekHh40PBDHpbD6plrFy+PcnLRxS4W4rv2Ae/p80rUxvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8IbrVxegsLLU1XmoLhgoz/7FLjAwHwYDVR0j BBgwFoAU6kE/vL4r9zZS2FECSV7OM+kzDQ8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGI4YmU5MDUtZjI5Ni00NWQxLWE4NzktNGE0ZGU1MmNiMmQ2LzAvRUE0MTNGQkNC RTJCRjczNjUyRDg1MTAyNDk1RUNFMzNFOTMzMEQwRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQTQxM0ZCQ0JFMkJGNzM2NTJEODUxMDI0OTVFQ0UzM0U5MzMw RDBGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGI4YmU5MDUtZjI5Ni00NWQxLWE4 NzktNGE0ZGU1MmNiMmQ2LzAvRUE0MTNGQkNCRTJCRjczNjUyRDg1MTAyNDk1RUNF MzNFOTMzMEQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACQYO2gbWp776h07YalIApJBADlwAmgn5Shp BCIujKDnNETDCLwe4Hreg/ztyoz4X7FGLPiyGyuMeOS1xlM3Gre2QgqAaJCV0cQO 4HR/6DhVcZ9a2g9wQNphLbvJBBFt8jWlb6I5GRLsEsGwGWk435PU09MqPFdvl8B1 j7xAu4KcXzqHuaLkUZqltoGEP+grEJoqpNHBkpJOEsOsKYMvEOsEPFARywJN4k4u jMUWulaLtVLAHzT43FWteuWXLs/vA+zWNeRjoQEVDMu1nRatYme/3QzRUnK050rq Tj+tWk1VSqwANiAmgd9R+SmRIpQGJuAPPTgE+ccjxqJQcOwQc54= -----END CERTIFICATE-----Generated at Thu Sep 24 08:57:21 2026 by rpki-client