$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.mft File: 1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.mft (raw, json) Hash identifier: daTR8MplOa8vkMlHA37chlxJpxyDxnPuPi1h7VQk0so= Subject key identifier: F4:3E:66:01:30:61:09:8D:1D:5E:FD:12:61:E8:00:22:99:67:B7:84 Authority key identifier: 1E:BB:23:22:03:FD:54:32:F4:FF:5F:50:C7:CA:7F:67:25:52:ED:3F Certificate issuer: /CN=1EBB232203FD5432F4FF5F50C7CA7F672552ED3F Certificate serial: 656D4FA65B3775D49D6DF48071B61F0CA7DADC04 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 13:53:07 +0000 Manifest this update: Thu 24 Sep 2026 13:48:07 +0000 Manifest next update: Fri 25 Sep 2026 17:48:07 +0000 Files and hashes: 1: 3130332e31302e3134342e302f32342d3234203d3e203436303537.roa (hash: jBCASy1F6Hwq7/RSM0DnwGAyM9nsMAfX8PewBvtkG60=) 2: 3230322e35322e35322e302f32342d3234203d3e203436303537.roa (hash: B12SJCFtXXNNoUXjwCcqgBMFjVn7huHWD2lTe7WyRQA=) 3: 1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.crl (hash: ZhZ9buw9iNGU3m1jOAyFxVbKqaX51KrFIERu5Vj2ky0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.crl rsync://rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:6d:4f:a6:5b:37:75:d4:9d:6d:f4:80:71:b6:1f:0c:a7:da:dc:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EBB232203FD5432F4FF5F50C7CA7F672552ED3F Validity Not Before: Sep 24 13:48:07 2026 GMT Not After : Sep 25 17:48:07 2026 GMT Subject: CN=F43E66013061098D1D5EFD1261E800229967B784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:68:12:75:67:dc:e1:7c:11:32:64:4b:e0:54: ac:02:6e:4d:08:fc:62:52:7b:ad:9e:63:37:8e:cc: 88:9d:8e:c3:c1:0c:b9:13:f0:99:7a:af:bb:e4:39: 41:17:9c:41:57:07:d2:f8:b5:f7:98:a7:9c:c1:d3: 4e:09:40:5d:96:ee:d0:03:bb:f1:95:4b:08:95:cd: bb:67:18:4b:1e:92:df:93:d7:32:56:ec:4e:db:02: a8:b7:b1:51:af:3c:2b:c5:9c:2d:85:a6:a0:54:26: 7b:fc:3a:02:da:52:49:41:fd:29:81:1e:b7:81:39: 08:f1:94:02:19:5b:c3:83:b4:fa:ef:16:cd:26:e2: 2d:24:8f:d6:3e:c0:5d:a8:dc:af:1a:61:e4:17:1f: 84:74:38:a9:e9:4e:f8:a1:25:b6:11:1c:80:1b:17: 20:43:0e:76:2f:51:b5:7d:f0:68:a0:66:88:97:b7: fa:14:65:7b:77:a8:b6:78:2e:6b:8b:cd:3e:4b:97: 37:ce:f7:4c:79:95:d9:e9:51:56:fc:ba:86:97:4f: 65:ec:ee:35:80:56:23:62:d4:ea:9f:d4:07:c1:68: 1d:8d:e1:d8:4b:68:10:98:3c:cf:49:72:1d:01:77: 65:a0:15:4e:8b:bf:ab:2a:ba:89:de:73:bd:3f:d2: f9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:3E:66:01:30:61:09:8D:1D:5E:FD:12:61:E8:00:22:99:67:B7:84 X509v3 Authority Key Identifier: keyid:1E:BB:23:22:03:FD:54:32:F4:FF:5F:50:C7:CA:7F:67:25:52:ED:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:dd:29:40:85:30:9b:3d:b9:e5:83:05:11:f7:47:2f:b5:0e: be:3e:2d:fb:69:68:7a:50:24:86:38:99:0b:5d:59:48:02:7b: a6:f2:35:6b:3c:17:55:bd:9d:7a:13:07:7f:d7:b2:21:ce:86: b4:3d:ee:e8:15:94:f6:ae:03:75:f1:ed:c3:b7:cb:fd:9a:aa: f0:fa:f3:cf:d3:62:40:21:28:33:1f:50:dd:1a:98:25:64:d9: 9b:df:3f:93:57:07:bb:b1:7b:01:cd:f7:2c:76:96:39:f8:85: d1:ce:74:82:db:c6:9c:9b:e6:b1:25:50:4d:9a:5f:f2:3d:a8: 61:b8:8c:9d:6f:f6:42:a8:c2:c3:d4:dc:c1:6a:8d:f2:b3:6d: b0:5c:0c:74:7a:4f:3f:f2:07:51:58:e0:80:bb:63:f5:90:25: ef:1a:3c:ca:3d:d6:db:29:62:44:f1:c9:e0:d9:89:ad:5e:85: 2b:75:92:0b:be:49:a3:31:97:b7:8d:52:41:a4:4d:2b:86:77: 51:ff:af:a3:62:c7:3f:64:0a:64:51:c9:56:1c:ff:67:1b:6c: ad:66:4c:4e:a9:ba:dc:86:3a:91:f8:78:23:23:c4:d3:5b:ae: fe:22:44:29:c5:3d:d0:57:37:c7:ba:fb:ae:93:a7:f4:6d:44: 94:48:d1:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZW1Ppls3ddSdbfSAcbYfDKfa3AQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVCQjIzMjIwM0ZENTQzMkY0RkY1RjUwQzdDQTdGNjcy NTUyRUQzRjAeFw0yNjA5MjQxMzQ4MDdaFw0yNjA5MjUxNzQ4MDdaMDMxMTAvBgNV BAMTKEY0M0U2NjAxMzA2MTA5OEQxRDVFRkQxMjYxRTgwMDIyOTk2N0I3ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvaBJ1Z9zhfBEyZEvgVKwCbk0I /GJSe62eYzeOzIidjsPBDLkT8Jl6r7vkOUEXnEFXB9L4tfeYp5zB004JQF2W7tAD u/GVSwiVzbtnGEsekt+T1zJW7E7bAqi3sVGvPCvFnC2FpqBUJnv8OgLaUklB/SmB HreBOQjxlAIZW8ODtPrvFs0m4i0kj9Y+wF2o3K8aYeQXH4R0OKnpTvihJbYRHIAb FyBDDnYvUbV98GigZoiXt/oUZXt3qLZ4LmuLzT5LlzfO90x5ldnpUVb8uoaXT2Xs 7jWAViNi1Oqf1AfBaB2N4dhLaBCYPM9Jch0Bd2WgFU6Lv6squonec70/0vlvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9D5mATBhCY0dXv0SYegAIplnt4QwHwYDVR0j BBgwFoAUHrsjIgP9VDL0/19Qx8p/ZyVS7T8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTc1ZDdkZWYtNWViOS00MDU0LWEzYWItZDdlY2Y0ODYzNzlhLzAvMUVCQjIzMjIw M0ZENTQzMkY0RkY1RjUwQzdDQTdGNjcyNTUyRUQzRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRUJCMjMyMjAzRkQ1NDMyRjRGRjVGNTBDN0NBN0Y2NzI1NTJF RDNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTc1ZDdkZWYtNWViOS00MDU0LWEz YWItZDdlY2Y0ODYzNzlhLzAvMUVCQjIzMjIwM0ZENTQzMkY0RkY1RjUwQzdDQTdG NjcyNTUyRUQzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADLdKUCFMJs9ueWDBRH3Ry+1Dr4+LftpaHpQ JIY4mQtdWUgCe6byNWs8F1W9nXoTB3/XsiHOhrQ97ugVlPauA3Xx7cO3y/2aqvD6 88/TYkAhKDMfUN0amCVk2ZvfP5NXB7uxewHN9yx2ljn4hdHOdILbxpyb5rElUE2a X/I9qGG4jJ1v9kKowsPU3MFqjfKzbbBcDHR6Tz/yB1FY4IC7Y/WQJe8aPMo91tsp YkTxyeDZia1ehSt1kgu+SaMxl7eNUkGkTSuGd1H/r6Nixz9kCmRRyVYc/2cbbK1m TE6putyGOpH4eCMjxNNbrv4iRCnFPdBXN8e6+66Tp/RtRJRI0ck= -----END CERTIFICATE-----Generated at Thu Sep 24 17:12:46 2026 by rpki-client