$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.mft File: EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.mft (raw, json) Hash identifier: jzy0oyESqqvNsj0KCsJqL2YtwsnWVRWKwfhQ14Mc7a0= Subject key identifier: 51:CE:25:73:D0:0E:B3:02:28:C9:81:E0:89:6C:15:0C:28:0E:E8:B2 Authority key identifier: EE:8B:EB:A8:BE:4D:44:F4:3E:CF:D9:FF:57:89:E8:78:62:8C:6A:54 Certificate issuer: /CN=EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54 Certificate serial: 1E7394E100DE47377498B2511DFBBA85CDE1DCA4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.mft Manifest number: F7 Signing time: Mon 02 Nov 2026 04:33:17 +0000 Manifest this update: Mon 02 Nov 2026 04:28:17 +0000 Manifest next update: Tue 03 Nov 2026 06:46:17 +0000 Files and hashes: 1: EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.crl (hash: T+00ePEXj2m6cj1qC/lx4NogE9U7j81cnkTP8JqA5vA=) 2: 3130332e3134312e3235352e302f32342d3234203d3e20313331373639.roa (hash: GdDE8SC5CnBeQmp3oWwqYVk6uwDRjhVlj4+oTAdzWC4=) 3: 3130332e3134312e3235342e302f32342d3234203d3e20313331373639.roa (hash: zQyUZlOFUHDGNe+npgwTsdpaoQy1XyYjr7ZYgl99pvg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.crl rsync://rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 05:17:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:73:94:e1:00:de:47:37:74:98:b2:51:1d:fb:ba:85:cd:e1:dc:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54 Validity Not Before: Nov 2 04:28:17 2026 GMT Not After : Nov 3 06:46:17 2026 GMT Subject: CN=51CE2573D00EB30228C981E0896C150C280EE8B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e9:d2:92:b1:4e:b9:8f:1e:40:d6:86:3b:95: a5:83:ad:bc:19:13:f8:79:c4:d2:98:49:d1:24:b3: e0:f9:58:c5:2c:7a:57:8a:0a:84:a3:4c:83:a3:ee: 77:66:cf:25:6c:ca:15:ef:a5:86:f7:f0:bd:b5:c2: a0:96:f1:46:e3:58:20:71:cb:f0:38:3d:13:b0:a4: 8c:aa:4a:8e:f5:1b:2e:aa:a0:77:ba:ed:c2:c8:d1: c7:7d:de:53:31:b0:08:08:5d:fe:a9:85:90:1d:c9: 03:96:26:df:c4:85:97:4d:5b:69:ab:d9:2a:35:98: 6a:f8:eb:ab:b8:7c:f2:72:70:5b:a4:7f:a7:48:6b: c5:c1:cd:4b:9c:aa:bd:05:27:68:74:50:0d:c7:2e: d9:89:13:8c:94:6f:60:f1:34:d5:16:ac:40:7f:d5: 8c:5b:86:c8:fe:47:52:33:9d:d5:0a:76:fd:62:89: 74:96:26:38:87:7f:18:80:8d:7a:55:6a:8e:08:9d: 24:59:44:a8:d9:e1:d2:38:51:e7:26:8f:e4:6a:5d: 5c:bf:6e:09:e9:bc:ce:ad:35:89:26:51:50:6e:02: c1:cf:d2:9f:3d:71:04:95:aa:b4:0c:83:82:b2:dc: df:7e:27:d4:89:06:2b:74:9e:56:b1:3e:19:fa:38: 4d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:CE:25:73:D0:0E:B3:02:28:C9:81:E0:89:6C:15:0C:28:0E:E8:B2 X509v3 Authority Key Identifier: keyid:EE:8B:EB:A8:BE:4D:44:F4:3E:CF:D9:FF:57:89:E8:78:62:8C:6A:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/EE8BEBA8BE4D44F43ECFD9FF5789E878628C6A54.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:db:8a:e8:74:7c:88:00:b3:72:48:70:00:59:a7:98:2d:10: e3:e1:95:1c:cd:8c:9a:73:8c:9f:83:bc:52:b5:3e:09:b3:18: 5f:bc:d5:7c:27:c7:cc:a5:dc:c7:25:77:fc:c6:a2:e9:a5:dd: a0:53:2d:c0:46:43:91:68:1e:bb:a8:db:2b:6b:51:79:57:fd: 3e:1c:71:04:3e:f1:c7:a6:cb:cd:c7:44:c3:82:6b:b9:20:cc: d8:3c:2f:ed:5a:01:9d:d8:5c:ec:f9:46:e2:de:81:5f:cd:40: 83:29:ea:34:e9:8b:88:ba:10:9e:14:6a:87:20:df:fb:dd:1c: d4:59:8b:1c:37:a9:ca:db:02:74:63:61:df:33:03:ae:dc:9b: 31:80:c0:21:70:95:3f:6f:19:d1:39:03:ac:83:98:75:9f:ee: 42:5a:30:c2:1c:65:19:25:cc:cc:16:9e:ce:96:86:8f:40:49: b5:7f:37:ef:7b:ea:14:4b:0b:22:43:1d:44:f0:f8:ee:6f:5a: 20:9e:a3:96:b8:cc:8a:b5:01:c1:10:a4:a1:e3:ab:93:f8:f2: 3f:8c:62:78:64:0c:27:7e:25:a3:e7:34:a7:af:8b:4b:56:1d: 21:f1:90:82:77:d5:a7:37:f7:d9:07:1a:0b:75:5b:4b:09:ac: 34:c8:76:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHnOU4QDeRzd0mLJRHfu6hc3h3KQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU4QkVCQThCRTRENDRGNDNFQ0ZEOUZGNTc4OUU4Nzg2 MjhDNkE1NDAeFw0yNjExMDIwNDI4MTdaFw0yNjExMDMwNjQ2MTdaMDMxMTAvBgNV BAMTKDUxQ0UyNTczRDAwRUIzMDIyOEM5ODFFMDg5NkMxNTBDMjgwRUU4QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz6dKSsU65jx5A1oY7laWDrbwZ E/h5xNKYSdEks+D5WMUseleKCoSjTIOj7ndmzyVsyhXvpYb38L21wqCW8UbjWCBx y/A4PROwpIyqSo71Gy6qoHe67cLI0cd93lMxsAgIXf6phZAdyQOWJt/EhZdNW2mr 2So1mGr466u4fPJycFukf6dIa8XBzUucqr0FJ2h0UA3HLtmJE4yUb2DxNNUWrEB/ 1Yxbhsj+R1IzndUKdv1iiXSWJjiHfxiAjXpVao4InSRZRKjZ4dI4Uecmj+RqXVy/ bgnpvM6tNYkmUVBuAsHP0p89cQSVqrQMg4Ky3N9+J9SJBit0nlaxPhn6OE0pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUc4lc9AOswIoyYHgiWwVDCgO6LIwHwYDVR0j BBgwFoAU7ovrqL5NRPQ+z9n/V4noeGKMalQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGVkODUwYTgtYWJiOS00NDgyLWE1YmMtNTRkNzllYjdmMzIzLzAvRUU4QkVCQThC RTRENDRGNDNFQ0ZEOUZGNTc4OUU4Nzg2MjhDNkE1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FRThCRUJBOEJFNEQ0NEY0M0VDRkQ5RkY1Nzg5RTg3ODYyOEM2 QTU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGVkODUwYTgtYWJiOS00NDgyLWE1 YmMtNTRkNzllYjdmMzIzLzAvRUU4QkVCQThCRTRENDRGNDNFQ0ZEOUZGNTc4OUU4 Nzg2MjhDNkE1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMXbiuh0fIgAs3JIcABZp5gtEOPhlRzNjJpz jJ+DvFK1PgmzGF+81Xwnx8yl3Mcld/zGouml3aBTLcBGQ5FoHruo2ytrUXlX/T4c cQQ+8cemy83HRMOCa7kgzNg8L+1aAZ3YXOz5RuLegV/NQIMp6jTpi4i6EJ4Uaocg 3/vdHNRZixw3qcrbAnRjYd8zA67cmzGAwCFwlT9vGdE5A6yDmHWf7kJaMMIcZRkl zMwWns6Who9ASbV/N+976hRLCyJDHUTw+O5vWiCeo5a4zIq1AcEQpKHjq5P48j+M YnhkDCd+JaPnNKevi0tWHSHxkIJ31ac399kHGgt1W0sJrDTIdo0= -----END CERTIFICATE-----Generated at Mon Nov 2 07:29:48 2026 by rpki-client