$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.mft File: EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.mft (raw, json) Hash identifier: FTtfn1JaPzHGSCm8DRDDr2hbYUCUcJ5/rCOy18eTW4Q= Subject key identifier: 96:3F:9F:48:D3:7E:0A:50:0D:F4:B7:E6:6E:58:4B:5F:04:22:4D:7A Authority key identifier: EB:0B:E2:F2:F4:9F:0E:2E:D0:DC:A4:50:CC:7A:70:E3:7E:6C:44:79 Certificate issuer: /CN=EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479 Certificate serial: 2DE3322AB73559732C61DFA10043F2A1732E2D74 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.mft Manifest number: F5 Signing time: Sun 01 Nov 2026 00:23:06 +0000 Manifest this update: Sun 01 Nov 2026 00:18:06 +0000 Manifest next update: Mon 02 Nov 2026 04:18:06 +0000 Files and hashes: 1: 3130332e35322e34342e302f32322d3234203d3e20313333383135.roa (hash: Nq+2Vf2Sjui286xvlwdV6qhYVII60AjIdtuhfdXAxbY=) 2: EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.crl (hash: 3V0ZP5zRphsYFZGZRiLNlGkz3qTN/jdpjeFM/lUcTRI=) 3: 323430333a626163303a3a2f33322d3438203d3e20313333383135.roa (hash: HEWIf8VBw+80Q4rp+6Ysujhm51rVLU6tXVKj84ErweQ=) 4: 3130332e3133302e3133362e302f32322d3234203d3e20313333383135.roa (hash: eU4i0Mhd/q+mYMVjCXIfd0DHyb4s/+BNKr0BLfdT+jA=) 5: 323430333a353763303a3a2f33322d3438203d3e20313333383135.roa (hash: 3BwTC01USPfsaxqOFoR8OqcTiLHcsXU9wo2BTdmt5ZU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.crl rsync://rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 23:43:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:e3:32:2a:b7:35:59:73:2c:61:df:a1:00:43:f2:a1:73:2e:2d:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479 Validity Not Before: Nov 1 00:18:06 2026 GMT Not After : Nov 2 04:18:06 2026 GMT Subject: CN=963F9F48D37E0A500DF4B7E66E584B5F04224D7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:92:67:3a:8c:32:89:84:45:33:35:04:36:11: be:0d:65:14:c6:97:3c:3b:4a:fe:a9:09:43:5d:7b: 70:b2:9c:23:3e:b4:50:08:10:eb:10:d1:8a:11:68: 95:61:bf:6f:3c:26:65:07:5f:60:fc:1d:84:69:c8: 35:3b:4d:3b:d5:98:ef:62:02:9b:d9:59:e2:11:36: 1f:04:0e:b9:86:a5:da:66:29:63:68:22:e5:9d:7c: e0:b7:17:e1:75:8d:48:54:02:f4:d2:5e:e2:b9:04: 58:f3:1d:db:96:ad:ca:69:5e:55:ac:79:13:0b:fc: 84:22:8d:f1:e6:80:24:10:1b:a8:30:94:b4:d4:79: 61:46:83:ad:21:e7:c0:8a:56:10:ec:8a:46:cc:01: ef:db:9b:74:7e:2a:56:e8:c0:35:a5:14:09:58:37: 59:22:60:f3:a1:e5:78:8a:c5:80:e7:8e:f8:84:73: 7a:35:e4:d3:60:54:ff:c8:40:a9:f9:4e:3e:54:24: 48:b7:f0:5a:82:1e:43:04:4c:cd:77:ed:3d:c0:e0: b6:3f:da:05:5e:85:41:fc:f7:c8:e2:8c:13:dd:84: 9b:58:9f:78:5b:ca:d8:ef:9b:18:7f:7f:8a:55:9a: f9:ec:a2:13:1e:3e:3d:38:6d:36:e7:4e:ee:6f:bd: 0a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:3F:9F:48:D3:7E:0A:50:0D:F4:B7:E6:6E:58:4B:5F:04:22:4D:7A X509v3 Authority Key Identifier: keyid:EB:0B:E2:F2:F4:9F:0E:2E:D0:DC:A4:50:CC:7A:70:E3:7E:6C:44:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:c9:76:a0:b1:64:69:7c:95:fb:7d:f2:74:81:b7:03:a8:44: 53:84:b3:a1:3d:77:0a:88:ba:78:a7:2a:3c:92:2f:61:6c:0c: 7b:a4:e7:47:9c:fd:ed:75:2a:ca:b5:42:1f:8d:d7:78:d5:04: 32:0b:24:4d:b5:75:49:67:eb:ed:b5:d6:17:3b:1f:ee:5a:ce: 15:81:bd:89:cc:a2:06:a1:cc:11:e0:44:75:3e:5d:e8:ad:1d: 20:4f:75:42:fa:9f:6c:89:64:f8:37:9d:ef:4f:aa:00:4d:81: 9d:b5:cd:e7:dc:fb:d2:3f:40:19:2f:fb:75:39:96:c2:93:23: ce:e8:3e:8b:bc:68:c1:d1:81:a9:30:b1:a5:bf:19:16:c4:ef: 90:86:40:28:c4:52:d5:fa:ef:41:e1:dc:cb:4c:1f:76:12:4b: ac:94:67:ea:75:e5:eb:91:9e:d4:3c:25:62:22:7f:73:ec:77: 35:f3:6d:78:0c:3c:c0:a9:ef:08:53:13:8c:16:04:22:72:33: 14:da:b3:0b:e2:31:53:e1:f0:70:69:47:53:24:85:e0:a2:f7: 03:fe:29:7d:e3:c6:ba:b3:6a:24:32:31:e8:f1:43:e8:1a:7f: d8:0a:d9:e2:0c:ea:c7:92:fb:2a:b5:63:90:f4:15:29:6d:05: 77:80:f2:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULeMyKrc1WXMsYd+hAEPyoXMuLXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUIwQkUyRjJGNDlGMEUyRUQwRENBNDUwQ0M3QTcwRTM3 RTZDNDQ3OTAeFw0yNjExMDEwMDE4MDZaFw0yNjExMDIwNDE4MDZaMDMxMTAvBgNV BAMTKDk2M0Y5RjQ4RDM3RTBBNTAwREY0QjdFNjZFNTg0QjVGMDQyMjREN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzkmc6jDKJhEUzNQQ2Eb4NZRTG lzw7Sv6pCUNde3CynCM+tFAIEOsQ0YoRaJVhv288JmUHX2D8HYRpyDU7TTvVmO9i ApvZWeIRNh8EDrmGpdpmKWNoIuWdfOC3F+F1jUhUAvTSXuK5BFjzHduWrcppXlWs eRML/IQijfHmgCQQG6gwlLTUeWFGg60h58CKVhDsikbMAe/bm3R+KlbowDWlFAlY N1kiYPOh5XiKxYDnjviEc3o15NNgVP/IQKn5Tj5UJEi38FqCHkMETM137T3A4LY/ 2gVehUH898jijBPdhJtYn3hbytjvmxh/f4pVmvnsohMePj04bTbnTu5vvQr/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlj+fSNN+ClAN9LfmblhLXwQiTXowHwYDVR0j BBgwFoAU6wvi8vSfDi7Q3KRQzHpw435sRHkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmEzYWU0ODUtYTY1OC00YzVjLWFiZTItMWU3ZmQ4YjAzOGEwLzAvRUIwQkUyRjJG NDlGMEUyRUQwRENBNDUwQ0M3QTcwRTM3RTZDNDQ3OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQjBCRTJGMkY0OUYwRTJFRDBEQ0E0NTBDQzdBNzBFMzdFNkM0 NDc5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmEzYWU0ODUtYTY1OC00YzVjLWFi ZTItMWU3ZmQ4YjAzOGEwLzAvRUIwQkUyRjJGNDlGMEUyRUQwRENBNDUwQ0M3QTcw RTM3RTZDNDQ3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACTJdqCxZGl8lft98nSBtwOoRFOEs6E9dwqI uninKjySL2FsDHuk50ec/e11Ksq1Qh+N13jVBDILJE21dUln6+211hc7H+5azhWB vYnMogahzBHgRHU+XeitHSBPdUL6n2yJZPg3ne9PqgBNgZ21zefc+9I/QBkv+3U5 lsKTI87oPou8aMHRgakwsaW/GRbE75CGQCjEUtX670Hh3MtMH3YSS6yUZ+p15euR ntQ8JWIif3PsdzXzbXgMPMCp7whTE4wWBCJyMxTaswviMVPh8HBpR1MkheCi9wP+ KX3jxrqzaiQyMejxQ+gaf9gK2eIM6seS+yq1Y5D0FSltBXeA8l4= -----END CERTIFICATE-----Generated at Sun Nov 1 10:56:23 2026 by rpki-client