$ rpki-client -vvvf rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.mft File: EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.mft (raw, json) Hash identifier: 1CKqdPOhpUTLPAUaI6a3HY1w9sr2Qq7WaxqxPvQ2O6w= Subject key identifier: 89:78:AB:C7:E0:79:ED:EA:85:41:27:14:A5:2B:2B:BB:3B:88:C3:1A Authority key identifier: EA:8F:56:9A:74:05:BE:AB:A2:3F:9B:20:CF:1A:CD:2C:BD:5E:F5:79 Certificate issuer: /CN=EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579 Certificate serial: 644289D873E0CA575BA58989966A98872F81DDA2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.mft Manifest number: A8 Signing time: Fri 04 Sep 2026 04:52:28 +0000 Manifest this update: Fri 04 Sep 2026 04:47:28 +0000 Manifest next update: Sat 05 Sep 2026 05:10:28 +0000 Files and hashes: 1: EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.crl (hash: uCSKwH4sWvW9vGk7D7jQ77R+/aQIVMOZBbLAJ19kvp0=) 2: 3130332e3233302e3138382e302f32332d3234203d3e20313333333439.roa (hash: yCX5+Dxju6djsJMnbOlkqP9bGOuuQKBHDP9eW/sQSSc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.crl rsync://rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Sep 2026 04:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:42:89:d8:73:e0:ca:57:5b:a5:89:89:96:6a:98:87:2f:81:dd:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579 Validity Not Before: Sep 4 04:47:28 2026 GMT Not After : Sep 5 05:10:28 2026 GMT Subject: CN=8978ABC7E079EDEA85412714A52B2BBB3B88C31A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2a:04:77:c5:89:88:9b:25:8e:6e:dd:c4:a4: 16:c0:9f:b4:51:c7:61:22:a9:8f:da:59:af:3d:56: eb:90:3a:78:4f:b9:97:a4:43:bc:71:84:8f:b7:c2: dc:2a:f8:f5:76:c0:31:24:ad:14:83:bb:a8:e8:7b: 51:71:8b:fb:38:5c:21:11:24:e3:b3:0f:82:12:31: b5:ab:49:83:d1:a9:f9:96:0f:da:7e:38:c7:a4:ff: cf:5f:63:51:7d:39:03:2a:e2:3d:4b:8f:82:f4:d8: d9:8b:a9:9b:44:ad:3d:10:63:f4:3e:24:39:60:ea: 55:87:ed:96:a1:8e:28:71:ce:bb:d3:f8:f6:35:f6: 2a:f8:7c:5b:60:ce:02:89:3c:84:e0:80:f3:fd:85: 58:43:2d:06:26:f8:06:0c:4f:85:ec:f1:2b:61:e8: 53:ea:31:f4:86:86:be:c3:ea:31:1c:0e:46:4f:55: b2:fc:ce:3e:31:72:8c:ab:f4:a8:35:0d:1e:2d:52: 70:36:7a:24:5f:60:96:4d:43:57:a8:1c:1e:b2:26: 86:b3:b7:fc:df:71:1c:dc:1b:e9:2a:2d:9f:27:b3: 28:d6:5c:2d:48:8c:32:96:59:b2:b8:a1:7e:bf:f4: 70:53:60:00:10:9b:cc:10:f1:7b:71:85:85:be:39: d5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:78:AB:C7:E0:79:ED:EA:85:41:27:14:A5:2B:2B:BB:3B:88:C3:1A X509v3 Authority Key Identifier: keyid:EA:8F:56:9A:74:05:BE:AB:A2:3F:9B:20:CF:1A:CD:2C:BD:5E:F5:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/EA8F569A7405BEABA23F9B20CF1ACD2CBD5EF579.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:9c:f6:ae:93:63:44:8b:68:46:9a:15:65:98:de:76:3b:54: 30:fc:37:e1:36:f9:26:07:6f:c8:ab:1a:81:53:17:12:a2:cd: 92:eb:6d:63:0a:fa:50:20:79:1a:47:d0:99:80:25:16:b4:3f: 9a:b6:6d:74:0d:a0:2b:dc:10:35:66:cc:40:4b:d4:54:64:81: 3a:8b:82:0f:aa:55:41:f4:cd:69:32:00:37:b9:4a:df:62:9e: bf:94:c8:e9:b9:61:64:48:b0:0a:e5:5d:db:1f:2a:25:01:75: 59:89:02:c3:e2:d6:4e:b3:ac:0b:dc:73:dd:75:96:bf:96:0d: f2:0f:6d:e5:4f:d8:2c:13:48:2f:03:77:7d:43:a1:e2:55:52: 4d:b7:45:f4:0c:b4:09:75:48:c7:8c:83:42:be:d4:2e:19:7d: 9f:d1:3b:66:1b:2b:dc:bc:bb:02:e7:dc:7b:5d:24:87:6e:ae: 5a:2c:ee:d5:6b:03:a7:ba:f8:2f:93:2f:ad:74:09:d2:a9:b7: b9:d1:af:0b:c2:da:b6:fd:4f:56:0d:0d:76:f2:09:a7:d0:a5: 99:64:a2:82:32:0b:3d:26:a4:07:2c:6c:0f:02:0c:e0:91:f0: 80:ea:db:5a:6e:a5:14:df:ed:a1:b4:65:63:1d:8b:b0:5e:79: 2f:ad:62:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZEKJ2HPgyldbpYmJlmqYhy+B3aIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUE4RjU2OUE3NDA1QkVBQkEyM0Y5QjIwQ0YxQUNEMkNC RDVFRjU3OTAeFw0yNjA5MDQwNDQ3MjhaFw0yNjA5MDUwNTEwMjhaMDMxMTAvBgNV BAMTKDg5NzhBQkM3RTA3OUVERUE4NTQxMjcxNEE1MkIyQkJCM0I4OEMzMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtKgR3xYmImyWObt3EpBbAn7RR x2EiqY/aWa89VuuQOnhPuZekQ7xxhI+3wtwq+PV2wDEkrRSDu6joe1Fxi/s4XCER JOOzD4ISMbWrSYPRqfmWD9p+OMek/89fY1F9OQMq4j1Lj4L02NmLqZtErT0QY/Q+ JDlg6lWH7ZahjihxzrvT+PY19ir4fFtgzgKJPITggPP9hVhDLQYm+AYMT4Xs8Sth 6FPqMfSGhr7D6jEcDkZPVbL8zj4xcoyr9Kg1DR4tUnA2eiRfYJZNQ1eoHB6yJoaz t/zfcRzcG+kqLZ8nsyjWXC1IjDKWWbK4oX6/9HBTYAAQm8wQ8XtxhYW+OdVzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiXirx+B57eqFQScUpSsruzuIwxowHwYDVR0j BBgwFoAU6o9WmnQFvquiP5sgzxrNLL1e9XkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDA0NTdkMjAtMDIzYS00NTA5LWJiNGEtNjJjODY5MjlkZDk3LzAvRUE4RjU2OUE3 NDA1QkVBQkEyM0Y5QjIwQ0YxQUNEMkNCRDVFRjU3OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQThGNTY5QTc0MDVCRUFCQTIzRjlCMjBDRjFBQ0QyQ0JENUVG NTc5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDA0NTdkMjAtMDIzYS00NTA5LWJi NGEtNjJjODY5MjlkZDk3LzAvRUE4RjU2OUE3NDA1QkVBQkEyM0Y5QjIwQ0YxQUNE MkNCRDVFRjU3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJic9q6TY0SLaEaaFWWY3nY7VDD8N+E2+SYH b8irGoFTFxKizZLrbWMK+lAgeRpH0JmAJRa0P5q2bXQNoCvcEDVmzEBL1FRkgTqL gg+qVUH0zWkyADe5St9inr+UyOm5YWRIsArlXdsfKiUBdVmJAsPi1k6zrAvcc911 lr+WDfIPbeVP2CwTSC8Dd31DoeJVUk23RfQMtAl1SMeMg0K+1C4ZfZ/RO2YbK9y8 uwLn3HtdJIdurlos7tVrA6e6+C+TL610CdKpt7nRrwvC2rb9T1YNDXbyCafQpZlk ooIyCz0mpAcsbA8CDOCR8IDq21pupRTf7aG0ZWMdi7BeeS+tYuo= -----END CERTIFICATE-----Generated at Fri Sep 4 10:40:23 2026 by rpki-client