$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft File: EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft (raw, json) Hash identifier: FSe27i2RTB7mUp6iycwgjWYeOpB+cryLpd0D/BDvnpI= Subject key identifier: 73:19:3D:8B:C0:E8:55:CB:FD:C3:56:F5:A2:EF:9B:4C:A4:78:FD:2C Authority key identifier: EA:1F:A0:A5:CF:DA:8B:5A:6F:64:2F:58:87:FD:67:22:D7:53:10:0D Certificate issuer: /CN=EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D Certificate serial: 4E551B2606C626A222190645C6184C9925E5000F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft Manifest number: F5 Signing time: Mon 02 Nov 2026 08:22:55 +0000 Manifest this update: Mon 02 Nov 2026 08:17:55 +0000 Manifest next update: Tue 03 Nov 2026 09:22:55 +0000 Files and hashes: 1: EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.crl (hash: fo2eoiiZpS9E3yfLpWn4HcvVValDkPHqpIG6HngLK14=) 2: 3136302e3138372e3139362e302f32342d3234203d3e20313533313234.roa (hash: S4hauyuLw7/w8jvKs8EoZ1L3na+uvt8Vo0vCOD48FJ4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.crl rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 09:22:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:55:1b:26:06:c6:26:a2:22:19:06:45:c6:18:4c:99:25:e5:00:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D Validity Not Before: Nov 2 08:17:55 2026 GMT Not After : Nov 3 09:22:55 2026 GMT Subject: CN=73193D8BC0E855CBFDC356F5A2EF9B4CA478FD2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:09:00:8e:ce:ab:cd:97:fa:f3:54:81:e5:1a: a6:48:b7:5d:a1:58:0e:ec:87:b5:fe:d7:e4:bb:26: b8:4a:cf:74:48:c0:4f:93:37:7b:c5:95:78:eb:32: d7:53:61:79:0b:22:ce:45:99:cf:66:b0:0d:2d:ed: d4:28:68:84:91:14:46:80:43:64:74:14:73:5d:f2: cc:35:8d:46:bf:42:92:c3:5e:c5:2f:fe:b7:9a:f6: ac:59:3b:69:f7:ba:df:03:d9:8b:61:ff:21:42:d2: b7:06:32:10:fd:da:ff:a3:63:f8:ec:06:7d:88:66: 58:af:d8:89:1d:13:59:2d:9a:18:3c:ef:ac:bf:55: 48:eb:54:48:07:de:de:5d:26:72:b1:67:e1:a3:49: c7:02:8b:d3:86:32:55:61:f6:c6:65:05:bd:cc:c7: 86:27:f8:dc:3e:9c:2d:02:33:3c:4c:59:17:90:7f: 29:18:ad:6b:a0:96:05:18:fa:75:e5:0b:50:de:e7: 0e:69:3f:c1:ef:12:3e:cc:b3:26:7e:05:b3:f6:0c: f8:75:73:ff:dd:70:e1:8e:6e:5f:bc:10:53:88:bd: c5:0c:b9:26:42:9d:3a:fd:11:49:6c:09:4c:b3:86: da:25:c4:81:1e:c5:1a:02:c4:89:8d:d5:05:96:f6: db:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:19:3D:8B:C0:E8:55:CB:FD:C3:56:F5:A2:EF:9B:4C:A4:78:FD:2C X509v3 Authority Key Identifier: keyid:EA:1F:A0:A5:CF:DA:8B:5A:6F:64:2F:58:87:FD:67:22:D7:53:10:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:5d:4d:f4:90:15:45:f5:ed:f5:b2:bb:10:f5:af:9f:32:63: fe:c3:df:24:3d:26:a9:2c:0a:08:c6:23:cb:a0:ca:42:cf:0e: 86:ab:69:36:9d:38:92:4b:f0:90:c2:e2:86:6d:23:c9:e0:de: e7:fe:a0:fd:70:61:8c:44:fd:46:ba:0d:4d:70:1f:bf:73:a4: 2a:aa:30:4d:08:da:14:2f:bf:1c:c6:25:f2:c7:45:5b:37:2a: 60:eb:13:12:e9:9f:59:a9:a3:8e:76:d0:e2:15:17:95:36:66: e2:18:9b:d9:13:d2:9b:f0:fb:58:72:fe:8d:78:7d:dd:6a:71: 5d:5b:14:5c:86:33:1e:02:1f:31:0e:c7:3c:25:bd:b7:12:e5: eb:38:61:36:f0:a2:05:3c:56:d3:42:40:2c:40:8c:1d:f8:fe: a2:cb:f6:66:17:58:f7:e4:23:94:b7:9d:8d:0c:d8:d8:62:34: 8d:70:49:98:60:88:b6:e3:44:37:18:ee:05:49:5d:d2:1a:21: d7:3b:1e:e9:aa:c6:88:81:67:e9:3c:0d:e1:80:18:18:82:14: 70:b7:82:93:fd:43:a0:bc:ac:a1:d9:5a:cc:41:68:52:86:c5: 99:24:5e:b8:c2:4c:33:49:6b:d9:e7:13:5f:0b:86:6c:4f:4f: 0e:d3:99:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTlUbJgbGJqIiGQZFxhhMmSXlAA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUExRkEwQTVDRkRBOEI1QTZGNjQyRjU4ODdGRDY3MjJE NzUzMTAwRDAeFw0yNjExMDIwODE3NTVaFw0yNjExMDMwOTIyNTVaMDMxMTAvBgNV BAMTKDczMTkzRDhCQzBFODU1Q0JGREMzNTZGNUEyRUY5QjRDQTQ3OEZEMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3CQCOzqvNl/rzVIHlGqZIt12h WA7sh7X+1+S7JrhKz3RIwE+TN3vFlXjrMtdTYXkLIs5Fmc9msA0t7dQoaISRFEaA Q2R0FHNd8sw1jUa/QpLDXsUv/rea9qxZO2n3ut8D2Yth/yFC0rcGMhD92v+jY/js Bn2IZliv2IkdE1ktmhg876y/VUjrVEgH3t5dJnKxZ+GjSccCi9OGMlVh9sZlBb3M x4Yn+Nw+nC0CMzxMWReQfykYrWuglgUY+nXlC1De5w5pP8HvEj7MsyZ+BbP2DPh1 c//dcOGObl+8EFOIvcUMuSZCnTr9EUlsCUyzhtolxIEexRoCxImN1QWW9tsFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcxk9i8DoVcv9w1b1ou+bTKR4/SwwHwYDVR0j BBgwFoAU6h+gpc/ai1pvZC9Yh/1nItdTEA0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGM1OGZiN2MtNjdiOC00YmNlLTk2ZDktYmU5MTJlM2Y3M2RkLzAvRUExRkEwQTVD RkRBOEI1QTZGNjQyRjU4ODdGRDY3MjJENzUzMTAwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQTFGQTBBNUNGREE4QjVBNkY2NDJGNTg4N0ZENjcyMkQ3NTMx MDBELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGM1OGZiN2MtNjdiOC00YmNlLTk2 ZDktYmU5MTJlM2Y3M2RkLzAvRUExRkEwQTVDRkRBOEI1QTZGNjQyRjU4ODdGRDY3 MjJENzUzMTAwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB5dTfSQFUX17fWyuxD1r58yY/7D3yQ9Jqks CgjGI8ugykLPDoaraTadOJJL8JDC4oZtI8ng3uf+oP1wYYxE/Ua6DU1wH79zpCqq ME0I2hQvvxzGJfLHRVs3KmDrExLpn1mpo4520OIVF5U2ZuIYm9kT0pvw+1hy/o14 fd1qcV1bFFyGMx4CHzEOxzwlvbcS5es4YTbwogU8VtNCQCxAjB34/qLL9mYXWPfk I5S3nY0M2NhiNI1wSZhgiLbjRDcY7gVJXdIaIdc7HumqxoiBZ+k8DeGAGBiCFHC3 gpP9Q6C8rKHZWsxBaFKGxZkkXrjCTDNJa9nnE18LhmxPTw7TmQ0= -----END CERTIFICATE-----Generated at Tue Nov 3 00:32:40 2026 by rpki-client