$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/EBB94B4A4FC3917EE61D2764970CFCA1015BBCF1.mft File: EBB94B4A4FC3917EE61D2764970CFCA1015BBCF1.mft (raw, json) Hash identifier: +JvR0mUKBl3htm96EBq7jyLRS0HBgIF/XqfYgNOrHBI= Subject key identifier: 85:63:F5:5B:6C:1A:F1:65:35:21:DD:FF:CD:31:6A:C3:D7:78:42:7A Authority key identifier: EB:B9:4B:4A:4F:C3:91:7E:E6:1D:27:64:97:0C:FC:A1:01:5B:BC:F1 Certificate issuer: /CN=EBB94B4A4FC3917EE61D2764970CFCA1015BBCF1 Certificate serial: 6A1AA82F5D0E0EDE55F8F3357BC18ACAD645D633 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EBB94B4A4FC3917EE61D2764970CFCA1015BBCF1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/EBB94B4A4FC3917EE61D2764970CFCA1015BBCF1.mft Manifest number: F7 Signing time: Tue 03 Nov 2026 01:14:00 +0000 Manifest this update: Tue 03 Nov 2026 01:09:00 +0000 Manifest next update: Wed 04 Nov 2026 04:11:00 +0000 Files and hashes: 1: 3136302e32352e3230332e302f32342d3234203d3e20313533313038.roa (hash: 6L2ENtgU1VjFwLGyNVrP8HYDZpGVtd4RKvsD3aKlBT4=) 2: EBB94B4A4FC3917EE61D2764970CFCA1015BBCF1.crl (hash: H6w6iRXlPqHuEtEYMdRakCokIN4ltOTqlhLaLAYet6k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/EBB94B4A4FC3917EE61D2764970CFCA1015BBCF1.crl rsync://rpki-rsync.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/EBB94B4A4FC3917EE61D2764970CFCA1015BBCF1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EBB94B4A4FC3917EE61D2764970CFCA1015BBCF1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 04:11:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:1a:a8:2f:5d:0e:0e:de:55:f8:f3:35:7b:c1:8a:ca:d6:45:d6:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBB94B4A4FC3917EE61D2764970CFCA1015BBCF1 Validity Not Before: Nov 3 01:09:00 2026 GMT Not After : Nov 4 04:11:00 2026 GMT Subject: CN=8563F55B6C1AF1653521DDFFCD316AC3D778427A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0e:2e:11:3f:1d:3d:c2:2c:ea:fc:c9:88:27: 1c:e5:65:4a:b0:95:0d:38:fc:15:26:3d:6c:49:04: 62:3b:1c:43:b0:87:b8:50:55:8e:97:a9:7f:bc:99: 40:cc:ed:e0:9b:d0:50:82:ab:3b:df:46:75:e7:df: 12:f8:9b:30:14:96:21:99:2f:7d:2b:66:8c:25:e4: 3f:0b:11:0f:bc:4c:fc:4d:88:ab:b2:c0:41:d8:4c: 18:78:bd:ce:78:a7:2a:c0:bb:b3:15:60:a5:09:df: 3a:c9:2c:ec:1c:20:aa:19:08:52:f4:f4:1e:d8:c1: 46:46:2b:33:f5:6c:c0:2d:88:21:5c:28:46:57:af: f3:5f:02:8d:84:7c:d7:ba:40:c5:0f:27:18:53:c7: f3:a9:a1:ac:c6:59:ce:4a:f0:f4:62:69:11:97:5c: 6f:1d:a6:79:4e:da:f7:a9:4a:63:4d:80:da:d2:00: 83:7a:f9:5f:4a:74:b0:ec:eb:d4:54:e9:5e:c3:33: b3:86:04:eb:90:b1:49:84:e0:4b:fc:83:91:d3:e5: e4:1f:70:5a:5e:5d:fd:b7:fe:ce:c3:7c:c4:ee:65: d8:03:9f:fc:5b:c0:93:4b:21:36:86:e1:00:0c:d2: 03:dc:bd:11:d7:a8:a0:a5:8c:a2:98:68:c4:42:17: 1c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:63:F5:5B:6C:1A:F1:65:35:21:DD:FF:CD:31:6A:C3:D7:78:42:7A X509v3 Authority Key Identifier: keyid:EB:B9:4B:4A:4F:C3:91:7E:E6:1D:27:64:97:0C:FC:A1:01:5B:BC:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/EBB94B4A4FC3917EE61D2764970CFCA1015BBCF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EBB94B4A4FC3917EE61D2764970CFCA1015BBCF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/EBB94B4A4FC3917EE61D2764970CFCA1015BBCF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:0d:4b:e1:c2:fc:f2:c2:68:0a:c0:c8:a5:57:6c:f2:96:1a: a0:a1:59:7c:f9:ec:76:d3:9c:32:93:7e:35:7c:a4:6e:6c:63: af:1e:8a:41:b7:84:58:c0:1a:99:ab:18:3b:65:91:fa:af:e0: dc:95:a6:c7:5c:c7:65:ac:8d:dc:a4:2f:bf:7e:78:60:c0:e5: c9:42:29:67:df:f4:47:4b:27:5f:eb:18:83:fb:5a:aa:be:8a: 08:fa:c7:68:eb:a6:bd:7a:b9:8a:a3:e3:ad:83:12:9f:56:8a: 45:e6:68:17:c6:34:00:1c:ba:14:b9:71:9d:1e:8d:05:fc:05: a0:50:8b:36:f4:ce:d2:d1:da:2a:36:1d:d6:63:82:db:f1:a9: 65:0f:b0:b3:5d:a6:bb:a0:7e:bd:5f:91:ae:05:9d:72:44:e6: 56:f1:0e:0e:2e:5b:47:6c:67:9f:35:c0:d5:75:82:50:3b:29: 44:34:fb:24:e0:92:06:c9:19:9e:46:83:ef:53:c0:88:e8:13: 36:58:e2:f8:c2:51:7f:9e:ef:65:a0:4d:7d:75:93:b6:ab:7c: 00:62:4c:33:00:ca:ea:d7:d9:67:58:72:cf:aa:42:bf:2f:e0: 71:41:1a:9d:a4:fd:4d:ea:65:a4:94:67:e2:a8:f8:0f:25:43: ea:f0:d5:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUahqoL10ODt5V+PM1e8GKytZF1jMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJCOTRCNEE0RkMzOTE3RUU2MUQyNzY0OTcwQ0ZDQTEw MTVCQkNGMTAeFw0yNjExMDMwMTA5MDBaFw0yNjExMDQwNDExMDBaMDMxMTAvBgNV BAMTKDg1NjNGNTVCNkMxQUYxNjUzNTIxRERGRkNEMzE2QUMzRDc3ODQyN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Di4RPx09wizq/MmIJxzlZUqw lQ04/BUmPWxJBGI7HEOwh7hQVY6XqX+8mUDM7eCb0FCCqzvfRnXn3xL4mzAUliGZ L30rZowl5D8LEQ+8TPxNiKuywEHYTBh4vc54pyrAu7MVYKUJ3zrJLOwcIKoZCFL0 9B7YwUZGKzP1bMAtiCFcKEZXr/NfAo2EfNe6QMUPJxhTx/OpoazGWc5K8PRiaRGX XG8dpnlO2vepSmNNgNrSAIN6+V9KdLDs69RU6V7DM7OGBOuQsUmE4Ev8g5HT5eQf cFpeXf23/s7DfMTuZdgDn/xbwJNLITaG4QAM0gPcvRHXqKCljKKYaMRCFxxtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhWP1W2wa8WU1Id3/zTFqw9d4QnowHwYDVR0j BBgwFoAU67lLSk/DkX7mHSdklwz8oQFbvPEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWFjNjE1NWUtMmQyZi00ZjllLWIyMTgtZWI1MjViM2ExMTE5LzAvRUJCOTRCNEE0 RkMzOTE3RUU2MUQyNzY0OTcwQ0ZDQTEwMTVCQkNGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQkI5NEI0QTRGQzM5MTdFRTYxRDI3NjQ5NzBDRkNBMTAxNUJC Q0YxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWFjNjE1NWUtMmQyZi00ZjllLWIy MTgtZWI1MjViM2ExMTE5LzAvRUJCOTRCNEE0RkMzOTE3RUU2MUQyNzY0OTcwQ0ZD QTEwMTVCQkNGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQNS+HC/PLCaArAyKVXbPKWGqChWXz57HbT nDKTfjV8pG5sY68eikG3hFjAGpmrGDtlkfqv4NyVpsdcx2WsjdykL79+eGDA5clC KWff9EdLJ1/rGIP7Wqq+igj6x2jrpr16uYqj462DEp9WikXmaBfGNAAcuhS5cZ0e jQX8BaBQizb0ztLR2io2HdZjgtvxqWUPsLNdprugfr1fka4FnXJE5lbxDg4uW0ds Z581wNV1glA7KUQ0+yTgkgbJGZ5Gg+9TwIjoEzZY4vjCUX+e72WgTX11k7arfABi TDMAyurX2WdYcs+qQr8v4HFBGp2k/U3qZaSUZ+Ko+A8lQ+rw1T0= -----END CERTIFICATE-----Generated at Tue Nov 3 08:25:13 2026 by rpki-client