$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.mft File: EB1DCD321031C0290E00088B308F6E37F658F0F0.mft (raw, json) Hash identifier: n0D6yUNh+7XOiMIOY+kBZ3SqfTwiO7DhRwv4HFaDwGw= Subject key identifier: 99:D1:B1:AF:97:5B:A1:24:85:A2:02:E2:EE:DD:5A:4C:98:E6:03:C7 Authority key identifier: EB:1D:CD:32:10:31:C0:29:0E:00:08:8B:30:8F:6E:37:F6:58:F0:F0 Certificate issuer: /CN=EB1DCD321031C0290E00088B308F6E37F658F0F0 Certificate serial: 29B52E5BDBB82714BA95EB7F6705A6BFA904FA29 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.mft Manifest number: F7 Signing time: Mon 02 Nov 2026 09:50:02 +0000 Manifest this update: Mon 02 Nov 2026 09:45:02 +0000 Manifest next update: Tue 03 Nov 2026 10:37:02 +0000 Files and hashes: 1: EB1DCD321031C0290E00088B308F6E37F658F0F0.crl (hash: 15qKBHk6YXGnvsz0dkiufnWn175CsUU5nSrZhH/wb9M=) 2: 3135372e36362e3132352e302f32342d3234203d3e20313532373732.roa (hash: 52gK1ZVXU5lx2N9LIOHuf1720HHZgYLR2YWvzcpZMqA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.crl rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 10:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:b5:2e:5b:db:b8:27:14:ba:95:eb:7f:67:05:a6:bf:a9:04:fa:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB1DCD321031C0290E00088B308F6E37F658F0F0 Validity Not Before: Nov 2 09:45:02 2026 GMT Not After : Nov 3 10:37:02 2026 GMT Subject: CN=99D1B1AF975BA12485A202E2EEDD5A4C98E603C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c9:5a:34:3a:b1:a9:94:7d:63:8d:eb:5b:78: a9:a9:0f:88:7e:34:5d:08:3c:b3:44:28:11:3c:da: c9:44:66:c3:de:c7:c4:8e:e4:9e:c7:7e:39:15:8b: b6:fa:60:ad:41:3d:ef:c2:2d:1c:03:71:a2:59:e2: 27:97:fa:76:c2:7e:51:a4:cf:8c:72:40:84:23:3f: 86:73:5b:f8:c4:73:7f:d0:4a:30:86:1a:28:ba:66: 99:26:29:09:e7:8e:fa:a4:47:dd:e5:60:cb:8b:54: cb:b4:75:76:38:76:26:72:d5:fb:ca:53:00:fb:c0: 3b:ae:98:9d:9a:01:e7:0c:79:f5:b8:98:f6:e0:2b: 03:c4:1a:a7:b8:76:1f:e8:34:ef:05:10:7d:2d:fa: 2a:22:30:86:ea:f4:c1:54:97:d7:f7:3f:6f:e7:d7: 47:0f:d8:64:6e:f1:03:e0:45:d2:15:bb:af:0b:a1: 11:f2:cb:14:67:5b:09:7b:0a:e4:48:0c:0b:8a:56: 05:d2:c1:45:a2:87:7a:6c:5c:42:5d:a0:79:67:d3: be:cb:50:47:c0:a0:6f:ee:68:eb:1b:41:70:4e:fa: 43:9e:20:51:fe:2a:7d:10:c7:01:8e:e0:87:48:87: d8:fc:66:10:93:1f:c7:8d:c2:6b:a1:29:5b:a6:a4: 7a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D1:B1:AF:97:5B:A1:24:85:A2:02:E2:EE:DD:5A:4C:98:E6:03:C7 X509v3 Authority Key Identifier: keyid:EB:1D:CD:32:10:31:C0:29:0E:00:08:8B:30:8F:6E:37:F6:58:F0:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/EB1DCD321031C0290E00088B308F6E37F658F0F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:83:3a:b6:3d:0b:30:db:d7:b3:b5:77:61:18:bf:b1:da:3e: d2:41:fc:c4:38:43:0b:9b:55:db:61:2d:5a:ea:55:99:38:cd: 72:23:29:54:35:6f:89:ec:b5:df:0b:5c:49:7c:9f:9a:90:a5: 4b:f0:6f:a6:66:2c:13:f5:2b:82:14:a0:c2:ff:ab:bb:97:a3: ac:07:da:ce:db:28:d1:6e:fc:71:3c:e2:a5:f4:f6:1f:84:c5: 0e:ff:8b:04:cc:f1:77:1a:04:8c:24:6b:37:47:b1:7e:7a:f5: 7f:cf:77:e5:16:d7:19:10:0b:08:39:71:79:39:1f:01:a9:02: 18:5f:b9:6b:f7:30:24:50:dc:88:05:09:88:68:f7:ba:32:44: 6f:5f:99:ec:59:92:7c:29:91:3d:29:9e:f3:3f:86:bf:63:ce: 72:88:78:9d:e8:75:e9:f9:e1:1b:24:4d:4c:3d:1c:78:5b:06: 24:fa:71:52:ce:c5:e2:ec:a6:e6:87:8d:0e:15:ad:5e:38:92: f8:eb:18:f0:d0:a8:92:ec:fa:d2:77:1e:90:17:b7:ee:d0:70: 0c:16:fe:3e:ee:29:fc:42:fe:91:54:d2:87:92:4b:29:83:22: cf:14:d0:82:c3:3f:68:c6:e6:88:5f:bf:74:e3:cd:e5:e0:a3: 9a:36:c6:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKbUuW9u4JxS6let/ZwWmv6kE+ikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUIxRENEMzIxMDMxQzAyOTBFMDAwODhCMzA4RjZFMzdG NjU4RjBGMDAeFw0yNjExMDIwOTQ1MDJaFw0yNjExMDMxMDM3MDJaMDMxMTAvBgNV BAMTKDk5RDFCMUFGOTc1QkExMjQ4NUEyMDJFMkVFREQ1QTRDOThFNjAzQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDByVo0OrGplH1jjetbeKmpD4h+ NF0IPLNEKBE82slEZsPex8SO5J7HfjkVi7b6YK1BPe/CLRwDcaJZ4ieX+nbCflGk z4xyQIQjP4ZzW/jEc3/QSjCGGii6ZpkmKQnnjvqkR93lYMuLVMu0dXY4diZy1fvK UwD7wDuumJ2aAecMefW4mPbgKwPEGqe4dh/oNO8FEH0t+ioiMIbq9MFUl9f3P2/n 10cP2GRu8QPgRdIVu68LoRHyyxRnWwl7CuRIDAuKVgXSwUWih3psXEJdoHln077L UEfAoG/uaOsbQXBO+kOeIFH+Kn0QxwGO4IdIh9j8ZhCTH8eNwmuhKVumpHrPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmdGxr5dboSSFogLi7t1aTJjmA8cwHwYDVR0j BBgwFoAU6x3NMhAxwCkOAAiLMI9uN/ZY8PAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2NmMDFlYzYtOGU4OS00MDJhLTkwYzctNTBjNmYxNGNkMjQyLzAvRUIxRENEMzIx MDMxQzAyOTBFMDAwODhCMzA4RjZFMzdGNjU4RjBGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQjFEQ0QzMjEwMzFDMDI5MEUwMDA4OEIzMDhGNkUzN0Y2NThG MEYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2NmMDFlYzYtOGU4OS00MDJhLTkw YzctNTBjNmYxNGNkMjQyLzAvRUIxRENEMzIxMDMxQzAyOTBFMDAwODhCMzA4RjZF MzdGNjU4RjBGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEKDOrY9CzDb17O1d2EYv7HaPtJB/MQ4Qwub VdthLVrqVZk4zXIjKVQ1b4nstd8LXEl8n5qQpUvwb6ZmLBP1K4IUoML/q7uXo6wH 2s7bKNFu/HE84qX09h+ExQ7/iwTM8XcaBIwkazdHsX569X/Pd+UW1xkQCwg5cXk5 HwGpAhhfuWv3MCRQ3IgFCYho97oyRG9fmexZknwpkT0pnvM/hr9jznKIeJ3oden5 4RskTUw9HHhbBiT6cVLOxeLspuaHjQ4VrV44kvjrGPDQqJLs+tJ3HpAXt+7QcAwW /j7uKfxC/pFU0oeSSymDIs8U0ILDP2jG5ohfv3TjzeXgo5o2xhU= -----END CERTIFICATE-----Generated at Mon Nov 2 13:12:28 2026 by rpki-client