$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft File: EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft (raw, json) Hash identifier: EI3TR3t/8zIu5JWOlhVhMc/duUMbQSL/a/MluVVx5u4= Subject key identifier: 27:A2:F3:62:C2:92:09:61:82:F2:85:ED:22:B0:B0:8E:76:7F:24:7C Authority key identifier: EA:F1:1A:8E:D0:35:AD:ED:15:9E:09:77:A5:5B:8A:13:5A:2D:BA:F0 Certificate issuer: /CN=EAF11A8ED035ADED159E0977A55B8A135A2DBAF0 Certificate serial: 105B768CF114FA553B481A9C14A2EACB8468340F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft Manifest number: F4 Signing time: Mon 02 Nov 2026 14:51:34 +0000 Manifest this update: Mon 02 Nov 2026 14:46:34 +0000 Manifest next update: Tue 03 Nov 2026 17:37:34 +0000 Files and hashes: 1: 3132312e3130312e3138352e302f32342d3234203d3e203338373835.roa (hash: njy5/kh9KsnXyn0A9UeBHDQF9Tkk8vaMqIfNa9Qx8CA=) 2: 3132312e3130312e3138342e302f32342d3234203d3e203338373835.roa (hash: 3mA7+mzgag84qW1ECVIx+vVoMA11/hm1+8F3im5FSgM=) 3: 3132312e3130312e3138372e302f32342d3234203d3e203338373835.roa (hash: eow5kZw+wlYHSjxq5MYrTPBsAbbgLnc6v4ENArx4+O8=) 4: 3132312e3130312e3139302e302f32342d3234203d3e203338373835.roa (hash: kOLyF61iZDyTGCpcXoqG6pGYD92Lf55fGKKsSX0XUdE=) 5: 3132312e3130312e3138382e302f32342d3234203d3e203338373835.roa (hash: jtsuDztEZ+UqFnwxVIum5heFrLrZtRBLCrlDOZVW974=) 6: 3132312e3130312e3138392e302f32342d3234203d3e203338373835.roa (hash: pWwlBOgo0c3x6IIcXfvg9KBIWmKkPWfxlYAnYQTVkEg=) 7: 3132312e3130312e3139312e302f32342d3234203d3e203338373835.roa (hash: hd0faeOSPJPRBzPByoIXVnw8NPD4bzR2wSWzwHgoQPA=) 8: EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.crl (hash: P7UGrFaDIHubsV6tWhczkVx0Vg+k23xBKR1GP99Gnuc=) 9: 3132312e3130312e3138362e302f32342d3234203d3e203338373835.roa (hash: o0yYhvbuoFqhEPym4z+ZdJk3Le3FK4ab18rxhmTiTA8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.crl rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 12:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:5b:76:8c:f1:14:fa:55:3b:48:1a:9c:14:a2:ea:cb:84:68:34:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAF11A8ED035ADED159E0977A55B8A135A2DBAF0 Validity Not Before: Nov 2 14:46:34 2026 GMT Not After : Nov 3 17:37:34 2026 GMT Subject: CN=27A2F362C292096182F285ED22B0B08E767F247C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:50:69:b8:7c:b9:3d:30:e2:67:d2:ad:76:fa: f4:b7:37:cd:a2:4d:95:1c:d1:1e:ff:ba:c6:e3:65: 49:de:a4:6f:a1:70:38:77:8f:1c:7a:e3:80:20:5b: 6c:88:36:6c:29:a0:86:ba:23:11:ce:d1:2e:20:82: 16:cf:79:9c:61:05:46:fc:5c:7a:e7:a4:64:d8:a3: 1e:21:7d:ca:c2:66:02:33:08:af:49:49:8c:af:75: 40:93:a4:42:8b:11:3c:6f:89:d6:79:3d:59:54:8b: 60:7f:d9:e9:d8:03:e6:47:c1:7e:df:4a:31:c9:47: 88:eb:cd:3a:f1:5f:f6:ac:98:af:b7:13:cd:3a:42: 4e:64:c3:5d:6d:1a:a4:e2:4e:43:36:dc:4d:64:ba: 15:5f:94:67:d3:c2:4d:fa:0f:a4:af:82:b0:52:8f: 18:79:4b:d6:d8:bf:48:7f:a4:5d:60:11:d2:8e:30: fe:84:81:16:5c:6b:05:98:43:f5:c5:e3:85:38:eb: 6d:fa:eb:e5:f2:f0:b9:fb:d5:a9:79:f3:bd:f5:2c: ad:eb:b6:63:67:ef:6c:23:e5:21:30:41:63:1c:00: c5:16:a3:51:59:27:d9:f1:4f:08:50:ea:9b:dc:82: 2d:86:8f:d1:89:ee:fc:16:ea:91:ff:e1:7a:b4:b9: a1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A2:F3:62:C2:92:09:61:82:F2:85:ED:22:B0:B0:8E:76:7F:24:7C X509v3 Authority Key Identifier: keyid:EA:F1:1A:8E:D0:35:AD:ED:15:9E:09:77:A5:5B:8A:13:5A:2D:BA:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/EAF11A8ED035ADED159E0977A55B8A135A2DBAF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:4f:0b:51:07:1b:e8:f1:d6:3d:6c:55:79:99:42:96:33:7c: 46:9e:15:77:7c:b6:15:6b:64:74:fb:f5:c0:3c:0a:a9:b5:81: 12:c2:98:a0:1f:8b:90:37:1e:c5:ba:ff:11:1f:35:91:07:47: ad:79:e8:5b:e1:59:6d:c7:6a:58:79:ed:72:8e:47:85:79:80: 75:a0:83:02:69:c6:5a:c9:40:f1:3d:c3:97:e1:13:ac:1b:4b: 35:d2:6a:bf:f2:cb:d6:11:46:96:2f:cb:c5:8e:d4:0a:75:5f: a4:b6:ac:1b:34:7b:8b:65:44:95:a0:da:12:35:d5:f4:59:45: 6f:a5:1f:82:82:74:72:bb:c4:9a:e0:7a:d1:94:f7:65:0f:92: 51:43:0e:e1:b2:65:9b:d8:38:ca:f3:5f:56:dc:ea:c5:f4:9f: 1f:45:c1:47:03:ae:0b:ab:bc:b0:96:a2:82:3b:d5:1d:44:07: b1:c8:31:7b:a6:1c:7a:79:36:c7:84:3d:99:89:76:f8:5a:01: c6:d4:33:7f:ce:19:2b:64:bc:21:b8:3d:3d:1c:65:8e:f6:4b: 13:44:8b:35:bf:8a:4b:46:59:93:c2:43:5b:a7:33:46:69:b5: e9:ef:f0:ac:4c:b5:c7:2d:87:4a:81:f9:6b:19:51:3f:8d:55: 23:7e:7e:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEFt2jPEU+lU7SBqcFKLqy4RoNA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFGMTFBOEVEMDM1QURFRDE1OUUwOTc3QTU1QjhBMTM1 QTJEQkFGMDAeFw0yNjExMDIxNDQ2MzRaFw0yNjExMDMxNzM3MzRaMDMxMTAvBgNV BAMTKDI3QTJGMzYyQzI5MjA5NjE4MkYyODVFRDIyQjBCMDhFNzY3RjI0N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6UGm4fLk9MOJn0q12+vS3N82i TZUc0R7/usbjZUnepG+hcDh3jxx644AgW2yINmwpoIa6IxHO0S4gghbPeZxhBUb8 XHrnpGTYox4hfcrCZgIzCK9JSYyvdUCTpEKLETxvidZ5PVlUi2B/2enYA+ZHwX7f SjHJR4jrzTrxX/asmK+3E806Qk5kw11tGqTiTkM23E1kuhVflGfTwk36D6SvgrBS jxh5S9bYv0h/pF1gEdKOMP6EgRZcawWYQ/XF44U462366+Xy8Ln71al58731LK3r tmNn72wj5SEwQWMcAMUWo1FZJ9nxTwhQ6pvcgi2Gj9GJ7vwW6pH/4Xq0uaEXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ6LzYsKSCWGC8oXtIrCwjnZ/JHwwHwYDVR0j BBgwFoAU6vEajtA1re0Vngl3pVuKE1otuvAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTU3MmRmYmUtNGNhMC00YTQ2LTgwMzctNDk2OGVkOTdjYWRjLzAvRUFGMTFBOEVE MDM1QURFRDE1OUUwOTc3QTU1QjhBMTM1QTJEQkFGMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQUYxMUE4RUQwMzVBREVEMTU5RTA5NzdBNTVCOEExMzVBMkRC QUYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTU3MmRmYmUtNGNhMC00YTQ2LTgw MzctNDk2OGVkOTdjYWRjLzAvRUFGMTFBOEVEMDM1QURFRDE1OUUwOTc3QTU1QjhB MTM1QTJEQkFGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMRPC1EHG+jx1j1sVXmZQpYzfEaeFXd8thVr ZHT79cA8Cqm1gRLCmKAfi5A3HsW6/xEfNZEHR6156FvhWW3Halh57XKOR4V5gHWg gwJpxlrJQPE9w5fhE6wbSzXSar/yy9YRRpYvy8WO1Ap1X6S2rBs0e4tlRJWg2hI1 1fRZRW+lH4KCdHK7xJrgetGU92UPklFDDuGyZZvYOMrzX1bc6sX0nx9FwUcDrgur vLCWooI71R1EB7HIMXumHHp5NseEPZmJdvhaAcbUM3/OGStkvCG4PT0cZY72SxNE izW/iktGWZPCQ1unM0Zptenv8KxMtccth0qB+WsZUT+NVSN+fu0= -----END CERTIFICATE-----Generated at Mon Nov 2 23:58:54 2026 by rpki-client