$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft File: EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft (raw, json) Hash identifier: /lUuB4q0C7Y4Zv/l7GRM7D0+1NVXN5sk/URvWvOEcow= Subject key identifier: 95:EC:81:11:25:53:1A:49:D5:13:04:D8:38:90:59:7C:7E:52:1F:BA Authority key identifier: EA:F1:BB:C2:E7:85:2A:08:EC:97:26:DF:03:7B:7A:90:02:0F:61:3C Certificate issuer: /CN=EAF1BBC2E7852A08EC9726DF037B7A90020F613C Certificate serial: 0AD8DDC947464A43187A294E86CB9DD2F6D01F71 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 20:53:33 +0000 Manifest this update: Wed 02 Sep 2026 20:48:33 +0000 Manifest next update: Thu 03 Sep 2026 21:13:33 +0000 Files and hashes: 1: 3130332e37362e3134392e302f32342d3234203d3e20313335343737.roa (hash: f59rz1HETJlgvZwIKtKFdh5XtKqyQqDaf24eWmjJW6o=) 2: 323430373a366638303a3a2f33322d3438203d3e20313335343737.roa (hash: P366bIkTOlc69Ppfa9a3mTWNreZ6tb8vIXj7vOkMLBM=) 3: EAF1BBC2E7852A08EC9726DF037B7A90020F613C.crl (hash: +7ZkfnOzZN2+o4QscLh/sDiPwH1k3PrmHMB0/xckDv0=) 4: 3130332e37362e3135312e302f32342d3234203d3e20313335343737.roa (hash: qw6OlEu48FrPsEmKgwHPSjOidfOJLUIet7s/2iStFrA=) 5: 3230332e32392e32362e302f32342d3234203d3e20313335343737.roa (hash: 5DkSgMYDvgEBxCCplmwfDoevI8VI5H/bGiFDzCRHnts=) 6: 3130332e332e35382e302f32342d3234203d3e20313335343737.roa (hash: 2zqd8AgBddwBm4KIXvjiblLxU15/BrCCnreac7skVlA=) 7: 3130332e37362e3134382e302f32342d3234203d3e20313335343737.roa (hash: Tsm6R3Ykoq+qGUHJdq4ks8X4b5Uy0ypiE0/txgdjmm4=) 8: 3130332e37362e3135302e302f32342d3234203d3e20313335343737.roa (hash: xYxE6IzCdxb+aq4Kkm/AnjYa+vu3xdG+mLXx5vkCP/U=) 9: 3132302e38392e39302e302f32332d3234203d3e20313335343737.roa (hash: L8OlDd+zcMlp2nj6z/A4ihQhVRTYQCBk+qSvJaFpcus=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.crl rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:d8:dd:c9:47:46:4a:43:18:7a:29:4e:86:cb:9d:d2:f6:d0:1f:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAF1BBC2E7852A08EC9726DF037B7A90020F613C Validity Not Before: Sep 2 20:48:33 2026 GMT Not After : Sep 3 21:13:33 2026 GMT Subject: CN=95EC811125531A49D51304D83890597C7E521FBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6d:c9:b9:ce:77:2c:56:59:05:3f:7b:5c:92: be:58:b8:72:b0:da:64:e8:01:f0:b0:6d:54:4c:d2: 33:0e:0f:85:b3:63:3f:45:26:a5:f2:16:d3:e9:34: bc:28:ca:7d:b8:10:9e:77:ce:54:e1:da:cd:ef:d9: 45:46:1e:0c:01:d9:ee:e6:f0:d0:80:01:d5:53:e3: 4b:7f:ca:7c:8a:f0:aa:79:d8:26:7e:07:cf:67:02: 9b:bc:40:08:81:fb:49:bb:87:a1:a5:79:cb:57:1b: 4f:3b:e8:e2:ce:53:56:e8:30:e6:1c:af:fe:06:26: 3d:5e:70:bb:a8:83:18:93:3a:d8:5a:16:56:e0:7f: b0:9a:3a:ef:4a:9a:56:7e:8f:b7:07:1e:db:cb:9b: a1:8a:99:d6:e3:30:e5:32:d1:87:9a:5c:0c:be:e2: e7:fe:28:a2:43:17:30:03:b2:8e:c4:27:b9:bb:b3: 99:97:1f:6b:72:e2:ce:e2:1b:e4:13:83:1b:fc:51: b8:8e:3c:c9:dc:d3:a9:c9:0e:84:f7:4d:9f:5a:20: 68:8e:ae:08:b9:80:4c:55:64:1a:f7:26:45:a0:29: a9:6c:49:d8:ff:9c:e7:4f:b2:c6:78:4f:07:f6:de: cb:22:39:e4:22:4e:5f:18:f6:ba:91:8a:3c:6f:d0: 86:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:EC:81:11:25:53:1A:49:D5:13:04:D8:38:90:59:7C:7E:52:1F:BA X509v3 Authority Key Identifier: keyid:EA:F1:BB:C2:E7:85:2A:08:EC:97:26:DF:03:7B:7A:90:02:0F:61:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:59:ff:91:84:b5:32:a6:ab:ae:5b:f0:fe:25:4f:2f:7a:85: 56:b8:6d:ad:6d:1e:56:96:0c:09:5a:53:01:1b:02:c9:f6:3a: ae:44:3a:a3:c5:98:a3:2f:e0:ff:b6:20:5c:b8:7f:df:32:a1: 24:be:7d:55:d9:78:e9:93:f4:de:66:3e:41:f0:a6:6b:7c:3a: 12:ad:31:8f:eb:bc:ce:c8:bc:7d:af:c0:26:2b:10:3f:da:5c: df:50:e8:f6:d8:39:c4:d9:f3:a7:e3:14:4d:0c:4f:e4:2b:2e: 07:d5:da:14:20:68:5c:16:5c:69:4e:e1:1f:3b:17:68:7c:fc: 30:f3:53:4e:fb:e7:2b:5f:16:a2:e6:d1:a2:c0:b3:23:36:88: 01:fb:81:78:42:5e:09:3d:67:41:20:df:9c:f9:85:9a:0d:e5: 0a:4a:4a:4b:0d:fb:5c:24:8e:7a:6c:1b:b6:fd:2b:11:15:40: 8b:55:bd:40:3b:71:db:cd:69:da:5e:00:bd:ac:0f:1a:f6:ee: 3e:b7:7c:89:c2:01:4f:c9:d1:c0:f9:12:c6:fb:b2:01:c9:38: 81:94:15:5b:4d:aa:21:91:7e:ca:34:1d:37:fe:83:b4:43:70: de:3e:7d:6c:85:9f:72:12:43:4e:8d:7a:c7:d1:f0:c8:b6:de: fc:71:72:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCtjdyUdGSkMYeilOhsud0vbQH3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFGMUJCQzJFNzg1MkEwOEVDOTcyNkRGMDM3QjdBOTAw MjBGNjEzQzAeFw0yNjA5MDIyMDQ4MzNaFw0yNjA5MDMyMTEzMzNaMDMxMTAvBgNV BAMTKDk1RUM4MTExMjU1MzFBNDlENTEzMDREODM4OTA1OTdDN0U1MjFGQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/bcm5zncsVlkFP3tckr5YuHKw 2mToAfCwbVRM0jMOD4WzYz9FJqXyFtPpNLwoyn24EJ53zlTh2s3v2UVGHgwB2e7m 8NCAAdVT40t/ynyK8Kp52CZ+B89nApu8QAiB+0m7h6GlectXG0876OLOU1boMOYc r/4GJj1ecLuogxiTOthaFlbgf7CaOu9KmlZ+j7cHHtvLm6GKmdbjMOUy0YeaXAy+ 4uf+KKJDFzADso7EJ7m7s5mXH2ty4s7iG+QTgxv8UbiOPMnc06nJDoT3TZ9aIGiO rgi5gExVZBr3JkWgKalsSdj/nOdPssZ4Twf23ssiOeQiTl8Y9rqRijxv0IY9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUleyBESVTGknVEwTYOJBZfH5SH7owHwYDVR0j BBgwFoAU6vG7wueFKgjslybfA3t6kAIPYTwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTdmZGY0M2UtNGE0Yy00ZGJjLWI3ODUtZGQ3Y2JmMWE2N2I3LzAvRUFGMUJCQzJF Nzg1MkEwOEVDOTcyNkRGMDM3QjdBOTAwMjBGNjEzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQUYxQkJDMkU3ODUyQTA4RUM5NzI2REYwMzdCN0E5MDAyMEY2 MTNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTdmZGY0M2UtNGE0Yy00ZGJjLWI3 ODUtZGQ3Y2JmMWE2N2I3LzAvRUFGMUJCQzJFNzg1MkEwOEVDOTcyNkRGMDM3QjdB OTAwMjBGNjEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFVZ/5GEtTKmq65b8P4lTy96hVa4ba1tHlaW DAlaUwEbAsn2Oq5EOqPFmKMv4P+2IFy4f98yoSS+fVXZeOmT9N5mPkHwpmt8OhKt MY/rvM7IvH2vwCYrED/aXN9Q6PbYOcTZ86fjFE0MT+QrLgfV2hQgaFwWXGlO4R87 F2h8/DDzU0775ytfFqLm0aLAsyM2iAH7gXhCXgk9Z0Eg35z5hZoN5QpKSksN+1wk jnpsG7b9KxEVQItVvUA7cdvNadpeAL2sDxr27j63fInCAU/J0cD5Esb7sgHJOIGU FVtNqiGRfso0HTf+g7RDcN4+fWyFn3ISQ06NesfR8Mi23vxxcmQ= -----END CERTIFICATE-----Generated at Thu Sep 3 12:35:30 2026 by rpki-client