$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.mft File: EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.mft (raw, json) Hash identifier: e1R/lyH6wNC37aBHONfxZ7qBOiUdNxYG2UA+vhh6lcQ= Subject key identifier: 72:C4:3C:4A:A3:DB:F2:C3:56:D8:A8:34:B0:EB:2C:83:03:9F:3D:02 Authority key identifier: EB:1A:7E:E5:39:E6:F1:EF:A3:D3:0C:62:14:9C:26:5E:BF:30:B5:37 Certificate issuer: /CN=EB1A7EE539E6F1EFA3D30C62149C265EBF30B537 Certificate serial: 3BCD8465DF53A364C33489833C8AF52DE9469422 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 10:41:38 +0000 Manifest this update: Wed 02 Sep 2026 10:36:38 +0000 Manifest next update: Thu 03 Sep 2026 14:36:38 +0000 Files and hashes: 1: 3130332e3235352e3130382e302f32332d3233203d3e20313430343233.roa (hash: lD4ekQjYWJEX/+XteQDNEzLVrijnUKOpZR8eykHExcM=) 2: 3130332e3235352e3130382e302f32342d3234203d3e20313437313530.roa (hash: ePjyykmLAPcuoIW4PxvnsIf6Mnk1VG8I5wQF6R8ChtM=) 3: EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.crl (hash: KPMSaiktElxzMY3MQ1xRGBYw+lHTge+fWMbzN/ED52w=) 4: 3130332e3235352e3130392e302f32342d3234203d3e20313530313931.roa (hash: BsPXa+UOut2Mbb+7M0ct2qI2C2+ME889eZGuggOi820=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.crl rsync://rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 14:36:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:cd:84:65:df:53:a3:64:c3:34:89:83:3c:8a:f5:2d:e9:46:94:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB1A7EE539E6F1EFA3D30C62149C265EBF30B537 Validity Not Before: Sep 2 10:36:38 2026 GMT Not After : Sep 3 14:36:38 2026 GMT Subject: CN=72C43C4AA3DBF2C356D8A834B0EB2C83039F3D02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:07:db:0d:66:4f:83:ea:0d:f4:2b:06:35:98: 5c:bb:5b:88:76:7a:da:b9:69:a0:7a:c9:b8:68:2a: 41:c6:fa:b2:42:ad:2f:a2:c7:d2:c0:f2:91:0b:3b: 0d:7a:41:76:2c:fa:fd:11:f5:41:6d:cf:64:a4:aa: 96:0c:97:7f:8a:86:41:24:4f:6e:78:ed:df:b5:1f: e3:86:09:de:e8:50:70:1e:8f:e4:97:99:56:af:99: 7c:cd:3c:c1:07:9f:93:ce:56:b7:6a:1e:4d:79:5b: bc:3b:90:50:c0:c7:1d:2e:cd:6c:29:0a:e1:aa:ea: b2:f1:8f:75:ac:26:55:14:b7:47:78:81:ba:07:06: ae:e3:8e:fb:7e:0e:38:32:77:9f:6a:cd:40:20:3b: 8f:97:f7:03:c5:37:dd:09:45:aa:4e:dc:01:21:19: 63:1d:80:59:66:4a:ca:36:79:fc:11:da:25:08:b3: d8:80:e7:95:3f:80:ee:f2:6c:e6:60:c4:1b:be:fb: 87:38:c7:6e:a8:9d:13:2b:2f:97:87:65:00:b7:d2: 44:32:d1:82:1c:34:5d:b9:3a:2d:40:56:45:d2:4d: 1c:ea:cf:21:6b:dd:88:0d:6a:b6:a3:16:25:11:1c: c2:43:a4:dd:ba:5c:76:77:3e:d4:97:37:68:63:08: 5b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C4:3C:4A:A3:DB:F2:C3:56:D8:A8:34:B0:EB:2C:83:03:9F:3D:02 X509v3 Authority Key Identifier: keyid:EB:1A:7E:E5:39:E6:F1:EF:A3:D3:0C:62:14:9C:26:5E:BF:30:B5:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/EB1A7EE539E6F1EFA3D30C62149C265EBF30B537.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:99:c8:01:c3:ab:2d:aa:d9:39:06:0b:e6:43:b4:c8:22:21: 22:c8:fa:44:89:bd:de:eb:01:49:62:18:37:f7:9e:0e:65:c5: 74:b6:50:0e:50:d8:bd:18:1b:b1:c8:18:2f:f7:fe:49:19:53: d1:7c:f0:6d:8f:a4:11:d2:54:4a:51:a7:dd:19:ce:d7:21:6f: 38:1a:a5:70:80:6d:5b:34:e8:f6:99:83:03:6f:dc:8b:e3:1f: 5b:99:8f:cc:47:31:e9:ca:2c:0b:d2:12:49:31:71:4b:ed:26: 57:db:b3:cc:ca:9b:61:0b:f8:69:2b:97:bc:74:b4:9d:cd:3c: da:78:44:0d:ec:26:47:3f:99:06:af:13:75:19:e3:13:c4:1e: e9:7e:fa:f8:36:40:ae:b3:81:ee:50:fd:c2:98:dc:29:17:c2: 26:f1:6e:4d:14:3f:61:cb:6e:e9:c2:ab:36:68:94:b2:48:b3: 40:b4:3b:51:4a:a4:bb:5b:27:d9:60:d4:29:42:bf:e0:a7:d6: fc:59:8d:70:15:83:95:25:52:8d:7b:4e:01:50:99:29:88:cd: 41:f7:80:88:0b:79:6e:4c:59:0c:8a:20:ef:43:82:9c:69:69: 24:6f:9f:31:76:6e:b1:5e:83:a9:3a:84:70:3a:02:90:62:85: 24:fc:e2:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO82EZd9To2TDNImDPIr1LelGlCIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUIxQTdFRTUzOUU2RjFFRkEzRDMwQzYyMTQ5QzI2NUVC RjMwQjUzNzAeFw0yNjA5MDIxMDM2MzhaFw0yNjA5MDMxNDM2MzhaMDMxMTAvBgNV BAMTKDcyQzQzQzRBQTNEQkYyQzM1NkQ4QTgzNEIwRUIyQzgzMDM5RjNEMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrB9sNZk+D6g30KwY1mFy7W4h2 etq5aaB6ybhoKkHG+rJCrS+ix9LA8pELOw16QXYs+v0R9UFtz2SkqpYMl3+KhkEk T2547d+1H+OGCd7oUHAej+SXmVavmXzNPMEHn5POVrdqHk15W7w7kFDAxx0uzWwp CuGq6rLxj3WsJlUUt0d4gboHBq7jjvt+Djgyd59qzUAgO4+X9wPFN90JRapO3AEh GWMdgFlmSso2efwR2iUIs9iA55U/gO7ybOZgxBu++4c4x26onRMrL5eHZQC30kQy 0YIcNF25Oi1AVkXSTRzqzyFr3YgNarajFiURHMJDpN26XHZ3PtSXN2hjCFsFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcsQ8SqPb8sNW2Kg0sOssgwOfPQIwHwYDVR0j BBgwFoAU6xp+5Tnm8e+j0wxiFJwmXr8wtTcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWExMWU2ZDctNTdhMS00OTM2LWI3YTctZGUwOTM1MjVjYjI3LzAvRUIxQTdFRTUz OUU2RjFFRkEzRDMwQzYyMTQ5QzI2NUVCRjMwQjUzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQjFBN0VFNTM5RTZGMUVGQTNEMzBDNjIxNDlDMjY1RUJGMzBC NTM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWExMWU2ZDctNTdhMS00OTM2LWI3 YTctZGUwOTM1MjVjYjI3LzAvRUIxQTdFRTUzOUU2RjFFRkEzRDMwQzYyMTQ5QzI2 NUVCRjMwQjUzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABqZyAHDqy2q2TkGC+ZDtMgiISLI+kSJvd7r AUliGDf3ng5lxXS2UA5Q2L0YG7HIGC/3/kkZU9F88G2PpBHSVEpRp90Zztchbzga pXCAbVs06PaZgwNv3IvjH1uZj8xHMenKLAvSEkkxcUvtJlfbs8zKm2EL+Gkrl7x0 tJ3NPNp4RA3sJkc/mQavE3UZ4xPEHul++vg2QK6zge5Q/cKY3CkXwibxbk0UP2HL bunCqzZolLJIs0C0O1FKpLtbJ9lg1ClCv+Cn1vxZjXAVg5UlUo17TgFQmSmIzUH3 gIgLeW5MWQyKIO9DgpxpaSRvnzF2brFeg6k6hHA6ApBihST84gA= -----END CERTIFICATE-----Generated at Thu Sep 3 08:01:06 2026 by rpki-client