$ rpki-client -vvvf rpki-rsync.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.mft File: EBFE4CA91514CAC61F1B83534BB158D90BDD4142.mft (raw, json) Hash identifier: 4Lr+MOJQbchJglmhMC9JFwS6H86o/Ax0sp6WPpqMEfc= Subject key identifier: A2:DF:10:B5:A5:3E:02:D5:76:D7:18:0C:13:91:BC:66:F3:33:C2:FB Authority key identifier: EB:FE:4C:A9:15:14:CA:C6:1F:1B:83:53:4B:B1:58:D9:0B:DD:41:42 Certificate issuer: /CN=EBFE4CA91514CAC61F1B83534BB158D90BDD4142 Certificate serial: 2401B2EB0D4B94E46C4143579BEAEC27F6C48C7B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 06:51:09 +0000 Manifest this update: Thu 03 Sep 2026 06:46:09 +0000 Manifest next update: Fri 04 Sep 2026 06:59:09 +0000 Files and hashes: 1: EBFE4CA91514CAC61F1B83534BB158D90BDD4142.crl (hash: YWNMQEAO3JNrHsoF4OevcZY/OdGfmWlqUjn6p70Uq4s=) 2: 323030313a6466333a356334303a3a2f34382d3438203d3e20313431313236.roa (hash: hTFuMvwmOj1lUIuO6NPn3OHHpBVIbvNuSActpFl0hWE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.crl rsync://rpki-rsync.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 06:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:01:b2:eb:0d:4b:94:e4:6c:41:43:57:9b:ea:ec:27:f6:c4:8c:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBFE4CA91514CAC61F1B83534BB158D90BDD4142 Validity Not Before: Sep 3 06:46:09 2026 GMT Not After : Sep 4 06:59:09 2026 GMT Subject: CN=A2DF10B5A53E02D576D7180C1391BC66F333C2FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:42:b7:fd:d0:af:78:57:e9:f0:2d:d2:6a:9e: c8:b4:b2:8b:02:7e:72:7e:6b:fb:7a:6c:44:80:f3: c4:6b:7e:5f:61:bf:c6:0b:70:b0:14:f0:7f:bd:cf: 97:ec:70:6d:06:b5:53:20:13:dd:49:90:83:2b:0d: 6c:cb:ff:37:f5:36:ae:48:80:66:2c:d5:e0:a2:91: 70:6e:f5:46:83:bb:df:ca:6b:18:50:b4:87:e3:41: 60:fc:c9:5b:3f:09:54:8e:c5:4e:2d:7e:c9:7e:e5: ad:ad:2f:39:f6:28:51:0b:49:53:3b:5c:7d:87:34: 54:d3:73:1b:8b:61:48:13:97:45:f4:ed:76:c0:8d: 2b:44:45:cd:a2:31:65:82:8f:5a:80:c1:47:86:37: 9e:a0:35:42:37:79:ae:99:90:bc:51:f9:3a:ec:22: 08:fa:36:6d:2b:d1:06:c4:1c:13:15:fa:aa:e1:b3: c7:ba:26:c6:f6:ef:f8:f5:0e:bb:19:cd:7e:ad:88: 97:41:51:ec:0f:6a:7f:90:8f:17:f2:23:da:c8:92: 8f:50:5b:b3:d3:75:56:81:c3:1f:b4:31:af:49:2e: 39:f2:de:34:10:c1:93:6f:51:e0:f0:39:3b:bd:14: 86:80:cf:a7:0c:1a:58:0f:c6:f2:0d:b2:f6:45:74: 65:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:DF:10:B5:A5:3E:02:D5:76:D7:18:0C:13:91:BC:66:F3:33:C2:FB X509v3 Authority Key Identifier: keyid:EB:FE:4C:A9:15:14:CA:C6:1F:1B:83:53:4B:B1:58:D9:0B:DD:41:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be0cb630-636a-4b6a-93df-b5d908fe6ee7/0/EBFE4CA91514CAC61F1B83534BB158D90BDD4142.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:f7:ed:58:cd:ee:48:bd:cd:96:74:7b:30:0c:68:46:0d:87: 9c:20:c1:42:06:a8:1c:aa:81:25:1d:fb:e7:62:dc:e3:bf:7b: 41:29:37:af:ca:a4:87:7a:4e:ac:87:09:61:70:4e:87:be:84: 3a:0f:b1:f3:33:24:e1:b6:47:04:41:d4:7c:2e:fd:67:ff:ef: 64:3c:49:52:91:fd:06:b2:88:06:06:9a:8f:8d:bd:f4:56:dd: 52:12:42:7b:0b:fe:b1:0b:f4:34:dc:14:d8:4a:9f:0b:11:ce: 47:52:12:a6:49:3b:86:49:b3:0b:f6:71:27:19:43:9c:5b:10: 2f:b6:0e:fb:6f:e8:ed:40:fd:d5:96:b3:cb:6e:15:37:91:8c: 73:d7:e0:1e:bf:9f:dc:3c:f7:22:fc:9e:2a:5b:c4:57:c7:ae: 2e:89:e0:68:db:84:66:71:ac:78:65:81:43:6b:aa:0f:8a:2c: be:7d:71:da:e1:72:9f:cc:20:0d:27:b1:8f:f4:41:83:7f:95: 63:07:f1:58:e3:3f:5b:fd:49:2c:7e:f2:7e:1c:1d:eb:7f:f2: ea:e3:43:bf:fa:b3:4b:f3:7a:e1:a4:cc:cf:0e:0d:c6:4b:75: ec:fb:ce:02:ab:aa:c2:18:4e:93:4b:67:cd:95:1b:25:a6:19: 14:01:39:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJAGy6w1LlORsQUNXm+rsJ/bEjHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJGRTRDQTkxNTE0Q0FDNjFGMUI4MzUzNEJCMTU4RDkw QkRENDE0MjAeFw0yNjA5MDMwNjQ2MDlaFw0yNjA5MDQwNjU5MDlaMDMxMTAvBgNV BAMTKEEyREYxMEI1QTUzRTAyRDU3NkQ3MTgwQzEzOTFCQzY2RjMzM0MyRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaQrf90K94V+nwLdJqnsi0sosC fnJ+a/t6bESA88Rrfl9hv8YLcLAU8H+9z5fscG0GtVMgE91JkIMrDWzL/zf1Nq5I gGYs1eCikXBu9UaDu9/KaxhQtIfjQWD8yVs/CVSOxU4tfsl+5a2tLzn2KFELSVM7 XH2HNFTTcxuLYUgTl0X07XbAjStERc2iMWWCj1qAwUeGN56gNUI3ea6ZkLxR+Trs Igj6Nm0r0QbEHBMV+qrhs8e6Jsb27/j1DrsZzX6tiJdBUewPan+QjxfyI9rIko9Q W7PTdVaBwx+0Ma9JLjny3jQQwZNvUeDwOTu9FIaAz6cMGlgPxvINsvZFdGXLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUot8QtaU+AtV21xgME5G8ZvMzwvswHwYDVR0j BBgwFoAU6/5MqRUUysYfG4NTS7FY2QvdQUIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmUwY2I2MzAtNjM2YS00YjZhLTkzZGYtYjVkOTA4ZmU2ZWU3LzAvRUJGRTRDQTkx NTE0Q0FDNjFGMUI4MzUzNEJCMTU4RDkwQkRENDE0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQkZFNENBOTE1MTRDQUM2MUYxQjgzNTM0QkIxNThEOTBCREQ0 MTQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmUwY2I2MzAtNjM2YS00YjZhLTkz ZGYtYjVkOTA4ZmU2ZWU3LzAvRUJGRTRDQTkxNTE0Q0FDNjFGMUI4MzUzNEJCMTU4 RDkwQkRENDE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADz37VjN7ki9zZZ0ezAMaEYNh5wgwUIGqByq gSUd++di3OO/e0EpN6/KpId6TqyHCWFwToe+hDoPsfMzJOG2RwRB1Hwu/Wf/72Q8 SVKR/QayiAYGmo+NvfRW3VISQnsL/rEL9DTcFNhKnwsRzkdSEqZJO4ZJswv2cScZ Q5xbEC+2Dvtv6O1A/dWWs8tuFTeRjHPX4B6/n9w89yL8nipbxFfHri6J4GjbhGZx rHhlgUNrqg+KLL59cdrhcp/MIA0nsY/0QYN/lWMH8VjjP1v9SSx+8n4cHet/8urj Q7/6s0vzeuGkzM8ODcZLdez7zgKrqsIYTpNLZ82VGyWmGRQBOQE= -----END CERTIFICATE-----Generated at Thu Sep 3 12:41:14 2026 by rpki-client