$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.mft File: EBA1F4874C4867D2CAA214867052E9413088CD22.mft (raw, json) Hash identifier: H8SXtxu9IkUc7uZkFCC838dyDJOsRjklKA8wwwbJLkQ= Subject key identifier: 8E:20:34:F5:0C:27:84:B4:69:36:11:79:58:E7:DD:CA:8E:38:C2:3A Authority key identifier: EB:A1:F4:87:4C:48:67:D2:CA:A2:14:86:70:52:E9:41:30:88:CD:22 Certificate issuer: /CN=EBA1F4874C4867D2CAA214867052E9413088CD22 Certificate serial: 16D9B7C3A78BDDC62C6FFA2D839EB35C7C8146F4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EBA1F4874C4867D2CAA214867052E9413088CD22.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 08:13:34 +0000 Manifest this update: Wed 04 Nov 2026 08:08:34 +0000 Manifest next update: Thu 05 Nov 2026 11:47:34 +0000 Files and hashes: 1: 3136302e31392e3230362e302f32342d3234203d3e20313532373634.roa (hash: rkfIQLZH91MBngOR2XF3JSvb0x7kp9rSE9FoBc2wVuU=) 2: 3136302e31392e3230372e302f32342d3234203d3e20313532373634.roa (hash: Rsj+zG8fTbANuQe+LowjpWqzpy4Nr2I6Rkz77sVkBRk=) 3: EBA1F4874C4867D2CAA214867052E9413088CD22.crl (hash: ITv2XOTcxSopz3z03XYCQZB4JbMv97OhtLVFPK7BxeM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.crl rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EBA1F4874C4867D2CAA214867052E9413088CD22.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 11:47:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:d9:b7:c3:a7:8b:dd:c6:2c:6f:fa:2d:83:9e:b3:5c:7c:81:46:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBA1F4874C4867D2CAA214867052E9413088CD22 Validity Not Before: Nov 4 08:08:34 2026 GMT Not After : Nov 5 11:47:34 2026 GMT Subject: CN=8E2034F50C2784B46936117958E7DDCA8E38C23A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:d3:69:77:31:3a:5c:ab:82:4c:65:df:2c:0c: 37:3b:28:d6:c9:cf:84:f6:f9:69:f2:c1:6a:d8:92: 4a:59:01:e7:da:96:04:a3:93:81:49:23:ed:b0:6d: 44:b9:2a:e8:46:1c:30:79:ef:2c:06:c2:e7:a4:60: 0e:9d:29:99:a8:b2:2e:19:31:0c:3a:ae:3b:79:ed: a4:2b:81:a2:60:a1:f4:1a:90:74:63:97:af:e2:7b: a3:97:7e:67:96:3a:bb:59:0e:ec:0c:44:c0:5e:a9: ef:91:2d:52:09:b9:e9:75:e0:de:e7:bf:57:97:d5: 69:f0:40:e5:ba:5f:fd:6e:85:7d:e7:0c:0e:d5:a3: 5d:b7:9c:f9:3e:59:69:0a:2a:22:42:6a:0f:90:94: f0:2a:ea:2b:a2:90:9c:34:c4:d7:aa:26:86:c1:47: e3:05:1d:07:f3:29:87:f2:e8:20:b6:ab:00:77:6c: 8a:8c:61:f9:8d:b9:7e:81:11:9b:57:9c:01:e1:ad: 17:b4:60:e2:80:6d:b0:0b:cc:1f:a0:49:ee:02:a0: 3e:16:09:4c:4b:b0:85:5d:db:5a:71:b4:d2:c8:53: 50:cf:a2:0f:14:ac:f0:49:75:e8:4d:e4:21:ea:12: 8a:fc:32:ac:b1:53:cb:ed:16:6d:ed:dc:47:1d:fd: a1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:20:34:F5:0C:27:84:B4:69:36:11:79:58:E7:DD:CA:8E:38:C2:3A X509v3 Authority Key Identifier: keyid:EB:A1:F4:87:4C:48:67:D2:CA:A2:14:86:70:52:E9:41:30:88:CD:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EBA1F4874C4867D2CAA214867052E9413088CD22.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/EBA1F4874C4867D2CAA214867052E9413088CD22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:e4:6d:a4:f4:38:da:4e:a8:63:c3:f9:db:ab:44:16:9f:51: 3d:01:38:14:93:32:31:1b:36:3e:02:2e:07:c0:02:d9:7a:b8: 5e:2e:81:d5:86:2d:c1:7a:cf:af:39:fa:f5:f9:76:75:ed:29: 72:e8:81:74:b9:74:9d:fd:96:dc:9d:82:f6:33:7c:be:a8:49: f0:eb:3f:e4:0b:03:77:67:aa:fb:05:6f:86:ea:0b:38:ab:14: 57:d3:2c:86:e2:88:0e:73:49:79:54:e2:0c:ea:75:29:57:7c: e3:c6:06:f2:99:5b:d6:33:4d:e5:af:fe:d1:d9:30:1c:df:0f: 0a:86:5e:2b:24:85:86:2e:26:0c:83:7e:75:06:2b:68:10:41: 1b:3b:03:81:1f:d7:44:d8:7b:96:65:fa:bf:b5:65:42:d5:e2: 54:8c:4f:d2:52:3d:bf:86:eb:01:df:12:00:b3:b6:d2:04:55: 06:99:91:a6:a1:15:b7:4c:d1:fb:56:ef:67:71:77:1a:03:6f: d0:05:bf:42:2d:4b:eb:f5:f7:cc:60:06:c4:4a:21:8d:78:70: 3b:22:e7:58:8e:34:8a:bd:0c:28:4d:50:1b:02:26:e5:8f:19: 55:34:b1:39:a7:a2:d8:3e:8a:2d:35:0a:fc:84:90:84:17:f3: f5:b1:2a:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFtm3w6eL3cYsb/otg56zXHyBRvQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJBMUY0ODc0QzQ4NjdEMkNBQTIxNDg2NzA1MkU5NDEz MDg4Q0QyMjAeFw0yNjExMDQwODA4MzRaFw0yNjExMDUxMTQ3MzRaMDMxMTAvBgNV BAMTKDhFMjAzNEY1MEMyNzg0QjQ2OTM2MTE3OTU4RTdERENBOEUzOEMyM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz02l3MTpcq4JMZd8sDDc7KNbJ z4T2+WnywWrYkkpZAefalgSjk4FJI+2wbUS5KuhGHDB57ywGwuekYA6dKZmosi4Z MQw6rjt57aQrgaJgofQakHRjl6/ie6OXfmeWOrtZDuwMRMBeqe+RLVIJuel14N7n v1eX1WnwQOW6X/1uhX3nDA7Vo123nPk+WWkKKiJCag+QlPAq6iuikJw0xNeqJobB R+MFHQfzKYfy6CC2qwB3bIqMYfmNuX6BEZtXnAHhrRe0YOKAbbALzB+gSe4CoD4W CUxLsIVd21pxtNLIU1DPog8UrPBJdehN5CHqEor8MqyxU8vtFm3t3Ecd/aHBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjiA09QwnhLRpNhF5WOfdyo44wjowHwYDVR0j BBgwFoAU66H0h0xIZ9LKohSGcFLpQTCIzSIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2IyYTkxNmEtYWQyMi00OTc5LWJlNDMtOTUxYzc2ZjJmOTIwLzAvRUJBMUY0ODc0 QzQ4NjdEMkNBQTIxNDg2NzA1MkU5NDEzMDg4Q0QyMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQkExRjQ4NzRDNDg2N0QyQ0FBMjE0ODY3MDUyRTk0MTMwODhD RDIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2IyYTkxNmEtYWQyMi00OTc5LWJl NDMtOTUxYzc2ZjJmOTIwLzAvRUJBMUY0ODc0QzQ4NjdEMkNBQTIxNDg2NzA1MkU5 NDEzMDg4Q0QyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHbkbaT0ONpOqGPD+durRBafUT0BOBSTMjEb Nj4CLgfAAtl6uF4ugdWGLcF6z685+vX5dnXtKXLogXS5dJ39ltydgvYzfL6oSfDr P+QLA3dnqvsFb4bqCzirFFfTLIbiiA5zSXlU4gzqdSlXfOPGBvKZW9YzTeWv/tHZ MBzfDwqGXiskhYYuJgyDfnUGK2gQQRs7A4Ef10TYe5Zl+r+1ZULV4lSMT9JSPb+G 6wHfEgCzttIEVQaZkaahFbdM0ftW72dxdxoDb9AFv0ItS+v198xgBsRKIY14cDsi 51iONIq9DChNUBsCJuWPGVU0sTmnotg+ii01CvyEkIQX8/WxKrg= -----END CERTIFICATE-----Generated at Wed Nov 4 19:11:17 2026 by rpki-client