$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.mft File: EB314E0C129A5CAF077447531422664A0DBA21EB.mft (raw, json) Hash identifier: DQfuzSQ6WrgV0bbHRRbvYeXu+xJJg5Pejayzs5wIBiU= Subject key identifier: 6A:B7:96:F1:1E:A2:30:1C:E5:A6:F5:3D:50:2C:7B:AA:2C:12:9E:23 Authority key identifier: EB:31:4E:0C:12:9A:5C:AF:07:74:47:53:14:22:66:4A:0D:BA:21:EB Certificate issuer: /CN=EB314E0C129A5CAF077447531422664A0DBA21EB Certificate serial: 543AE4CB71DB76F26F44BC4C3AD493860E2E744C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB314E0C129A5CAF077447531422664A0DBA21EB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.mft Manifest number: F3 Signing time: Sun 01 Nov 2026 12:53:23 +0000 Manifest this update: Sun 01 Nov 2026 12:48:23 +0000 Manifest next update: Mon 02 Nov 2026 13:35:23 +0000 Files and hashes: 1: 3130332e34392e3233302e302f32342d3234203d3e203633383638.roa (hash: XZkVD58+fA+9TgN/E8SS+oOsYxABbo9pdQXTqmdzBkg=) 2: 3130332e34392e3233312e302f32342d3234203d3e203633383638.roa (hash: Y2m4R38G71C4Yy/wcE7dbb3Q4JyEjJy1AWb7+OggzPM=) 3: EB314E0C129A5CAF077447531422664A0DBA21EB.crl (hash: FQkM3U1spKX/HFVKB/Fn7ZETQji12bPQMUOfsdNJ97Q=) 4: 3130332e34392e3232382e302f32342d3234203d3e203633383638.roa (hash: un5/MncOqw/wwzU2UuxhsRYNEiAYmLczzv4yniu8AsM=) 5: 3130332e34392e3232392e302f32342d3234203d3e203633383638.roa (hash: A5PltxTRAuGwKx7Z5AFNGaTklePgssNYT6aD4qcBx0s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.crl rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB314E0C129A5CAF077447531422664A0DBA21EB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 13:35:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:3a:e4:cb:71:db:76:f2:6f:44:bc:4c:3a:d4:93:86:0e:2e:74:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB314E0C129A5CAF077447531422664A0DBA21EB Validity Not Before: Nov 1 12:48:23 2026 GMT Not After : Nov 2 13:35:23 2026 GMT Subject: CN=6AB796F11EA2301CE5A6F53D502C7BAA2C129E23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:01:95:5e:5c:48:f9:cf:a8:61:ba:58:7d:ca: 7e:5f:75:e1:99:04:6f:e0:a5:96:b9:ae:9f:ee:1a: 1d:d2:b0:45:54:0a:87:7b:b0:de:96:93:77:63:dc: 13:7e:f3:af:5a:0f:f7:02:05:f9:3c:8b:40:ed:94: f8:93:fc:2b:82:5b:ec:ad:85:de:81:e7:ae:ae:1b: 46:6b:a2:31:a7:51:7c:8d:ca:bb:61:05:82:c0:af: 34:7a:9c:75:33:0b:da:37:0b:c4:c2:2d:1d:2d:1a: ff:5d:35:33:1d:7c:18:1d:70:31:cd:64:ef:67:61: 27:44:b4:a8:11:41:91:66:c4:13:36:3e:78:99:81: 3f:6c:4b:82:b9:4f:48:a5:f8:94:a0:71:81:d4:56: 48:ef:3a:40:99:83:97:be:84:83:55:3a:4a:6b:1f: e2:c4:4f:41:89:7c:95:06:16:f1:02:9f:a4:f3:aa: bc:eb:fe:e1:c0:74:21:ad:9f:34:30:dd:0b:03:f8: 31:09:7b:70:a0:66:1c:a2:c8:0a:40:50:f4:d1:c4: c6:ab:e8:e0:4a:de:21:33:11:a4:1d:10:6f:1c:f2: 18:b8:ae:1e:84:ff:9c:d5:b1:78:b5:81:3c:d0:f3: 2c:5d:e1:4a:62:39:44:65:e7:ae:64:be:ce:dd:bd: 6d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B7:96:F1:1E:A2:30:1C:E5:A6:F5:3D:50:2C:7B:AA:2C:12:9E:23 X509v3 Authority Key Identifier: keyid:EB:31:4E:0C:12:9A:5C:AF:07:74:47:53:14:22:66:4A:0D:BA:21:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB314E0C129A5CAF077447531422664A0DBA21EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/EB314E0C129A5CAF077447531422664A0DBA21EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:80:57:c6:ce:db:1e:1b:22:6f:11:51:58:66:4c:4e:ad:33: 8b:35:22:30:0e:bd:0f:37:d7:67:64:ba:9d:24:ea:47:d3:9d: 78:8b:3b:74:a8:7d:60:bc:b7:ed:6a:ab:96:ab:56:7d:4b:6b: 1e:ea:4c:a1:4a:37:09:34:27:c4:80:51:d0:ad:2d:7a:36:9e: 84:37:63:e3:e2:04:9c:4c:88:ff:8f:14:45:db:23:8e:fa:5e: f4:85:94:74:4a:e7:55:0f:b7:64:c2:31:a9:d0:d4:af:b9:d2: cd:2c:07:9e:5d:1a:6c:fd:87:12:f8:11:ce:b5:4f:04:e3:6c: 5d:3d:df:12:ca:24:40:f2:1c:87:ec:29:a7:c2:81:49:9a:67: eb:72:8c:5a:78:41:de:1b:f9:97:25:84:94:16:86:06:6e:a1: b3:1d:8f:7b:87:00:7e:c2:64:bf:23:4d:b9:33:ad:4e:78:08: 04:41:b4:c7:e1:de:e8:02:63:fa:71:9d:62:59:d9:03:65:94: 71:70:00:f4:dc:c3:cb:b9:2d:97:69:e9:ca:c8:7f:3f:f6:ff: fa:ed:c0:99:30:28:b7:12:de:67:ee:05:b5:7f:62:e8:40:bd: 01:cc:68:f2:2e:94:59:a5:e3:2c:c2:d8:5f:2f:1c:7d:69:29: 69:76:b2:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVDrky3HbdvJvRLxMOtSThg4udEwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUIzMTRFMEMxMjlBNUNBRjA3NzQ0NzUzMTQyMjY2NEEw REJBMjFFQjAeFw0yNjExMDExMjQ4MjNaFw0yNjExMDIxMzM1MjNaMDMxMTAvBgNV BAMTKDZBQjc5NkYxMUVBMjMwMUNFNUE2RjUzRDUwMkM3QkFBMkMxMjlFMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOAZVeXEj5z6hhulh9yn5fdeGZ BG/gpZa5rp/uGh3SsEVUCod7sN6Wk3dj3BN+869aD/cCBfk8i0DtlPiT/CuCW+yt hd6B566uG0ZrojGnUXyNyrthBYLArzR6nHUzC9o3C8TCLR0tGv9dNTMdfBgdcDHN ZO9nYSdEtKgRQZFmxBM2PniZgT9sS4K5T0il+JSgcYHUVkjvOkCZg5e+hINVOkpr H+LET0GJfJUGFvECn6Tzqrzr/uHAdCGtnzQw3QsD+DEJe3CgZhyiyApAUPTRxMar 6OBK3iEzEaQdEG8c8hi4rh6E/5zVsXi1gTzQ8yxd4UpiOURl565kvs7dvW19AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUareW8R6iMBzlpvU9UCx7qiwSniMwHwYDVR0j BBgwFoAU6zFODBKaXK8HdEdTFCJmSg26IeswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDM3MTkyOWQtYzNkMC00ZGFhLWI1ZmQtYTI0OTU2MGQ1ZDA0LzAvRUIzMTRFMEMx MjlBNUNBRjA3NzQ0NzUzMTQyMjY2NEEwREJBMjFFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQjMxNEUwQzEyOUE1Q0FGMDc3NDQ3NTMxNDIyNjY0QTBEQkEy MUVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDM3MTkyOWQtYzNkMC00ZGFhLWI1 ZmQtYTI0OTU2MGQ1ZDA0LzAvRUIzMTRFMEMxMjlBNUNBRjA3NzQ0NzUzMTQyMjY2 NEEwREJBMjFFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFmAV8bO2x4bIm8RUVhmTE6tM4s1IjAOvQ83 12dkup0k6kfTnXiLO3SofWC8t+1qq5arVn1Lax7qTKFKNwk0J8SAUdCtLXo2noQ3 Y+PiBJxMiP+PFEXbI476XvSFlHRK51UPt2TCManQ1K+50s0sB55dGmz9hxL4Ec61 TwTjbF093xLKJEDyHIfsKafCgUmaZ+tyjFp4Qd4b+ZclhJQWhgZuobMdj3uHAH7C ZL8jTbkzrU54CARBtMfh3ugCY/pxnWJZ2QNllHFwAPTcw8u5LZdp6crIfz/2//rt wJkwKLcS3mfuBbV/YuhAvQHMaPIulFml4yzC2F8vHH1pKWl2sjw= -----END CERTIFICATE-----Generated at Mon Nov 2 07:03:56 2026 by rpki-client