$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.mft File: EBF23572810F8726C4B72E50589964A910C50B4B.mft (raw, json) Hash identifier: JREa8Vpaxxz+WdDzs3d1f5Zerc5f/0VMcuTA3F4QWiE= Subject key identifier: 05:68:57:79:DD:71:2B:F2:A8:FB:9C:3E:89:F5:E2:68:73:99:C1:4E Authority key identifier: EB:F2:35:72:81:0F:87:26:C4:B7:2E:50:58:99:64:A9:10:C5:0B:4B Certificate issuer: /CN=EBF23572810F8726C4B72E50589964A910C50B4B Certificate serial: 20355EC3B70F69D8C97949F6FECA28D9B0C515E8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBF23572810F8726C4B72E50589964A910C50B4B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.mft Manifest number: A4 Signing time: Wed 02 Sep 2026 11:27:35 +0000 Manifest this update: Wed 02 Sep 2026 11:22:35 +0000 Manifest next update: Thu 03 Sep 2026 13:11:35 +0000 Files and hashes: 1: EBF23572810F8726C4B72E50589964A910C50B4B.crl (hash: dgep9l22KfANH46+45Q5tggeXAw3wOvbbg9STwoADg8=) 2: 3131332e3231322e3136302e302f32312d3234203d3e203435323935.roa (hash: sfi5wZHa7EFMZctUVQihd5OvgHWotWx/JrU33FAshF0=) 3: 323430373a343630303a3a2f33322d3438203d3e203435323935.roa (hash: pwFWQeeNE8aLdvpKEf3Cftf5A02g3uDsYu8O+3yCUbE=) 4: 3130332e3135312e39322e302f32332d3234203d3e203435323935.roa (hash: l97XL+b3anmLCwyyq3iPYCEWOtlJt1r4AiG3G4acaMc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.crl rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBF23572810F8726C4B72E50589964A910C50B4B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 13:11:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:35:5e:c3:b7:0f:69:d8:c9:79:49:f6:fe:ca:28:d9:b0:c5:15:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBF23572810F8726C4B72E50589964A910C50B4B Validity Not Before: Sep 2 11:22:35 2026 GMT Not After : Sep 3 13:11:35 2026 GMT Subject: CN=05685779DD712BF2A8FB9C3E89F5E2687399C14E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8e:9b:53:af:ff:56:42:93:13:47:b8:bf:a4: b6:03:dd:91:d7:70:8c:ee:8a:88:b9:99:c3:93:71: 03:6c:49:0e:42:94:fb:9d:a1:3b:cd:c0:10:18:3d: 20:f9:29:bf:93:30:1b:bd:a8:ca:51:48:00:8c:9d: 76:bb:af:20:94:54:98:88:6b:ce:3e:0b:29:ae:a8: 6c:c2:cb:b7:b9:64:a5:74:11:e0:12:55:44:36:40: e1:9f:8e:5c:8f:5e:f1:e3:04:68:06:16:e5:b1:a2: 11:69:bf:8c:c9:49:be:1e:ad:44:a0:d5:d8:a0:7a: 40:cf:65:07:1a:d4:92:85:7a:0e:59:ca:ab:df:ee: 8c:a0:71:47:1b:88:31:fe:6c:71:5c:e7:36:f1:6c: b7:01:d5:93:05:19:4e:6d:45:46:23:01:e3:06:70: 34:a5:70:95:a7:f7:64:5f:7b:d6:4a:bd:c5:f6:f8: 60:93:e1:78:45:ca:6b:f8:30:0c:68:75:2c:ba:cb: 0c:84:8e:f2:e4:51:21:8a:d9:46:8a:0c:ff:8d:e3: 87:8c:05:a4:18:aa:ba:bd:57:eb:10:cd:cf:02:db: 25:91:33:b5:ba:0f:4f:69:56:62:a3:f9:8f:0c:0b: b6:20:92:4d:b7:3f:11:12:59:a6:d2:3e:30:62:07: 41:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:68:57:79:DD:71:2B:F2:A8:FB:9C:3E:89:F5:E2:68:73:99:C1:4E X509v3 Authority Key Identifier: keyid:EB:F2:35:72:81:0F:87:26:C4:B7:2E:50:58:99:64:A9:10:C5:0B:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBF23572810F8726C4B72E50589964A910C50B4B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/EBF23572810F8726C4B72E50589964A910C50B4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:cf:66:c0:8f:0d:0e:f1:55:5d:42:1d:ef:72:74:61:c2:18: 04:88:4d:b2:c3:1e:fa:d1:26:aa:2d:7f:6c:d5:a0:16:28:08: 26:ec:dc:1e:58:52:c6:b5:75:30:1f:f9:1b:66:28:e7:56:9c: 48:9a:dd:26:86:c8:e9:f2:2b:ea:f8:e7:ab:6e:33:15:82:5d: 88:6e:1b:93:c5:0a:89:de:f5:7a:49:72:24:f8:77:09:14:0f: 43:27:df:94:55:a2:bb:52:25:3e:6a:b8:0a:c0:d4:2f:de:74: 99:d9:bb:f3:80:86:f9:c1:e5:03:5f:18:a4:1e:ca:fe:1c:c5: 3f:08:45:88:ba:ee:25:95:dd:8f:72:6d:9e:9b:72:1d:08:41: 82:7f:74:64:9d:47:d0:7f:26:79:9a:3a:0d:22:a0:7a:6a:e8: d7:4f:c6:f2:ad:c6:4b:a2:d7:0a:75:41:20:f5:91:e6:6a:97: 48:93:bf:e8:70:3b:3a:ce:97:b9:eb:07:f9:8a:be:a5:26:a3: 86:e3:b4:6c:42:e5:71:99:51:33:1a:b4:d6:e5:98:c0:bd:c7: de:06:0a:1c:52:0d:7c:cc:69:1d:d4:8d:da:24:6d:16:c6:d7: 02:6a:9e:fa:52:f8:08:03:ff:e6:d2:da:a8:e4:09:0f:b1:84: 47:8e:7b:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIDVew7cPadjJeUn2/soo2bDFFegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJGMjM1NzI4MTBGODcyNkM0QjcyRTUwNTg5OTY0QTkx MEM1MEI0QjAeFw0yNjA5MDIxMTIyMzVaFw0yNjA5MDMxMzExMzVaMDMxMTAvBgNV BAMTKDA1Njg1Nzc5REQ3MTJCRjJBOEZCOUMzRTg5RjVFMjY4NzM5OUMxNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpjptTr/9WQpMTR7i/pLYD3ZHX cIzuioi5mcOTcQNsSQ5ClPudoTvNwBAYPSD5Kb+TMBu9qMpRSACMnXa7ryCUVJiI a84+CymuqGzCy7e5ZKV0EeASVUQ2QOGfjlyPXvHjBGgGFuWxohFpv4zJSb4erUSg 1digekDPZQca1JKFeg5Zyqvf7oygcUcbiDH+bHFc5zbxbLcB1ZMFGU5tRUYjAeMG cDSlcJWn92Rfe9ZKvcX2+GCT4XhFymv4MAxodSy6ywyEjvLkUSGK2UaKDP+N44eM BaQYqrq9V+sQzc8C2yWRM7W6D09pVmKj+Y8MC7Ygkk23PxESWabSPjBiB0FZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBWhXed1xK/Ko+5w+ifXiaHOZwU4wHwYDVR0j BBgwFoAU6/I1coEPhybEty5QWJlkqRDFC0swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDRmNDhhODktOTBjNS00ZjVhLTgwMTUtMzZmMTE5NmE3MWM4LzAvRUJGMjM1NzI4 MTBGODcyNkM0QjcyRTUwNTg5OTY0QTkxMEM1MEI0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQkYyMzU3MjgxMEY4NzI2QzRCNzJFNTA1ODk5NjRBOTEwQzUw QjRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDRmNDhhODktOTBjNS00ZjVhLTgw MTUtMzZmMTE5NmE3MWM4LzAvRUJGMjM1NzI4MTBGODcyNkM0QjcyRTUwNTg5OTY0 QTkxMEM1MEI0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAHPZsCPDQ7xVV1CHe9ydGHCGASITbLDHvrR Jqotf2zVoBYoCCbs3B5YUsa1dTAf+RtmKOdWnEia3SaGyOnyK+r456tuMxWCXYhu G5PFCone9XpJciT4dwkUD0Mn35RVortSJT5quArA1C/edJnZu/OAhvnB5QNfGKQe yv4cxT8IRYi67iWV3Y9ybZ6bch0IQYJ/dGSdR9B/JnmaOg0ioHpq6NdPxvKtxkui 1wp1QSD1keZql0iTv+hwOzrOl7nrB/mKvqUmo4bjtGxC5XGZUTMatNblmMC9x94G ChxSDXzMaR3UjdokbRbG1wJqnvpS+AgD/+bS2qjkCQ+xhEeOe5w= -----END CERTIFICATE-----Generated at Thu Sep 3 05:59:24 2026 by rpki-client