$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.mft File: 1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.mft (raw, json) Hash identifier: zIBI07F+dqDRoBIjvzTScw5KPfTZejXMYHgc2DVv954= Subject key identifier: FC:C0:52:53:C2:EE:1F:99:AA:38:92:32:5F:0F:25:9E:66:3F:45:26 Authority key identifier: 1E:BB:23:22:03:FD:54:32:F4:FF:5F:50:C7:CA:7F:67:25:52:ED:3F Certificate issuer: /CN=1EBB232203FD5432F4FF5F50C7CA7F672552ED3F Certificate serial: 0FB41C5E37DE48F87A3757DDA66A516BF0141242 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 23:52:53 +0000 Manifest this update: Wed 02 Sep 2026 23:47:53 +0000 Manifest next update: Fri 04 Sep 2026 02:11:53 +0000 Files and hashes: 1: 3130332e31302e3134342e302f32342d3234203d3e203436303537.roa (hash: jBCASy1F6Hwq7/RSM0DnwGAyM9nsMAfX8PewBvtkG60=) 2: 3230322e35322e35322e302f32342d3234203d3e203436303537.roa (hash: B12SJCFtXXNNoUXjwCcqgBMFjVn7huHWD2lTe7WyRQA=) 3: 1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.crl (hash: urXy0t8/mex+nHXwo2YaoKodcbkbyp9cTqyYoaAPPwU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.crl rsync://rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 02:11:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:b4:1c:5e:37:de:48:f8:7a:37:57:dd:a6:6a:51:6b:f0:14:12:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EBB232203FD5432F4FF5F50C7CA7F672552ED3F Validity Not Before: Sep 2 23:47:53 2026 GMT Not After : Sep 4 02:11:53 2026 GMT Subject: CN=FCC05253C2EE1F99AA3892325F0F259E663F4526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:42:aa:80:1a:6c:4b:38:65:a0:01:4f:a4:28: 04:14:47:f0:9c:52:c6:b3:b5:50:8e:3b:4f:44:15: 68:d1:a3:5f:82:55:ba:44:37:95:e7:e1:a7:74:6c: 01:ea:00:38:e3:a6:15:2e:f7:d8:17:4f:05:1b:91: e0:c0:7b:7d:f0:e5:69:88:c0:d6:ce:84:a8:0e:2d: 35:31:a4:a9:aa:b6:7f:67:26:78:99:54:a3:93:39: e2:1d:03:43:22:ee:4e:e8:6b:96:6c:d7:46:35:4a: df:c8:52:47:f5:e1:48:3f:00:88:0c:59:6a:7c:b5: e8:66:e8:6c:c3:f4:fc:63:53:a8:49:f1:5c:a9:e4: e9:fe:7f:27:dd:ee:59:e9:15:38:da:30:59:97:9b: 40:0f:db:a8:a7:4b:e2:0d:03:ec:b6:b7:14:3a:03: 44:6e:5f:c9:9a:2a:c4:6d:d4:3a:de:c3:cf:97:6b: b4:58:79:81:2d:b8:cd:54:31:5d:cc:07:7c:f1:84: f3:07:ec:12:0f:fc:ed:bf:6e:5d:f0:13:e5:11:fc: 86:9e:3c:dc:8d:8c:27:f8:87:bc:54:54:a9:86:28: 54:dc:4a:8a:23:16:b4:f9:ca:e2:c4:f5:20:c5:b4: e3:57:3e:73:64:90:af:86:61:23:09:db:29:a0:d2: 54:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C0:52:53:C2:EE:1F:99:AA:38:92:32:5F:0F:25:9E:66:3F:45:26 X509v3 Authority Key Identifier: keyid:1E:BB:23:22:03:FD:54:32:F4:FF:5F:50:C7:CA:7F:67:25:52:ED:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/1EBB232203FD5432F4FF5F50C7CA7F672552ED3F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:8c:e0:d1:02:38:ff:e0:77:32:10:8a:5a:dc:e7:0d:3b:48: 96:8f:5c:4d:7b:35:d4:75:67:96:aa:3e:e3:1b:3e:1a:73:35: 88:b3:b3:3a:b5:74:c1:c4:c7:75:4c:6b:fc:c2:e3:ee:39:33: 7e:e1:73:51:0f:42:51:73:7e:ec:4f:46:60:4b:62:b4:af:b6: 57:b9:43:7a:0d:9a:d1:d6:46:43:44:6a:2d:b5:4e:76:09:61: 69:cd:94:af:f7:1d:1d:ac:ba:4c:c2:59:3a:64:c7:e9:3d:70: 1b:cc:0a:4f:32:03:49:be:5f:bb:f9:66:b7:af:c8:30:3a:f6: db:12:3e:25:db:b5:34:df:63:d9:c5:42:ce:2f:64:40:b3:9a: 8c:6c:2f:42:bd:2a:04:e9:67:22:cc:a2:b5:44:b9:4e:4c:37: c5:26:06:1c:5c:8d:2e:cb:53:6c:1c:54:eb:e7:fe:27:4e:3e: 89:21:9d:54:e9:53:65:34:30:ff:30:82:de:7f:38:c1:83:04: 02:c8:09:51:f7:52:1c:d5:c4:49:2d:f2:82:35:b2:9d:fb:9c: ed:5e:db:4c:5f:5e:3c:ab:a7:67:f0:d3:a7:e5:b3:ef:1b:e1: f8:8e:0a:ec:36:39:c3:b3:df:38:48:2f:51:71:42:61:22:76: e5:5c:75:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD7QcXjfeSPh6N1fdpmpRa/AUEkIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVCQjIzMjIwM0ZENTQzMkY0RkY1RjUwQzdDQTdGNjcy NTUyRUQzRjAeFw0yNjA5MDIyMzQ3NTNaFw0yNjA5MDQwMjExNTNaMDMxMTAvBgNV BAMTKEZDQzA1MjUzQzJFRTFGOTlBQTM4OTIzMjVGMEYyNTlFNjYzRjQ1MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWQqqAGmxLOGWgAU+kKAQUR/Cc UsaztVCOO09EFWjRo1+CVbpEN5Xn4ad0bAHqADjjphUu99gXTwUbkeDAe33w5WmI wNbOhKgOLTUxpKmqtn9nJniZVKOTOeIdA0Mi7k7oa5Zs10Y1St/IUkf14Ug/AIgM WWp8tehm6GzD9PxjU6hJ8Vyp5On+fyfd7lnpFTjaMFmXm0AP26inS+INA+y2txQ6 A0RuX8maKsRt1Drew8+Xa7RYeYEtuM1UMV3MB3zxhPMH7BIP/O2/bl3wE+UR/Iae PNyNjCf4h7xUVKmGKFTcSoojFrT5yuLE9SDFtONXPnNkkK+GYSMJ2ymg0lQHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/MBSU8LuH5mqOJIyXw8lnmY/RSYwHwYDVR0j BBgwFoAUHrsjIgP9VDL0/19Qx8p/ZyVS7T8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTc1ZDdkZWYtNWViOS00MDU0LWEzYWItZDdlY2Y0ODYzNzlhLzAvMUVCQjIzMjIw M0ZENTQzMkY0RkY1RjUwQzdDQTdGNjcyNTUyRUQzRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRUJCMjMyMjAzRkQ1NDMyRjRGRjVGNTBDN0NBN0Y2NzI1NTJF RDNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTc1ZDdkZWYtNWViOS00MDU0LWEz YWItZDdlY2Y0ODYzNzlhLzAvMUVCQjIzMjIwM0ZENTQzMkY0RkY1RjUwQzdDQTdG NjcyNTUyRUQzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGCM4NECOP/gdzIQilrc5w07SJaPXE17NdR1 Z5aqPuMbPhpzNYizszq1dMHEx3VMa/zC4+45M37hc1EPQlFzfuxPRmBLYrSvtle5 Q3oNmtHWRkNEai21TnYJYWnNlK/3HR2sukzCWTpkx+k9cBvMCk8yA0m+X7v5Zrev yDA69tsSPiXbtTTfY9nFQs4vZECzmoxsL0K9KgTpZyLMorVEuU5MN8UmBhxcjS7L U2wcVOvn/idOPokhnVTpU2U0MP8wgt5/OMGDBALICVH3UhzVxEkt8oI1sp37nO1e 20xfXjyrp2fw06fls+8b4fiOCuw2OcOz3zhIL1FxQmEiduVcda0= -----END CERTIFICATE-----Generated at Thu Sep 3 12:36:22 2026 by rpki-client