$ rpki-client -vvvf rpki-rsync.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.mft File: EBA9D784E9CC3F2A70EB526976A01F48F5F52951.mft (raw, json) Hash identifier: VwxB0B5cSt749y1acVXiSIlDuOwKDMt10gP1fevw3to= Subject key identifier: BA:C5:59:9E:AE:ED:E3:2F:50:6B:04:CA:F1:A5:64:56:E9:37:81:56 Authority key identifier: EB:A9:D7:84:E9:CC:3F:2A:70:EB:52:69:76:A0:1F:48:F5:F5:29:51 Certificate issuer: /CN=EBA9D784E9CC3F2A70EB526976A01F48F5F52951 Certificate serial: 0CB52166D377FF17A07E66A3C967A5E7915B5790 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.mft Manifest number: BB Signing time: Thu 17 Sep 2026 00:54:38 +0000 Manifest this update: Thu 17 Sep 2026 00:49:38 +0000 Manifest next update: Fri 18 Sep 2026 02:45:38 +0000 Files and hashes: 1: EBA9D784E9CC3F2A70EB526976A01F48F5F52951.crl (hash: bWAMGt1gK4k4jEYFIZOb+WoHm5uyocRvCpMXNzGMEvg=) 2: 323430353a633963303a3a2f33322d3438203d3e20313338383233.roa (hash: v/BF9ieKxX28NjyPdn3fATuRAfuqobz/pNI/KB0vc9o=) 3: 3230332e3136312e32342e302f32312d3234203d3e20313338383233.roa (hash: YX70OIsu7iTqiI3a5soFelDVlujYH0j+VtFdThdooz4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.crl rsync://rpki-rsync.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:b5:21:66:d3:77:ff:17:a0:7e:66:a3:c9:67:a5:e7:91:5b:57:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBA9D784E9CC3F2A70EB526976A01F48F5F52951 Validity Not Before: Sep 17 00:49:38 2026 GMT Not After : Sep 18 02:45:38 2026 GMT Subject: CN=BAC5599EAEEDE32F506B04CAF1A56456E9378156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a7:8a:5f:60:1b:0a:83:18:8e:ab:19:41:e3: f5:90:57:12:c7:80:1d:99:4f:bf:59:f8:79:d4:7d: 37:ac:22:2b:8a:a4:72:05:0e:0b:00:a9:ff:5f:2d: 80:06:56:1d:56:ff:4a:eb:ec:40:80:34:09:6e:a6: 18:6a:92:1b:70:27:c3:74:6d:3c:cc:23:74:52:5c: 22:03:00:32:d4:7b:26:4a:74:63:db:a5:07:57:c5: f3:a3:44:1e:e2:92:12:33:11:71:a1:c2:e6:92:f7: 1e:f0:ad:14:25:5b:09:ed:99:ff:aa:4d:95:7c:bb: 0e:e0:83:09:e2:2c:81:36:f2:7a:5c:a6:97:a3:52: 51:67:80:d5:30:e4:62:7b:76:6d:ae:1a:7c:9c:1b: 01:c0:a3:cd:91:eb:fc:bd:44:b7:7e:63:f3:7e:31: 90:21:d1:d4:c5:4f:d8:2a:cb:bb:60:d3:26:e3:9b: 41:71:d1:17:65:29:b2:84:f2:ae:1c:0e:de:ac:1c: a7:b0:ca:15:93:de:01:31:0b:6d:79:36:6f:df:cb: 61:34:de:ee:da:9c:99:2e:1f:44:46:19:72:ac:8c: cd:0c:d8:48:2b:70:84:7b:8d:19:74:d7:0e:4a:44: ff:ac:f7:18:85:f1:96:eb:01:48:43:f3:88:20:50: 70:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C5:59:9E:AE:ED:E3:2F:50:6B:04:CA:F1:A5:64:56:E9:37:81:56 X509v3 Authority Key Identifier: keyid:EB:A9:D7:84:E9:CC:3F:2A:70:EB:52:69:76:A0:1F:48:F5:F5:29:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/EBA9D784E9CC3F2A70EB526976A01F48F5F52951.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:91:43:70:df:f6:5e:80:d1:40:05:47:a4:a6:73:19:cf:b3: 9c:9c:0b:41:71:9c:49:14:39:8c:70:8a:ea:fc:39:d1:16:9d: 5d:a9:74:e1:40:aa:e3:55:c0:f7:4a:26:e0:de:a0:33:57:c2: 87:83:98:fb:84:0a:b1:43:73:ce:17:68:98:0a:d9:d0:2e:6b: 9c:5b:be:91:64:66:b9:1b:51:d0:94:8b:50:bf:78:dc:b7:97: 58:e9:c1:7b:3f:c0:9c:d2:0e:40:44:8e:6a:2d:7f:0c:44:ac: a3:65:c4:f8:4e:ba:39:32:96:54:97:59:85:7e:0f:c9:f2:66: 0e:55:8e:a2:80:3a:22:21:45:00:52:ba:b8:22:ea:a0:b3:eb: 61:a8:a1:c0:0f:8b:7c:78:bd:80:09:69:f6:ef:a8:7c:fc:6f: 7e:7b:07:72:d5:1c:cf:80:f6:51:cb:20:f4:7c:cb:4e:50:be: 04:47:b8:57:96:58:7a:27:e7:f4:ea:0f:8c:13:1d:2c:a5:eb: ca:e9:a9:87:4c:52:35:10:4c:ac:74:8d:9b:6e:56:b4:18:53: 3d:7f:05:77:58:00:40:1e:e7:ad:1c:97:f3:7a:fa:b3:26:07: 65:9d:57:21:5e:f9:70:34:b0:b2:64:7e:2d:63:aa:1d:e7:1d: 9e:12:9b:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDLUhZtN3/xegfmajyWel55FbV5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJBOUQ3ODRFOUNDM0YyQTcwRUI1MjY5NzZBMDFGNDhG NUY1Mjk1MTAeFw0yNjA5MTcwMDQ5MzhaFw0yNjA5MTgwMjQ1MzhaMDMxMTAvBgNV BAMTKEJBQzU1OTlFQUVFREUzMkY1MDZCMDRDQUYxQTU2NDU2RTkzNzgxNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFp4pfYBsKgxiOqxlB4/WQVxLH gB2ZT79Z+HnUfTesIiuKpHIFDgsAqf9fLYAGVh1W/0rr7ECANAluphhqkhtwJ8N0 bTzMI3RSXCIDADLUeyZKdGPbpQdXxfOjRB7ikhIzEXGhwuaS9x7wrRQlWwntmf+q TZV8uw7ggwniLIE28npcppejUlFngNUw5GJ7dm2uGnycGwHAo82R6/y9RLd+Y/N+ MZAh0dTFT9gqy7tg0ybjm0Fx0RdlKbKE8q4cDt6sHKewyhWT3gExC215Nm/fy2E0 3u7anJkuH0RGGXKsjM0M2EgrcIR7jRl01w5KRP+s9xiF8ZbrAUhD84ggUHAJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUusVZnq7t4y9QawTK8aVkVuk3gVYwHwYDVR0j BBgwFoAU66nXhOnMPypw61JpdqAfSPX1KVEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDIxNThhZWMtNTI4MS00MmU2LTk3OWItZmNhNjFkNDdjODQ1LzAvRUJBOUQ3ODRF OUNDM0YyQTcwRUI1MjY5NzZBMDFGNDhGNUY1Mjk1MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FQkE5RDc4NEU5Q0MzRjJBNzBFQjUyNjk3NkEwMUY0OEY1RjUy OTUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDIxNThhZWMtNTI4MS00MmU2LTk3 OWItZmNhNjFkNDdjODQ1LzAvRUJBOUQ3ODRFOUNDM0YyQTcwRUI1MjY5NzZBMDFG NDhGNUY1Mjk1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIyRQ3Df9l6A0UAFR6SmcxnPs5ycC0FxnEkU OYxwiur8OdEWnV2pdOFAquNVwPdKJuDeoDNXwoeDmPuECrFDc84XaJgK2dAua5xb vpFkZrkbUdCUi1C/eNy3l1jpwXs/wJzSDkBEjmotfwxErKNlxPhOujkyllSXWYV+ D8nyZg5VjqKAOiIhRQBSurgi6qCz62GoocAPi3x4vYAJafbvqHz8b357B3LVHM+A 9lHLIPR8y05QvgRHuFeWWHon5/TqD4wTHSyl68rpqYdMUjUQTKx0jZtuVrQYUz1/ BXdYAEAe560cl/N6+rMmB2WdVyFe+XA0sLJkfi1jqh3nHZ4Smyg= -----END CERTIFICATE-----Generated at Thu Sep 17 14:22:38 2026 by rpki-client